last executing test programs: 15.387124975s ago: executing program 1 (id=2445): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="350100000000000000006800000008000300", @ANYRES32=r6, @ANYBLOB="2200c700810700ff"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="01ffffffffffffffe5003b00000008000300", @ANYRES32=r7, @ANYBLOB="5100330080000000080211000000080211000000a5fcc8639e9800000000000000000000640000000006020202020202010004060000400000000602000025030000003c04000000007206030303030303000000"], 0x70}}, 0x4840) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) syz_emit_ethernet(0x503, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240), 0x3af4701e) sendfile(r11, r0, 0x0, 0x10000a007) 13.976155221s ago: executing program 1 (id=2449): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(0xffffffffffffffff) 13.617356117s ago: executing program 1 (id=2451): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x0) 13.160149686s ago: executing program 1 (id=2452): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x101, 0x20000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 12.152121356s ago: executing program 0 (id=2455): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r1, 0x0, 0x0) close(r1) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) statx(0xffffffffffffff9c, 0x0, 0x100, 0x80, &(0x7f0000000400)) 8.040136141s ago: executing program 1 (id=2467): socket$unix(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r3, 0x80000001, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) write(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3c, 0x0, r3, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x6}, 0x48) 5.329158805s ago: executing program 0 (id=2479): sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040), 0x8) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff}) r0 = open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x2, 0x1) open(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@window, @mss, @window, @timestamp, @window, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x802, 0x0, 0x6) mount$fuse(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x2c00, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffffffff18b8}}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x1c00}}], [{@uid_eq}, {@seclabel}, {@audit}]}}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000300)={0x0, @tick=0x8, 0x0, {0x0, 0xd9}, 0xfe, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000480)={{}, {}, 0x0, 0x5}) getpid() r4 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 5.249292782s ago: executing program 4 (id=2480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x0, @pix_mp={0x8d23, 0x80000000, 0x3831354f, 0x0, 0x7, [{0x0, 0x1}, {0x0, 0x8000}, {0xefe, 0x1}, {0x9}, {0x7}, {0x400, 0x8}, {}, {0x7}], 0xa, 0x2, 0x0, 0x2, 0x6}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast}, [@bcast, @null, @null, @netrom, @bcast, @rose, @bcast, @default]}, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/101}]}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/67}, {&(0x7f0000000600)=""/250}, {&(0x7f0000000700)=""/48}], 0x0, &(0x7f0000000780)=""/184}, 0xe5}], 0x886b, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000100)={0x2, 0x0, [{0x401, 0x0, 0xb2f}, {0x0, 0x0, 0x4}]}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') fchdir(0xffffffffffffffff) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)=@assoc_value, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) 5.156275424s ago: executing program 2 (id=2481): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 4.190839669s ago: executing program 4 (id=2482): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x3e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181001, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[&(0x7f0000000240), &(0x7f0000000340)="9c818c96f25f0e12ee34be37dfef9c36b8658ea60cbf044db917e16b3dc65431f2f345c7f99df34885461de7af6b73bfa3f722e424876b849d71829e5fb625721495f8bd0f81fc7159ef23303f0e2496a7312ffb22fbb32acd2671fdce873166d2fb098746515f05abb29b93e25bcdd4b02a7371b8ab47f536037b169dbdc99e7faaedd59fe5f5897e959b0525b6ebb91f9c7e8ef2f4379a6ed302e860bea913faa1aaa89821dd512675cf65a090d2fe5d4382e801118b80006c14c41c041ff487a74ab0f25b9889", &(0x7f0000000440)="e2e5d67b3ad7cdf0b673dea561834d8ed7965b87836bee0e0ec03cb3c58523ccb11bc57ced39f2cd2b4ee04f", &(0x7f0000000480)="a3d2fa76c657e928b6b8a6f634e3fa9ad95ea573e6d308789379d5ccbf466237cf41f31364e8b1cd8f8584ec8b7b7caac20eee5fbcd2e76f189e00798256bcf4d19771f02fbb4bce1cde3369228d129715e2d3c3a81f780d6371f6e87b4ebc8996ef80a2847e4f16ac5e61b80aa65ed0d3383b8eba36d613", &(0x7f0000000500)="b356016c3c44d050dc8954139483ba86b2d31d90142caaca7016f58b3deec4d5fadadb0345c35642046cf75685ea495a25cfa548f8859a43135b4dd86448ee89d4bdfcd6259b47729923801a535db0d6fd8a00979ba9a303ce25c6494a309e4a853d0b0367d8fdc6368a0033cd0ba52fc8d19b9a6888553fddbeff454181ad6ee0a68c87c03a6a4546bdd2b2b068c2be891eeb27ff5b5edf21f5ba4e116e63de8f7ae66b6a3d85d4a6a6b490fe0c8f6da541fb47d71cc69708f2698b4370e2acfe97"]}) 4.10054496s ago: executing program 3 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}]}}}]}, 0x3c}}, 0x0) 3.47495926s ago: executing program 2 (id=2484): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000540)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}}], 0x1, 0x0) 3.043562293s ago: executing program 4 (id=2485): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5}, 0x48) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) accept4$unix(r2, 0xfffffffffffffffe, &(0x7f00000001c0), 0x0) 2.945727773s ago: executing program 3 (id=2486): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r2, r1, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$KIOCSOUND(r5, 0x5403, 0x0) 2.759696124s ago: executing program 2 (id=2487): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xb, 0x800000000004, @tid=r0}, &(0x7f0000000000)) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$sysfs(0xffffffffffffff9c, 0x0, 0x541000, 0x7) 2.61662448s ago: executing program 0 (id=2488): socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) clock_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syncfs(0xffffffffffffffff) open(0x0, 0x400101042, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000105000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600004700000a0000000000000000000000000000002d"], 0xa0}}, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) 2.578207479s ago: executing program 4 (id=2489): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$inet(0x2, 0x2, 0x1) inotify_init() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) 2.52007961s ago: executing program 3 (id=2490): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x101, 0x20000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 2.448019427s ago: executing program 2 (id=2491): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x8}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x41009432, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 2.393053096s ago: executing program 0 (id=2492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x0, @pix_mp={0x8d23, 0x80000000, 0x3831354f, 0x0, 0x7, [{0x0, 0x1}, {0x0, 0x8000}, {0xefe, 0x1}, {0x9}, {0x7}, {0x400, 0x8}, {}, {0x7}], 0xa, 0x2, 0x0, 0x2, 0x6}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000280)=@ax25={{0x3, @bcast}, [@bcast, @null, @null, @netrom, @bcast, @rose, @bcast, @default]}, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/101}]}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)=""/67}, {&(0x7f0000000600)=""/250}, {&(0x7f0000000700)=""/48}], 0x0, &(0x7f0000000780)=""/184}, 0xe5}], 0x886b, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000100)={0x2, 0x0, [{0x401, 0x0, 0xb2f}, {0x0, 0x0, 0x4}]}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') fchdir(0xffffffffffffffff) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)=@assoc_value, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, 0x0, 0x0) 1.945208061s ago: executing program 1 (id=2493): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10, 0x800) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) bind(r1, &(0x7f00000001c0)=@nfc_llcp={0x27, r3, 0x1, 0x6, 0x3, 0x3, "7f88974a481ef473563574ecc25152e2d45ccbcb2665e2d1e315ed4a7e87d84400734395e0f52b69597da0b87492230657d9f0e8cc1b72313da79c0f8feb32", 0x2e}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.927115083s ago: executing program 4 (id=2494): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 928.747711ms ago: executing program 0 (id=2495): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x3e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181001, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[&(0x7f0000000240), &(0x7f0000000340)="9c818c96f25f0e12ee34be37dfef9c36b8658ea60cbf044db917e16b3dc65431f2f345c7f99df34885461de7af6b73bfa3f722e424876b849d71829e5fb625721495f8bd0f81fc7159ef23303f0e2496a7312ffb22fbb32acd2671fdce873166d2fb098746515f05abb29b93e25bcdd4b02a7371b8ab47f536037b169dbdc99e7faaedd59fe5f5897e959b0525b6ebb91f9c7e8ef2f4379a6ed302e860bea913faa1aaa89821dd512675cf65a090d2fe5d4382e801118b80006c14c41c041ff487a74ab0f25b9889", &(0x7f0000000440)="e2e5d67b3ad7cdf0b673dea561834d8ed7965b87836bee0e0ec03cb3c58523ccb11bc57ced39f2cd2b4ee04f", &(0x7f0000000480)="a3d2fa76c657e928b6b8a6f634e3fa9ad95ea573e6d308789379d5ccbf466237cf41f31364e8b1cd8f8584ec8b7b7caac20eee5fbcd2e76f189e00798256bcf4d19771f02fbb4bce1cde3369228d129715e2d3c3a81f780d6371f6e87b4ebc8996ef80a2847e4f16ac5e61b80aa65ed0d3383b8eba36d613", &(0x7f0000000500)="b356016c3c44d050dc8954139483ba86b2d31d90142caaca7016f58b3deec4d5fadadb0345c35642046cf75685ea495a25cfa548f8859a43135b4dd86448ee89d4bdfcd6259b47729923801a535db0d6fd8a00979ba9a303ce25c6494a309e4a853d0b0367d8fdc6368a0033cd0ba52fc8d19b9a6888553fddbeff454181ad6ee0a68c87c03a6a4546bdd2b2b068c2be891eeb27ff5b5edf21f5ba4e116e63de8f7ae66b6a3d85d4a6a6b490fe0c8f6da541fb47d71cc69708f2698b4370e2acfe97"]}) 928.242411ms ago: executing program 3 (id=2496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 536.019531ms ago: executing program 4 (id=2497): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a9200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) syz_usb_connect(0x0, 0x24, &(0x7f0000004100)={{0x12, 0x1, 0x201, 0x58, 0xfc, 0x14, 0x8, 0x17ef, 0x721e, 0x7360, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, &(0x7f0000004c00)={0x0, 0x0, 0x5, &(0x7f00000049c0)={0x5, 0xf, 0x5}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000340)={0x7}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) inotify_init1(0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000040)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc00c64b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x4}) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1c1000, 0x0) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000180)=0x2) getdents64(r7, &(0x7f0000002280)=""/4106, 0x100a) 535.71899ms ago: executing program 3 (id=2498): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="13b7b4a553c46f3542c25075663b7b73c0edfddc8612a68eabc8913410ad21f636235f9d502e34119acd2594ce228ae57d4f14ee16f64eead9664c027a637897446c15c62912ad281a3eee194f7b9392e3625c1fb9d304c0abeefde60777143df1e99ea05ca3dd779b001098ca7568ef4e88", @ANYBLOB="2c67726fae4e85e9bb4ff230c944cd01d575705f69643d04680f4c3ca8256bcab52b813b9418ae49d96976a5e1ef", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x4, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000540)=""/179, 0xb9) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x7, &(0x7f0000000000), 0x4) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x101800, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000006c0)='gre0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="a90500000000fd00000100338bb335529f56ed5c7a535071b312f933e594182008b348bf13f99f647c101d25", 0x2c}], 0x1}}], 0x1, 0x0) sendmsg$rds(r5, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/95, 0x5f}], 0x2}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) read$FUSE(r0, &(0x7f000000ac00)={0x2020}, 0x2020) 513.532773ms ago: executing program 0 (id=2499): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, &(0x7f0000002140)=0xffffffffffffffa4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sync_file_range(r2, 0xfffffffffffffffe, 0x7fffffff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1448, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) r3 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000240)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/18, 0x12) read$alg(0xffffffffffffffff, &(0x7f0000001480)=""/4096, 0xfdef) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="070600000000f2000000000c0000007770616e31000000000000000000"], 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) 433.566742ms ago: executing program 2 (id=2500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='sys_enter\x00', r1}, 0x10) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) 128.095839ms ago: executing program 3 (id=2501): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000024c0)={0x0, 0x0, "1ef80c"}) 0s ago: executing program 2 (id=2502): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x14) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feefffff"], 0xc8) socket$inet6(0xa, 0x3, 0x3) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000060002000000000062e16717ec8120f8d44000ec3d6bbf325a773f7eba4668ce39c748a463a2d2b7ae73bde075c169add009929df448ece63592d7055b9ca5d701a22524a55c8e1388bb6f278df6fe432249e496c5cd3cada08c233f121f4bffd38ea3067eed56ebf7c3168eaed96003cba5e57945140f143bd37d58df941a4712a255b7bcf8aaddcc070538a58961db26cdda07828054a091e28dec07062509e56f8bf9bdefa0dcd9596da244873e85f1db10c949f0de5df881746a15a801339f7413ca0cf5909826c0c08aec0bc87955002a18e4ddbdca9b597816026832bc0cfef1260b34b6d6ad269e61515dee4cf84284d48e439959a07b7472dbda7ee43cf046cea1c4f3e7f91874ea49b75096c7dd58ea30b157b16493a804f99b39275ecf21f732afb15400394f5aa05e344110f2502fb7e583d5f45c5a97ca0f28ba25034047b35e5f3a5423738377a47cd99b2d095b182a3519498be4e57b57a8c13b457d2465b187cffced9aa76ebd0721f56cee4c302cc4171a2745a9"], 0x44}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', '', [{0x20, '\\:],:%{)!