last executing test programs: 2m8.085713026s ago: executing program 2 (id=1520): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper], 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') socket(0xa, 0x1, 0x0) read(r7, &(0x7f0000001b00)=""/194, 0xc2) 2m6.838952445s ago: executing program 2 (id=1525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)={0x68, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfb, 0x21}}}}, [@NL80211_ATTR_BSSID={0x4c, 0xf5, @random="0bb9909c2131"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="6e9adb512ef4"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000404}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) syz_80211_inject_frame(&(0x7f0000002c40), &(0x7f0000002c80)=ANY=[@ANYBLOB="88013f00ffffffffffff08"], 0xee) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6000005, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000000480), 0x4) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r11, @ANYRESHEX, @ANYRES8=r10, @ANYBLOB="f2d5270d2c6d2c6cd37fd88d1d14f1ad20e0615057147307781a43feee9c5a610fa3e60483c17b22282559d27d1acb1a54b9ab47702d64492c3f409ee01c8b7d4ee722ac5a27589fc9cc6b69027f8f7310810e5401001ec1f40e9163188532136065b50a12c7cfdfce7bdd003ee878e1dedb023d95fddd018da976e640177ae577e011cdc74ad4640f150b38b99bf0d2b286d79a4916a149c5d8694a5986f092342e5380b7b6a66a36facddf5729c40d2e458d2f0ded1787e1655e79be0b6290edb38963819b"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) 2m6.41678616s ago: executing program 1 (id=1526): r0 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x4) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000b40)) socket$nl_xfrm(0x10, 0x3, 0x6) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x151c80, 0x130) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7cff, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x104, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x0, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x6000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x200000d, 0x1010, r0, 0x0) 2m3.181763608s ago: executing program 1 (id=1533): syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) setregid(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = socket(0x10, 0x3, 0x0) setresuid(0xee01, 0xee01, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x8001, 0x9}, @window={0x3, 0x2, 0x2}, @sack_perm], 0x3) r5 = geteuid() r6 = geteuid() setresuid(r5, r6, r5) setreuid(0xffffffffffffffff, 0x0) 2m1.951749239s ago: executing program 1 (id=1534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000020000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x6, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 2m1.844215116s ago: executing program 2 (id=1537): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e000000000000000000", @ANYRES32, @ANYBLOB="000623e8b5e0b371ff00000000000000004000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/25], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) socket$inet6(0xa, 0x1, 0x0) getrlimit(0x7, &(0x7f00000003c0)) close(r6) 2m0.92505929s ago: executing program 2 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r2, 0x8010aa01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x5c, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000740)='./file0\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}]}, 0x54}}, 0x0) 1m59.693599524s ago: executing program 1 (id=1541): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) recvfrom$inet(r0, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) 1m58.923429607s ago: executing program 2 (id=1543): ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x8}, 'port0\x00', 0x0, 0x40000, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000580), 0x10) close(r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 1m58.693478428s ago: executing program 1 (id=1544): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000180), 0x4) connect$inet6(r2, 0x0, 0x0) madvise(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x344f, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) 21.93194355s ago: executing program 0 (id=1691): r0 = socket(0x25, 0x2, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="2dd74cbc75bd7e853b4a39df51240f30ab42dae675389a60fa07034ba26abc3d535efa19f0ba8916547a9ae80aeff071413689b7f7b4703205cea30be34265fae1b968fc6b75057cd6577fcf4dce03f6f06e836f7ade168d682d94bf1bc053d982de3dc665bbdd8b4b4e859137d692a4640c34518c44b52258f720326f523fa82da40ba2d7a97e2118ca4d26f6f187006f0d2d220d2b41798d6df847742f91ab5374832670c0c5a19d1da436ba7d3344e49587a53ad147f3dc548a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000b40)='f2fs_reserve_new_blocks\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$isdn(0x22, 0x3, 0x0) bind$isdn(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='rpcgss_createauth\x00'}, 0x11) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f00000000c0)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) r6 = syz_open_dev$radio(&(0x7f0000000900), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', 0x0, 0x44, &(0x7f0000000dc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r6, @ANYBLOB=',access=user,dfltuid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6c6f6f73652c6d73697a653d3078303030303030303030303030303030312c6e6f657874656e642c63616368653d6c6f6f73652c6163636573733d616e792c76657273696f6e3d3970323030302e4c2c6e6f657874656e642c6d73697a653d3078303030303030303030303030303030372c646f6e745f61707072616973652c00292bcb73f847b27ebf4209abd2f7fe0f00000000000000d05b4f7cdc4327fcfefceb29f08e0cea992e004d4fd31c4ae3ac4f6840a59811ccfe3e9eb1580b03404aaf490dedae"]) sched_setscheduler(0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000700)={0x3, 0x40, 0xfa02, {{0x6000000, 0x8, 0xd, @mcast2, 0xffffffff}, {0xa, 0x4f22, 0x7ffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @local}}}, 0x48) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) 17.905256569s ago: executing program 0 (id=1697): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2881}, 0x20044058) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendto(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x40008, &(0x7f0000000440)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x23, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) getsockopt$inet6_mreq(r4, 0x3a, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f0000000040), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) 15.24915357s ago: executing program 0 (id=1702): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) poll(0xfffffffffffffffe, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x2300, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f00000004c0)='net/wireless\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b3d35d726de397da5d598", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x62040200) unshare(0x62040200) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0c000000010000000b"], 0x9e0a) 14.61832433s ago: executing program 4 (id=1703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) rt_sigpending(0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fsopen(0x0, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) 12.993297284s ago: executing program 3 (id=1705): unshare(0x20000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x1}, {}, @device_b, @broadcast}, @a_msdu}, 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x2de, &(0x7f0000000440)={@remote, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "cb4a48", 0x2a8, 0xb6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x2c, 0x21, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x0, 0xba, "341640e8fc0fd1068217f7bafda31c1d88bb0e50ed95cf447f07a6aa556efb29ef4d0bacc9a1934c72a307ab9d9a6004eac5676b9d3c83fb80234d1ef5e42b5e3f2c7fdc01bbe6acfafb5a96d250f73208aa346b1c2c5f05a09999d19c254f3b5739bccfabeff4ef3d5e08f36b4c2efbe7f2888fb4101c6690ab746281322b84bcffd78eb8afedcf5a8acfcf7d44bd714035aa652f93167d38b5f9799d328dcb967cc6a5db0443685a06de62b75b3cb26753f4fdeec29ef94d19"}, @generic={0x0, 0x47, "98e3504ed8ddbeb308bfa945bc3c269505c9fb2f9903d0b6201c48a5807eea3c36f3ce57d699e615a04f97eafd40d05a80e593cda4e84742bc295fc36fd2411ce79c5b31fc55cd"}]}, @routing={0x32, 0xe, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, @local, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3c, 0x10, 0x4, 0x8, 0x3, 0x40, 0x8, [@mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @mcast1]}, @srh={0x2b, 0x0, 0x4, 0x0, 0x1, 0x48, 0x9}, @srh={0x3a, 0xc, 0x4, 0x6, 0x4, 0x68, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private0, @remote, @empty]}, @srh={0x33, 0x2, 0x4, 0x1, 0x2, 0x20, 0xd17, [@private2]}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xb2}]}]}}}}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r3 = syz_usbip_server_init(0x5) write$usbip_server(r3, &(0x7f0000002680)=ANY=[@ANYBLOB="00000001"], 0x30) 11.541230303s ago: executing program 4 (id=1706): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000007f00008000000000000000000000000009f953ad9b6cdcc3253016b2d120d421912cf131f9ad178e763cbf3f6c2635b62bc1eb2d8a21a06edb394b949957c429a476499bcdb50f4975ffe2c3c64addd86ed5765e3fd1248ff725800ab3bfecfcc73584165cf494f4bde393f3f5d8d8a2974d027f9177201b971e44cf5b650599d9e1f6ae2268f225c1343157911158f844f523032e3ae36a3fb868a5b0bf43034aedbae715791f7c8f2680703bcc98c102eb11e3fc05d1ba22fa84753e54d72a18b3166c1e8145089f8172ce3068d77cb8b4", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1c}, {0x4c, 0x0, 0x0, 0x7}, {0x6}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x2b}, {0x3, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0xf0, 0xfe, "93c6ff", 0x1}, {@any, 0x4b, 0xff, 0x0, 'd%e', 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x10, 0x0, "6ba88f", 0x1ff}]}}}, 0x2e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001980)="d7", 0x1}], 0x1}}], 0x2, 0x4008095) 11.37775853s ago: executing program 3 (id=1707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x20000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/loop-control\x00', 0xfffffffffffffffc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x5a, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x80) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'lc\x00'}, 0x2c) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 9.932608962s ago: executing program 3 (id=1708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic='\nN']}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = dup2(r7, r7) write$tun(r8, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002042, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) unshare(0x42040080) 9.675244763s ago: executing program 1 (id=1558): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper], 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') socket(0xa, 0x1, 0x0) read(r7, &(0x7f0000001b00)=""/194, 0xc2) 9.665704549s ago: executing program 4 (id=1709): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e000000000000000000", @ANYRES32, @ANYBLOB="000623e8b5e0b371ff00000000000000004000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/25], 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) socket$inet6(0xa, 0x1, 0x0) getrlimit(0x7, &(0x7f00000003c0)) close(r5) 7.977434531s ago: executing program 4 (id=1710): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4, 0x0, &(0x7f0000000640)=[@enter_looper], 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') socket(0xa, 0x1, 0x0) read(r6, &(0x7f0000001b00)=""/194, 0xc2) 6.791746091s ago: executing program 3 (id=1711): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x3, 0x0, 0x2, 0x21}, 0x7, 0x8, 0x0, 0x0, &(0x7f0000001540)="e8865f3ada67ab60994d5df139b659", 0x5}}) read$msr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.064428984s ago: executing program 0 (id=1712): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c0c001a80080001"], 0x20}}, 0x0) r1 = socket(0xa, 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = dup(r5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, 0x0) close(r1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) 6.063198653s ago: executing program 2 (id=1559): unshare(0x20000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="883909003859d63f6e3de70411000000ffffffffffff5600b800da58dd00007c1d01b7b7875f4767f4b533e6bd8859a2eb88a5ead25cdca950e8453e8fcefe44a8e0498aee41e1"], 0x47) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001700)=0x5945, 0x4) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000240)=""/127, 0x7f, 0x4001a021, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_80211_inject_frame(&(0x7f0000003080)=@broadcast, &(0x7f0000000100)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x1}, {}, @device_b, @broadcast}, @a_msdu}, 0x18) writev(r2, &(0x7f0000000400)=[{&(0x7f00000000c0)="67a818beb2125fc95e608a1b6b00a6c55851c030ce59945b", 0x18}, {&(0x7f0000000300)}, {0x0}], 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x2de, &(0x7f0000000440)={@remote, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "cb4a48", 0x2a8, 0xb6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x2c, 0x21, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0x0, 0xba, "341640e8fc0fd1068217f7bafda31c1d88bb0e50ed95cf447f07a6aa556efb29ef4d0bacc9a1934c72a307ab9d9a6004eac5676b9d3c83fb80234d1ef5e42b5e3f2c7fdc01bbe6acfafb5a96d250f73208aa346b1c2c5f05a09999d19c254f3b5739bccfabeff4ef3d5e08f36b4c2efbe7f2888fb4101c6690ab746281322b84bcffd78eb8afedcf5a8acfcf7d44bd714035aa652f93167d38b5f9799d328dcb967cc6a5db0443685a06de62b75b3cb26753f4fdeec29ef94d19"}, @generic={0x0, 0x47, "98e3504ed8ddbeb308bfa945bc3c269505c9fb2f9903d0b6201c48a5807eea3c36f3ce57d699e615a04f97eafd40d05a80e593cda4e84742bc295fc36fd2411ce79c5b31fc55cd"}]}, @routing={0x32, 0xe, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, @local, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3c, 0x10, 0x4, 0x8, 0x3, 0x40, 0x8, [@mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @mcast1]}, @srh={0x2b, 0x0, 0x4, 0x0, 0x1, 0x48, 0x9}, @srh={0x3a, 0xc, 0x4, 0x6, 0x4, 0x68, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private0, @remote, @empty]}, @srh={0x33, 0x2, 0x4, 0x1, 0x2, 0x20, 0xd17, [@private2]}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xb2}]}]}}}}}, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$usbip_server(0xffffffffffffffff, &(0x7f0000002680)=ANY=[@ANYBLOB="00000001"], 0x30) 4.763620495s ago: executing program 4 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r5, &(0x7f0000000240), &(0x7f0000000080)=@tcp, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r5, &(0x7f00000008c0)}, 0x20) sendto$inet(r4, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000300)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 4.697520706s ago: executing program 0 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000cab000)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x0, 0x110018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000004c0)={0x80}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x2, [{0xc8, 0xb}, {0xc9, 0xce5}]}}}, 0xc) mount$overlay(0x0, 0x0, 0x0, 0x1000000, 0x0) fanotify_init(0x40, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.842422814s ago: executing program 0 (id=1715): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000240)='system_u:object_r:var_lib_t:s0\x00', 0xffd7, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x15) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c90012000e000500141f0a00000000", @ANYRES16=r1, @ANYRES64], 0x17) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x2b, 0x1, 0x0) 2.493685825s ago: executing program 3 (id=1716): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000280)=[r7], &(0x7f00000002c0)}) shutdown(0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 