last executing test programs: 14.457012623s ago: executing program 4 (id=272): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x6, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x75, 0x121301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(0x0, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) 12.964291187s ago: executing program 4 (id=280): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x60, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}]}}]}, 0x60}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "8ff7bc031c9c6703e9be97fa914e07dcbb4951df0f944a07", "8e27a7ebab45c4231e208df3f60bb55fe98a6ab2ec689704e38a45b86f549e0f"}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) msgsnd(0x0, 0x0, 0x35f, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x0, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r6) r8 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r7, r8}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000340)={'sha512-generic\x00'}, 0x0, 0x14}) ioctl$TCFLSH(r5, 0x80047437, 0x1000000000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='befs\x00', 0x0, &(0x7f0000000a80)=',\x00') 12.4477943s ago: executing program 2 (id=281): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r5, @ANYBLOB="2f00330040000000080211000000080211000001505050505050"], 0x4c}}, 0x46) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) syz_emit_ethernet(0x32, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4, 0x42}, @rr={0x7, 0x3, 0x50}]}}, @echo}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000180), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/50, 0x32}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r8, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 11.61079292s ago: executing program 4 (id=283): socket$kcm(0x2, 0x0, 0x2) r0 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) sendto$packet(r1, &(0x7f00000002c0)="45d215d88d8bddcb83978de457a7b829b2140baf48486e7bdfe523ad81bc1e975ffe856d93092fda0b1fcdb0ccce614c26225ab8f0e8777e9589b8dc36d923", 0x3f, 0x0, 0x0, 0x0) 10.118741569s ago: executing program 1 (id=286): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000005140)=""/4086, 0xff6}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2) 10.090786779s ago: executing program 0 (id=287): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9, {0x0, 0xfffffffd, 0x0, 0xe}}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) landlock_create_ruleset(&(0x7f0000000500)={0xc00, 0x2}, 0x10, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000540)={"2faf2ca99e3232f4f0ec03426b546b43", 0x0, 0x0, {0x8e, 0x3}, {0x9, 0x7f}, 0x8001, [0x7ff, 0x1000, 0x4, 0xffffffff, 0x6, 0x4, 0x8, 0x10000, 0x1, 0x100000000, 0x2, 0x40, 0x400, 0x100000001, 0x3, 0x8000000]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000a40)={{r0}, 0x0, 0xa, @unused=[0x800], @devid}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x50793b12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c010) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001d00)=""/232) r5 = open_tree(0xffffffffffffffff, &(0x7f0000001e00)='./file0\x00', 0x80101) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001fc0)={&(0x7f0000001ec0)=[0x0], &(0x7f0000001f00)=[0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000002000)={r6, r7, 0x1d, 0x401, 0xcb7b}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000020c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r8, 0x21, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000002200)={0x5, 0x0, [{0x5, 0x8, 0x6, [0x200, 0x2, 0x9, 0x6, 0x4, 0x80000000, 0x7fff, 0x6]}, {0x9, 0x7, 0x2, [0x2, 0x7, 0x0, 0x0, 0x3, 0x8000, 0x4f0000, 0x8]}, {0x6, 0x9, 0x5, [0x3, 0xff, 0xe4, 0x5, 0x80, 0xffffffff, 0x9, 0x7fffffff]}, {0x9, 0x1c, 0x4, [0x9, 0x8, 0x5, 0x8, 0x5, 0x1, 0x8001, 0x1ff]}, {0xc, 0x2, 0x0, [0xa, 0x200, 0x1, 0xb, 0x0, 0x0, 0x1, 0x200]}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002300)=0x1490, 0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x14, 0x10, 0xa, 0xc06, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040851) r11 = shmget(0x1, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r11, 0xe, &(0x7f0000002440)=""/123) 9.602640363s ago: executing program 0 (id=288): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='\t'], 0xb0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) 9.010329963s ago: executing program 1 (id=290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x98, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x9}, 0x20000804) 8.95811763s ago: executing program 0 (id=291): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private1}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) r5 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={0xffffffffffffffff, 0x609, 0xe, 0x0, &(0x7f0000000b40)="dd80000400070000000000000000", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000710000007100000002000000000000000000000c00000000000000000000000900000000000000000400000f0100000000000000000000000000004b3c0000000000000000000000000000000000000000000000000000000000000000000000af000040000000000e00000000000000000000000000000007000000000000000000"], 0x0, 0x8e}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000000000001845000000000000000000000000000085000000c900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000118800b70500000800000085000000a50000000900000000000000b7020000060000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 8.742396545s ago: executing program 1 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00c9000001aaaaaa"], 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000100140012800b00010067656e65766500000400028004001a80"], 0x38}, 0x1, 0x2}, 0x11) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'sit0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@local, @multicast2}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @multicast1}, &(0x7f0000000300)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYRES32=r4], 0x6c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB="140002006261746164765f736c6176655f30000008000100", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES16=r8, @ANYRES32, @ANYBLOB="1400020064766d7270300000000000000000000014000200766c616e300000000000000000000000140002006e696376663000000000000000000000500001801400020070696d367265670000000000000000001400020064766d7270310000000000000000000008000300010000001400020070696d3672656730000000000000000008000100", @ANYRES32=r3, @ANYBLOB="200001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r5, @ANYBLOB="440001801400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r7, @ANYBLOB="0800030000000000140002006d6163766c616e3100000000000000000c00018008000100", @ANYRES32=r10, @ANYBLOB="4f3e91f6bdc4b24e1ff106f10fbff5f45ba5e7d3f6276d7ec3c708c9b28ba4f474afadf0bdf6d611e4a73be8a4540458981edebbc0651e4bdb9a43a6c36c88a665674b4c1947fa1f30a9c7f19a4abd177939"], 0x230}, 0x1, 0x0, 0x0, 0x4040800}, 0x4044044) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r11, &(0x7f0000002140)={0x2020}, 0x2020) 8.647013372s ago: executing program 2 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x4000000) 8.581776182s ago: executing program 4 (id=294): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chroot(0x0) pivot_root(&(0x7f0000000440)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x36}, "7058abce57033f29eb6dc1f8b128a7537a3409329d374c37fd2f23cfa5a5495ffc36ac891ea6f898ba2a0784b3781c59e6bd91a231a6"}, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x4}}, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000108) 8.475299304s ago: executing program 0 (id=295): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xdeM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11W\xe5\xa7\x9fV\x05[Ke\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002180)={0x60, 0x0, 0x0, [{0x0, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0x14, 0x0, '/>[\xe68>r\x9a\xd5\xc0s\ru\x18\x94IPt\x17\"'}]}, 0x60) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigpending(0x0, 0x1000000) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = socket(0x25, 0x1, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) 7.578824152s ago: executing program 2 (id=296): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 7.266478831s ago: executing program 3 (id=297): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000400)={&(0x7f0000000640)=""/117, 0x75}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100), 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000012c0)={0x41}, 0x10) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000280)="f697079a16", 0x5}], 0x2, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x100) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x383, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xd7}}, './file0\x00'}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}], 0x1, 0xc, &(0x7f00000003c0)={[0x5]}, 0x8) fanotify_mark(r6, 0x80, 0x8001020, 0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00') read$midi(r0, 0x0, 0x49) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x1, 0xd3}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xfc73, 0x6, 0x201, 0x2, 0x0, 0x1, 0x28, 0x6}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0xa2, &(0x7f0000000440)=@string={0xa2, 0x3, "155c9f620693794e1f0a903edd8a6dd303bba99de0edd3f2b8f46601f6a0ec585b60d866b68f68d83a5a5525cdf812c444942f947a8caa4e2443ca2a1b17159eddefbc6d6622d6fc39c87a7fd21ad5b2e34b0e76ab3f59579bdd87b8880eb7d0144b0b3617c0d2080064f3a6e519edd3b35ca06b48ea6fa61662cea01d19f2a73a18e25298f9b50bfd2716e11ff3d5a6f9c15d03d1d4c578720c0755409189bea4998c28fdcc9d354307a634"}}, {0x4, &(0x7f0000000500)=@string={0x0, 0x3, "1e4586d9a4f97dbde5a05376146a7613cde20cd4c74bb6cb9adc09843a3079e46e979161a277a2814273e2ab1847e3a8d74637fec082f6979364dc135a63b485edc1f49ce33e3af235b2c25f437dd70a533ce1e224b4ecd1b2cf0e58ca991d604e23a4711229fd65554d9244afb5fc17bdf38dbe684e7e2c9f09486e254837a3ff2f8c453276d5fb23127fc2e71ff58d98630a41888952c5abf896d1fe184758aa34989a08a4b9eed97bde65f701504272bdc9cfbe6ef60400d4e4230a2e1cfd063cb959e6d83b656c0923"}}, {0x5, &(0x7f00000001c0)=@string={0x5, 0x3, "ec0765"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x140a}}]}) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x201}, 0x14}}, 0x0) 7.197528529s ago: executing program 2 (id=298): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9, {0x0, 0xfffffffd, 0x0, 0xe}}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) landlock_create_ruleset(&(0x7f0000000500)={0xc00, 0x2}, 0x10, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000540)={"2faf2ca99e3232f4f0ec03426b546b43", 0x0, 0x0, {0x8e, 0x3}, {0x9, 0x7f}, 0x8001, [0x7ff, 0x1000, 0x4, 0xffffffff, 0x6, 0x4, 0x8, 0x10000, 0x1, 0x100000000, 0x2, 0x40, 0x400, 0x100000001, 0x3, 0x8000000]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000a40)={{r0}, 0x0, 0xa, @unused=[0x800], @devid}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x50793b12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c010) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001d00)=""/232) r5 = open_tree(0xffffffffffffffff, &(0x7f0000001e00)='./file0\x00', 0x80101) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001fc0)={&(0x7f0000001ec0)=[0x0], &(0x7f0000001f00)=[0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000002000)={r6, r7, 0x1d, 0x401, 0xcb7b}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000020c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r8, 0x21, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000002200)={0x5, 0x0, [{0x5, 0x8, 0x6, [0x200, 0x2, 0x9, 0x6, 0x4, 0x80000000, 0x7fff, 0x6]}, {0x9, 0x7, 0x2, [0x2, 0x7, 0x0, 0x0, 0x3, 0x8000, 0x4f0000, 0x8]}, {0x6, 0x9, 0x5, [0x3, 0xff, 0xe4, 0x5, 0x80, 0xffffffff, 0x9, 0x7fffffff]}, {0x9, 0x1c, 0x4, [0x9, 0x8, 0x5, 0x8, 0x5, 0x1, 0x8001, 0x1ff]}, {0xc, 0x2, 0x0, [0xa, 0x200, 0x1, 0xb, 0x0, 0x0, 0x1, 0x200]}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002300)=0x1490, 0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x14, 0x10, 0xa, 0xc06, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040851) r11 = shmget(0x1, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r11, 0xe, &(0x7f0000002440)=""/123) 6.930643026s ago: executing program 2 (id=299): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000078000100000000000000000007"], 0x64}, 0x1, 0x5502000000000000}, 0x0) 6.653097231s ago: executing program 1 (id=300): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) readv(r1, &(0x7f0000000540)=[{&(0x7f0000005140)=""/4086, 0xff6}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2) 5.494498342s ago: executing program 1 (id=301): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) lseek(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee00]) 5.477452259s ago: executing program 4 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='\t'], 0xb0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=']) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) 5.436971199s ago: executing program 0 (id=303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r6, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', r5, 0xf}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) lseek(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[0xee00]) 2.915691104s ago: executing program 1 (id=304): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00040008000300", @ANYRES32=r5, @ANYBLOB="2f00330040000000080211000000080211000001505050505050"], 0x4c}}, 0x46) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) syz_emit_ethernet(0x32, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x4, 0x42}, @rr={0x7, 0x3, 0x50}]}}, @echo}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000180), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/50, 0x32}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r8, 0x400, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 2.834623949s ago: executing program 0 (id=305): socket$kcm(0x2, 0x0, 0x2) r0 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5) sendto$packet(r1, &(0x7f00000002c0)="45d215d88d8bddcb83978de457a7b829b2140baf48486e7bdfe523ad81bc1e975ffe856d93092fda0b1fcdb0ccce614c26225ab8f0e8777e9589b8dc36d923", 0x3f, 0x0, 0x0, 0x0) 2.687057692s ago: executing program 3 (id=306): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 2.446141703s ago: executing program 4 (id=307): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) 1.689976924s ago: executing program 3 (id=308): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 1.00021921s ago: executing program 2 (id=309): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 999.118435ms