`'}, {0x20, 'macvlan0\x00'}], 0xa, "672f13e2334cb58557344457babfe3bfdfe41ec568f6638395ac7a7d889f6e2c4af160726865a831f13b5d8359d03a78e2965421d672b020170cf301f488c5d52543bbe839fa7faa52df4ec3ff9e3ad6e4e293cd65173a36fc6c79ad924c6cee5d7c71389a14422574b2289e8601c7d8995fe07e"}, 0x8d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): : invalid path, errno=-2 [ 393.126358][ T5129] pwc: recv_control_msg error -71 req 02 val 2600 [ 393.151444][ T5129] pwc: recv_control_msg error -71 req 02 val 2900 [ 393.168340][ T5129] pwc: recv_control_msg error -71 req 02 val 2800 [ 393.179479][ T5129] pwc: recv_control_msg error -71 req 04 val 1100 [ 393.196267][ T5129] pwc: recv_control_msg error -71 req 04 val 1200 [ 393.215306][ T5129] pwc: Registered as video71. [ 393.226270][ T5129] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 393.261936][ T5129] usb 3-1: USB disconnect, device number 5 [ 393.271842][ T29] audit: type=1400 audit(1721127489.339:753): avc: denied { read } for pid=4521 comm="acpid" name="event4" dev="devtmpfs" ino=2392 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.370259][ T29] audit: type=1400 audit(1721127489.339:754): avc: denied { open } for pid=4521 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2392 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.492747][ T29] audit: type=1400 audit(1721127489.339:755): avc: denied { ioctl } for pid=4521 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2392 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.526682][ T5086] Bluetooth: hci1: command tx timeout [ 393.843558][ T9600] veth1_macvtap: left promiscuous mode [ 393.905897][ T9603] veth1_macvtap: entered promiscuous mode [ 393.915645][ T9603] macsec0: entered allmulticast mode [ 393.965979][ T9603] veth1_macvtap: entered allmulticast mode [ 394.183661][ T9549] chnl_net:caif_netlink_parms(): no params data found [ 394.431943][ T63] bridge_slave_1: left allmulticast mode [ 394.453827][ T63] bridge_slave_1: left promiscuous mode [ 394.541833][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.640954][ T63] bridge_slave_0: left allmulticast mode [ 394.669205][ T63] bridge_slave_0: left promiscuous mode [ 394.675256][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.873104][ T9629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9629 comm=syz.4.1481 [ 394.896163][ T5140] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 395.018896][ T9632] xt_cgroup: invalid path, errno=-2 [ 395.109207][ T5140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.133801][ T5140] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 395.163957][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.213101][ T5140] usb 3-1: config 0 descriptor?? [ 395.246565][ T5140] pwc: Askey VC010 type 2 USB webcam detected. [ 395.575898][ T5086] Bluetooth: hci1: command tx timeout [ 395.858763][ T5140] pwc: recv_control_msg error -71 req 02 val 2700 [ 395.877414][ T5140] pwc: recv_control_msg error -71 req 02 val 2c00 [ 395.916120][ T5140] pwc: recv_control_msg error -71 req 04 val 1000 [ 395.934531][ T5140] pwc: recv_control_msg error -71 req 04 val 1300 [ 395.956478][ T5140] pwc: recv_control_msg error -71 req 04 val 1400 [ 395.981588][ T5140] pwc: recv_control_msg error -71 req 02 val 2000 [ 396.003298][ T5140] pwc: recv_control_msg error -71 req 02 val 2100 [ 396.023149][ T5140] pwc: recv_control_msg error -71 req 04 val 1500 [ 396.040933][ T5140] pwc: recv_control_msg error -71 req 02 val 2500 [ 396.054601][ T5140] pwc: recv_control_msg error -71 req 02 val 2400 [ 396.072110][ T5140] pwc: recv_control_msg error -71 req 02 val 2600 [ 396.087161][ T5140] pwc: recv_control_msg error -71 req 02 val 2900 [ 396.107268][ T5140] pwc: recv_control_msg error -71 req 02 val 2800 [ 396.124858][ T5140] pwc: recv_control_msg error -71 req 04 val 1100 [ 396.142944][ T5140] pwc: recv_control_msg error -71 req 04 val 1200 [ 396.156716][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.167716][ T5140] pwc: Registered as video71. [ 396.181032][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.188552][ T5140] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 396.212074][ T63] bond0 (unregistering): Released all slaves [ 396.250880][ T5140] usb 3-1: USB disconnect, device number 6 [ 396.634911][ T9650] veth1_macvtap: left promiscuous mode [ 396.673824][ T9651] veth1_macvtap: entered promiscuous mode [ 396.718610][ T9651] macsec0: entered allmulticast mode [ 396.771015][ T9651] veth1_macvtap: entered allmulticast mode [ 397.301813][ T9677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9677 comm=syz.0.1492 [ 397.466721][ T9677] xt_cgroup: invalid path, errno=-2 [ 397.555350][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.602130][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.626048][ T9549] bridge_slave_0: entered allmulticast mode [ 397.650797][ T9549] bridge_slave_0: entered promiscuous mode [ 397.656969][ T5086] Bluetooth: hci1: command tx timeout [ 397.700488][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.720503][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.741275][ T9549] bridge_slave_1: entered allmulticast mode [ 397.767154][ T9549] bridge_slave_1: entered promiscuous mode [ 397.820637][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 398.030203][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.062209][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 398.095685][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.144769][ T8] usb 5-1: config 0 descriptor?? [ 398.158729][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.198967][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.201858][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 398.430294][ T63] hsr_slave_0: left promiscuous mode [ 398.445764][ T63] hsr_slave_1: left promiscuous mode [ 398.493666][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.515741][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.542488][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.575793][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.622412][ T9682] process 'syz.4.1495' launched './file0' with NULL argv: empty string added [ 398.726082][ T63] veth1_macvtap: left allmulticast mode [ 398.731769][ T63] veth1_macvtap: left promiscuous mode [ 398.778751][ T63] veth0_macvtap: left promiscuous mode [ 398.784895][ T63] veth1_vlan: left promiscuous mode [ 398.845925][ T63] veth0_vlan: left promiscuous mode [ 398.951470][ T8] pwc: recv_control_msg error -71 req 02 val 2b00 [ 398.980538][ T8] pwc: recv_control_msg error -71 req 02 val 2700 [ 399.008873][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 399.050044][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 399.076667][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 399.111507][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 399.141392][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 399.159854][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 399.178287][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 399.193448][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 399.227054][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 399.252732][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 399.296282][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 399.324133][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 399.361425][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 399.396092][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 399.449103][ T8] pwc: Registered as video71. [ 399.500028][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 399.532680][ T8] usb 5-1: USB disconnect, device number 9 [ 399.735727][ T5086] Bluetooth: hci1: command tx timeout [ 400.487077][ T9726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9726 comm=syz.4.1504 [ 400.727454][ T9728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9728 comm=syz.4.1505 [ 400.869135][ T9729] xt_cgroup: invalid path, errno=-2 [ 401.750571][ T63] team0 (unregistering): Port device team_slave_1 removed [ 401.854249][ T63] team0 (unregistering): Port device team_slave_0 removed [ 403.079921][ T5086] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 403.088875][ T5086] Bluetooth: Wrong link type (-22) [ 403.099378][ T5086] Bluetooth: hci2: link tx timeout [ 403.104762][ T5086] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 403.135951][ T9712] veth1_macvtap: left allmulticast mode [ 403.144728][ T9712] veth1_macvtap: left promiscuous mode [ 403.156850][ T9712] macsec0: left allmulticast mode [ 403.199667][ T9716] veth1_macvtap: entered promiscuous mode [ 403.206442][ T9716] macsec0: entered allmulticast mode [ 403.212733][ T9716] veth1_macvtap: entered allmulticast mode [ 403.540226][ T9549] team0: Port device team_slave_0 added [ 403.572205][ T9549] team0: Port device team_slave_1 added [ 403.785636][ T5140] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 404.030120][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.034483][ T5140] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.051792][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.072736][ T5140] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.150590][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.162025][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.196248][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.203262][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.214712][ T5140] usb 1-1: config 0 descriptor?? [ 404.299824][ T9759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9759 comm=syz.2.1515 [ 404.323303][ T5140] pwc: Askey VC010 type 2 USB webcam detected. [ 404.332882][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.430313][ T9764] xt_cgroup: invalid path, errno=-2 [ 404.733096][ T9769] veth1_macvtap: left allmulticast mode [ 404.743617][ T9769] veth1_macvtap: left promiscuous mode [ 404.762514][ T9769] macsec0: left allmulticast mode [ 404.841847][ T9772] veth1_macvtap: entered promiscuous mode [ 404.865683][ C1] hrtimer: interrupt took 268264 ns [ 404.870064][ T9772] macsec0: entered allmulticast mode [ 404.903156][ T9772] veth1_macvtap: entered allmulticast mode [ 404.973109][ T9549] hsr_slave_0: entered promiscuous mode [ 405.010047][ T9549] hsr_slave_1: entered promiscuous mode [ 405.021378][ T9549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.039385][ T9549] Cannot create hsr debugfs directory [ 405.115309][ T5140] pwc: recv_control_msg error -71 req 02 val 2700 [ 405.140661][ T5140] pwc: recv_control_msg error -71 req 02 val 2c00 [ 405.167997][ T5140] pwc: recv_control_msg error -71 req 04 val 1000 [ 405.179004][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 405.209452][ T5140] pwc: recv_control_msg error -71 req 04 val 1300 [ 405.225931][ T5140] pwc: recv_control_msg error -71 req 04 val 1400 [ 405.245763][ T5140] pwc: recv_control_msg error -71 req 02 val 2000 [ 405.256986][ T5140] pwc: recv_control_msg error -71 req 02 val 2100 [ 405.269035][ T5140] pwc: recv_control_msg error -71 req 04 val 1500 [ 405.276300][ T5140] pwc: recv_control_msg error -71 req 02 val 2500 [ 405.285734][ T5140] pwc: recv_control_msg error -71 req 02 val 2400 [ 405.300566][ T5140] pwc: recv_control_msg error -71 req 02 val 2600 [ 405.319022][ T5140] pwc: recv_control_msg error -71 req 02 val 2900 [ 405.329551][ T5140] pwc: recv_control_msg error -71 req 02 val 2800 [ 405.346555][ T5140] pwc: recv_control_msg error -71 req 04 val 1100 [ 405.356368][ T5140] pwc: recv_control_msg error -71 req 04 val 1200 [ 405.366967][ T5140] pwc: Registered as video71. [ 405.397473][ T5140] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 405.493831][ T5140] usb 1-1: USB disconnect, device number 19 [ 405.586560][ T5096] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 405.593455][ T5096] Bluetooth: Wrong link type (-22) [ 406.386179][ T5140] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 406.556224][ T9812] veth1_macvtap: left allmulticast mode [ 406.593058][ T9813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9813 comm=syz.3.1531 [ 406.608006][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 406.619733][ T9812] veth1_macvtap: left promiscuous mode [ 406.625280][ T9812] macsec0: left allmulticast mode [ 406.631796][ T5140] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 406.643069][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.654620][ T5140] usb 1-1: Product: syz [ 406.666343][ T5140] usb 1-1: Manufacturer: syz [ 406.671072][ T5140] usb 1-1: SerialNumber: syz [ 406.723119][ T5140] r8152-cfgselector 1-1: Unknown version 0x0000 [ 406.744499][ T5140] r8152-cfgselector 1-1: config 0 descriptor?? [ 406.754865][ T9817] xt_cgroup: invalid path, errno=-2 [ 406.821779][ T9814] veth1_macvtap: entered promiscuous mode [ 406.837274][ T9814] macsec0: entered allmulticast mode [ 406.866266][ T9814] veth1_macvtap: entered allmulticast mode [ 407.176659][ T5140] r8152-cfgselector 1-1: Unknown version 0x0000 [ 407.191627][ T9816] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.206261][ T5140] r8152-cfgselector 1-1: bad CDC descriptors [ 407.243335][ T5140] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 407.785780][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 407.805606][ T5129] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 407.827039][ T5072] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.857950][ T5072] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.887845][ T5072] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.914552][ T5072] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.937238][ T5072] rtc rtc0: __rtc_set_alarm: err=-22 [ 408.029950][ T5129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.037198][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 408.049353][ T5129] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 408.075977][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.083034][ T9549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.106365][ T8] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.115444][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 408.115571][ T5129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.133543][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.160449][ T9549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.164220][ T8] usb 5-1: config 0 descriptor?? [ 408.201694][ T5129] usb 3-1: config 0 descriptor?? [ 408.232943][ T5129] pwc: Askey VC010 type 2 USB webcam detected. [ 408.240309][ T9549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.262203][ T9549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.312716][ T5096] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 408.319360][ T5096] Bluetooth: Wrong link type (-22) [ 408.327014][ T5096] Bluetooth: hci5: link tx timeout [ 408.332446][ T5096] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 408.458916][ T8] usb 5-1: USB disconnect, device number 10 [ 408.931873][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.956382][ T5129] pwc: recv_control_msg error -71 req 02 val 2700 [ 408.996394][ T5129] pwc: recv_control_msg error -71 req 02 val 2c00 [ 409.050549][ T5129] pwc: recv_control_msg error -71 req 04 val 1000 [ 409.089509][ T5129] pwc: recv_control_msg error -71 req 04 val 1300 [ 409.110720][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.128394][ T5129] pwc: recv_control_msg error -71 req 04 val 1400 [ 409.142053][ T5129] pwc: recv_control_msg error -71 req 02 val 2000 [ 409.153467][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.160839][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.174893][ T29] audit: type=1400 audit(1721127505.259:756): avc: denied { shutdown } for pid=9852 comm="syz.0.