27.666122ms ago: executing program 3 (id=1717): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="1e82", 0x2}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24044195}, 0x4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc888, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60) getsockopt$nfc_llcp(r3, 0x118, 0x4, &(0x7f0000000140)=""/192, 0x20000057) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x1611, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x2c}}, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x0, @multicast1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000300)='squashfs\x00', 0x0) syz_open_dev$sg(0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x73, 0x75, 0xd0, 0x8, 0xbda, 0x139, 0xb499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd0, 0x82, 0xf4}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): 0][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2250.824476][ T6326] bond0 (unregistering): Released all slaves [ 2250.898709][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2250.938014][ T5426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.946339][ T5426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2251.293348][T17346] team0: Port device team_slave_0 added [ 2251.310477][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2251.328768][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2251.474059][T17346] team0: Port device team_slave_1 added [ 2251.591480][T17348] bridge0: port 1(bridge_slave_0) entered blocking state [ 2251.633550][T17348] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.669166][T17348] bridge_slave_0: entered allmulticast mode [ 2251.690882][T17348] bridge_slave_0: entered promiscuous mode [ 2251.858082][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2252.542287][T17346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2252.549749][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2252.629030][T17346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2252.768315][T17348] bridge0: port 2(bridge_slave_1) entered blocking state [ 2252.837942][T17348] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.882527][T17348] bridge_slave_1: entered allmulticast mode [ 2252.930603][T17348] bridge_slave_1: entered promiscuous mode [ 2253.695205][T17346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2253.844563][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2253.974441][ T29] audit: type=1400 audit(1729325567.748:2211): avc: denied { getopt } for pid=17490 comm="syz.4.1420" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2254.119061][T17346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2254.241448][T17496] QAT: Device 253 not found [ 2254.260933][T17348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2254.483405][ T6326] hsr_slave_0: left promiscuous mode [ 2254.948364][ T6326] hsr_slave_1: left promiscuous mode [ 2255.003081][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2255.046860][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2255.077861][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2255.156671][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2255.348101][ T6326] veth1_macvtap: left promiscuous mode [ 2255.363574][ T6326] veth0_macvtap: left promiscuous mode [ 2255.377472][ T6326] veth1_vlan: left promiscuous mode [ 2255.392739][ T6326] veth0_vlan: left promiscuous mode [ 2257.039000][ T29] audit: type=1400 audit(1729325570.468:2212): avc: denied { map } for pid=17507 comm="syz.2.1422" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2257.062682][ C0] vkms_vblank_simulate: vblank timer overrun [ 2258.389726][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 2258.484719][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 2259.431934][T17348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2259.443881][T17346] hsr_slave_0: entered promiscuous mode [ 2259.482892][T17346] hsr_slave_1: entered promiscuous mode [ 2260.474137][T17348] team0: Port device team_slave_0 added [ 2260.525157][T17348] team0: Port device team_slave_1 added [ 2263.555605][T17348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2263.618942][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2263.667571][T17034] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2263.681485][T17348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.716094][T17034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2263.734937][T17034] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2263.746802][T17034] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2263.754718][T17034] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2263.762239][T17034] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2264.019491][T17348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2264.026456][T17348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2264.119018][T17348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2265.842963][T17034] Bluetooth: hci5: command tx timeout [ 2266.387923][T17348] hsr_slave_0: entered promiscuous mode [ 2266.405485][T17348] hsr_slave_1: entered promiscuous mode [ 2266.415361][T17348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2266.423542][T17348] Cannot create hsr debugfs directory [ 2266.857753][T17548] chnl_net:caif_netlink_parms(): no params data found [ 2266.953455][T17581] rdma_op ffff88802f5471f0 conn xmit_rdma 0000000000000000 [ 2267.655860][ T29] audit: type=1326 audit(1729325581.428:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.2.1432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee0cb7dff9 code=0x0 [ 2267.688114][ T6326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2267.941575][T17034] Bluetooth: hci5: command tx timeout [ 2268.762635][ T6326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.858093][ T6326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2269.979736][T17034] Bluetooth: hci5: command tx timeout [ 2270.049988][ T6326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2270.428563][T17616] loop6: detected capacity change from 0 to 524287999 [ 2270.513501][ T29] audit: type=1400 audit(1729325584.178:2214): avc: denied { read write } for pid=17611 comm="syz.4.1435" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2270.571053][ C1] blk_print_req_error: 7 callbacks suppressed [ 2270.571107][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.586493][ C1] buffer_io_error: 7 callbacks suppressed [ 2270.586515][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.611817][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.621043][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.635262][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.644534][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.659290][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.668493][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.682253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.691595][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.700848][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.710085][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.733885][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.743165][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.756750][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.765995][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.774166][T17616] ldm_validate_partition_table(): Disk read failed. [ 2270.785243][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.794515][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.930220][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2270.939522][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.949815][T17616] Dev loop6: unable to read RDB block 0 [ 2270.959318][T17616] loop6: unable to read partition table [ 2270.965075][T17616] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2271.000448][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.093324][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.101593][ T29] audit: type=1400 audit(1729325584.178:2215): avc: denied { open } for pid=17611 comm="syz.4.1435" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2271.101789][T17548] bridge_slave_0: entered allmulticast mode [ 2271.124758][ C1] vkms_vblank_simulate: vblank timer overrun [ 2271.152555][T17548] bridge_slave_0: entered promiscuous mode [ 2271.177243][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 2271.186580][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.194891][T17548] bridge_slave_1: entered allmulticast mode [ 2271.211926][T17548] bridge_slave_1: entered promiscuous mode [ 2271.277394][T17548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2271.381539][T17548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2271.607578][T17548] team0: Port device team_slave_0 added [ 2271.970029][T17548] team0: Port device team_slave_1 added [ 2272.059211][T17034] Bluetooth: hci5: command tx timeout [ 2272.168526][T17548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2272.199131][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2272.225086][ C1] vkms_vblank_simulate: vblank timer overrun [ 2272.335873][T17548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2272.387583][T17346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2272.514569][T17548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2272.522740][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2272.548665][ C1] vkms_vblank_simulate: vblank timer overrun [ 2272.603688][T17548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2272.615818][T17346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2272.775235][T17346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2272.818661][T17346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2272.890819][T17548] hsr_slave_0: entered promiscuous mode [ 2272.910609][T17548] hsr_slave_1: entered promiscuous mode [ 2272.931840][T17548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2272.950675][T17548] Cannot create hsr debugfs directory [ 2274.511798][T17673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2274.534268][ T29] audit: type=1400 audit(1729325588.308:2216): avc: denied { bind } for pid=17665 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2274.627357][T17676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2274.712084][ T6326] bridge_slave_1: left allmulticast mode [ 2274.759870][ T6326] bridge_slave_1: left promiscuous mode [ 2274.816262][ T29] audit: type=1400 audit(1729325588.438:2217): avc: denied { connect } for pid=17665 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2274.858427][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.022401][ T6326] bridge_slave_0: left allmulticast mode [ 2275.045793][T17679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2275.080713][ T6326] bridge_slave_0: left promiscuous mode [ 2275.115969][ T29] audit: type=1400 audit(1729325588.508:2218): avc: denied { write } for pid=17665 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2275.165207][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.266854][ T6326] bridge_slave_1: left allmulticast mode [ 2275.284614][ T6326] bridge_slave_1: left promiscuous mode [ 2275.296292][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.328233][ T6326] bridge_slave_0: left allmulticast mode [ 2275.344885][ T6326] bridge_slave_0: left promiscuous mode [ 2275.350892][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.525855][ T29] audit: type=1400 audit(1729325589.298:2219): avc: denied { getopt } for pid=17665 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2275.582842][T17685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2275.589413][T17685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2275.634964][T17685] vhci_hcd vhci_hcd.0: Device attached [ 2275.665070][T17688] vhci_hcd: unknown pdu 1 [ 2275.712076][T15152] vhci_hcd: stop threads [ 2275.729002][T15152] vhci_hcd: release socket [ 2275.733487][T15152] vhci_hcd: disconnect device [ 2275.764347][T17665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2276.579434][ T29] audit: type=1400 audit(1729325590.348:2220): avc: denied { mount } for pid=17686 comm="syz.4.1440" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2276.658174][ T29] audit: type=1400 audit(1729325590.428:2221): avc: denied { remount } for pid=17686 comm="syz.4.1440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2278.170273][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2278.182472][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2278.193040][ T6326] bond0 (unregistering): Released all slaves [ 2278.414079][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2278.427793][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2278.439008][ T6326] bond0 (unregistering): Released all slaves [ 2278.750488][T17346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2279.591939][T17346] 8021q: adding VLAN 0 to HW filter on device team0 [ 2279.812964][ T6326] hsr_slave_0: left promiscuous mode [ 2279.979298][ T6326] hsr_slave_1: left promiscuous mode [ 2279.995670][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2280.038285][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2280.114239][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2280.129019][ T29] audit: type=1400 audit(1729325593.888:2222): avc: denied { unmount } for pid=17112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2280.157449][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2280.219671][ T6326] hsr_slave_0: left promiscuous mode [ 2280.244573][ T6326] hsr_slave_1: left promiscuous mode [ 2280.305955][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2280.329765][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2280.392977][ T6326] veth1_macvtap: left promiscuous mode [ 2280.401249][ T29] audit: type=1400 audit(1729325594.168:2223): avc: denied { map } for pid=17720 comm="syz.4.1443" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2280.430864][ T6326] veth0_macvtap: left promiscuous mode [ 2280.445976][ T6326] veth1_vlan: left promiscuous mode [ 2280.451468][ T6326] veth0_vlan: left promiscuous mode [ 2280.527307][ T6326] veth1_macvtap: left promiscuous mode [ 2280.534405][ T6326] veth0_macvtap: left promiscuous mode [ 2280.540317][ T6326] veth1_vlan: left promiscuous mode [ 2280.545682][ T6326] veth0_vlan: left promiscuous mode [ 2280.610703][T17725] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1443'. [ 2280.729061][T15151] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 2280.936325][T15151] usb 3-1: config 4 has an invalid descriptor of length 74, skipping remainder of the config [ 2280.976786][T15151] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 2281.060393][T15151] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2281.087399][T15151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2281.095595][T15151] usb 3-1: Product: syz [ 2281.110905][T15151] usb 3-1: Manufacturer: syz [ 2281.130830][T15151] usb 3-1: SerialNumber: syz [ 2282.530349][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 2282.626501][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 2282.933355][T12585] usb 3-1: USB disconnect, device number 12 [ 2283.507043][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.778238][T17732] netlink: 'syz.2.1445': attribute type 3 has an invalid length. [ 2285.586232][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 2285.693167][T17741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2285.809321][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 2287.803027][T17749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 2287.846575][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.853778][ T5407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.907159][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.914397][ T5407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.247106][T17348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2289.620480][T17348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2289.694220][ T29] audit: type=1400 audit(1729325603.468:2224): avc: denied { setopt } for pid=17773 comm="syz.4.