ago: executing program 3 (id=310): bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x9, {0x0, 0xfffffffd, 0x0, 0xe}}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) landlock_create_ruleset(&(0x7f0000000500)={0xc00, 0x2}, 0x10, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000540)={"2faf2ca99e3232f4f0ec03426b546b43", 0x0, 0x0, {0x8e, 0x3}, {0x9, 0x7f}, 0x8001, [0x7ff, 0x1000, 0x4, 0xffffffff, 0x6, 0x4, 0x8, 0x10000, 0x1, 0x100000000, 0x2, 0x40, 0x400, 0x100000001, 0x3, 0x8000000]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000a40)={{r0}, 0x0, 0xa, @unused=[0x800], @devid=r3}) r4 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x50793b12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c010) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000001d00)=""/232) r6 = open_tree(0xffffffffffffffff, &(0x7f0000001e00)='./file0\x00', 0x80101) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001fc0)={&(0x7f0000001ec0)=[0x0], &(0x7f0000001f00)=[0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r6, 0xc01864b0, &(0x7f0000002000)={r7, r8, 0x1d, 0x401, 0xcb7b}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000020c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, r9, 0x21, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000002200)={0x5, 0x0, [{0x5, 0x8, 0x6, [0x200, 0x2, 0x9, 0x6, 0x4, 0x80000000, 0x7fff, 0x6]}, {0x9, 0x7, 0x2, [0x2, 0x7, 0x0, 0x0, 0x3, 0x8000, 0x4f0000, 0x8]}, {0x6, 0x9, 0x5, [0x3, 0xff, 0xe4, 0x5, 0x80, 0xffffffff, 0x9, 0x7fffffff]}, {0x9, 0x1c, 0x4, [0x9, 0x8, 0x5, 0x8, 0x5, 0x1, 0x8001, 0x1ff]}, {0xc, 0x2, 0x0, [0xa, 0x200, 0x1, 0xb, 0x0, 0x0, 0x1, 0x200]}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002300)=0x1490, 0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x14, 0x10, 0xa, 0xc06, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40048c0}, 0x4040851) r12 = shmget(0x1, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r12, 0xe, &(0x7f0000002440)=""/123) 338.442734ms ago: executing program 3 (id=311): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) 0s ago: executing program 3 (id=312): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chroot(0x0) pivot_root(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c90012000e0000000700ffff67640700b90f56a9d333b60c487bcdde0cf8d0735995315fe01c0f2327c74535e3886c660212078f4a7b00c1c3d055b845ac5cef765bff1e1f9674d2b7b08cd0f8ac082a8dc156bc573c09007e4cc96e88345b44913400b840fda4f5c54558944f47afb58c5cd9ac5dbe43bc80b0fab30f7e740085c941eed673a98556f1ac2c4b572aa89bdfcf78f97f8b8286508ad75a3651cf7c47845c82b4e870b2d660fe00000000000000"], 0x17) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x4}}, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000108) kernel console output (not intermixed with test programs): syzkaller login: [ 87.401412][ T30] audit: type=1400 audit(1721236095.566:78): avc: denied { transition } for pid=5021 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.431979][ T30] audit: type=1400 audit(1721236095.586:79): avc: denied { noatsecure } for pid=5021 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.461667][ T30] audit: type=1400 audit(1721236095.606:80): avc: denied { write } for pid=5021 comm="sh" path="pipe:[3497]" dev="pipefs" ino=3497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 87.500877][ T30] audit: type=1400 audit(1721236095.606:81): avc: denied { rlimitinh } for pid=5021 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.540909][ T30] audit: type=1400 audit(1721236095.606:82): avc: denied { siginh } for pid=5021 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 87.868624][ T30] audit: type=1400 audit(1721236096.036:83): avc: denied { read } for pid=4518 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.982864][ T30] audit: type=1400 audit(1721236097.156:84): avc: denied { append } for pid=4518 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.042608][ T30] audit: type=1400 audit(1721236097.156:85): avc: denied { open } for pid=4518 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.076222][ T30] audit: type=1400 audit(1721236097.156:86): avc: denied { getattr } for pid=4518 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 97.738674][ T9] cfg80211: failed to load regulatory.db [ 102.326036][ T30] audit: type=1400 audit(1721236110.496:87): avc: denied { mounton } for pid=5074 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 102.339571][ T5074] cgroup: Unknown subsys name 'net' [ 102.349052][ T30] audit: type=1400 audit(1721236110.496:88): avc: denied { mount } for pid=5074 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.377258][ T30] audit: type=1400 audit(1721236110.536:89): avc: denied { unmount } for pid=5074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.568300][ T5074] cgroup: Unknown subsys name 'rlimit' [ 102.716791][ T30] audit: type=1400 audit(1721236110.886:90): avc: denied { setattr } for pid=5074 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.750490][ T30] audit: type=1400 audit(1721236110.886:91): avc: denied { create } for pid=5074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.783245][ T30] audit: type=1400 audit(1721236110.886:92): avc: denied { write } for pid=5074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.804503][ T30] audit: type=1400 audit(1721236110.886:93): avc: denied { read } for pid=5074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.825780][ T30] audit: type=1400 audit(1721236110.916:94): avc: denied { mounton } for pid=5074 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.851019][ T30] audit: type=1400 audit(1721236110.916:95): avc: denied { mount } for pid=5074 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.874632][ T30] audit: type=1400 audit(1721236110.946:96): avc: denied { read } for pid=4750 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 102.937037][ T5079] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 104.833978][ T5074] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.866317][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 107.866340][ T30] audit: type=1400 audit(1721236116.036:102): avc: denied { execmem } for pid=5081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 108.960935][ T30] audit: type=1400 audit(1721236117.126:103): avc: denied { mounton } for pid=5086 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 109.040860][ T30] audit: type=1400 audit(1721236117.126:104): avc: denied { mount } for pid=5086 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 109.115106][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.125448][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.132607][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.135143][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.147462][ T30] audit: type=1400 audit(1721236117.126:105): avc: denied { create } for pid=5086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.150838][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.175116][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.183562][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.194845][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.196589][ T30] audit: type=1400 audit(1721236117.126:106): avc: denied { read write } for pid=5086 