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 409.179476][ T5129] pwc: recv_control_msg error -71 req 02 val 2100 [ 409.235234][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.242601][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.258403][ T5129] pwc: recv_control_msg error -71 req 04 val 1500 [ 409.274304][ T5129] pwc: recv_control_msg error -71 req 02 val 2500 [ 409.296480][ T5129] pwc: recv_control_msg error -71 req 02 val 2400 [ 409.328225][ T5129] pwc: recv_control_msg error -71 req 02 val 2600 [ 409.385765][ T5129] pwc: recv_control_msg error -71 req 02 val 2900 [ 409.406289][ T5129] pwc: recv_control_msg error -71 req 02 val 2800 [ 409.467387][ T5129] pwc: recv_control_msg error -71 req 04 val 1100 [ 409.523376][ T9549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.525684][ T5129] pwc: recv_control_msg error -71 req 04 val 1200 [ 409.613841][ T5129] pwc: Registered as video71. [ 409.661697][ T5129] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 409.775904][ T5129] usb 3-1: USB disconnect, device number 7 [ 409.782705][ T9867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9867 comm=syz.3.1545 [ 409.902853][ T9873] xt_cgroup: invalid path, errno=-2 [ 410.385998][ T5096] Bluetooth: hci5: command 0x0406 tx timeout [ 410.716834][ T5086] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 410.717514][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.723409][ T5086] Bluetooth: Wrong link type (-22) [ 410.987840][ T9896] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 411.020451][ T9896] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 411.147906][ T9549] veth0_vlan: entered promiscuous mode [ 411.222556][ T9549] veth1_vlan: entered promiscuous mode [ 411.402433][ T9549] veth0_macvtap: entered promiscuous mode [ 411.476310][ T5140] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 411.485426][ T9549] veth1_macvtap: entered promiscuous mode [ 411.583615][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.657021][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.675126][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.729559][ T5140] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.746467][ T5140] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.746599][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.755888][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.787445][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.799628][ T5140] usb 1-1: config 0 descriptor?? [ 411.805032][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.822484][ T5140] pwc: Askey VC010 type 2 USB webcam detected. [ 411.829683][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.842193][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.856949][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.876647][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.888999][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.905941][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.924752][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 411.939977][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.043332][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.109267][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.124505][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.145948][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.165631][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.198759][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.225607][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.264189][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.302519][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.329255][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.352201][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.384427][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.450087][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.465080][ T5140] pwc: recv_control_msg error -71 req 02 val 2700 [ 412.495809][ T5140] pwc: recv_control_msg error -71 req 02 val 2c00 [ 412.530473][ T5140] pwc: recv_control_msg error -71 req 04 val 1000 [ 412.557789][ T9549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.575816][ T5140] pwc: recv_control_msg error -71 req 04 val 1300 [ 412.589348][ T5140] pwc: recv_control_msg error -71 req 04 val 1400 [ 412.598953][ T9549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.617528][ T5140] pwc: recv_control_msg error -71 req 02 val 2000 [ 412.635568][ T9549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.644992][ T5140] pwc: recv_control_msg error -71 req 02 val 2100 [ 412.666788][ T9549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.676887][ T5140] pwc: recv_control_msg error -71 req 04 val 1500 [ 412.711599][ T5140] pwc: recv_control_msg error -71 req 02 val 2500 [ 412.746266][ T5140] pwc: recv_control_msg error -71 req 02 val 2400 [ 412.760148][ T5140] pwc: recv_control_msg error -71 req 02 val 2600 [ 412.771498][ T5140] pwc: recv_control_msg error -71 req 02 val 2900 [ 412.826252][ T5140] pwc: recv_control_msg error -71 req 02 val 2800 [ 412.858327][ T5140] pwc: recv_control_msg error -71 req 04 val 1100 [ 412.909571][ T5140] pwc: recv_control_msg error -71 req 04 val 1200 [ 412.974537][ T5140] pwc: Registered as video71. [ 413.004228][ T5140] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 413.125192][ T5140] usb 1-1: USB disconnect, device number 21 [ 413.201696][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.257313][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.451286][ T5086] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 413.458173][ T5086] Bluetooth: Wrong link type (-22) [ 413.466834][ T5086] Bluetooth: hci0: link tx timeout [ 413.472373][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 413.584892][ T29] audit: type=1326 audit(1721127509.639:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb04f175bd9 code=0x0 [ 413.585032][ T9948] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 413.676865][ T9948] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 413.727666][ T2395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.754626][ T9959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.767822][ T9960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.778012][ T2395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.954279][ T9959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.205764][ T9960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.597705][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 414.898149][ T5140] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 415.128335][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.140198][ T5140] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.153839][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.169259][ T5140] usb 2-1: config 0 descriptor?? [ 415.217903][ T5140] pwc: Askey VC010 type 2 USB webcam detected. [ 415.495838][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 415.836163][ T5140] pwc: recv_control_msg error -71 req 02 val 2700 [ 415.877103][ T5140] pwc: recv_control_msg error -71 req 02 val 2c00 [ 415.904067][ T5140] pwc: recv_control_msg error -71 req 04 val 1000 [ 415.930622][T10017] veth1_macvtap: left allmulticast mode [ 415.939246][ T5140] pwc: recv_control_msg error -71 req 04 val 1300 [ 415.956081][T10017] veth1_macvtap: left promiscuous mode [ 415.987274][T10017] macsec0: left allmulticast mode [ 415.993471][ T5140] pwc: recv_control_msg error -71 req 04 val 1400 [ 416.030967][ T5140] pwc: recv_control_msg error -71 req 02 val 2000 [ 416.048230][ T5140] pwc: recv_control_msg error -71 req 02 val 2100 [ 416.099227][T10021] veth1_macvtap: entered promiscuous mode [ 416.099640][ T5140] pwc: recv_control_msg error -71 req 04 val 1500 [ 416.128588][T10021] macsec0: entered allmulticast mode [ 416.133052][ T5140] pwc: recv_control_msg error -71 req 02 val 2500 [ 416.133933][T10021] veth1_macvtap: entered allmulticast mode [ 416.180892][ T5140] pwc: recv_control_msg error -71 req 02 val 2400 [ 416.236720][ T5140] pwc: recv_control_msg error -71 req 02 val 2600 [ 416.286324][ T5140] pwc: recv_control_msg error -71 req 02 val 2900 [ 416.327907][ T5140] pwc: recv_control_msg error -71 req 02 val 2800 [ 416.366095][ T5140] pwc: recv_control_msg error -71 req 04 val 1100 [ 416.401139][ T29] audit: type=1400 audit(1721127512.489:758): avc: denied { read } for pid=10030 comm="syz.3.1593" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 416.485635][ T5140] pwc: recv_control_msg error -71 req 04 val 1200 [ 416.530443][ T5140] pwc: Registered as video71. [ 416.538948][ T29] audit: type=1400 audit(1721127512.489:759): avc: denied { open } for pid=10030 comm="syz.3.1593" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 416.550160][ T5140] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 416.675627][ T29] audit: type=1400 audit(1721127512.539:760): avc: denied { ioctl } for pid=10030 comm="syz.3.1593" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 416.735345][ T5140] usb 2-1: USB disconnect, device number 8 [ 417.473617][T10064] veth1_macvtap: left allmulticast mode [ 417.497999][T10064] veth1_macvtap: left promiscuous mode [ 417.550689][T10064] macsec0: left allmulticast mode [ 417.625242][T10069] veth1_macvtap: entered promiscuous mode [ 417.675710][T10069] macsec0: entered allmulticast mode [ 417.706636][T10069] veth1_macvtap: entered allmulticast mode [ 418.879827][ T29] audit: type=1400 audit(1721127514.969:761): avc: denied { setopt } for pid=10113 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 419.088239][ T29] audit: type=1400 audit(1721127515.179:762): avc: denied { bind } for pid=10113 comm="syz.0.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 420.115759][T10156] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10156 comm=syz.1.1638 [ 421.550638][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.563830][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.585924][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.609405][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.627570][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 421.637287][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.873372][T10199] netlink: 828 bytes leftover after parsing attributes in process `syz.4.1654'. [ 422.003853][T10199] syzkaller0: entered promiscuous mode [ 422.032524][T10197] syzkaller0: left promiscuous mode [ 422.161605][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.353559][ T29] audit: type=1400 audit(1721127518.439:763): avc: denied { setopt } for pid=10205 comm="syz.4.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 422.471577][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.582094][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.768649][ T35] team0: Port device netdevsim0 removed [ 422.805305][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.076675][T10231] netlink: 828 bytes leftover after parsing attributes in process `syz.4.1668'. [ 423.207596][T10220] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.424272][T10188] chnl_net:caif_netlink_parms(): no params data found [ 423.747751][ T5096] Bluetooth: hci0: command tx timeout [ 423.826119][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.833849][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.865187][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.893343][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 423.933177][ T35] bridge_slave_1: left allmulticast mode [ 423.945629][ T35] bridge_slave_1: left promiscuous mode [ 423.958251][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 424.000274][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.099901][ T35] bridge_slave_0: left allmulticast mode [ 424.129189][ T35] bridge_slave_0: left promiscuous mode [ 424.135129][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.355979][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 424.526083][ T29] audit: type=1400 audit(1721127520.609:764): avc: denied { nlmsg_read } for pid=10265 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 424.548524][T10267] netlink: 828 bytes leftover after parsing attributes in process `syz.1.1681'. [ 424.589362][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.622765][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 424.673219][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.715124][ T8] usb 4-1: config 0 descriptor?? [ 424.739261][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 425.376047][ T8] pwc: recv_control_msg error -71 req 02 val 2b00 [ 425.412662][ T8] pwc: recv_control_msg error -71 req 02 val 2700 [ 425.441719][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 425.469733][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 425.489158][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 425.498274][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 425.516308][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 425.526635][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 425.544065][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 425.576444][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 425.586131][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 425.609697][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 425.646846][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 425.658648][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 425.688684][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 425.717367][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 425.756864][ T8] pwc: Registered as video71. [ 425.772230][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 425.820875][ T5086] Bluetooth: hci0: command tx timeout [ 425.836105][ T8] usb 4-1: USB disconnect, device number 9 [ 426.369183][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.466777][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.509301][ T35] bond0 (unregistering): Released all slaves [ 426.780301][ T5086] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 426.788988][ T5086] Bluetooth: hci3: Malformed Event: 0x02 [ 426.798891][ T5086] Bluetooth: Wrong link type (-57) [ 426.955992][ T5096] Bluetooth: Unexpected continuation frame (len 18) [ 427.001304][T10317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10317 comm=syz.1.1699 [ 427.236319][T10319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10319 comm=syz.1.1700 [ 427.255825][ T5096] Bluetooth: hci3: command tx timeout [ 427.308513][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.342781][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.360686][T10319] xt_cgroup: invalid path, errno=-2 [ 427.369856][T10188] bridge_slave_0: entered allmulticast mode [ 427.397151][T10188] bridge_slave_0: entered promiscuous mode [ 427.434059][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.468923][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.515932][T10188] bridge_slave_1: entered allmulticast mode [ 427.524447][T10188] bridge_slave_1: entered promiscuous mode [ 427.896681][ T5096] Bluetooth: hci0: command tx timeout [ 427.931230][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.988953][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.161499][T10342] netlink: 'syz.4.1708': attribute type 72 has an invalid length. [ 428.200279][T10342] netlink: 'syz.4.1708': attribute type 8 has an invalid length. [ 428.347022][ T35] hsr_slave_0: left promiscuous mode [ 428.400967][ T35] hsr_slave_1: left promiscuous mode [ 428.437276][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.444786][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.497881][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.527605][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.633593][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 428.635454][ T35] veth1_macvtap: left allmulticast mode [ 428.656849][ T5096] Bluetooth: hci1: Malformed Event: 0x02 [ 428.672622][ T35] veth1_macvtap: left promiscuous mode [ 428.672781][ T5096] Bluetooth: Wrong link type (-57) [ 428.713926][ T35] veth0_macvtap: left promiscuous mode [ 428.737884][ T35] veth1_vlan: left promiscuous mode [ 428.743413][ T35] veth0_vlan: left promiscuous mode [ 428.804819][ T5096] Bluetooth: Unexpected continuation frame (len 18) [ 428.824853][T10365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10365 comm=syz.2.1714 [ 429.980724][ T5096] Bluetooth: hci0: command tx timeout [ 430.064186][ T29] audit: type=1400 audit(1721127526.149:765): avc: denied { getopt } for pid=10393 comm="syz.1.