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2289.697566][T17348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2290.234638][T17348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2290.755273][T17346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2290.977488][T17346] veth0_vlan: entered promiscuous mode [ 2291.030559][T17346] veth1_vlan: entered promiscuous mode [ 2291.067753][ T29] audit: type=1400 audit(1729325604.838:2225): avc: denied { getopt } for pid=17788 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2291.126747][ T6326] bridge_slave_1: left allmulticast mode [ 2291.136704][ T6326] bridge_slave_1: left promiscuous mode [ 2291.143908][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.163025][ T6326] bridge_slave_0: left allmulticast mode [ 2291.168909][ T6326] bridge_slave_0: left promiscuous mode [ 2291.176518][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.805925][ T29] audit: type=1400 audit(1729325606.568:2226): avc: denied { setopt } for pid=17799 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2293.134707][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2293.154033][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2293.167511][ T6326] bond0 (unregistering): Released all slaves [ 2293.440317][ T29] audit: type=1400 audit(1729325607.218:2227): avc: denied { listen } for pid=17799 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2293.567794][T17548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2293.615772][T17548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2293.642834][T17548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2293.890941][T17346] veth0_macvtap: entered promiscuous mode [ 2293.917399][T17548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2294.007651][T17348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2294.025271][T17348] 8021q: adding VLAN 0 to HW filter on device team0 [ 2294.060203][T17348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2294.070744][T17348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2294.090572][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 2294.097780][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2294.107393][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2294.114570][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2294.391667][ T29] audit: type=1400 audit(1729325608.118:2228): avc: denied { ioctl } for pid=17804 comm="syz.4.1456" path="/dev/rtc0" dev="devtmpfs" ino=836 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2295.068985][ T6326] hsr_slave_0: left promiscuous mode [ 2295.131422][ T6326] hsr_slave_1: left promiscuous mode [ 2295.299381][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2295.306886][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2296.142456][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2296.168996][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2296.228716][ T6326] veth1_macvtap: left promiscuous mode [ 2296.234485][ T6326] veth0_macvtap: left promiscuous mode [ 2296.246491][ T6326] veth1_vlan: left promiscuous mode [ 2296.252587][ T6326] veth0_vlan: left promiscuous mode [ 2298.263440][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 2298.399892][T12374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2298.411656][T12374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2298.429157][T12374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2298.443004][T12374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2298.453284][T12374] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2298.460935][T12374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2298.490642][ T6326] team0 (unregistering): Port device team_slave_0 removed [ 2298.905094][T17836] Device name cannot be null; rc = [-22] [ 2299.836338][T17034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2299.851432][T17034] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2299.861276][T17034] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2299.872286][T17034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2299.888404][T17034] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2299.896339][T17034] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2300.017726][T17843] binder: 17838:17843 ioctl c0306201 20000680 returned -14 [ 2300.550347][T17034] Bluetooth: hci0: command tx timeout [ 2301.980747][T17034] Bluetooth: hci1: command tx timeout [ 2302.410833][T17849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2302.628247][T17034] Bluetooth: hci0: command tx timeout [ 2303.087948][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2303.368012][T17871] netlink: 'syz.4.1464': attribute type 12 has an invalid length. [ 2303.497492][ T29] audit: type=1400 audit(1729325617.208:2229): avc: denied { ioctl } for pid=17868 comm="syz.2.1471" path="socket:[106251]" dev="sockfs" ino=106251 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2303.866499][ T29] audit: type=1400 audit(1729325617.208:2230): avc: denied { accept } for pid=17868 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2303.932482][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 2304.010638][T17831] chnl_net:caif_netlink_parms(): no params data found [ 2304.039060][ T29] audit: type=1400 audit(1729325617.718:2231): avc: denied { recv } for pid=17868 comm="syz.2.1471" saddr=10.128.0.169 src=30006 daddr=10.128.0.145 dest=33474 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2304.075412][T17034] Bluetooth: hci1: command tx timeout [ 2304.450743][T17840] chnl_net:caif_netlink_parms(): no params data found [ 2304.547389][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 2304.554628][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2304.700996][T17034] Bluetooth: hci0: command tx timeout [ 2304.918402][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.925622][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2305.148428][ T29] audit: type=1400 audit(1729325618.918:2232): avc: denied { egress } for pid=15147 comm="kworker/u8:9" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2305.173953][ T29] audit: type=1400 audit(1729325618.918:2233): avc: denied { sendto } for pid=15147 comm="kworker/u8:9" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2306.202805][T17034] Bluetooth: hci1: command tx timeout [ 2306.308634][T17831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2306.316131][T17831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.325409][T17831] bridge_slave_0: entered allmulticast mode [ 2306.336254][T17831] bridge_slave_0: entered promiscuous mode [ 2306.467213][T17548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2306.537570][T17840] bridge0: port 1(bridge_slave_0) entered blocking state [ 2306.548151][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.566919][T17840] bridge_slave_0: entered allmulticast mode [ 2306.591559][T17840] bridge_slave_0: entered promiscuous mode [ 2306.626778][T17831] bridge0: port 2(bridge_slave_1) entered blocking state [ 2306.651796][T17831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.665086][T17831] bridge_slave_1: entered allmulticast mode [ 2306.688502][T17831] bridge_slave_1: entered promiscuous mode [ 2306.737107][T17840] bridge0: port 2(bridge_slave_1) entered blocking state [ 2306.746875][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.763417][T17840] bridge_slave_1: entered allmulticast mode [ 2306.779182][T12374] Bluetooth: hci0: command tx timeout [ 2306.797006][T17840] bridge_slave_1: entered promiscuous mode [ 2307.024368][T17831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2307.101772][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2307.114839][T17831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2307.157551][T17916] team_slave_0: entered promiscuous mode [ 2307.164304][T17916] team_slave_1: entered promiscuous mode [ 2307.175424][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2307.220845][T17831] team0: Port device team_slave_0 added [ 2307.304106][T17831] team0: Port device team_slave_1 added [ 2307.488078][T17840] team0: Port device team_slave_0 added [ 2307.502776][T17840] team0: Port device team_slave_1 added [ 2307.524553][T17924] binder: BINDER_SET_CONTEXT_MGR already set [ 2307.543858][T17924] binder: 17923:17924 ioctl 4018620d 20000100 returned -16 [ 2307.668968][ T5271] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2307.821378][T17929] binder: BINDER_SET_CONTEXT_MGR already set [ 2307.827482][T17929] binder: 17923:17929 ioctl 4018620d 200002c0 returned -16 [ 2308.423478][T12374] Bluetooth: hci1: command tx timeout [ 2308.602691][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2308.619188][ T5271] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2308.626913][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2308.636796][ T5271] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 2308.638798][T17935] binder: BINDER_SET_CONTEXT_MGR already set [ 2308.652472][ T5271] usb 3-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 2308.663505][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.672110][ T5271] usb 3-1: Product: syz [ 2308.676404][ T5271] usb 3-1: Manufacturer: syz [ 2308.687852][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2308.697329][ T5271] usb 3-1: SerialNumber: syz [ 2308.737491][T17935] binder: 17933:17935 ioctl 4018620d 20000100 returned -16 [ 2308.741536][ T5271] usb 3-1: config 0 descriptor?? [ 2308.788434][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2308.834903][T17548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2308.925901][T17831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2308.950754][T17831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2308.986905][ T5271] pl2303 3-1:0.0: required endpoints missing [ 2309.026796][T17831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2309.096681][T17941] binder: BINDER_SET_CONTEXT_MGR already set [ 2309.103594][T17941] binder: 17933:17941 ioctl 4018620d 200002c0 returned -16 [ 2309.588396][T17916] netlink: 'syz.2.1468': attribute type 10 has an invalid length. [ 2309.616652][T17944] 9pnet_virtio: no channels available for device syz [ 2309.659366][T17916] team_slave_0: left promiscuous mode [ 2309.668057][T17916] team_slave_1: left promiscuous mode [ 2309.675510][ T29] audit: type=1400 audit(1729325623.438:2234): avc: denied { open } for pid=17943 comm="syz.4.1472" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2309.758085][T17916] team_slave_0: entered promiscuous mode [ 2309.763950][T17916] team_slave_1: entered promiscuous mode [ 2309.792892][T17916] 8021q: adding VLAN 0 to HW filter on device team0 [ 2309.814399][T17916] bond0: (slave team0): Enslaving as an active interface with an up link [ 2309.885618][ T6324] usb 3-1: USB disconnect, device number 13 [ 2309.922748][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.930451][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.958176][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2309.975634][T17831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.982995][T17831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.010810][T17831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.030710][T17948] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 2310.102297][T17913] team_slave_0: left promiscuous mode [ 2310.108485][T17913] team_slave_1: left promiscuous mode [ 2310.213456][T17840] hsr_slave_0: entered promiscuous mode [ 2310.220466][T17840] hsr_slave_1: entered promiscuous mode [ 2310.227184][T17840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.249119][T17840] Cannot create hsr debugfs directory [ 2310.283591][T17831] hsr_slave_0: entered promiscuous mode [ 2310.300921][T17831] hsr_slave_1: entered promiscuous mode [ 2310.313489][T17831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.325498][T17831] Cannot create hsr debugfs directory [ 2310.503810][T17548] veth0_vlan: entered promiscuous mode [ 2310.580467][T17548] veth1_vlan: entered promiscuous mode [ 2310.699472][ T29] audit: type=1400 audit(1729325624.468:2235): avc: denied { bind } for pid=17962 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2310.760308][ T29] audit: type=1400 audit(1729325624.468:2236): avc: denied { connect } for pid=17962 comm="syz.4.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2310.967763][ T2880] bridge_slave_1: left allmulticast mode [ 2310.984497][ T2880] bridge_slave_1: left promiscuous mode [ 2310.995615][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2311.025044][ T2880] bridge_slave_0: left allmulticast mode [ 2311.031025][ T2880] bridge_slave_0: left promiscuous mode [ 2311.036762][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2311.046981][ T2880] bridge_slave_1: left allmulticast mode [ 2311.053128][ T2880] bridge_slave_1: left promiscuous mode [ 2311.059410][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2311.068101][ T2880] bridge_slave_0: left allmulticast mode [ 2311.079685][ T2880] bridge_slave_0: left promiscuous mode [ 2311.086081][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2311.768272][ T6324] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 2312.080968][ T6324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2312.092139][ T6324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2312.103433][ T6324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2312.114729][ T6324] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2312.148536][ T6324] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2312.160417][ T6324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2312.247822][ T6324] usb 5-1: SerialNumber: syz [ 2312.730892][T17963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2312.738262][T17963] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2312.796553][ T6324] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2313.016719][T17963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2313.031087][T17963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2313.049119][ T6324] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 2313.062434][ T6324] usb 5-1: USB disconnect, device number 8 [ 2313.619426][ T2880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2313.632862][ T2880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2313.644609][ T2880] bond0 (unregistering): Released all slaves [ 2314.029237][ T29] audit: type=1400 audit(1729325627.698:2237): avc: denied { mount } for pid=17977 comm="syz.4.1477" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2314.471286][T17984] binder: 17982:17984 ioctl c0306201 20000680 returned -14 [ 2314.638038][ T2880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2314.659855][ T2880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2314.685452][ T2880] bond0 (unregistering): Released all slaves [ 2314.956725][ T29] audit: type=1400 audit(1729325628.728:2238): avc: denied { unmount } for pid=17112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2315.046447][T17986] binder: BINDER_SET_CONTEXT_MGR already set [ 2315.052980][T17986] binder: 17985:17986 ioctl 4018620d 20000100 returned -16 [ 2315.281891][T17548] veth0_macvtap: entered promiscuous