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.204371][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.234611][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.242356][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.254442][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.263452][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.268374][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.274554][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.284956][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.291618][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.293495][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.308791][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.314730][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.317481][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.326930][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.333070][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.339693][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.348027][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.352566][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.358373][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.365929][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.379924][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.400929][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.453771][ T30] audit: type=1400 audit(1721236117.126:107): avc: denied { open } for pid=5086 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 109.481905][ T30] audit: type=1400 audit(1721236117.226:108): avc: denied { ioctl } for pid=5086 comm="syz-executor" path="socket:[4301]" dev="sockfs" ino=4301 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.562840][ T30] audit: type=1400 audit(1721236117.546:109): avc: denied { read } for pid=5088 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.608860][ T30] audit: type=1400 audit(1721236117.546:110): avc: denied { open } for pid=5088 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.680864][ T30] audit: type=1400 audit(1721236117.546:111): avc: denied { mounton } for pid=5088 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 110.257948][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 110.727812][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.736361][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.745596][ T5096] bridge_slave_0: entered allmulticast mode [ 110.753927][ T5096] bridge_slave_0: entered promiscuous mode [ 110.771492][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.778904][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.787740][ T5096] bridge_slave_1: entered allmulticast mode [ 110.795835][ T5096] bridge_slave_1: entered promiscuous mode [ 110.812840][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 110.840018][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 110.857511][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 111.031265][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.049617][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 111.105559][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.303046][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.310397][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.319219][ T5090] bridge_slave_0: entered allmulticast mode [ 111.328078][ T5090] bridge_slave_0: entered promiscuous mode [ 111.388758][ T5096] team0: Port device team_slave_0 added [ 111.412161][ T5101] Bluetooth: hci2: command tx timeout [ 111.412198][ T5105] Bluetooth: hci1: command tx timeout [ 111.427356][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.435833][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.443434][ T5090] bridge_slave_1: entered allmulticast mode [ 111.451547][ T5090] bridge_slave_1: entered promiscuous mode [ 111.491795][ T5105] Bluetooth: hci3: command tx timeout [ 111.497613][ T5101] Bluetooth: hci0: command tx timeout [ 111.501046][ T5105] Bluetooth: hci4: command tx timeout [ 111.515006][ T5096] team0: Port device team_slave_1 added [ 111.616016][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.623732][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.632390][ T5086] bridge_slave_0: entered allmulticast mode [ 111.640184][ T5086] bridge_slave_0: entered promiscuous mode [ 111.649738][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.657533][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.665128][ T5088] bridge_slave_0: entered allmulticast mode [ 111.673799][ T5088] bridge_slave_0: entered promiscuous mode [ 111.684297][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.691756][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.699097][ T5088] bridge_slave_1: entered allmulticast mode [ 111.707425][ T5088] bridge_slave_1: entered promiscuous mode [ 111.762191][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.771829][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.779061][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.787356][ T5086] bridge_slave_1: entered allmulticast mode [ 111.796568][ T5086] bridge_slave_1: entered promiscuous mode [ 111.825711][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.833087][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.859614][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.872591][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.879890][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.887907][ T5091] bridge_slave_0: entered allmulticast mode [ 111.896892][ T5091] bridge_slave_0: entered promiscuous mode [ 111.909375][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.978157][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.985794][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.011978][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.023865][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.031329][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.038696][ T5091] bridge_slave_1: entered allmulticast mode [ 112.046643][ T5091] bridge_slave_1: entered promiscuous mode [ 112.107387][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.121629][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.137300][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.186873][ T5090] team0: Port device team_slave_0 added [ 112.199337][ T5090] team0: Port device team_slave_1 added [ 112.209259][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.379931][ T5088] team0: Port device team_slave_0 added [ 112.391184][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.425883][ T5086] team0: Port device team_slave_0 added [ 112.437353][ T5086] team0: Port device team_slave_1 added [ 112.475780][ T5096] hsr_slave_0: entered promiscuous mode [ 112.482825][ T5096] hsr_slave_1: entered promiscuous mode [ 112.512085][ T5088] team0: Port device team_slave_1 added [ 112.521995][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.555023][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.562157][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.588182][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.695087][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.702484][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.729182][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.753141][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.760145][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.786361][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.822253][ T5091] team0: Port device team_slave_0 added [ 112.874819][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.881963][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.909131][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.930536][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.938696][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.965747][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.983797][ T5091] team0: Port device team_slave_1 added [ 113.028193][ T5090] hsr_slave_0: entered promiscuous mode [ 113.035305][ T5090] hsr_slave_1: entered promiscuous mode [ 113.043264][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.051687][ T5090] Cannot create hsr debugfs directory [ 113.061369][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.068374][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.094614][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.309376][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.316533][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.343111][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.359253][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.367145][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.393342][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.472304][ T5088] hsr_slave_0: entered promiscuous mode [ 113.479200][ T5088] hsr_slave_1: entered promiscuous mode [ 113.487424][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.491922][ T5105] Bluetooth: hci2: command tx timeout [ 113.495395][ T5088] Cannot create hsr debugfs directory [ 113.501882][ T5105] Bluetooth: hci1: command tx timeout [ 113.528098][ T5086] hsr_slave_0: entered promiscuous mode [ 113.535917][ T5086] hsr_slave_1: entered promiscuous mode [ 113.542779][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.550365][ T5086] Cannot create hsr debugfs directory [ 113.571853][ T5105] Bluetooth: hci4: command tx timeout [ 113.577345][ T5105] Bluetooth: hci0: command tx timeout [ 113.583510][ T5101] Bluetooth: hci3: command tx timeout [ 114.037429][ T5091] hsr_slave_0: entered promiscuous mode [ 114.046324][ T5091] hsr_slave_1: entered promiscuous mode [ 114.053534][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.062125][ T5091] Cannot create hsr debugfs directory [ 114.376353][ T5090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.393420][ T5090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.445787][ T5090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.462672][ T5090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.709935][ T5096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.728882][ T5096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.761934][ T5096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.785414][ T5096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.897537][ T5086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.926372][ T5086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.947229][ T5086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.975052][ T5086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.185784][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.200521][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.219273][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.258244][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.283891][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.445260][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.461894][ T5091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.478029][ T5091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.516593][ T5091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.535378][ T5091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.555359][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.563129][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.572859][ T5105] Bluetooth: hci1: command tx timeout [ 115.578296][ T5105] Bluetooth: hci2: command tx timeout [ 115.628493][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.635795][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.652139][ T5105] Bluetooth: hci0: command tx timeout [ 115.652160][ T5104] Bluetooth: hci3: command tx timeout [ 115.657656][ T5105] Bluetooth: hci4: command tx timeout [ 115.838694][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.982335][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 115.982361][ T30] audit: type=1400 audit(1721236124.156:113): avc: denied { sys_module } for pid=5090 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.032905][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.147273][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.179290][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.294592][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.301959][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.345676][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.352994][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.387086][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.464448][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.479553][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.487026][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.516254][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.523956][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.593483][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.755546][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.853222][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.874498][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.881810][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.906754][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.914020][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.030537][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.072033][ T5090] veth0_vlan: entered promiscuous mode [ 117.168803][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.176161][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.203483][ T5090] veth1_vlan: entered promiscuous mode [ 117.290109][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.297581][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.510475][ T5090] veth0_macvtap: entered promiscuous mode [ 117.599281][ T5090] veth1_macvtap: entered promiscuous mode [ 117.651377][ T5105] Bluetooth: hci2: command tx timeout [ 117.657422][ T5105] Bluetooth: hci1: command tx timeout [ 117.707747][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.732377][ T5105] Bluetooth: hci4: command tx timeout [ 117.737885][ T5105] Bluetooth: hci3: command tx timeout [ 117.744249][ T5101] Bluetooth: hci0: command tx timeout [ 117.799156][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.900385][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.966784][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.098189][ T5090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.111501][ T5090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.120327][ T5090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.130392][ T5090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.203930][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.496829][ T5086] veth0_vlan: entered promiscuous mode [ 118.595987][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.605726][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.619280][ T5086] veth1_vlan: entered promiscuous mode [ 118.697315][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.819153][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.828540][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.889098][ T5088] veth0_vlan: entered promiscuous mode [ 118.896800][ T30] audit: type=1400 audit(1721236127.056:114): avc: denied { mounton } for pid=5090 comm="syz-executor" path="/root/syzkaller.uQEP7i/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 118.948702][ T30] audit: type=1400 audit(1721236127.076:115): avc: denied { mount } for pid=5090 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.989129][ T30] audit: type=1400 audit(1721236127.076:116): avc: denied { mounton } for pid=5090 comm="syz-executor" path="/root/syzkaller.uQEP7i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.020396][ T5086] veth0_macvtap: entered promiscuous mode [ 119.040624][ T5096] veth0_vlan: entered promiscuous mode [ 119.055648][ T30] audit: type=1400 audit(1721236127.086:117): avc: denied { mount } for pid=5090 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.087629][ T5086] veth1_macvtap: entered promiscuous mode [ 119.111490][ T30] audit: type=1400 audit(1721236127.106:118): avc: denied { unmount } for pid=5090 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.133811][ T30] audit: type=1400 audit(1721236127.106:119): avc: denied { mounton } for pid=5090 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 119.141615][ T5091] veth0_vlan: entered promiscuous mode [ 119.160612][ T30] audit: type=1400 audit(1721236127.146:120): avc: denied { mount } for pid=5090 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.197390][ T5088] veth1_vlan: entered promiscuous mode [ 119.234495][ T5096] veth1_vlan: entered promiscuous mode [ 119.285920][ T30] audit: type=1400 audit(1721236127.446:121): avc: denied { read write } for pid=5090 comm="syz-executor" name="loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.316100][ T5091] veth1_vlan: entered promiscuous mode [ 119.384565][ T30] audit: type=1400 audit(1721236127.466:122): avc: denied { open } for pid=5090 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.464911][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 119.496098][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.496467][ T5178] Zero length message leads to an empty skb [ 119.516442][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.523177][ T5178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5178 comm=syz.3.4 [ 119.530695][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.555976][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.568810][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.589112][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.644446][ T5096] veth0_macvtap: entered promiscuous mode [ 119.698121][ T5096] veth1_macvtap: entered promiscuous mode [ 119.715882][ T5088] veth0_macvtap: entered promiscuous mode [ 119.730152][ T5086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.743677][ T5086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.752603][ T5086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761687][ T5086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.858120][ T5091] veth0_macvtap: entered promiscuous mode [ 119.876966][ T5088] veth1_macvtap: entered promiscuous mode [ 119.915916][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.928098][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.940615][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.951527][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.965535][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.980476][ T5091] veth1_macvtap: entered promiscuous mode [ 120.019640][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.030552][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.046634][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.058746][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.076077][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.126170][ T5096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.136737][ T5096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.147484][ T5096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.159532][ T5096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.241631][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.256574][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.267187][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.278487][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.289088][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.300207][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.312819][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.350334][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.376741][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.403743][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.415538][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.426428][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.439290][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.450701][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.462973][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.473232][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.486069][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.502122][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.511438][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.524398][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.538222][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.552120][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.564162][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.575696][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.592642][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.745683][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.760126][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.772727][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.789025][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.813213][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.826763][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.845607][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.859886][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.870563][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.881449][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.891748][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.902424][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.917555][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.978749][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.005848][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.006071][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 121.006093][ T30] audit: type=1400 audit(1721236129.176:138): avc: denied { ioctl } for pid=5183 comm="syz.3.7" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6144 