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.658100][ T35] team0 (unregistering): Port device team_slave_1 removed [ 430.776945][ T35] team0 (unregistering): Port device team_slave_0 removed [ 431.474306][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 431.487406][ T5096] Bluetooth: hci5: Malformed Event: 0x02 [ 431.493405][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 431.566603][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 431.696456][ T29] audit: type=1400 audit(1721127527.779:766): avc: denied { ioctl } for pid=10404 comm="syz.3.1727" path="/dev/input/mouse0" dev="devtmpfs" ino=839 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 432.015033][T10188] team0: Port device team_slave_0 added [ 432.050947][T10188] team0: Port device team_slave_1 added [ 432.082673][T10350] syzkaller0: entered promiscuous mode [ 432.097519][T10350] syzkaller0: left promiscuous mode [ 432.441936][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.466566][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.513414][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.734922][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.775655][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.897127][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.144691][T10438] netlink: 'syz.4.1741': attribute type 72 has an invalid length. [ 433.176064][T10438] netlink: 'syz.4.1741': attribute type 8 has an invalid length. [ 433.205776][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 433.279249][T10433] ip6gretap0: entered promiscuous mode [ 433.315285][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 433.347069][T10439] ip6gretap0: left promiscuous mode [ 433.491399][T10448] syzkaller0: entered promiscuous mode [ 433.508470][T10437] syzkaller0: left promiscuous mode [ 433.568976][ T29] audit: type=1400 audit(1721127529.659:767): avc: denied { bind } for pid=10452 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 433.612349][T10188] hsr_slave_0: entered promiscuous mode [ 433.662913][T10188] hsr_slave_1: entered promiscuous mode [ 435.643056][ T29] audit: type=1326 audit(1721127531.729:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.1.1763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbed775bd9 code=0x0 [ 435.778019][T10511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.909624][T10511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.050016][T10511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.195214][T10188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 436.279168][T10188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 436.356962][T10188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.430284][T10188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 436.772180][ T29] audit: type=1400 audit(1721127532.859:769): avc: denied { setattr } for pid=10524 comm="syz.4.1766" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 437.166219][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.641804][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.726192][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.733596][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.841235][ T5086] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 437.868809][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.883962][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.075805][ T5138] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 438.351849][ T5138] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.366619][ T5138] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 438.405739][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.447963][ T5138] usb 3-1: config 0 descriptor?? [ 438.489408][ T5138] pwc: Askey VC010 type 2 USB webcam detected. [ 439.017619][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.201176][ T5138] pwc: recv_control_msg error -71 req 02 val 2b00 [ 439.258169][ T5138] pwc: recv_control_msg error -71 req 02 val 2700 [ 439.287374][ T5138] pwc: recv_control_msg error -71 req 02 val 2c00 [ 439.319923][ T5138] pwc: recv_control_msg error -71 req 04 val 1000 [ 439.380278][ T5138] pwc: recv_control_msg error -71 req 04 val 1300 [ 439.406756][T10188] veth0_vlan: entered promiscuous mode [ 439.408287][ T5138] pwc: recv_control_msg error -71 req 04 val 1400 [ 439.478517][ T5138] pwc: recv_control_msg error -71 req 02 val 2000 [ 439.504012][ T5138] pwc: recv_control_msg error -71 req 02 val 2100 [ 439.513129][T10188] veth1_vlan: entered promiscuous mode [ 439.543405][ T5138] pwc: recv_control_msg error -71 req 04 val 1500 [ 439.570495][ T5138] pwc: recv_control_msg error -71 req 02 val 2500 [ 439.581887][ T5138] pwc: recv_control_msg error -71 req 02 val 2400 [ 439.602485][T10589] netlink: 'syz.1.1784': attribute type 10 has an invalid length. [ 439.620799][ T5138] pwc: recv_control_msg error -71 req 02 val 2600 [ 439.662646][ T5138] pwc: recv_control_msg error -71 req 02 val 2900 [ 439.695790][ T5138] pwc: recv_control_msg error -71 req 02 val 2800 [ 439.713459][ T5138] pwc: recv_control_msg error -71 req 04 val 1100 [ 439.751683][ T5138] pwc: recv_control_msg error -71 req 04 val 1200 [ 439.780454][ T5138] pwc: Registered as video71. [ 439.828054][ T5138] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 439.839732][T10589] team0: Port device netdevsim0 added [ 439.898125][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 439.913976][ T5138] usb 3-1: USB disconnect, device number 8 [ 440.181254][T10188] veth0_macvtap: entered promiscuous mode [ 440.293589][T10188] veth1_macvtap: entered promiscuous mode [ 440.593345][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.677160][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.719243][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.768591][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.772833][ T29] audit: type=1400 audit(1721127536.849:770): avc: denied { create } for pid=10608 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 440.809673][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.855404][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.898204][ T29] audit: type=1400 audit(1721127536.919:771): avc: denied { write } for pid=10608 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 440.920362][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.956252][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.972556][ T29] audit: type=1400 audit(1721127536.919:772): avc: denied { read } for pid=10608 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 440.985552][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.066010][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.095980][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.155681][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.208916][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.320794][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.396876][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.420562][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.440812][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.462799][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.504201][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.544532][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.594699][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.625116][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.659246][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.693574][T10188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.740666][T10188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.783430][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.877923][T10188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.915937][T10188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.925071][T10188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.985586][T10188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.016757][ T5138] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 442.250951][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.295882][ T5138] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 442.305020][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.351903][ T5138] usb 2-1: config 0 descriptor?? [ 442.393147][ T5138] pwc: Askey VC010 type 2 USB webcam detected. [ 442.430299][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.459492][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.642526][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.682303][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.172528][ T5138] pwc: recv_control_msg error -71 req 02 val 2b00 [ 443.208872][ T5138] pwc: recv_control_msg error -71 req 02 val 2700 [ 443.247657][ T5138] pwc: recv_control_msg error -71 req 02 val 2c00 [ 443.255073][ T5138] pwc: recv_control_msg error -71 req 04 val 1000 [ 443.305751][ T5138] pwc: recv_control_msg error -71 req 04 val 1300 [ 443.335924][ T5138] pwc: recv_control_msg error -71 req 04 val 1400 [ 443.343268][ T5138] pwc: recv_control_msg error -71 req 02 val 2000 [ 443.363466][ T5138] pwc: recv_control_msg error -71 req 02 val 2100 [ 443.375672][ T5138] pwc: recv_control_msg error -71 req 04 val 1500 [ 443.395759][ T5139] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 443.404494][ T5138] pwc: recv_control_msg error -71 req 02 val 2500 [ 443.428781][ T5138] pwc: recv_control_msg error -71 req 02 val 2400 [ 443.457324][ T5138] pwc: recv_control_msg error -71 req 02 val 2600 [ 443.491238][ T5138] pwc: recv_control_msg error -71 req 02 val 2900 [ 443.515748][ T5138] pwc: recv_control_msg error -71 req 02 val 2800 [ 443.556874][ T5138] pwc: recv_control_msg error -71 req 04 val 1100 [ 443.574884][ T5138] pwc: recv_control_msg error -71 req 04 val 1200 [ 443.610206][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 443.650516][ T5138] pwc: Registered as video71. [ 443.663622][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.668826][ T5138] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 443.695723][ T5139] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 443.737879][ T5139] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.759472][ T5138] usb 2-1: USB disconnect, device number 9 [ 443.775883][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.854184][ T5139] usb 1-1: config 0 descriptor?? [ 443.883528][ T5139] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 444.038872][T10655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10655 comm=syz.4.1796 [ 444.117322][T10283] usb 1-1: USB disconnect, device number 22 [ 444.402817][T10663] netlink: 'syz.1.1798': attribute type 10 has an invalid length. [ 444.747929][ T29] audit: type=1326 audit(1721127540.839:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10675 comm="syz.4.1803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb04f175bd9 code=0x0 [ 444.865123][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.939547][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.008444][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.207964][ T29] audit: type=1107 audit(1721127541.299:774): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='®C' [ÖIÛ„Ë?•ÇL#/½¿>&‰ ƒ€<ÈŽ :'‘[R¡ÿçRô‹Ü§TŠ6FÎÇ‚Å °õúoÄM¬ ÇõkᮡӪÝvoZWH$+µ9qíˉKaÊ0vþ…ŸžG¬‡ÃibA±D0Ò­Ná€vË”p»Qó¼Ç\ ÃøTÈþ…Š“ ž‘Õ÷‹Y’B~žU*øH¸ÁìVo°˜E°‘Ð]¬ _C™âàÉÞÕSÚ™g¹šLà&U)á?j!”óB Si µüÓoëa$JªŠ‰ kÄ›—BwÚÊñŠVG•âóNîeÄL5ËERíeÐ߈¯œzdI|YýµzÐXT A NØ»>÷>ÆL>u…«\Öö.„ÝåG©õÞ#GŠ8fŽ4ÏÙoLx(õ”0ÂÏA”s3Éók xò[7€@·Å:–£Ó¢„WÄ;dxËÿºW îwÉSN×Ýlåf»-ÏLÔÛþR‚«±"ÌÚÚ@ñƒ«ó<­°aÒ8÷üXü0ôWT©5uêM3Š|›~¸‡LkCÀg|/)¿¿x2¹,PNU`k{,Žù[¨&<ûÙ{)ðÍðq Û¹pßRgÌTËÙ§mì+1è΢íÌK¬k›7W*WrX0¦ø}€âµžx.%¤ó«Ÿ/•y¡Ûj~‹3ÝûºÉcíéh§’6lgåe–²¥2ÂÉuäÄŸ¡QÔŒI…pÙ‡=x¢(I#1øãBc¦+"ªNà2>A„8€À¡‰{Sܴħ­[#õ‹ŒMèÚÊtþZ  ÀãCùÕ.d›Ì‰¾ù}ž®ûûIe~¦ øqL»lãòÞ^S7Wób¸q“죪ї…ÂÍñwD Â6É»ÖI•+–£åÓã£äÂÁ½YßÍ ÉG_ ½D.“ÐØؿì-p¾Ë³i=)‰•Í;䊷ΟWh3eRÞžßl² }' [ 445.433802][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 445.680580][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.687852][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.831153][ T29] audit: type=1400 audit(1721127541.919:775): avc: denied { ioctl } for pid=10707 comm="syz.2.1814" path="socket:[33184]" dev="sockfs" ino=33184 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 446.333163][T10716] syzkaller0: entered promiscuous mode [ 446.356358][T10711] syzkaller0: left promiscuous mode [ 446.485600][T10724] netlink: 'syz.4.1820': attribute type 10 has an invalid length. [ 446.926638][T10735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=10735 comm=syz.2.1826 [ 447.187093][ T29] audit: type=1326 audit(1721127543.269:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10738 comm="syz.0.1828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf75bd9 code=0x0 [ 447.292034][T10744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.362073][T10746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.451634][T10744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.461964][ T29] audit: type=1400 audit(1721127543.539:777): avc: denied { mount } for pid=10747 comm="syz.1.1832" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 447.561970][ T29] audit: type=1400 audit(1721127543.649:778): avc: denied { unmount } for pid=9549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 447.599776][T10746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.684190][T10751] syzkaller0: entered promiscuous mode [ 447.696632][T10750] syzkaller0: left promiscuous mode [ 448.260277][T10772] netlink: 'syz.3.1843': attribute type 10 has an invalid length. [ 448.930086][T10798] syzkaller0: entered promiscuous mode [ 448.967547][T10791] syzkaller0: left promiscuous mode [ 449.692184][ T29] audit: type=1326 audit(1721127545.779:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10817 comm="syz.0.1862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf75bd9 code=0x0 [ 449.806201][T10823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.897401][T10823] wlan1: No basic rates, using min rate instead [ 449.943624][T10823] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01) [ 449.990774][T10823] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 449.995337][T10830] netlink: 'syz.2.1865': attribute type 10 has an invalid length. [ 450.025431][T10825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.040157][T10829] syzkaller0: entered promiscuous mode [ 450.057226][T10828] syzkaller0: left promiscuous mode [ 450.134799][T10823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.564357][T10844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10844 comm=syz.3.1872 [ 450.976892][T10857] capability: warning: `syz.2.1878' uses 32-bit capabilities (legacy support in use) [ 451.298583][T10861] syzkaller0: entered promiscuous mode [ 451.315283][T10859] syzkaller0: left promiscuous mode [ 451.336955][ T1095] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 451.384351][ T1095] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 451.408207][ T1095] wlan1: authentication with 50:50:50:50:50:50 timed out [ 451.647177][T10879] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 451.935856][ T29] audit: type=1326 audit(1721127548.019:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.3.1892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x0 [ 452.029313][T10897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.053364][T10897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.147854][T10897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.602406][ T5096] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 452.606503][T10906] syzkaller0: entered promiscuous mode [ 452.649580][T10905] syzkaller0: left promiscuous mode [ 453.676855][ T5096] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 454.420689][T10941] syzkaller0: entered promiscuous mode [ 454.477487][T10939] syzkaller0: left promiscuous mode [ 454.523300][ T29] audit: type=1326 audit(1721127550.599:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 454.635002][ T29] audit: type=1326 audit(1721127550.609:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 454.731687][ T29] audit: type=1326 audit(1721127550.649:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 454.775956][ T5096] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 454.815630][ T29] audit: type=1326 audit(1721127550.649:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 454.831547][T10961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10961 comm=syz.0.1920 [ 454.885609][ T29] audit: type=1326 audit(1721127550.649:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 454.936069][ T5140] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 455.031288][ T29] audit: type=1326 audit(1721127550.649:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 455.031381][ T29] audit: type=1326 audit(1721127550.649:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 455.031464][ T29] audit: type=1326 audit(1721127550.689:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 455.031550][ T29] audit: type=1326 audit(1721127550.689:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.3.