mode [ 2315.301842][T17548] veth1_macvtap: entered promiscuous mode [ 2315.374442][T17990] binder: BINDER_SET_CONTEXT_MGR already set [ 2315.380759][T17990] binder: 17985:17990 ioctl 4018620d 200002c0 returned -16 [ 2315.679413][ T2880] hsr_slave_0: left promiscuous mode [ 2315.715983][ T2880] hsr_slave_1: left promiscuous mode [ 2315.792177][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2315.889869][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2315.941570][ T2880] hsr_slave_0: left promiscuous mode [ 2315.949967][ T2880] hsr_slave_1: left promiscuous mode [ 2315.969833][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2316.009064][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2316.082626][ T2880] veth0_macvtap: left promiscuous mode [ 2316.088215][ T2880] veth1_vlan: left promiscuous mode [ 2316.094013][ T2880] veth0_vlan: left promiscuous mode [ 2316.206628][T17998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2317.227330][ T2880] team0 (unregistering): Port device team_slave_1 removed [ 2317.327415][ T2880] team0 (unregistering): Port device team_slave_0 removed [ 2317.716339][ T29] audit: type=1400 audit(1729325631.388:2239): avc: denied { setopt } for pid=18002 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2317.954151][ T29] audit: type=1400 audit(1729325631.468:2240): avc: denied { bind } for pid=18002 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2320.458920][ T29] audit: type=1400 audit(1729325634.088:2241): avc: denied { read } for pid=18018 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2321.242989][T17034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2321.265399][T17034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2321.283237][T17034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2321.297710][T17034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2321.314160][T17034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2321.337648][T17034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2321.375129][T18027] binder: 18023:18027 ioctl c0306201 20000680 returned -14 [ 2321.552838][ T2880] team0 (unregistering): Port device team_slave_1 removed [ 2321.633333][ T2880] team0 (unregistering): Port device team_slave_0 removed [ 2322.186724][T18031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2323.333872][T18035] binder_alloc: 18032: binder_alloc_buf, no vma [ 2323.432726][T17034] Bluetooth: hci3: command tx timeout [ 2325.322700][T18025] chnl_net:caif_netlink_parms(): no params data found [ 2325.623415][T17034] Bluetooth: hci3: command tx timeout [ 2326.414223][ T29] audit: type=1400 audit(1729325639.748:2242): avc: denied { setopt } for pid=18055 comm="syz.2.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2327.668074][T17034] Bluetooth: hci3: command tx timeout [ 2327.803277][T17831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2327.887208][T18074] ubi: mtd0 is already attached to ubi0 [ 2327.927377][ T29] audit: type=1400 audit(1729325641.678:2243): avc: denied { getopt } for pid=18070 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2328.429679][T17831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2329.032769][T17831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2329.056042][T17831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2329.235902][T18025] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.273818][T18025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2329.282381][T18025] bridge_slave_0: entered allmulticast mode [ 2329.305253][T18025] bridge_slave_0: entered promiscuous mode [ 2329.322411][T18025] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.340725][T18025] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.348116][T18025] bridge_slave_1: entered allmulticast mode [ 2329.369814][T18025] bridge_slave_1: entered promiscuous mode [ 2329.769014][T10000] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2329.797920][T12374] Bluetooth: hci3: command tx timeout [ 2329.960461][T10000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2330.032613][T10000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.076079][T10000] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2330.085441][T10000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.120500][T10000] usb 3-1: config 0 descriptor?? [ 2330.144233][T18025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2330.325675][ T29] audit: type=1400 audit(1729325644.098:2244): avc: denied { create } for pid=18097 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2330.357685][T18025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2330.372224][ T29] audit: type=1400 audit(1729325644.148:2245): avc: denied { write } for pid=18097 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2330.625634][ T29] audit: type=1400 audit(1729325644.318:2246): avc: denied { view } for pid=18097 comm="syz.4.1497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2331.061222][T18025] team0: Port device team_slave_0 added [ 2331.120329][T18025] team0: Port device team_slave_1 added [ 2331.155851][T10000] usb 3-1: string descriptor 0 read error: -71 [ 2331.172297][T10000] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 2331.187272][T10000] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 2331.198059][T18025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2331.212215][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2331.239130][T10000] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 2331.247344][T10000] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 2331.256114][T10000] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 2331.265055][T18025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2331.285684][T18025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2331.301722][T18025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2331.310425][T10000] usb 3-1: USB disconnect, device number 14 [ 2331.328321][T18025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2331.555100][T18025] hsr_slave_0: entered promiscuous mode [ 2331.568706][T18025] hsr_slave_1: entered promiscuous mode [ 2331.629070][T17840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2331.640041][T17840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2331.675709][T12374] Bluetooth: hci7: command 0x0406 tx timeout [ 2331.782866][T17840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2331.803606][T17840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2331.941257][T17831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2332.161948][T17831] 8021q: adding VLAN 0 to HW filter on device team0 [ 2332.217933][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.225077][T15147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2332.250010][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.257123][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2332.453913][T17840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2332.537547][ T2880] bridge_slave_1: left allmulticast mode [ 2332.545047][ T2880] bridge_slave_1: left promiscuous mode [ 2332.559446][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.568465][ T2880] bridge_slave_0: left allmulticast mode [ 2332.576303][ T2880] bridge_slave_0: left promiscuous mode [ 2332.582439][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2333.216386][ T2880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2333.227250][ T2880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2333.238118][ T2880] bond0 (unregistering): Released all slaves [ 2333.407700][ T2880] hsr_slave_0: left promiscuous mode [ 2333.418384][ T2880] hsr_slave_1: left promiscuous mode [ 2333.428029][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2333.436556][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2333.456559][ T2880] veth1_macvtap: left promiscuous mode [ 2333.462202][ T2880] veth0_macvtap: left promiscuous mode [ 2333.467747][ T2880] veth1_vlan: left promiscuous mode [ 2333.473876][ T2880] veth0_vlan: left promiscuous mode [ 2334.036733][ T2880] team0 (unregistering): Port device team_slave_1 removed [ 2334.114095][ T2880] team0 (unregistering): Port device team_slave_0 removed [ 2334.864709][T17840] 8021q: adding VLAN 0 to HW filter on device team0 [ 2334.889476][T17831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2334.926119][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 2334.933274][ T5414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2334.969853][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 2334.977004][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2335.136709][T17840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2335.321373][T18025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2335.363463][T18025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2335.392856][T17831] veth0_vlan: entered promiscuous mode [ 2335.410695][T18025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2335.451331][T17831] veth1_vlan: entered promiscuous mode [ 2335.457646][T18025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2335.548126][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2335.567288][T17831] veth0_macvtap: entered promiscuous mode [ 2335.588148][T17831] veth1_macvtap: entered promiscuous mode [ 2335.667486][T17831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2335.681823][T17831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.692968][T17831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2335.703522][T17831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.714572][T17831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2335.727365][T17831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2335.738441][T17831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.748916][T17831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2335.760102][T17831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2335.771068][T17831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2335.786240][T18025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2335.814740][T17840] veth0_vlan: entered promiscuous mode [ 2335.830272][T17831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.840467][T17831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.849959][T17831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.858676][T17831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2335.886145][T18025] 8021q: adding VLAN 0 to HW filter on device team0 [ 2335.895837][T17840] veth1_vlan: entered promiscuous mode [ 2335.925109][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 2335.932264][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2335.958116][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2335.965249][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2336.056205][T17840] veth0_macvtap: entered promiscuous mode [ 2336.077353][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2336.088064][T17840] veth1_macvtap: entered promiscuous mode [ 2336.102362][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2336.164759][ T2880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2336.176253][T17840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.187160][ T2880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2336.195347][T17840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.207128][T17840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.218230][T17840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.228935][T17840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.241225][T17840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.252646][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2336.291372][T17840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2336.320636][T17840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.358991][T17840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2336.384856][T17840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.402799][T17840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2336.414980][T17840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.426733][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2336.438620][T17840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.450478][T17840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.459924][T17840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.469010][T17840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.670584][T18025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2337.534152][ T5426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2337.544339][ T5426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2337.592610][T18025] veth0_vlan: entered promiscuous mode [ 2337.642098][ T5381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2337.657284][ T5381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2337.695658][T18025] veth1_vlan: entered promiscuous mode [ 2337.853368][T18025] veth0_macvtap: entered promiscuous mode [ 2338.154996][T18025] veth1_macvtap: entered promiscuous mode [ 2338.436344][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2338.475836][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.523462][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2338.555941][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.593299][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2338.618118][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.659291][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2338.679577][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.712931][T18025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2338.805739][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2338.819090][T10000] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2338.844505][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.861108][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2338.871970][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.882122][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2338.893021][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.934674][T18025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2338.958351][T18025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2338.985532][T18025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2339.004476][T10000] usb 1-1: Using ep0 maxpacket: 32 [ 2339.033437][T10000] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 314 [ 2339.047091][T10000] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2339.051493][T18025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2339.065317][T10000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2339.073771][T18025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2339.083289][T18025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2339.090446][T10000] usb 1-1: Product: syz [ 2339.106778][T18025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2339.112153][T10000] usb 1-1: Manufacturer: syz [ 2339.128957][T10000] usb 1-1: SerialNumber: syz [ 2339.151618][T18187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2339.314536][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2339.357068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2339.447896][ T5426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2339.476326][ T5426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2339.653694][T10000] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2339.879049][ T29] audit: type=1400 audit(1729325653.638:2247): avc: denied { read write } for pid=18182 comm="syz.0.1402" name="lp0" dev="devtmpfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2340.457949][T18197] netlink: 'syz.1.1426': attribute type 13 has an