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.020502][ T5091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.092168][ T5091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.129960][ T5091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.154515][ T5091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.303005][ T30] audit: type=1400 audit(1721236129.466:139): avc: denied { mounton } for pid=5086 comm="syz-executor" path="/root/syzkaller.tBRSDr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 121.386544][ T30] audit: type=1400 audit(1721236129.536:140): avc: denied { mounton } for pid=5086 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 121.441967][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.476166][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.723335][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.772093][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.173744][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.226969][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.413538][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.471093][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.528268][ T30] audit: type=1400 audit(1721236130.686:141): avc: denied { create } for pid=5194 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.560462][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.580600][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.602960][ T30] audit: type=1400 audit(1721236130.696:142): avc: denied { ioctl } for pid=5194 comm="syz.2.9" path="socket:[7229]" dev="sockfs" ino=7229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.690614][ T30] audit: type=1400 audit(1721236130.696:143): avc: denied { create } for pid=5194 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.757934][ T30] audit: type=1400 audit(1721236130.696:144): avc: denied { ioctl } for pid=5194 comm="syz.2.9" path="socket:[7230]" dev="sockfs" ino=7230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.865800][ T30] audit: type=1400 audit(1721236130.766:145): avc: denied { map_create } for pid=5194 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.891640][ T30] audit: type=1400 audit(1721236130.776:146): avc: denied { create } for pid=5194 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.920632][ T30] audit: type=1400 audit(1721236130.776:147): avc: denied { bind } for pid=5194 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.963750][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.980352][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.861864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 123.872842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.215811][ T5208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 124.374201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 124.998266][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.060891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 125.252426][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 125.327768][ T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 125.400638][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.412707][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.513006][ T9] usb 1-1: config 0 descriptor?? [ 125.672066][ T8] usb 4-1: no configurations [ 125.693356][ T8] usb 4-1: can't read configurations, error -22 [ 125.810803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 125.829023][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 125.921994][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.032084][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 126.032102][ T30] audit: type=1400 audit(1721236134.206:158): avc: denied { create } for pid=5205 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.158535][ T8] usb 4-1: no configurations [ 126.198990][ T8] usb 4-1: can't read configurations, error -22 [ 126.231849][ T30] audit: type=1400 audit(1721236134.236:159): avc: denied { bind } for pid=5205 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.263633][ T8] usb usb4-port1: attempt power cycle [ 126.351155][ T30] audit: type=1400 audit(1721236134.246:160): avc: denied { map_read map_write } for pid=5202 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.398846][ T5208] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 126.431736][ T30] audit: type=1400 audit(1721236134.326:161): avc: denied { connect } for pid=5205 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.479454][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 126.519505][ T30] audit: type=1400 audit(1721236134.546:162): avc: denied { setattr } for pid=5205 comm="syz.0.1" name="RXRPC" dev="sockfs" ino=7380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.519631][ T9] asix 1-1:0.0: probe with driver asix failed with error -32 [ 126.608902][ T30] audit: type=1400 audit(1721236134.626:163): avc: denied { ioctl } for pid=5205 comm="syz.0.1" path="socket:[7380]" dev="sockfs" ino=7380 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.616994][ T5208] team0: Device veth1_macvtap failed to register rx_handler [ 126.720669][ T30] audit: type=1400 audit(1721236134.676:164): avc: denied { create } for pid=5205 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.732068][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.788402][ T8] usb 4-1: no configurations [ 126.793349][ T8] usb 4-1: can't read configurations, error -22 [ 126.819086][ T30] audit: type=1400 audit(1721236134.736:165): avc: denied { write } for pid=5205 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.884281][ T30] audit: type=1400 audit(1721236134.736:166): avc: denied { nlmsg_write } for pid=5205 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.982439][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.045277][ T8] usb 4-1: no configurations [ 127.065714][ T8] usb 4-1: can't read configurations, error -22 [ 127.085888][ T8] usb usb4-port1: unable to enumerate USB device [ 128.002453][ T30] audit: type=1400 audit(1721236136.176:167): avc: denied { setopt } for pid=5232 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.132498][ T9] usb 1-1: USB disconnect, device number 2 [ 128.531268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 129.237405][ T5248] process 'syz.2.19' launched './file1' with NULL argv: empty string added [ 129.411305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 129.492051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 129.502913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 129.597615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 130.443922][ T5105] Bluetooth: hci0: ACL packet for unknown connection handle 203 [ 130.911071][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21'. [ 131.341070][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.552767][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 131.580191][ T47] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 131.626022][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.647973][ T5146] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.723577][ T47] usb 5-1: config 0 descriptor?? [ 131.921253][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 131.921307][ T30] audit: type=1400 audit(1721236139.976:179): avc: denied { create } for