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x7ffc0000 [ 455.197066][ T5140] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 455.197143][ T5140] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 455.214941][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.214993][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.215037][ T5140] usb 4-1: Manufacturer: Ḩ [ 455.710762][ T53] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 455.722014][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 455.762322][ T5096] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 455.785767][T10950] ipvlan2: entered promiscuous mode [ 455.785807][T10950] ipvlan2: entered allmulticast mode [ 455.785830][T10950] veth0_to_batadv: entered allmulticast mode [ 455.858071][ T5140] cdc_ncm 4-1:1.0: bind() failure [ 455.868144][ T5140] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 455.868226][ T5140] cdc_ncm 4-1:1.1: bind() failure [ 455.882787][ T5140] usb 4-1: USB disconnect, device number 10 [ 455.925175][ T53] usb 3-1: string descriptor 0 read error: -22 [ 455.925429][ T53] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33 [ 455.927883][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.934772][ T53] usb 3-1: config 0 descriptor?? [ 455.946157][ T53] r8712u: register rtl8712_netdev_ops to netdev_ops [ 455.946187][ T53] usb 3-1: r8712u: USB_SPEED_LOW with 0 endpoints [ 456.148925][ T53] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 456.155774][ T53] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 456.167451][ T53] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 456.184340][ T53] usb 3-1: USB disconnect, device number 9 [ 456.586738][T10981] random: crng reseeded on system resumption [ 457.905193][ T5086] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 457.978289][ T4480] Bluetooth: hci2: command 0x0406 tx timeout [ 457.991805][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 458.190608][ T5096] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 458.443318][T11011] rtc_cmos 00:00: Alarms can be up to one day in the future [ 458.818707][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 458.853179][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 458.875972][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 458.883617][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 458.957193][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 459.145805][T11026] usb usb2: usbfs: process 11026 (syz.1.1947) did not claim interface 0 before use [ 459.365882][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 459.565679][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 459.574464][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.605209][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 459.620544][T11033] rtc_cmos 00:00: Alarms can be up to one day in the future [ 459.655935][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.680307][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.717078][ T8] usb 5-1: config 0 descriptor?? [ 459.747051][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 459.747077][ T29] audit: type=1400 audit(1721127555.829:844): avc: denied { setopt } for pid=11037 comm="syz.1.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 459.776332][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 459.818593][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 459.876086][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 459.927287][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 460.000755][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 460.015674][ T786] usb 5-1: USB disconnect, device number 11 [ 460.056552][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 460.063730][ T5096] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 460.161040][ T5096] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 460.784753][T11054] netlink: 'syz.1.1957': attribute type 29 has an invalid length. [ 460.784819][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 460.785288][T11054] netlink: 'syz.1.1957': attribute type 29 has an invalid length. [ 460.785596][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 461.828929][T11061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1793 sclass=netlink_tcpdiag_socket pid=11061 comm=syz.4.1960 [ 461.872259][ T29] audit: type=1400 audit(1721127557.939:845): avc: denied { bind } for pid=11062 comm="syz.0.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 462.184864][ T29] audit: type=1400 audit(1721127558.269:846): avc: denied { read } for pid=11067 comm="syz.4.1965" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 462.238781][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 462.284560][ T29] audit: type=1400 audit(1721127558.269:847): avc: denied { open } for pid=11067 comm="syz.4.1965" path="/dev/sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 463.337931][ T5096] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 463.705250][ T29] audit: type=1400 audit(1721127559.789:848): avc: denied { watch } for pid=11089 comm="syz.4.1972" path="/172/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 463.908263][ T5096] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 464.620448][ T5096] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 465.292308][ T5096] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 465.787718][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 466.004832][T11148] bridge0: entered promiscuous mode [ 466.057567][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 466.098539][T11156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=11156 comm=syz.3.1999 [ 466.116923][T11153] bridge0: left promiscuous mode [ 466.164664][T11160] syzkaller0: entered promiscuous mode [ 466.205224][T11150] syzkaller0: left promiscuous mode [ 466.510480][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2006'. [ 466.884309][T11182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=11182 comm=syz.3.2011 [ 467.006210][ T5096] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 467.048513][T11188] input: syz0 as /devices/virtual/input/input15 [ 467.591872][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 467.870973][T11218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11218 comm=syz.2.2026 [ 469.226878][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.239480][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.249090][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.260090][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.268966][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 469.286883][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 469.484344][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.670038][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.868910][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.887095][ T29] audit: type=1400 audit(1721127565.969:849): avc: denied { nlmsg_write } for pid=11277 comm="syz.1.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 469.924335][ T5096] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 470.015187][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.858077][ T63] bridge_slave_1: left allmulticast mode [ 470.863846][ T63] bridge_slave_1: left promiscuous mode [ 470.922310][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.991115][ T63] bridge_slave_0: left allmulticast mode [ 471.008543][ T63] bridge_slave_0: left promiscuous mode [ 471.014512][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.421258][ T5096] Bluetooth: hci0: command tx timeout [ 471.675936][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 472.183968][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.200466][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.221030][ T63] bond0 (unregistering): Released all slaves [ 472.260371][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.277700][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.291384][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.302859][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.334431][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.355560][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.376886][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.405554][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.425927][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.445579][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.465431][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.479262][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.501077][T11297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.525592][T11297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.584175][T11257] chnl_net:caif_netlink_parms(): no params data found [ 473.326503][ T29] audit: type=1400 audit(1721127569.399:850): avc: denied { setattr } for pid=11343 comm="syz.1.2075" name="ptmx" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 473.487908][ T29] audit: type=1400 audit(1721127569.569:851): avc: denied { setattr } for pid=11349 comm="syz.2.2076" name="pfkey" dev="proc" ino=4026534468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 473.605740][ T5096] Bluetooth: hci0: command tx timeout [ 473.739141][ T5096] Bluetooth: hci2: command 0x0406 tx timeout [ 474.253017][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2079'. [ 474.421484][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.460252][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.505972][T11257] bridge_slave_0: entered allmulticast mode [ 474.550834][T11257] bridge_slave_0: entered promiscuous mode [ 474.742160][ T63] hsr_slave_0: left promiscuous mode [ 474.846309][ T63] hsr_slave_1: left promiscuous mode [ 474.882772][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.903544][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.957350][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.964851][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.054112][ T63] veth1_macvtap: left promiscuous mode [ 475.085795][ T63] veth0_macvtap: left promiscuous mode [ 475.116151][ T63] veth1_vlan: left promiscuous mode [ 475.121915][ T63] veth0_vlan: left promiscuous mode [ 475.655774][ T5096] Bluetooth: hci0: command tx timeout [ 477.739433][ T5096] Bluetooth: hci0: command tx timeout [ 477.820264][ T63] team0 (unregistering): Port device team_slave_1 removed [ 477.960223][ T63] team0 (unregistering): Port device team_slave_0 removed [ 478.476808][T11413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11413 comm=syz.4.2096 [ 478.681261][T11415] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 479.533145][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.553095][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.593196][T11257] bridge_slave_1: entered allmulticast mode [ 479.617940][T11257] bridge_slave_1: entered promiscuous mode [ 479.844593][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 479.867031][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 479.875001][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 480.028564][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.159778][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.544306][T11257] team0: Port device team_slave_0 added [ 481.728665][T11257] team0: Port device team_slave_1 added [ 481.797156][T11416] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 482.053559][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.061498][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.096220][T11437] bridge_slave_1: left allmulticast mode [ 482.176294][T11437] bridge_slave_1: left promiscuous mode [ 482.205021][T11437] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.282421][T11437] bridge_slave_0: left allmulticast mode [ 482.295895][T11437] bridge_slave_0: left promiscuous mode [ 482.303703][T11437] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.425803][ T5139] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 482.481125][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.497314][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.565557][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.608470][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.635923][ T5139] usb 3-1: Using ep0 maxpacket: 16 [ 482.645321][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.682103][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.693062][ T5139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 482.715591][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.729048][ T5139] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 482.747328][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 482.761103][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.789897][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 482.801496][ T5139] usb 3-1: config 0 descriptor?? [ 482.876769][ T5139] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 482.977832][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 483.016146][T11257] hsr_slave_0: entered promiscuous mode [ 483.071572][ T5139] usb 3-1: USB disconnect, device number 10 [ 483.086755][T11257] hsr_slave_1: entered promiscuous mode [ 483.104987][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 483.230829][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 483.315203][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 483.369601][T11416] ip6gretap0 speed is unknown, defaulting to 1000 [ 485.214418][T11490] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 485.438579][T11497] siw: device registration error -23 [ 486.006264][ T53] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 486.212487][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 486.239857][ T53] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 486.268668][ T53] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 486.300905][ T53] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 486.401633][ T53] usb 2-1: config 1 has no interface number 0 [ 486.447360][ T53] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.490757][ T53] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 