invalid length. [ 2340.662280][ T29] audit: type=1400 audit(1729325653.638:2248): avc: denied { open } for pid=18182 comm="syz.0.1402" path="/dev/usb/lp0" dev="devtmpfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 2341.289290][T12374] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2341.313074][T12374] CPU: 0 UID: 0 PID: 12374 Comm: kworker/u9:2 Not tainted 6.12.0-rc3-syzkaller-00389-g3d5ad2d4eca3 #0 [ 2341.324090][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2341.334190][T12374] Workqueue: hci2 hci_rx_work [ 2341.338927][T12374] Call Trace: [ 2341.342245][T12374] [ 2341.345216][T12374] dump_stack_lvl+0x16c/0x1f0 [ 2341.349961][T12374] sysfs_warn_dup+0x7f/0xa0 [ 2341.354522][T12374] sysfs_create_dir_ns+0x24d/0x2b0 [ 2341.359682][T12374] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2341.365365][T12374] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2341.370803][T12374] ? kobject_add_internal+0x12d/0x990 [ 2341.376236][T12374] ? do_raw_spin_unlock+0x172/0x230 [ 2341.381487][T12374] kobject_add_internal+0x2c8/0x990 [ 2341.386740][T12374] kobject_add+0x16f/0x240 [ 2341.391202][T12374] ? __pfx_kobject_add+0x10/0x10 [ 2341.396189][T12374] ? class_to_subsys+0x3e/0x160 [ 2341.401099][T12374] ? do_raw_spin_unlock+0x172/0x230 [ 2341.406348][T12374] ? kobject_put+0xab/0x5a0 [ 2341.410913][T12374] device_add+0x289/0x1a70 [ 2341.415372][T12374] ? __pfx_dev_set_name+0x10/0x10 [ 2341.420429][T12374] ? __pfx_device_add+0x10/0x10 [ 2341.425307][T12374] ? mgmt_send_event_skb+0x2f2/0x460 [ 2341.430622][T12374] hci_conn_add_sysfs+0x17e/0x230 [ 2341.435669][T12374] le_conn_complete_evt+0x1078/0x1d80 [ 2341.441063][T12374] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2341.446798][T12374] ? trace_contention_end+0xea/0x140 [ 2341.452111][T12374] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 2341.458023][T12374] ? skb_pull_data+0x166/0x210 [ 2341.462820][T12374] hci_le_meta_evt+0x2e2/0x5d0 [ 2341.467602][T12374] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2341.474039][T12374] hci_event_packet+0x666/0x1180 [ 2341.479001][T12374] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2341.484307][T12374] ? __pfx_hci_event_packet+0x10/0x10 [ 2341.489692][T12374] ? mark_held_locks+0x9f/0xe0 [ 2341.494477][T12374] ? kcov_remote_start+0x3cf/0x6e0 [ 2341.499614][T12374] ? lockdep_hardirqs_on+0x7c/0x110 [ 2341.504841][T12374] hci_rx_work+0x2c6/0x16c0 [ 2341.509367][T12374] ? lock_acquire+0x2f/0xb0 [ 2341.513894][T12374] ? process_one_work+0x921/0x1ba0 [ 2341.519023][T12374] process_one_work+0x9c5/0x1ba0 [ 2341.523997][T12374] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2341.529644][T12374] ? __pfx_process_one_work+0x10/0x10 [ 2341.535037][T12374] ? assign_work+0x1a0/0x250 [ 2341.539651][T12374] worker_thread+0x6c8/0xf00 [ 2341.545225][T12374] ? __pfx_worker_thread+0x10/0x10 [ 2341.550345][T12374] kthread+0x2c1/0x3a0 [ 2341.554427][T12374] ? _raw_spin_unlock_irq+0x23/0x50 [ 2341.559648][T12374] ? __pfx_kthread+0x10/0x10 [ 2341.564254][T12374] ret_from_fork+0x45/0x80 [ 2341.568688][T12374] ? __pfx_kthread+0x10/0x10 [ 2341.573297][T12374] ret_from_fork_asm+0x1a/0x30 [ 2341.578097][T12374] [ 2341.625849][T12374] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2341.648942][T12374] Bluetooth: hci2: failed to register connection device [ 2341.923180][T12374] Bluetooth: hci2: command 0x0406 tx timeout [ 2341.929280][T14791] usb 1-1: USB disconnect, device number 12 [ 2341.936212][T14791] usblp0: removed [ 2343.982863][T17034] Bluetooth: hci2: command 0x0406 tx timeout [ 2344.658218][T18225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2345.312075][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.479822][ T29] audit: type=1400 audit(1729325659.228:2249): avc: denied { read } for pid=18223 comm="syz.3.1505" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2345.504539][ T29] audit: type=1400 audit(1729325659.228:2250): avc: denied { open } for pid=18223 comm="syz.3.1505" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2345.533405][ T29] audit: type=1400 audit(1729325659.238:2251): avc: denied { ioctl } for pid=18223 comm="syz.3.1505" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2346.276452][ T6324] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2347.039020][ T6324] usb 4-1: Using ep0 maxpacket: 8 [ 2347.069384][ T6324] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2347.106006][ T6324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2347.136448][ T6324] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2347.177604][ T6324] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2347.212628][ T6324] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2347.238324][ T6324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.305699][ T6324] usb 4-1: GET_CAPABILITIES returned 0 [ 2348.324532][ T6324] usbtmc 4-1:16.0: can't read capabilities [ 2348.562659][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 2349.855272][T18259] xt_nfacct: accounting object `syz1' does not exists [ 2349.869192][T18259] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2350.855742][T18253] loop6: detected capacity change from 0 to 524287999 [ 2350.889598][ C0] blk_print_req_error: 7 callbacks suppressed [ 2350.889629][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.904949][ C0] buffer_io_error: 7 callbacks suppressed [ 2350.904972][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2350.926871][T18265] binder: 18260:18265 ioctl c0306201 20000680 returned -14 [ 2350.939783][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.949232][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2350.957553][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.966880][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2350.975523][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.984816][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.226670][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.235941][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.248594][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.257840][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.276298][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.285556][T14791] usb 4-1: USB disconnect, device number 14 [ 2351.291693][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.304857][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.314134][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.322217][T18253] ldm_validate_partition_table(): Disk read failed. [ 2351.335254][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.344522][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.356929][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.366208][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 2351.381838][T18253] Dev loop6: unable to read RDB block 0 [ 2351.405131][T18253] loop6: unable to read partition table [ 2351.411658][T18253] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 2352.593592][T17034] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2352.605464][T17034] Bluetooth: hci2: Injecting HCI hardware error event [ 2352.634543][T17034] Bluetooth: hci2: hardware error 0x00 [ 2353.670401][ T29] audit: type=1400 audit(1729325666.678:2252): avc: denied { bind } for pid=18275 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2354.055850][T18294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2354.186853][T18295] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2354.506525][ T29] audit: type=1400 audit(1729325668.268:2253): avc: denied { read write } for pid=18298 comm="syz.4.1530" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2354.626935][ T29] audit: type=1400 audit(1729325668.268:2254): avc: denied { open } for pid=18298 comm="syz.4.1530" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2355.014156][ T29] audit: type=1400 audit(1729325668.278:2255): avc: denied { ioctl } for pid=18298 comm="syz.4.1530" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2355.079107][ T29] audit: type=1400 audit(1729325668.318:2256): avc: denied { setopt } for pid=18276 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2355.109237][ T29] audit: type=1400 audit(1729325668.348:2257): avc: denied { read } for pid=18298 comm="syz.4.1530" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2355.132784][ T29] audit: type=1400 audit(1729325668.348:2258): avc: denied { open } for pid=18298 comm="syz.4.1530" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2355.156774][ T29] audit: type=1400 audit(1729325668.398:2259): avc: denied { ioctl } for pid=18276 comm="syz.2.1525" path="socket:[109770]" dev="sockfs" ino=109770 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2355.184490][ T29] audit: type=1400 audit(1729325668.438:2260): avc: denied { ioctl } for pid=18298 comm="syz.4.1530" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2355.210761][ T29] audit: type=1400 audit(1729325668.448:2261): avc: denied { setopt } for pid=18308 comm="syz.0.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2356.655680][T17034] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2357.005849][T18333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2357.066041][T18334] binder: 18329:18334 ioctl c0306201 20000680 returned -14 [ 2359.610461][T18348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2360.109276][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2360.109296][ T29] audit: type=1400 audit(1729325673.828:2263): avc: denied { map } for pid=18353 comm="syz.1.1544" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2360.154408][ T29] audit: type=1400 audit(1729325673.828:2264): avc: denied { execute } for pid=18353 comm="syz.1.1544" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2361.534818][ T29] audit: type=1400 audit(1729325675.278:2265): avc: denied { ioctl } for pid=18353 comm="syz.1.1544" path="/dev/nullb0" dev="devtmpfs" ino=680 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2361.818956][ T29] audit: type=1400 audit(1729325675.288:2266): avc: denied { connect } for pid=18351 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2361.978735][ T29] audit: type=1400 audit(1729325675.748:2267): avc: denied { setopt } for pid=18353 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2362.674236][ T29] audit: type=1400 audit(1729325675.858:2268): avc: denied { bind } for pid=18370 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2365.939220][T18384] binder: 18382:18384 ioctl c0306201 20000680 returned -14 [ 2368.082614][T18397] binder: 18395:18397 ioctl c0306201 20000680 returned -14 [ 2371.154746][ T29] audit: type=1400 audit(1729325683.118:2269): avc: denied { link } for pid=18403 comm="syz.3.1555" name="#2c" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2371.599134][ T29] audit: type=1400 audit(1729325683.118:2270): avc: denied { rename } for pid=18403 comm="syz.3.1555" name="#2d" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2374.707356][T12375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2374.727768][T12375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2374.737141][T12375] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2374.776545][T12375] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2374.787578][T12378] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2374.803173][T12378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2374.816839][T12375] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2374.840739][T12375] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2374.851405][T12375] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2374.858853][T12375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2374.893307][T18441] binder: 18432:18441 ioctl c0306201 20000680 returned -14 [ 2374.935405][T12375] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2374.950998][T12375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2375.208098][T15143] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2376.140591][T15143] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2376.161367][T15143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2376.177988][T15143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.079141][T12375] Bluetooth: hci4: command tx timeout [ 2377.086579][T12375] Bluetooth: hci5: command tx timeout [ 2377.094011][T15143] usb 5-1: Product: syz [ 2377.119116][T15143] usb 5-1: Manufacturer: syz [ 2377.123778][T15143] usb 5-1: SerialNumber: syz [ 2377.139254][T15143] usb 5-1: can't set config #1, error -71 [ 2377.148629][T15143] usb 5-1: USB disconnect, device number 9 [ 2378.069169][ T5381] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.117626][T12375] Bluetooth: hci4: command tx timeout [ 2379.179356][T12375] Bluetooth: hci5: command tx timeout [ 2379.202430][ T5381] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.797748][T18434] chnl_net:caif_netlink_parms(): no params data found [ 2380.244889][ T5381] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.543549][T18482] binder: BINDER_SET_CONTEXT_MGR already set [ 2381.021908][T18482] binder: 18481:18482 ioctl 4018620d 20000100 returned -16 [ 2381.179026][T12375] Bluetooth: hci4: command tx timeout [ 2381.227229][T18482] binder: BINDER_SET_CONTEXT_MGR already set [ 2381.233297][T18482] binder: 18481:18482 ioctl 4018620d 200002c0 returned -16 [ 2381.259594][T12375] Bluetooth: hci5: command tx timeout [ 2381.315428][ T5381] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2381.326250][T18493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2381.454538][T18431] chnl_net:caif_netlink_parms(): no params data found [ 2381.557199][T18499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2381.867175][T18434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2381.933932][T18434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2381.949677][T18434] bridge_slave_0: entered allmulticast mode [ 2381.985151][T18434] bridge_slave_0: entered promiscuous mode [ 2382.147896][T18434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2382.176557][T18434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.193616][T18434] bridge_slave_1: entered allmulticast mode [ 2382.206738][T18434] bridge_slave_1: entered promiscuous mode [ 2382.431736][T18508] binder: BINDER_SET_CONTEXT_MGR already set [ 2382.437818][T18508] binder: 18502:18508 ioctl 40046207 0 returned -16 [ 2383.269037][T12375] Bluetooth: hci4: command tx timeout [ 2383.298285][T18514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2383.347947][T12375] Bluetooth: hci5: command tx timeout [ 2383.393573][ T5381] bridge_slave_1: left allmulticast mode [ 2383.404320][ T5381] bridge_slave_1: left promiscuous mode [ 2383.414573][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2383.451815][ T5381] bridge_slave_0: left allmulticast mode [ 2383.457695][ T5381] bridge_slave_0: left promiscuous mode [ 2383.467797][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2383.479027][T18516] binder: 18512:18516 ioctl c0306201 20000680 returned -14 [ 2383.504115][T18518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2384.015247][T18524] overlayfs: overlapping lowerdir path [ 2384.033076][T18524] overlayfs: overlapping lowerdir path [ 2385.278541][T18531] vivid-007: disconnect [ 2385.704640][T18538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1581'. [ 2385.713806][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1581'. [ 2386.450580][T18527] vivid-007: reconnect [ 2386.578535][ T5381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2386.603038][ T5381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2386.620926][ T5381] bond0 (unregistering): (slave team0): Releasing backup interface [ 2386.643282][ T5381] bond0 (unregistering): Released all slaves [ 2386.694837][T18434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2386.740860][T18434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2386.849340][T18431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2386.857235][T18431] bridge0: port 1(bridge_slave_0) entered disabled state [ 2386.874719][T18431] bridge_slave_0: entered allmulticast mode [ 2386.887366][T18431] bridge_slave_0: entered promiscuous mode [ 2386.909072][T18540] bridge0: port 2(bridge_slave_1) entered disabled state [ 2386.918403][T18540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2386.948291][T18540] bridge0: port 2(bridge_slave_1) entered blocking state [ 2386.956462][T18540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2386.967331][T18540] bridge0: port 1(bridge_slave_0) entered blocking state [ 2386.974535][T18540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2387.131721][T18540] team0: Port device bridge0 added [ 2387.383321][T18553] binder: 18552:18553 ioctl c0306201 20000680 returned -14 [ 2387.819860][T18434] team0: Port device team_slave_0 added [ 2387.833015][T18564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2387.834872][T18434] team0: Port device team_slave_1 added [ 2387.851952][T18431] bridge0: port 2(bridge_slave_1) entered blocking state [ 2387.864669][T18431] bridge0: port 2(bridge_slave_1) entered disabled state [ 2388.579758][T18431] bridge_slave_1: entered allmulticast mode [ 2388.586881][T18431] bridge_slave_1: entered promiscuous mode [ 2389.913896][T18576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2390.359395][T18582] binder: 18578:18582 ioctl c0306201 20000680 returned -14 [ 2390.412312][T18431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2391.092118][T18434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2391.099553][T18434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.128281][T18434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2391.142865][T18434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2391.152542][T18434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.184071][T18590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2391.245120][T18434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2391.288426][T18431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2391.435551][T18590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2391.922537][T18431] team0: Port device team_slave_0 added [ 2391.995101][ T5381] hsr_slave_0: left promiscuous mode [ 2392.007437][ T5381] hsr_slave_1: left promiscuous mode [ 2392.018457][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2392.031355][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2392.046295][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2392.069282][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2392.097706][ T5381] veth1_macvtap: left promiscuous mode [ 2392.107630][ T5381] veth0_macvtap: left promiscuous mode [ 2392.115935][ T5381] veth1_vlan: left promiscuous mode [ 2392.121342][ T5381] veth0_vlan: left promiscuous mode [ 2392.369315][T14791] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2392.422556][T18599] xt_policy: output policy not valid in PREROUTING and INPUT [ 2392.575181][T14791] usb 4-1: Using ep0 maxpacket: 8 [ 2392.636696][T14791] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2392.771541][T14791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2392.875160][T14791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2392.976180][T14791] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2393.028623][T14791] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2393.066780][T14791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.107874][T18602] binder: BINDER_SET_CONTEXT_MGR already set [ 2393.114813][T18602] binder: 18601:18602 ioctl 4018620d 20000100 returned -16 [ 2393.456567][T18602] binder: BINDER_SET_CONTEXT_MGR already set [ 2393.462787][T18602] binder: 18601:18602 ioctl 4018620d 200002c0 returned -16 [ 2393.665130][T14791] usb 4-1: GET_CAPABILITIES returned 0 [ 2393.671996][T14791] usbtmc 4-1:16.0: can't read capabilities [ 2394.854978][ T29] audit: type=1400 audit(1729325708.628:2271): avc: denied { listen } for pid=18609 comm="syz.4.1595" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2394.886087][ T29] audit: type=1400 audit(1729325708.628:2272): avc: denied { connect } for pid=18609 comm="syz.4.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2394.914739][ T29] audit: type=1400 audit(1729325708.628:2273): avc: denied { name_connect } for pid=18609 comm="syz.4.1595" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 2394.955977][ T29] audit: type=1400 audit(1729325708.728:2274): avc: denied { accept } for pid=18609 comm="syz.4.1595" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2395.048344][ T29] audit: type=1400 audit(1729325708.818:2275): avc: denied { ioctl } for pid=18609 comm="syz.4.1595" path="socket:[111611]" dev="sockfs" ino=111611 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2395.487752][ T5381] team0 (unregistering): Port device team_slave_1 removed [ 2395.647246][ T5381] team0 (unregistering): Port device team_slave_0 removed [ 2396.412903][ T1174] usb 4-1: USB disconnect, device number 15 [ 2396.483226][T18618] binder: BINDER_SET_CONTEXT_MGR already set [ 2396.489706][T18618] binder: 18617:18618 ioctl 4018620d 20000100 returned -16 [ 2396.834123][T18624] binder: BINDER_SET_CONTEXT_MGR already set [ 2396.840379][T18624] binder: 18617:18624 ioctl 4018620d 200002c0 returned -16 [ 2398.303279][ T6324] IPVS: starting estimator thread 0... [ 2398.429005][T18629] IPVS: using max 22 ests per chain, 52800 per kthread [ 2398.658729][T18636] xt_hashlimit: size too large, truncated to 1048576 [ 2399.530914][T18633] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2400.166964][ T29] audit: type=1400 audit(1729325713.938:2276): avc: denied { execute } for pid=18641 comm="syz.3.1602" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2400.300284][T18642] openvswitch: netlink: Message has 4 unknown bytes. [ 2402.583819][ T5263] IPVS: starting estimator thread 0... [ 2402.744421][T18657] IPVS: using max 17 ests per chain, 40800 per kthread [ 2405.466658][T18674] binder: BINDER_SET_CONTEXT_MGR already set [ 2405.491567][T18674] binder: 18673:18674 ioctl 4018620d 20000100 returned -16 [ 2405.781013][T18677] binder: BINDER_SET_CONTEXT_MGR already set [ 2405.787086][T18677] binder: 18673:18677 ioctl 4018620d 200002c0 returned -16 [ 2406.484533][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.068195][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'. [ 2407.082283][T18690] binder: 18681:18690 ioctl c0306201 20000680 returned -14 [ 2407.179259][T18431] team0: Port device team_slave_1 added [ 2407.193401][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2407.206078][T18434] hsr_slave_0: entered promiscuous mode [ 2407.217076][T18434] hsr_slave_1: entered promiscuous mode [ 2407.223668][T18434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2407.231490][T18434] Cannot create hsr debugfs directory [ 2407.280511][T18431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2407.290952][T18431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.316862][ C1] vkms_vblank_simulate: vblank timer overrun [ 2407.326106][T18431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2407.353589][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2407.470222][T18431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2407.505091][T18431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2407.539674][T18697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.541776][T18431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2407.593586][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2407.701012][T18662] infiniband syz1: set active [ 2407.705765][T18662] infiniband syz1: added vcan0 [ 2407.714328][T18662] syz1: rxe_create_cq: returned err = -12 [ 2407.720603][T18662] infiniband syz1: Couldn't create ib_mad CQ [ 2407.726760][T18662] infiniband syz1: Couldn't open port 1 [ 2407.744527][T18703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.755889][T18662] RDS/IB: syz1: added [ 2407.760181][T18662] smc: adding ib device syz1 with port count 1 [ 2407.766507][T18662] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 2407.802361][T12585] vcan0 speed is unknown, defaulting to 1000 [ 2407.817290][T18431] hsr_slave_0: entered promiscuous mode [ 2407.834032][T18431] hsr_slave_1: entered promiscuous mode [ 2407.842325][T18431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2407.856391][T18431] Cannot create hsr debugfs directory [ 2407.872949][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2407.889248][ T1174] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2407.980852][ T6324] vcan0 speed is unknown, defaulting to 1000 [ 2408.013960][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2408.061696][ T1174] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2408.088297][ T1174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2408.147545][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2408.164262][ T1174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2408.213906][ T1174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2408.258594][ T1174] usb 1-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 2408.299831][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2408.300420][T18693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2408.310602][ T1174] usb 1-1: config 0 descriptor?? [ 2408.336733][ T5381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.417524][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2408.601528][ T1174] usb 1-1: string descriptor 0 read error: -71 [ 2408.615900][ T1174] usbhid 1-1:0.0: can't add hid device: -71 [ 2408.626461][ T5381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.629561][ T1174] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2408.651417][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2408.694901][ T1174] usb 1-1: USB disconnect, device number 13 [ 2408.868148][ T5381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.909650][T18662] vcan0 speed is unknown, defaulting to 1000 [ 2409.484544][ T1174] IPVS: starting estimator thread 0... [ 2409.599041][T18724] IPVS: using max 22 ests per chain, 52800 per kthread [ 2409.680811][ T5381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.467295][T18736] pimreg: entered allmulticast mode [ 2415.367080][T18746] binder: 18743:18746 ioctl c0306201 20000680 returned -14 [ 2415.739384][ T5381] bridge_slave_1: left allmulticast mode [ 2415.750732][ T5381] bridge_slave_1: left promiscuous mode [ 2415.763833][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.813833][ T5381] bridge_slave_0: left allmulticast mode [ 2415.820107][ T5381] bridge_slave_0: left promiscuous mode [ 2415.826560][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.091502][T18756] binder: 18754:18756 ioctl c0306201 20000680 returned -14 [ 2416.525847][T18752] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2416.929535][ T29] audit: type=1400 audit(1729325730.698:2277): avc: denied { getopt } for pid=18762 comm="syz.3.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2419.542078][ T29] audit: type=1400 audit(1729325733.308:2278): avc: denied { mount } for pid=18774 comm="syz.0.1628" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 2420.305054][T12374] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2420.314971][T12374] Bluetooth: hci1: Injecting HCI hardware error event [ 2420.325620][T12374] Bluetooth: hci1: hardware error 0x00 [ 2420.869351][T18793] binder: 18788:18793 ioctl c0306201 20000680 returned -14 [ 2421.796237][T18802] dlm: Unknown command passed to DLM device : 0 [ 2421.796237][T18802] [ 2421.815174][ T29] audit: type=1400 audit(1729325735.568:2279): avc: denied { setopt } for pid=18801 comm="syz.4.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2421.863301][ T29] audit: type=1400 audit(1729325735.568:2280): avc: denied { append } for pid=18801 comm="syz.4.1634" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2421.910331][T18799] binder: 18798:18799 ioctl c0306201 20000680 returned -14 [ 2422.036950][ T29] audit: type=1400 audit(1729325735.818:2281): avc: denied { wake_alarm } for pid=18805 comm="syz.0.1635" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2422.133399][ T5263] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2422.246180][T18812] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2422.261766][ T5381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2422.279870][ T5381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2422.291039][ T5263] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2422.309434][ T5381] bond0 (unregistering): Released all slaves [ 2422.317438][ T5263] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2422.333747][ T5263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.346733][ T5263] usb 5-1: Product: syz [ 2422.359112][ T5263] usb 5-1: Manufacturer: syz [ 2422.396952][ T5263] usb 5-1: SerialNumber: syz [ 2422.459886][T12374] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2423.822268][T12374] Bluetooth: hci0: command 0x0406 tx timeout [ 2424.284415][ T29] audit: type=1400 audit(1729325737.568:2282): avc: denied { map } for pid=18801 comm="syz.4.1634" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2425.317467][T12585] usb 5-1: USB disconnect, device number 10 [ 2426.449301][ T29] audit: type=1400 audit(1729325740.158:2283): avc: denied { bind } for pid=18831 comm="syz.0.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2426.779071][T10000] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2426.962316][T10000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2427.012172][T10000] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2427.556954][T10000] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 2427.566343][T10000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.576654][T10000] usb 5-1: Product: syz [ 2427.585138][T10000] usb 5-1: Manufacturer: syz [ 2427.590319][T10000] usb 5-1: SerialNumber: syz [ 2427.657127][T10000] usb 5-1: config 0 descriptor?? [ 2427.675962][T10000] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 2427.736015][T10000] em28xx 5-1:0.0: Video interface 0 found: bulk [ 2427.911509][T18846] binder: 18845:18846 ioctl c0306201 20000680 returned -14 [ 2428.299895][ T29] audit: type=1400 audit(1729325741.948:2284): avc: denied { read } for pid=18848 comm="syz.3.1644" path="socket:[112040]" dev="sockfs" ino=112040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2428.902338][ T5381] hsr_slave_0: left promiscuous mode [ 2428.919008][ T29] audit: type=1400 audit(1729325742.668:2285): avc: denied { accept } for pid=18830 comm="syz.4.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2428.964686][ T29] audit: type=1400 audit(1729325742.668:2286): avc: denied { setopt } for pid=18830 comm="syz.4.