486.547993][ T53] usb 2-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 486.613543][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.779288][T11257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.834651][ T12] bridge_slave_1: left allmulticast mode [ 486.851409][ T12] bridge_slave_1: left promiscuous mode [ 486.862831][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.930945][ T12] bridge_slave_0: left allmulticast mode [ 486.952213][ T12] bridge_slave_0: left promiscuous mode [ 486.969016][ T5141] usb 2-1: USB disconnect, device number 10 [ 486.995923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.275484][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.353896][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.426369][ T12] bond0 (unregistering): Released all slaves [ 489.488372][T11257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 489.566152][T11536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11536 comm=syz.2.2132 [ 489.683689][T11257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 489.901480][T11257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 489.916908][ T29] audit: type=1400 audit(1721127585.999:852): avc: denied { write } for pid=11544 comm="syz.3.2136" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 489.996279][ T29] audit: type=1400 audit(1721127586.079:853): avc: denied { setattr } for pid=11544 comm="syz.3.2136" name="userio" dev="devtmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.397651][ T5170] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 491.555255][ T12] hsr_slave_0: left promiscuous mode [ 491.595647][ T12] hsr_slave_1: left promiscuous mode [ 491.602574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.616438][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.649109][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.667134][ T5170] usb 3-1: Using ep0 maxpacket: 32 [ 491.673085][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.697789][ T5170] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 491.708324][ T5170] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 491.754345][ T5170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 491.802210][ T5170] usb 3-1: config 1 has no interface number 0 [ 491.850230][ T5170] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 491.873635][ T5170] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 491.887189][ T12] veth1_macvtap: left allmulticast mode [ 491.896941][ T12] veth1_macvtap: left promiscuous mode [ 491.903198][ T12] veth0_macvtap: left promiscuous mode [ 491.908954][ T5170] usb 3-1: New USB device found, idVendor=1941, idProduct=5051, bcdDevice=d5.e8 [ 491.924401][ T12] veth1_vlan: left promiscuous mode [ 491.962789][ T5170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.976122][ T12] veth0_vlan: left promiscuous mode [ 492.311201][ T5129] usb 3-1: USB disconnect, device number 11 [ 492.805991][ T29] audit: type=1400 audit(1721127588.879:854): avc: denied { getattr } for pid=11581 comm="syz.4.2152" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 493.111390][T11586] binder: 11585:11586 ioctl 4018620d 0 returned -22 [ 494.707171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 494.803415][ T12] team0 (unregistering): Port device team_slave_0 removed [ 495.182445][ T53] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 495.371603][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 495.407085][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.417133][ T53] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.442678][ T53] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 495.452454][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.479557][ T53] usb 3-1: config 0 descriptor?? [ 495.515424][ T53] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 495.782714][ T786] usb 3-1: USB disconnect, device number 12 [ 495.956870][T11616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11616 comm=syz.3.2166 [ 495.969882][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 495.971422][T11257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.978132][ T5096] Bluetooth: hci1: Malformed Event: 0x02 [ 495.990918][ T5096] Bluetooth: Wrong link type (-57) [ 496.078917][T11257] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.099233][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.106571][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.115744][ T5101] Bluetooth: Unexpected continuation frame (len 18) [ 496.226175][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.233457][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.749916][ T29] audit: type=1400 audit(1721127592.769:855): avc: denied { setattr } for pid=11633 comm="syz.4.2173" name="ttyS3" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 497.372625][T11652] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11652 comm=syz.4.2178 [ 497.546417][T11257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.825742][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 497.834646][ T5101] Bluetooth: hci3: Malformed Event: 0x02 [ 497.841429][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 497.937172][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 498.158728][T11257] veth0_vlan: entered promiscuous mode [ 498.212827][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.218648][T11257] veth1_vlan: entered promiscuous mode [ 498.232567][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.244091][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.256803][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.267154][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 498.283493][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.378726][T11257] veth0_macvtap: entered promiscuous mode [ 498.574346][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.641782][T11257] veth1_macvtap: entered promiscuous mode [ 498.702206][T11673] ip6gretap0 speed is unknown, defaulting to 1000 [ 498.846117][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.080061][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.089886][T11704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11704 comm=syz.1.2192 [ 499.196209][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 499.211278][T11706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11706 comm=syz.3.2193 [ 499.234953][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.247651][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.259774][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.272553][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.284173][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.302431][T11707] xt_cgroup: invalid path, errno=-2 [ 499.308015][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.324130][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.355882][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.382346][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.408541][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.436183][T11257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.593083][ T11] team0: Port device netdevsim0 removed [ 499.627190][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.784535][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.803633][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.823848][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.863575][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.894136][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.910685][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.932659][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.944367][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.958344][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.969594][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.000717][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.108722][T11257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.139475][T11257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.165650][T11257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.187813][T11257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.377325][ T5096] Bluetooth: hci2: command tx timeout [ 500.795780][ T786] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 500.871743][T11753] binder: BINDER_SET_CONTEXT_MGR already set [ 500.878071][T11753] binder: 11742:11753 ioctl 4018620d 200002c0 returned -16 [ 500.995857][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 501.121660][ T786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 501.264376][ T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 501.316918][ T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.367934][ T786] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.445854][ T786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.454997][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.674858][ T29] audit: type=1400 audit(1721127597.759:856): avc: denied { unmount } for pid=9549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 501.719629][ T2395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.745736][ T2395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.874598][ T5096] Bluetooth: hci3: unexpected event 0x06 length: 23 > 3 [ 501.966914][ T11] bridge_slave_1: left allmulticast mode [ 502.028662][ T11] bridge_slave_1: left promiscuous mode [ 502.034815][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.097333][ T11] bridge_slave_0: left allmulticast mode [ 502.112601][ T5096] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 502.126382][ T11] bridge_slave_0: left promiscuous mode [ 502.142159][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.161896][T11770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11770 comm=syz.3.2211 [ 502.252347][ T786] usb 5-1: usb_control_msg returned -71 [ 502.272772][ T786] usbtmc 5-1:16.0: can't read capabilities [ 502.284297][T11770] xt_cgroup: invalid path, errno=-2 [ 502.323516][ T786] usb 5-1: USB disconnect, device number 12 [ 502.456229][ T5096] Bluetooth: hci2: command tx timeout [ 503.653731][T11793] could not allocate digest TFM handle cbcmac-aes-ce [ 503.771138][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.813021][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.839201][ T11] bond0 (unregistering): Released all slaves [ 503.900543][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.910398][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.041302][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 504.159603][T11673] chnl_net:caif_netlink_parms(): no params data found [ 504.226222][T11808] veth1_macvtap: left promiscuous mode [ 504.305951][T11811] veth1_macvtap: entered promiscuous mode [ 504.311981][T11811] macsec0: entered allmulticast mode [ 504.373729][T11811] veth1_macvtap: entered allmulticast mode [ 504.414156][ T29] audit: type=1400 audit(1721127600.499:857): avc: denied { write } for pid=11818 comm="syz.4.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 504.546257][ T5096] Bluetooth: hci2: command tx timeout [ 504.890052][T11831] binder: BINDER_SET_CONTEXT_MGR already set [ 504.896583][T11831] binder: 11815:11831 ioctl 4018620d 200002c0 returned -16 [ 505.554864][ T5138] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 505.805785][ T5138] usb 5-1: Using ep0 maxpacket: 16 [ 505.857892][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.896202][ T5138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.918793][ T5138] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 505.932470][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.945243][ T5138] usb 5-1: config 0 descriptor?? [ 505.969485][ T5138] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 506.036063][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 506.225220][ T5138] usb 5-1: USB disconnect, device number 13 [ 506.398431][ T11] hsr_slave_0: left promiscuous mode [ 506.469494][ T11] hsr_slave_1: left promiscuous mode [ 506.492511][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.514251][ T29] audit: type=1400 audit(1721127602.609:858): avc: denied { append } for pid=11856 comm="syz.0.2232" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 506.519654][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.569860][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.584630][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.615742][ T5096] Bluetooth: hci2: command tx timeout [ 506.677665][ T11] veth1_macvtap: left allmulticast mode [ 506.694717][ T11] veth1_macvtap: left promiscuous mode [ 506.701312][ T11] veth0_macvtap: left promiscuous mode [ 506.708339][ T11] veth1_vlan: left promiscuous mode [ 506.714083][ T11] veth0_vlan: left promiscuous mode [ 507.102967][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.109687][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.246813][ T5096] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 507.260824][ T5096] Bluetooth: hci3: Malformed Event: 0x02 [ 507.273771][ T5086] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 507.349301][ T5086] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 508.341775][ T5086] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 508.355047][ T5086] Bluetooth: hci1: Malformed Event: 0x02 [ 508.364859][ T5086] Bluetooth: Wrong link type (-57) [ 508.372647][ T5086] Bluetooth: hci1: link tx timeout [ 508.384150][ T5086] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 508.447392][ T11] team0 (unregistering): Port device team_slave_1 removed [ 508.456940][ T5086] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 508.567397][ T5140] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 508.569563][ T11] team0 (unregistering): Port device team_slave_0 removed [ 508.697261][ T5086] Bluetooth: hci1: command tx timeout [ 508.765966][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 508.794874][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.812808][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.830970][ T5140] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.843181][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.873364][ T5140] usb 5-1: config 0 descriptor?? [ 508.894246][ T5140] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 509.109942][ T53] usb 5-1: USB disconnect, device number 14 [ 509.413828][T11854] veth1_macvtap: left allmulticast mode [ 509.420300][T11854] veth1_macvtap: left promiscuous mode [ 509.427267][T11854] macsec0: left allmulticast mode [ 509.442985][T11673] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.460738][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.475958][T11673] bridge_slave_0: entered allmulticast mode [ 509.504837][T11673] bridge_slave_0: entered promiscuous mode [ 509.520623][T11863] veth1_macvtap: entered promiscuous mode [ 509.528613][T11863] macsec0: entered allmulticast mode [ 509.533969][T11863] veth1_macvtap: entered allmulticast mode [ 509.617351][T11673] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.648289][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.657819][T11673] bridge_slave_1: entered allmulticast mode [ 509.678173][T11673] bridge_slave_1: entered promiscuous mode [ 509.706676][ T5086] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 509.912411][T11673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.997731][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 510.035387][T11673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.331412][T11673] team0: Port device