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2429.181845][ T5381] hsr_slave_1: left promiscuous mode [ 2429.312107][T10000] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2429.332250][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2429.340486][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2429.352514][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2429.360153][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2429.856695][ T5381] veth1_macvtap: left promiscuous mode [ 2429.862344][ T5381] veth0_macvtap: left promiscuous mode [ 2429.868136][ T5381] veth1_vlan: left promiscuous mode [ 2429.877388][ T5381] veth0_vlan: left promiscuous mode [ 2429.886496][T10000] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2429.897223][T10000] em28xx 5-1:0.0: board has no eeprom [ 2429.969113][T10000] em28xx 5-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 2429.978947][T10000] em28xx 5-1:0.0: analog set to bulk mode. [ 2430.002171][ T1174] em28xx 5-1:0.0: Registering V4L2 extension [ 2430.025396][T10000] usb 5-1: USB disconnect, device number 11 [ 2430.053541][T10000] em28xx 5-1:0.0: Disconnecting em28xx [ 2430.155279][ T1174] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 2430.237925][ T1174] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 2430.328723][ T1174] DVB: Unable to find symbol xc2028_attach() [ 2430.334946][ T1174] tuner: 1-0061: Tuner has no way to set tv freq [ 2430.342908][ T1174] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 2430.350401][ T1174] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 2430.358552][ T1174] em28xx 5-1:0.0: No AC97 audio processor [ 2430.379622][ T1174] tuner: 1-0061: Tuner has no way to set tv freq [ 2430.432543][ T1174] em28xx 5-1:0.0: Registered radio device as radio32 [ 2430.439487][ T1174] usb 5-1: Decoder not found [ 2430.446086][ T1174] em28xx 5-1:0.0: failed to create media graph [ 2430.453558][ T1174] em28xx 5-1:0.0: V4L2 device radio32 deregistered [ 2430.588063][ T1174] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 2430.663223][ T1174] em28xx 5-1:0.0: Registering input extension [ 2430.683720][T10000] em28xx 5-1:0.0: Closing input extension [ 2430.851453][T10000] em28xx 5-1:0.0: Freeing device [ 2430.977011][ T5381] team0 (unregistering): Port device team_slave_1 removed [ 2431.067645][ T5381] team0 (unregistering): Port device team_slave_0 removed [ 2432.601663][T18886] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2432.826613][T12374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2432.843351][T12374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2432.854534][T12374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2432.876083][T12374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2432.898108][T12374] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2432.898619][T12378] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2432.913941][T12374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2432.931477][T12378] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2432.940006][T12378] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2432.950249][T12374] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2432.991655][T12374] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2433.002368][T12374] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2433.407040][T18892] vcan0 speed is unknown, defaulting to 1000 [ 2433.639272][ T29] audit: type=1400 audit(1729325747.388:2287): avc: denied { bind } for pid=18900 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2433.693230][T18903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 2433.802170][ T29] audit: type=1400 audit(1729325747.388:2288): avc: denied { listen } for pid=18900 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2434.399230][ T29] audit: type=1400 audit(1729325747.408:2289): avc: denied { accept } for pid=18900 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2434.579050][ T29] audit: type=1400 audit(1729325747.468:2290): avc: denied { shutdown } for pid=18900 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2434.772413][ T29] audit: type=1400 audit(1729325748.538:2291): avc: denied { map } for pid=18905 comm="syz.3.1652" path="socket:[113213]" dev="sockfs" ino=113213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2435.353378][T12374] Bluetooth: hci6: command tx timeout [ 2435.353403][T17034] Bluetooth: hci3: command tx timeout [ 2435.458450][ T29] audit: type=1400 audit(1729325748.538:2292): avc: denied { accept } for pid=18905 comm="syz.3.1652" path="socket:[113213]" dev="sockfs" ino=113213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2435.527664][T18890] vcan0 speed is unknown, defaulting to 1000 [ 2435.653722][T18921] binder: 18916:18921 ioctl c0306201 20000680 returned -14 [ 2436.240975][T18931] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1656'. [ 2436.309126][ T5271] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2436.325904][ T29] audit: type=1400 audit(1729325750.018:2293): avc: denied { nlmsg_read } for pid=18924 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2436.481272][ T5271] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2436.669181][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2437.010312][ T5271] usb 4-1: config 0 descriptor?? [ 2437.108213][ T5271] cp210x 4-1:0.0: cp210x converter detected [ 2437.418977][T12374] Bluetooth: hci6: command tx timeout [ 2437.429036][T12374] Bluetooth: hci3: command tx timeout [ 2437.603139][T18942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2437.678705][ T5271] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2438.496158][ T5381] bridge_slave_1: left allmulticast mode [ 2438.517917][ T5381] bridge_slave_1: left promiscuous mode [ 2438.529182][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2438.546459][T18951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2438.590647][ T5381] bridge_slave_0: left allmulticast mode [ 2438.596357][ T5381] bridge_slave_0: left promiscuous mode [ 2438.629068][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2438.683030][T18940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2439.015706][ T29] audit: type=1400 audit(1729325752.758:2294): avc: denied { ioctl } for pid=18952 comm="syz.0.1660" path="socket:[113307]" dev="sockfs" ino=113307 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2439.063387][ T5381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2439.081605][ T5381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2439.120845][ T5381] bond0 (unregistering): Released all slaves [ 2439.175902][ T5271] usb 4-1: USB disconnect, device number 16 [ 2439.200145][ T5271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2439.287660][ T5271] cp210x 4-1:0.0: device disconnected [ 2439.509091][T12374] Bluetooth: hci3: command tx timeout [ 2439.514571][T12374] Bluetooth: hci6: command tx timeout [ 2439.853139][T18892] chnl_net:caif_netlink_parms(): no params data found [ 2440.704450][ T5381] hsr_slave_0: left promiscuous mode [ 2441.138551][ T5381] hsr_slave_1: left promiscuous mode [ 2441.579148][T17034] Bluetooth: hci6: command tx timeout [ 2441.589274][T17034] Bluetooth: hci3: command tx timeout [ 2441.599776][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2441.722617][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2443.166894][T18996] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2443.799071][T15143] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2444.171176][T19016] serio: Serial port ptm0 [ 2444.667633][T15143] usb 4-1: Using ep0 maxpacket: 16 [ 2444.675498][T15143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.700007][T15143] usb 4-1: config 0 has no interfaces? [ 2444.721276][T15143] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 2444.755931][T15143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.756875][T19020] binder: BINDER_SET_CONTEXT_MGR already set [ 2444.764893][T15143] usb 4-1: Product: syz [ 2444.774506][T15143] usb 4-1: Manufacturer: syz [ 2444.778226][T19020] binder: 19019:19020 ioctl 4018620d 20000100 returned -16 [ 2444.779676][T15143] usb 4-1: SerialNumber: syz [ 2444.811812][T15143] usb 4-1: config 0 descriptor?? [ 2444.847395][ T5381] team0 (unregistering): Port device team_slave_1 removed [ 2444.859165][ T29] audit: type=1400 audit(1729325758.638:2295): avc: denied { create } for pid=19019 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2444.905421][ T5381] team0 (unregistering): Port device team_slave_0 removed [ 2444.915834][ T29] audit: type=1400 audit(1729325758.668:2296): avc: denied { setopt } for pid=19019 comm="syz.4.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 2444.944563][T19024] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2445.302519][T18890] chnl_net:caif_netlink_parms(): no params data found [ 2445.326751][T18892] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.343508][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.355190][T18892] bridge_slave_0: entered allmulticast mode [ 2445.367870][T18892] bridge_slave_0: entered promiscuous mode [ 2445.397876][T18892] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.414193][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.425002][T18892] bridge_slave_1: entered allmulticast mode [ 2445.447205][T18892] bridge_slave_1: entered promiscuous mode [ 2445.576761][T18892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2445.615747][T18892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2445.659821][T19034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2445.730319][T18890] bridge0: port 1(bridge_slave_0) entered blocking state [ 2445.738281][T18890] bridge0: port 1(bridge_slave_0) entered disabled state [ 2445.757781][T18890] bridge_slave_0: entered allmulticast mode [ 2445.766684][T18890] bridge_slave_0: entered promiscuous mode [ 2445.810466][T18890] bridge0: port 2(bridge_slave_1) entered blocking state [ 2445.827293][T18890] bridge0: port 2(bridge_slave_1) entered disabled state [ 2445.851972][T18890] bridge_slave_1: entered allmulticast mode [ 2445.861763][T18890] bridge_slave_1: entered promiscuous mode [ 2445.897997][T18892] team0: Port device team_slave_0 added [ 2445.933315][T18892] team0: Port device team_slave_1 added [ 2446.394299][T18890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2446.462627][T18890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2446.590931][T19031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2446.672988][T18892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2446.680454][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2446.744538][ T5263] usb 4-1: USB disconnect, device number 17 [ 2446.775439][T18892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2446.806093][T18892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2446.814083][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2446.842373][T18892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2446.932340][T19044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2446.975771][T18890] team0: Port device team_slave_0 added [ 2446.993272][T18890] team0: Port device team_slave_1 added [ 2447.059903][T18892] hsr_slave_0: entered promiscuous mode [ 2447.068594][T18892] hsr_slave_1: entered promiscuous mode [ 2447.129945][T18890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2447.145771][T19048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.157143][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2447.191302][T18890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2447.230287][T18890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2447.238065][T18890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2447.266327][T18890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2447.277741][T19051] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2447.284290][T19051] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2447.313071][T19051] vhci_hcd vhci_hcd.0: Device attached [ 2447.386097][T18890] hsr_slave_0: entered promiscuous mode [ 2447.395212][T18890] hsr_slave_1: entered promiscuous mode [ 2447.404935][T18890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2447.414526][T18890] Cannot create hsr debugfs directory [ 2447.582505][T15143] usb 18-1: SetAddress Request (6) to port 0 [ 2447.592101][T15143] usb 18-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2447.692255][T19052] vhci_hcd: connection reset by peer [ 2447.701514][T19040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2447.722731][ T5407] vhci_hcd: stop threads [ 2447.729329][ T5407] vhci_hcd: release socket [ 2447.878322][ T5407] vhci_hcd: disconnect device [ 2449.469683][ T5381] bridge_slave_1: left allmulticast mode [ 2449.475384][ T5381] bridge_slave_1: left promiscuous mode [ 2449.487335][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.574362][T19070] fuse: Unknown parameter '00000000000000000000' [ 2450.108793][ T29] audit: type=1400 audit(1729325763.338:2297): avc: denied { listen } for pid=19064 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2450.179234][ T5381] bridge_slave_0: left allmulticast mode [ 2450.184932][ T5381] bridge_slave_0: left promiscuous mode [ 2450.190731][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.239029][T19073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2451.859745][ T5381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2451.979634][ T5381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2451.991850][ T5381] bond0 (unregistering): Released all slaves [ 2452.002105][T19093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2452.084634][T18892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2452.109931][T18892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2452.152293][T18892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2452.685185][T19106] Invalid ELF header magic: != ELF [ 2452.706876][ T29] audit: type=1804 audit(1729325766.428:2298): pid=19106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1684" name="/newroot/47/bus/bus" dev="overlay" ino=276 res=1 errno=0 [ 2452.730520][T15143] usb 18-1: device descriptor read/8, error -110 [ 2453.200815][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2453.229104][ T29] audit: type=1400 audit(1729325766.458:2299): avc: denied { module_load } for pid=19098 comm="syz.3.1684" path="/47/bus/bus" dev="overlay" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 2453.312565][T19101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2453.326475][T18892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2453.334131][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'. [ 2453.485563][ T5381] hsr_slave_0: left promiscuous mode [ 2453.504573][ T5381] hsr_slave_1: left promiscuous mode [ 2453.514815][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2453.613178][T19110] Bluetooth: MGMT ver 1.23 [ 2453.670571][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2454.531252][T15143] usb usb18-port1: attempt power cycle [ 2454.661050][T19113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2454.786506][ T5381] team0 (unregistering): Port device team_slave_1 removed [ 2454.863264][ T5381] team0 (unregistering): Port device team_slave_0 removed [ 2454.863965][T19116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2454.986036][ T29] audit: type=1400 audit(1729325768.748:2300): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=36504 daddr=10.128.0.145 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2455.037574][T19117] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2455.044173][T19117] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2455.053941][T19117] vhci_hcd vhci_hcd.0: Device attached [ 2455.089990][T15143] usb usb18-port1: unable to enumerate USB device [ 2455.379414][T12585] usb 10-1: SetAddress Request (2) to port 0 [ 2455.515067][T19118] vhci_hcd: connection closed [ 2455.517216][T15146] vhci_hcd: stop threads [ 2455.531241][T12585] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2455.533902][T19111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2455.725834][T15146] vhci_hcd: release socket [ 2455.745640][T15146] vhci_hcd: disconnect device [ 2456.835126][T18892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2456.995425][T18892] 8021q: adding VLAN 0 to HW filter on device team0 [ 2457.806163][ T29] audit: type=1400 audit(1729325771.558:2301): avc: denied { ioctl } for pid=19141 comm="syz.4.1692" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2457.940591][ T29] audit: type=1400 audit(1729325771.618:2302): avc: denied { bind } for pid=19139 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2458.105690][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2458.112856][T11068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2458.122135][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 2458.129316][T11068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2459.016898][T18892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2459.034166][T18892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2459.035289][T19162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2460.587973][T19162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2460.590058][T18890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2460.619604][T12585] usb 10-1: device descriptor read/8, error -110 [ 2460.674528][T18890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2460.990420][T18890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2461.093931][T12585] usb usb10-port1: attempt power cycle [ 2461.272971][T18890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2461.821731][T18890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2461.836044][T18890] 8021q: adding VLAN 0 to HW filter on device team0 [ 2461.844537][T12585] usb usb10-port1: unable to enumerate USB device [ 2461.870636][T18890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2461.881689][T18890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2461.921647][T18892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2461.934044][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2461.941203][T15149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2461.949520][T19184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2461.981596][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2461.988760][T15149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2462.189328][T19184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2463.024314][T18892] veth0_vlan: entered promiscuous mode [ 2463.027485][T19184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2463.037617][T19184] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2463.092484][T18892] veth1_vlan: entered promiscuous mode [ 2463.119269][T19184] vhci_hcd vhci_hcd.0: Device attached [ 2463.469437][ T5263] usb 18-1: SetAddress Request (10) to port 0 [ 2463.477391][ T5263] usb 18-1: new SuperSpeed USB device number 10 using vhci_hcd [ 2463.766592][T19184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2463.782481][T19205] vhci_hcd: connection reset by peer [ 2463.823517][T15147] vhci_hcd: stop threads [ 2463.938996][T15147] vhci_hcd: release socket [ 2463.962653][T15147] vhci_hcd: disconnect device [ 2463.990451][T18892] veth0_macvtap: entered promiscuous mode [ 2464.294966][T18890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2464.327923][T18892] veth1_macvtap: entered promiscuous mode [ 2465.046467][T19227] vcan0 speed is unknown, defaulting to 1000 [ 2465.240986][T18890] veth0_vlan: entered promiscuous mode [ 2465.256294][T18890] veth1_vlan: entered promiscuous mode [ 2465.328163][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.341776][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.354454][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.369324][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.382912][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2465.400451][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.418071][T18892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2465.505093][T19226] vcan0 speed is unknown, defaulting to 1000 [ 2465.621840][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.632646][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.661190][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.681083][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.694125][T19244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2465.704374][T18892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2465.729047][T18892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2465.750289][T18892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2465.785943][T18892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.836302][T18892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.850799][T18892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.861145][T18892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2465.884765][T18890] veth0_macvtap: entered promiscuous mode [ 2465.902316][T18890] veth1_macvtap: entered promiscuous mode [ 2466.083491][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2466.097497][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.107501][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2466.118264][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.128552][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2466.152127][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.189037][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2466.214143][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.251858][T18890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2466.289975][T19252] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2466.290005][T19252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2466.322372][T19230] vcan0 speed is unknown, defaulting to 1000 [ 2466.323879][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2466.349491][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.362281][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2466.369074][T19252] vhci_hcd vhci_hcd.0: Device attached [ 2466.388418][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.421696][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2466.439096][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.449033][T18890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2466.459576][T18890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2466.470735][T18890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2466.517897][T19256] vhci_hcd: connection closed [ 2466.527475][ T5381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2466.528041][T11068] vhci_hcd: stop threads [ 2466.533203][ T5381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2466.554434][T18890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.560140][T11068] vhci_hcd: release socket [ 2466.569844][T18890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.578597][T18890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.587842][T11068] vhci_hcd: disconnect device [ 2466.653305][T18890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2466.787416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2466.819492][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2467.331486][ T29] audit: type=1326 audit(1729325781.098:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.4.1706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83d217dff9 code=0x0 [ 2467.892483][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.767090][ T5263] usb 18-1: device descriptor read/8, error -110 [ 2469.970399][T19287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2470.294469][ T5263] usb usb18-port1: attempt power cycle [ 2470.457167][ T6326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.535418][T19292] binder: BINDER_SET_CONTEXT_MGR already set [ 2470.542238][T19292] binder: 19291:19292 ioctl 4018620d 20000100 returned -16 [ 2470.840787][T19295] binder: BINDER_SET_CONTEXT_MGR already set [ 2470.846873][T19295] binder: 19291:19295 ioctl 4018620d 200002c0 returned -16 [ 2470.860487][ T5263] usb usb18-port1: unable to enumerate USB device [ 2470.902404][ T6326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2470.963410][T19289] vcan0 speed is unknown, defaulting to 1000 [ 2471.001694][ T5381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.009710][ T5381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.019887][ T5381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2471.027733][ T5381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.245987][ T6326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.473199][ T6326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2471.846751][ T6326] bridge_slave_1: left allmulticast mode [ 2471.856788][ T6326] bridge_slave_1: left promiscuous mode [ 2471.879192][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2471.889463][ T29] audit: type=1400 audit(1729325785.668:2304): avc: denied { ioctl } for pid=19300 comm="syz.3.1711" path="socket:[114369]" dev="sockfs" ino=114369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2471.964990][ T6326] bridge_slave_0: left allmulticast mode [ 2471.970823][ T6326] bridge_slave_0: left promiscuous mode [ 2471.976502][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2475.532913][ T29] audit: type=1400 audit(1729325788.138:2305): avc: denied { audit_write } for pid=19330 comm="syz.0.1714" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2475.647406][ T29] audit: type=1400 audit(1729325788.688:2306): avc: denied { setopt } for pid=19330 comm="syz.0.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2476.188244][ T6326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2476.228020][ T6326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2476.260036][ T6326] bond0 (unregistering): Released all slaves [ 2476.834532][T19360] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 2476.859696][ T29] audit: type=1400 audit(1729325790.618:2307): avc: denied { relabelto } for pid=19357 comm="syz.0.1715" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 2476.885363][ C1] vkms_vblank_simulate: vblank timer overrun [ 2476.929412][ T29] audit: type=1400 audit(1729325790.618:2308): avc: denied { associate } for pid=19357 comm="syz.0.1715" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 2476.955916][ C1] vkms_vblank_simulate: vblank timer overrun [ 2477.175182][ T6326] hsr_slave_0: left promiscuous mode [ 2477.191795][ T6326] hsr_slave_1: left promiscuous mode [ 2477.198419][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2477.209856][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2477.226248][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2477.241915][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2477.319837][ T6326] veth1_macvtap: left promiscuous mode [ 2477.345590][ T6326] veth0_macvtap: left promiscuous mode [ 2477.364202][ T6326] veth1_vlan: left promiscuous mode [ 2477.381409][ T6326] veth0_vlan: left promiscuous mode [ 2478.897641][ T6326] team0 (unregistering): Port device team_slave_1 removed [ 2479.072742][T19388] netlink: 'syz.4.1718': attribute type 2 has an invalid length. SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) [ 2480.130170][ T6326] team0 (unregistering): Port device team_slave_0 removed SYZFAIL: repeatedly failed to execute the program proc=1 req=1558 state=1 status=67 (errno 9: Bad file descriptor) [ 2480.168039][ T29] audit: type=1400 audit(1729325793.938:2309): avc: denied { write } for pid=5204 comm="syz-executor" path="pipe:[2868]" dev="pipefs" ino=2868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2480.388984][ T6324] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2480.492122][T19399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1719'. [ 2480.620582][ T6324] usb 5-1: Using ep0 maxpacket: 8 [ 2481.516837][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 2481.731014][ T6324] usb 5-1: device descriptor read/all, error -71 [ 2482.189233][T15149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.287702][T15149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.464731][T15149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.623989][T15149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.812010][T15149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2482.915765][T15149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.022128][T15149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.113853][T15149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2483.312794][T15149] bridge_slave_1: left allmulticast mode [ 2483.318486][T15149] bridge_slave_1: left promiscuous mode [ 2483.328031][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.336758][T15149] bridge_slave_0: left allmulticast mode [ 2483.343121][T15149] bridge_slave_0: left promiscuous mode [ 2483.348802][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 2483.357884][T15149] bridge_slave_1: left allmulticast mode [ 2483.363841][T15149] bridge_slave_1: left promiscuous mode [ 2483.371240][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.380534][T15149] bridge_slave_0: left allmulticast mode [ 2483.386683][T15149] bridge_slave_0: left promiscuous mode [ 2483.392719][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 2484.207210][T15149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2484.218383][T15149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2484.232549][T15149] bond0 (unregistering): Released all slaves [ 2484.455084][T15149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2484.466496][T15149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2484.477139][T15149] bond0 (unregistering): Released all slaves [ 2485.258697][T15149] hsr_slave_0: left promiscuous mode [ 2485.274433][T15149] hsr_slave_1: left promiscuous mode [ 2485.280731][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2485.288179][T15149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2485.296516][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2485.304221][T15149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2485.318117][T15149] hsr_slave_0: left promiscuous mode [ 2485.324758][T15149] hsr_slave_1: left promiscuous mode [ 2485.331462][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2485.339506][T15149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2485.348449][T15149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2485.357175][T15149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2485.411972][T15149] veth1_macvtap: left promiscuous mode [ 2485.417561][T15149] veth0_macvtap: left promiscuous mode [ 2485.423884][T15149] veth1_vlan: left promiscuous mode [ 2485.429415][T15149] veth0_vlan: left promiscuous mode [ 2485.436056][T15149] veth1_macvtap: left promiscuous mode [ 2485.442316][T15149] veth0_macvtap: left promiscuous mode [ 2485.447946][T15149] veth1_vlan: left promiscuous mode [ 2485.453995][T15149] veth0_vlan: left promiscuous mode [ 2486.220318][T15149] team0 (unregistering): Port device team_slave_1 removed [ 2486.291158][T15149] team0 (unregistering): Port device team_slave_0 removed [ 2487.588039][T15149] team0 (unregistering): Port device team_slave_1 removed [ 2487.656195][T15149] team0 (unregistering): Port device team_slave_0 removed [ 2488.996517][T15149] IPVS: stop unused estimator thread 0... [ 2489.137984][T15149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.231639][T15149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.311314][T15149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.401616][T15149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2489.569362][T15149] bridge_slave_1: left allmulticast mode [ 2489.575044][T15149] bridge_slave_1: left promiscuous mode [ 2489.581056][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 2489.592739][T15149] bridge_slave_0: left allmulticast mode [ 2489.598431][T15149] bridge_slave_0: left promiscuous mode [ 2489.605282][T15149] bridge0: port 1(bridge_slave_0) entered disabled state