team_slave_0 added [ 510.369617][T11673] team0: Port device team_slave_1 added [ 510.535649][ T5139] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 510.611641][T11673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.641628][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.721511][T11673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.725753][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 510.776183][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 510.789306][ T5139] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 510.804722][ T5139] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 510.817335][ T5139] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.827902][ T5139] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.843369][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.853873][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.939053][T11673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.969853][T11673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.080708][T11673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.123786][ T5101] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 511.469695][T11673] hsr_slave_0: entered promiscuous mode [ 511.607537][T11673] hsr_slave_1: entered promiscuous mode [ 511.630881][ T5139] usb 2-1: usb_control_msg returned -71 [ 511.656365][ T5139] usbtmc 2-1:16.0: can't read capabilities [ 511.662640][T11673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.705662][T11673] Cannot create hsr debugfs directory [ 511.741371][ T5139] usb 2-1: USB disconnect, device number 11 [ 511.799070][ T29] audit: type=1400 audit(1721127607.889:859): avc: denied { create } for pid=11960 comm="syz.4.2258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=dccp_socket permissive=1 [ 512.866731][ T5101] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 514.221967][T11673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.310853][T11673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.458400][T11673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.595181][T11673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.755164][T11673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.807242][T11673] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.838639][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.846916][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.884546][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.891945][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.016664][ T29] audit: type=1400 audit(1721127612.099:860): avc: denied { append } for pid=12048 comm="syz.0.2282" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 516.106411][ T29] audit: type=1400 audit(1721127612.199:861): avc: denied { ioctl } for pid=12048 comm="syz.0.2282" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 516.231109][ T29] audit: type=1400 audit(1721127612.199:862): avc: denied { setattr } for pid=12048 comm="syz.0.2282" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 516.302533][ T29] audit: type=1400 audit(1721127612.199:863): avc: denied { block_suspend } for pid=12048 comm="syz.0.2282" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.814021][T11673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.122878][T11673] veth0_vlan: entered promiscuous mode [ 518.207260][T11673] veth1_vlan: entered promiscuous mode [ 518.469461][T11673] veth0_macvtap: entered promiscuous mode [ 518.515136][T11673] veth1_macvtap: entered promiscuous mode [ 518.683739][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.715628][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.738969][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.750399][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.760640][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.774602][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.798096][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.822221][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.844860][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.873528][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.910379][T11673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.941736][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 519.189002][T12115] binder: 12114:12115 ioctl c0306201 0 returned -14 [ 519.218954][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.282786][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.309599][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.345501][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.393990][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.442410][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.507613][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.554481][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.582779][T11673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.607925][T11673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.634886][T11673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.135710][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 520.352748][T11673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.398589][T11673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.415914][ T29] audit: type=1400 audit(1721127616.509:864): avc: denied { name_bind } for pid=12128 comm="syz.3.2304" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 520.448486][T11673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.468938][T11673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.949637][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.985202][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.017769][T12138] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.017936][ T29] audit: type=1400 audit(1721127617.109:865): avc: denied { nlmsg_write } for pid=12153 comm="syz.3.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.274259][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.325559][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.361053][T12163] binder: 12161:12163 ioctl c0306201 0 returned -14 [ 521.379361][T12162] EXT4-fs (sda1): shut down requested (1) [ 521.652223][T12162] Aborting journal on device sda1-8. [ 521.813016][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 522.457975][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 522.511586][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 522.576667][ T786] rtc_cmos 00:00: Alarms can be up to one day in the future [ 522.615671][ T786] rtc rtc0: __rtc_set_alarm: err=-22 [ 523.003342][T12188] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 523.467738][T12200] binder: 12198:12200 ioctl c0306201 0 returned -14 [ 524.219641][T12192] rtc_cmos 00:00: Alarms can be up to one day in the future [ 524.727341][ T29] audit: type=1400 audit(1721127620.819:866): avc: denied { read } for pid=12210 comm="syz.1.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 524.845913][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 524.864612][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 524.887990][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 524.897879][ T29] audit: type=1400 audit(1721127620.979:867): avc: denied { accept } for pid=12212 comm="syz.4.2326" lport=49378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 524.922580][ T5170] rtc_cmos 00:00: Alarms can be up to one day in the future [ 524.967185][ T5170] rtc rtc0: __rtc_set_alarm: err=-22 [ 525.863693][ T5101] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 525.975354][ T5101] Bluetooth: hci1: unexpected event 0x34 length: 10 > 6 [ 526.066442][T12230] netlink: 772 bytes leftover after parsing attributes in process `syz.1.2330'. [ 526.582813][T12246] veth1_macvtap: left allmulticast mode [ 526.603671][T12246] veth1_macvtap: left promiscuous mode [ 526.630943][T12246] macsec0: left allmulticast mode [ 526.635598][T12238] usb usb8: usbfs: process 12238 (syz.4.2334) did not claim interface 0 before use [ 526.737901][T12249] veth1_macvtap: entered promiscuous mode [ 526.762264][T12249] macsec0: entered allmulticast mode [ 526.769937][T12244] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.804744][T12249] veth1_macvtap: entered allmulticast mode [ 526.812263][T10283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.853539][T10283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.900215][T10283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 527.215979][T10283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 527.223339][T10283] rtc rtc0: __rtc_set_alarm: err=-22 [ 527.896007][ T29] audit: type=1400 audit(1721127623.979:868): avc: denied { write } for pid=12255 comm="syz.0.2338" lport=45287 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 527.899697][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 528.573846][T12287] veth1_macvtap: left allmulticast mode [ 528.580281][T12287] veth1_macvtap: left promiscuous mode [ 528.589185][T12287] macsec0: left allmulticast mode [ 528.621874][T12287] veth1_macvtap: entered promiscuous mode [ 528.636070][T12287] macsec0: entered allmulticast mode [ 528.641893][T12287] veth1_macvtap: entered allmulticast mode [ 528.826058][ T5138] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 528.871031][T12291] usb usb8: usbfs: process 12291 (syz.4.2351) did not claim interface 0 before use [ 529.048243][ T5138] usb 2-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e [ 529.064575][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.082384][ T5138] usb 2-1: config 0 descriptor?? [ 529.104916][ T5138] usb-storage 2-1:0.0: USB Mass Storage device detected [ 529.247297][T10283] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 529.311375][ T5170] usb 2-1: USB disconnect, device number 12 [ 529.717256][ T29] audit: type=1400 audit(1721127625.809:869): avc: denied { read } for pid=12307 comm="syz.0.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 529.749826][T12311] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 529.820628][ T29] audit: type=1400 audit(1721127625.839:870): avc: denied { read write } for pid=12307 comm="syz.0.2355" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 529.853426][T12311] batman_adv: batadv0: Adding interface: team0 [ 529.863275][T12311] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.880996][ T29] audit: type=1400 audit(1721127625.839:871): avc: denied { open } for pid=12307 comm="syz.0.2355" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 529.943333][ T29] audit: type=1400 audit(1721127625.949:872): avc: denied { read } for pid=12309 comm="syz.4.2356" lport=49965 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 530.019774][T10283] usb 4-1: unable to get BOS descriptor or descriptor too short [ 530.044126][T12311] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 530.062898][ T5101] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 530.074797][T12313] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 530.083542][T12313] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2355'. [ 530.083719][T10283] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 530.105885][T12313] team0: entered promiscuous mode [ 530.110637][ T29] audit: type=1400 audit(1721127626.069:873): avc: denied { setopt } for pid=12309 comm="syz.4.2356" lport=49965 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 530.117350][T12313] team_slave_0: entered promiscuous mode [ 530.171391][ T5101] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 530.184743][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 530.202730][T12313] team_slave_1: entered promiscuous mode [ 530.217009][T12313] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.224564][T12313] batman_adv: batadv0: Interface activated: team0 [ 530.232032][T10283] usb 4-1: can't read configurations, error -71 [ 530.233008][T12313] batman_adv: batadv0: Interface deactivated: team0 [ 530.271038][T12313] batman_adv: batadv0: Removing interface: team0 [ 530.304266][T12313] bridge0: port 3(team0) entered blocking state [ 530.314369][T12313] bridge0: port 3(team0) entered disabled state [ 530.323822][T12313] team0: entered allmulticast mode [ 530.331158][T12313] team_slave_0: entered allmulticast mode [ 530.337239][T12313] team_slave_1: entered allmulticast mode [ 530.358456][T12313] bridge0: port 3(team0) entered blocking state [ 530.364928][T12313] bridge0: port 3(team0) entered forwarding state [ 530.504835][T12324] lo: entered allmulticast mode [ 530.522215][T12324] lo: left allmulticast mode [ 530.660199][T12328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2362'. [ 530.865906][ T53] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 530.996386][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 531.080728][ T53] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.103738][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 531.137008][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 531.154180][ T53] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.184998][ T53] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.204926][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.224588][ T53] usb 2-1: config 0 descriptor?? [ 531.490967][ T5101] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 531.499405][ T5101] Bluetooth: hci0: Malformed Event: 0x02 [ 531.507002][ T5101] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 531.557974][ T5101] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 531.670685][ T53] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 531.682662][ T53] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 531.700704][ T53] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 531.989298][ T53] usb 2-1: USB disconnect, device number 13 [ 532.275740][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2375'. [ 532.716889][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 532.817151][ T29] audit: type=1326 audit(1721127628.899:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed775bd9 code=0x7ffc0000 [ 532.894067][ T29] audit: type=1326 audit(1721127628.939:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed775bd9 code=0x7ffc0000 [ 532.984663][ T29] audit: type=1326 audit(1721127628.939:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ffbed775bd9 code=0x7ffc0000 [ 533.008334][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.119183][ T29] audit: type=1326 audit(1721127628.939:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12374 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbed775bd9 code=0x7ffc0000 [ 533.325613][ T29] audit: type=1400 audit(1721127629.409:878): avc: denied { read } for pid=12383 comm="syz.0.2381" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 533.428426][ T5101] Bluetooth: hci3: Malformed Event: 0x02 [ 533.436187][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 533.444986][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 533.453487][ T29] audit: type=1400 audit(1721127629.409:879): avc: denied { open } for pid=12383 comm="syz.0.2381" path="/27/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 533.477039][ T29] audit: type=1400 audit(1721127629.409:880): avc: denied { ioctl } for pid=12383 comm="syz.0.2381" path="/27/file0/file0" dev="fuse" ino=0 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 533.892583][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 533.983955][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2389'. [ 535.576080][ T5101] Bluetooth: hci1: command 0x0406 tx timeout [ 535.643057][ T5101] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 535.664588][ T5101] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 535.684267][ T5101] Bluetooth: hci3: Injecting HCI hardware error event [ 535.695146][ T5086] Bluetooth: hci3: hardware error 0x00 [ 536.732532][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2402'. [ 537.435655][ T5170] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 537.646852][ T5170] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 537.714960][ T5170] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 537.736042][ T5170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.745795][ T5086] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 538.218453][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 538.251126][ T5170] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 538.279753][ T5170] usb 5-1: No valid video chain found. [ 538.590467][ T5170] usb 5-1: USB disconnect, device number 15 [ 540.124019][T12497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2417'. [ 541.103088][T12514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.818532][T12514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.071137][T12515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.769843][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2432'. [ 542.990292][ T65] bridge_slave_1: left allmulticast mode [ 542.999077][ T65] bridge_slave_1: left promiscuous mode [ 543.022809][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.050947][ T65] bridge_slave_0: left allmulticast mode [ 543.072535][ T65] bridge_slave_0: left promiscuous mode [ 543.092782][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.372481][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.403015][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.416792][ T65] bond0 (unregistering): Released all slaves [ 545.585627][T10283] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 545.925976][T12572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2445'. [ 546.669251][T10283] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 546.678493][T10283] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 546.711882][T10283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 546.755600][T10283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 546.781913][T10283] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 546.828202][T10283] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 546.844854][T10283] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 546.863227][T10283] usb 5-1: Product: syz [ 546.903065][T10283] usb 5-1: Manufacturer: syz [ 546.958388][T10283] cdc_wdm 5-1:1.0: skipping garbage [ 546.982721][T10283] cdc_wdm 5-1:1.0: skipping garbage [ 547.029141][T10283] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 547.045746][T10283] cdc_wdm 5-1:1.0: Unknown control protocol [ 547.146647][ T65] hsr_slave_0: left promiscuous mode [ 547.230585][ T65] hsr_slave_1: left promiscuous mode [ 547.291815][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.322434][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.367545][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.391423][ T5138] usb 5-1: USB disconnect, device number 16 [ 547.413864][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.598507][ T65] veth1_macvtap: left promiscuous mode [ 547.612102][ T65] veth0_macvtap: left promiscuous mode [ 547.622877][ T65] veth1_vlan: left promiscuous mode [ 547.639540][ T65] veth0_vlan: left promiscuous mode [ 547.995639][ T5138] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 548.194975][ T5138] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.209521][ T5138] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 548.231280][ T5138] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.254169][ T5138] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 548.269711][ T5138] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 548.290311][ T5138] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.300313][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.309290][ T5138] usb 5-1: Product: syz [ 548.313943][ T5138] usb 5-1: Manufacturer: syz [ 548.349664][ T5138] cdc_wdm 5-1:1.0: skipping garbage [ 548.359090][ T5138] cdc_wdm 5-1:1.0: skipping garbage [ 548.369910][ T5138] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 548.389404][ T5138] cdc_wdm 5-1:1.0: Unknown control protocol [ 548.694615][T10283] usb 5-1: USB disconnect, device number 17 [ 550.422494][ T65] team0 (unregistering): Port device team_slave_1 removed [ 550.923955][ T65] team0 (unregistering): Port device team_slave_0 removed [ 551.395253][ T29] audit: type=1326 audit(1721127647.479:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12618 comm="syz.2.2459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7988375bd9 code=0x0 [ 552.242342][ T29] audit: type=1400 audit(1721127648.319:882): avc: denied { create } for pid=12628 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 552.445994][ T29] audit: type=1400 audit(1721127648.509:883): avc: denied { read } for pid=12628 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 555.086148][ T29] audit: type=1326 audit(1721127651.169:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f175bd9 code=0x7ffc0000 [ 555.170401][ T29] audit: type=1326 audit(1721127651.169:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f175bd9 code=0x7ffc0000 [ 555.295683][ T29] audit: type=1326 audit(1721127651.179:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fb04f175bd9 code=0x7ffc0000 [ 555.358223][ T29] audit: type=1326 audit(1721127651.179:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12655 comm="syz.4.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f175bd9 code=0x7ffc0000 [ 555.391670][ T29] audit: type=1326 audit(1721127651.479:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12658 comm="syz.3.2473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9994375bd9 code=0x0 [ 560.770216][T12736] fuse: Bad value for 'fd' [ 560.796333][ T29] audit: type=1400 audit(1721127656.889:889): avc: denied { setopt } for pid=12734 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 560.829514][ T29] audit: type=1400 audit(1721127656.919:890): avc: denied { create } for pid=12734 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.891202][T12739] usb usb8: usbfs: process 12739 (syz.0.2499) did not claim interface 0 before use [ 560.910121][ T29] audit: type=1400 audit(1721127656.919:891): avc: denied { setopt } for pid=12734 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 560.958936][ T29] audit: type=1400 audit(1721127656.919:892): avc: denied { create } for pid=12734 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 561.025832][ T5139] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 561.049886][ T29] audit: type=1400 audit(1721127656.919:893): avc: denied { setopt } for pid=12734 comm="syz.3.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 561.129273][ T5086] ================================================================== [ 561.137493][ T5086] BUG: KASAN: slab-use-after-free in kfree_skb_reason+0x36/0x210 [ 561.145284][ T5086] Read of size 4 at addr ffff888067541c24 by task kworker/u9:2/5086 [ 561.153656][ T5086] [ 561.156035][ T5086] CPU: 0 PID: 5086 Comm: kworker/u9:2 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 561.165982][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 561.176082][ T5086] Workqueue: hci0 hci_cmd_work [ 561.180900][ T5086] Call Trace: [ 561.184188][ T5086] [ 561.187137][ T5086] dump_stack_lvl+0x116/0x1f0 [ 561.191877][ T5086] print_report+0xc3/0x620 [ 561.196317][ T5086] ? __virt_addr_valid+0x5e/0x590 [ 561.201363][ T5086] ? __phys_addr+0xc6/0x150 [ 561.205888][ T5086] kasan_report+0xd9/0x110 [ 561.210322][ T5086] ? kfree_skb_reason+0x36/0x210 [ 561.215299][ T5086] ? kfree_skb_reason+0x36/0x210 [ 561.220258][ T5086] kasan_check_range+0xef/0x1a0 [ 561.225132][ T5086] kfree_skb_reason+0x36/0x210 [ 561.229924][ T5086] hci_cmd_work+0x63e/0x710 [ 561.234467][ T5086] process_one_work+0x9c5/0x1b40 [ 561.239430][ T5086] ? __pfx_lock_acquire+0x10/0x10 [ 561.244493][ T5086] ? __pfx_process_one_work+0x10/0x10 [ 561.249891][ T5086] ? assign_work+0x1a0/0x250 [ 561.254515][ T5086] worker_thread+0x6c8/0xf20 [ 561.259169][ T5086] ? __kthread_parkme+0x148/0x220 [ 561.264222][ T5086] ? __pfx_worker_thread+0x10/0x10 [ 561.269353][ T5086] kthread+0x2c1/0x3a0 [ 561.273534][ T5086] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.278764][ T5086] ? __pfx_kthread+0x10/0x10 [ 561.283381][ T5086] ret_from_fork+0x45/0x80 [ 561.287830][ T5086] ? __pfx_kthread+0x10/0x10 [ 561.292447][ T5086] ret_from_fork_asm+0x1a/0x30 [ 561.297249][ T5086] [ 561.300278][ T5086] [ 561.302605][ T5086] Allocated by task 5086: [ 561.306938][ T5086] kasan_save_stack+0x33/0x60 [ 561.311658][ T5086] kasan_save_track+0x14/0x30 [ 561.316365][ T5086] __kasan_slab_alloc+0x89/0x90 [ 561.321257][ T5086] kmem_cache_alloc_noprof+0x121/0x2f0 [ 561.326741][ T5086] skb_clone+0x190/0x3f0 [ 561.331000][ T5086] hci_cmd_work+0x66a/0x710 [ 561.335589][ T5086] process_one_work+0x9c5/0x1b40 [ 561.340544][ T5086] worker_thread+0x6c8/0xf20 [ 561.345151][ T5086] kthread+0x2c1/0x3a0 [ 561.349245][ T5086] ret_from_fork+0x45/0x80 [ 561.353704][ T5086] ret_from_fork_asm+0x1a/0x30 [ 561.358503][ T5086] [ 561.360837][ T5086] Freed by task 12745: [ 561.364908][ T5086] kasan_save_stack+0x33/0x60 [ 561.369618][ T5086] kasan_save_track+0x14/0x30 [ 561.374341][ T5086] kasan_save_free_info+0x3b/0x60 [ 561.379489][ T5086] poison_slab_object+0xf7/0x160 [ 561.384491][ T5086] __kasan_slab_free+0x32/0x50 [ 561.389294][ T5086] kmem_cache_free+0x12f/0x3a0 [ 561.394075][ T5086] kfree_skbmem+0x10e/0x200 [ 561.398608][ T5086] kfree_skb_reason+0x138/0x210 [ 561.403477][ T5086] __hci_req_sync+0x61d/0x980 [ 561.408188][ T5086] hci_req_sync+0x97/0xd0 [ 561.412548][ T5086] hci_inquiry+0x3ea/0x950 [ 561.417004][ T5086] hci_sock_ioctl+0x2bb/0x880 [ 561.421723][ T5086] sock_do_ioctl+0x116/0x280 [ 561.426342][ T5086] sock_ioctl+0x22e/0x6c0 [ 561.430699][ T5086] __x64_sys_ioctl+0x193/0x220 [ 561.435495][ T5086] do_syscall_64+0xcd/0x250 [ 561.440033][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.445961][ T5086] [ 561.448309][ T5086] The buggy address belongs to the object at ffff888067541b40 [ 561.448309][ T5086] which belongs to the cache skbuff_head_cache of size 240 [ 561.462986][ T5086] The buggy address is located 228 bytes inside of [ 561.462986][ T5086] freed 240-byte region [ffff888067541b40, ffff888067541c30) [ 561.476898][ T5086] [ 561.479232][ T5086] The buggy address belongs to the physical page: [ 561.485656][ T5086] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67541 [ 561.494469][ T5086] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 561.501612][ T5086] page_type: 0xffffefff(slab) [ 561.506317][ T5086] raw: 00fff00000000000 ffff88801929a780 ffffea0001fe0ac0 dead000000000004 [ 561.514918][ T5086] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 561.523512][ T5086] page dumped because: kasan: bad access detected [ 561.529945][ T5086] page_owner tracks the page as allocated [ 561.535674][ T5086] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11673, tgid 11673 (syz-executor), ts 518110047408, free_ts 516558045102 [ 561.556737][ T5086] post_alloc_hook+0x2d1/0x350 [ 561.561530][ T5086] get_page_from_freelist+0x1353/0x2e50 [ 561.567122][ T5086] __alloc_pages_noprof+0x22b/0x2460 [ 561.572438][ T5086] alloc_slab_page+0x56/0x110 [ 561.577163][ T5086] new_slab+0x84/0x260 [ 561.581249][ T5086] ___slab_alloc+0xdac/0x1870 [ 561.585948][ T5086] __slab_alloc.constprop.0+0x56/0xb0 [ 561.591375][ T5086] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 561.596855][ T5086] skb_clone+0x190/0x3f0 [ 561.601115][ T5086] netlink_deliver_tap+0xab3/0xd90 [ 561.606275][ T5086] netlink_unicast+0x604/0x820 [ 561.611091][ T5086] netlink_sendmsg+0x8b8/0xd70 [ 561.615892][ T5086] __sys_sendto+0x47f/0x4e0 [ 561.620437][ T5086] __x64_sys_sendto+0xe0/0x1c0 [ 561.625250][ T5086] do_syscall_64+0xcd/0x250 [ 561.629791][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.635725][ T5086] page last free pid 12063 tgid 12059 stack trace: [ 561.642344][ T5086] free_unref_folios+0x991/0x1310 [ 561.647415][ T5086] folios_put_refs+0x487/0x6d0 [ 561.652223][ T5086] free_pages_and_swap_cache+0x45f/0x510 [ 561.657908][ T5086] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 561.663926][ T5086] tlb_finish_mmu+0x168/0x7b0 [ 561.668633][ T5086] exit_mmap+0x3d1/0xb20 [ 561.672923][ T5086] __mmput+0x12a/0x480 [ 561.677032][ T5086] mmput+0x62/0x70 [ 561.680780][ T5086] do_exit+0x9b7/0x2ba0 [ 561.684966][ T5086] do_group_exit+0xd3/0x2a0 [ 561.689559][ T5086] get_signal+0x25fb/0x2770 [ 561.694107][ T5086] arch_do_signal_or_restart+0x90/0x7e0 [ 561.699681][ T5086] syscall_exit_to_user_mode+0x150/0x2a0 [ 561.705350][ T5086] do_syscall_64+0xda/0x250 [ 561.709883][ T5086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.715812][ T5086] [ 561.718145][ T5086] Memory state around the buggy address: [ 561.723786][ T5086] ffff888067541b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 561.731864][ T5086] ffff888067541b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 561.739973][ T5086] >ffff888067541c00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 561.748058][ T5086] ^ [ 561.753177][ T5086] ffff888067541c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 561.761251][ T5086] ffff888067541d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 561.769326][ T5086] ================================================================== [ 561.786865][ T5086] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 561.794121][ T5086] CPU: 0 PID: 5086 Comm: kworker/u9:2 Not tainted 6.10.0-syzkaller-01155-gd67978318827 #0 [ 561.804234][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 561.814329][ T5086] Workqueue: hci0 hci_cmd_work [ 561.819128][ T5086] Call Trace: [ 561.822414][ T5086] [ 561.825446][ T5086] dump_stack_lvl+0x3d/0x1f0 [ 561.830308][ T5086] panic+0x6f5/0x7a0 [ 561.834313][ T5086] ? __pfx_panic+0x10/0x10 [ 561.838753][ T5086] ? irqentry_exit+0x3b/0x90 [ 561.843366][ T5086] ? lockdep_hardirqs_on+0x7c/0x110 [ 561.848589][ T5086] ? preempt_schedule_thunk+0x1a/0x30 [ 561.853974][ T5086] ? preempt_schedule_common+0x44/0xc0 [ 561.859471][ T5086] ? check_panic_on_warn+0x1f/0xb0 [ 561.864623][ T5086] check_panic_on_warn+0xab/0xb0 [ 561.869617][ T5086] end_report+0x117/0x180 [ 561.873964][ T5086] kasan_report+0xe9/0x110 [ 561.878409][ T5086] ? kfree_skb_reason+0x36/0x210 [ 561.883371][ T5086] ? kfree_skb_reason+0x36/0x210 [ 561.888344][ T5086] kasan_check_range+0xef/0x1a0 [ 561.893227][ T5086] kfree_skb_reason+0x36/0x210 [ 561.898018][ T5086] hci_cmd_work+0x63e/0x710 [ 561.902557][ T5086] process_one_work+0x9c5/0x1b40 [ 561.907537][ T5086] ? __pfx_lock_acquire+0x10/0x10 [ 561.912624][ T5086] ? __pfx_process_one_work+0x10/0x10 [ 561.918024][ T5086] ? assign_work+0x1a0/0x250 [ 561.922646][ T5086] worker_thread+0x6c8/0xf20 [ 561.927256][ T5086] ? __kthread_parkme+0x148/0x220 [ 561.932307][ T5086] ? __pfx_worker_thread+0x10/0x10 [ 561.937431][ T5086] kthread+0x2c1/0x3a0 [ 561.941547][ T5086] ? _raw_spin_unlock_irq+0x23/0x50 [ 561.946767][ T5086] ? __pfx_kthread+0x10/0x10 [ 561.951375][ T5086] ret_from_fork+0x45/0x80 [ 561.955866][ T5086] ? __pfx_kthread+0x10/0x10 [ 561.960473][ T5086] ret_from_fork_asm+0x1a/0x30 [ 561.965290][ T5086] [ 561.968569][ T5086] Kernel Offset: disabled [ 561.972902][ T5086] Rebooting in 86400 seconds..