pid=5261 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.947860][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.591583][ T30] audit: type=1400 audit(1721236140.006:180): avc: denied { write } for pid=5261 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.619285][ T5146] usb 3-1: Using ep0 maxpacket: 8 [ 132.655402][ T30] audit: type=1400 audit(1721236140.186:181): avc: denied { write } for pid=5261 comm="syz.3.23" name="vlan0" dev="proc" ino=4026533839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 132.681146][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.720867][ T5146] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 132.741217][ T5146] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.777838][ T5146] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.802041][ T47] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 132.857289][ T5146] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 132.889394][ T5146] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.905617][ T5146] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.921228][ T5146] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 132.938626][ T5146] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.954497][ T5146] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.193263][ T47] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 133.218869][ T47] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 133.248808][ T47] asix 5-1:0.0: probe with driver asix failed with error -61 [ 133.322276][ T5146] usb 3-1: string descriptor 0 read error: -22 [ 133.329171][ T5146] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 133.339550][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.357673][ T5146] adutux 3-1:168.0: interrupt endpoints not found [ 133.624744][ T5146] usb 3-1: USB disconnect, device number 2 [ 134.404810][ T30] audit: type=1400 audit(1721236142.566:182): avc: denied { setopt } for pid=5274 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.434145][ T30] audit: type=1400 audit(1721236142.576:183): avc: denied { bind } for pid=5274 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.478877][ T30] audit: type=1400 audit(1721236142.576:184): avc: denied { name_bind } for pid=5274 comm="syz.2.25" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 134.500572][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.527359][ T30] audit: type=1400 audit(1721236142.576:185): avc: denied { node_bind } for pid=5274 comm="syz.2.25" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 134.548835][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.597948][ T30] audit: type=1400 audit(1721236142.596:186): avc: denied { write } for pid=5274 comm="syz.2.25" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.630110][ T30] audit: type=1400 audit(1721236142.596:187): avc: denied { connect } for pid=5274 comm="syz.2.25" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 134.651415][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.687109][ T30] audit: type=1400 audit(1721236142.596:188): avc: denied { name_connect } for pid=5274 comm="syz.2.25" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 134.948809][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 135.242797][ T5259] netlink: 'syz.4.21': attribute type 10 has an invalid length. [ 135.340276][ T5259] team0: Device veth1_macvtap failed to register rx_handler [ 135.414974][ T5271] netlink: 76 bytes leftover after parsing attributes in process `syz.0.24'. [ 135.565220][ T5278] bridge1: entered promiscuous mode [ 135.570539][ T5278] bridge1: entered allmulticast mode [ 135.625822][ T5176] usb 5-1: USB disconnect, device number 2 [ 135.961360][ T5290] netlink: 148 bytes leftover after parsing attributes in process `syz.1.28'. [ 136.696590][ T5304] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.806629][ T5299] pim6reg1: entered promiscuous mode [ 136.837421][ T5299] pim6reg1: entered allmulticast mode [ 136.877875][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 136.973476][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 136.973499][ T30] audit: type=1400 audit(1721236145.146:192): avc: denied { setopt } for pid=5298 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.326014][ T30] audit: type=1400 audit(1721236145.496:193): avc: denied { name_bind } for pid=5310 comm="syz.2.35" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 137.355336][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.490658][ T30] audit: type=1400 audit(1721236145.496:194): avc: denied { create } for pid=5310 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.549922][ T5312] befs: (nullb0): No write support. Marking filesystem read-only [ 137.593213][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.641063][ T30] audit: type=1400 audit(1721236145.496:195): avc: denied { connect } for pid=5310 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.683453][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.696459][ T5312] befs: (nullb0): invalid magic header [ 137.701582][ T30] audit: type=1400 audit(1721236145.616:196): avc: denied { create } for pid=5310 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.768584][ T30] audit: type=1400 audit(1721236145.626:197): avc: denied { write } for pid=5310 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 137.796719][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.896912][ T9] usb 4-1: config 0 descriptor?? [ 138.341871][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 138.379189][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 138.488036][ T9] usb 4-1: USB disconnect, device number 6 [ 138.706491][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.716365][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.765101][ T30] audit: type=1400 audit(1721236146.936:198): avc: denied { ioctl } for pid=5316 comm="syz.1.38" path="socket:[7529]" dev="sockfs" ino=7529 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.919345][ T30] audit: type=1400 audit(1721236147.016:199): avc: denied { setopt } for pid=5316 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.040886][ T30] audit: type=1400 audit(1721236147.116:200): avc: denied { read } for pid=5316 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.429660][ T30] audit: type=1400 audit(1721236147.586:201): avc: denied { name_bind } for pid=5326 comm="syz.4.40" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.446265][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 139.479820][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 139.490215][ T5105] CPU: 1 PID: 5105 Comm: kworker/u9:10 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 139.490866][ T785] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 139.500341][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 139.517853][ T5105] Workqueue: hci1 hci_rx_work [ 139.522700][ T5105] Call Trace: [ 139.526002][ T5105] [ 139.528966][ T5105] dump_stack_lvl+0x16c/0x1f0 [ 139.533728][ T5105] sysfs_warn_dup+0x7f/0xa0 [ 139.538289][ T5105] sysfs_create_dir_ns+0x24d/0x2b0 [ 139.543447][ T5105] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.549123][ T5105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.554538][ T5105] ? do_raw_spin_unlock+0x172/0x230 [ 139.559774][ T5105] kobject_add_internal+0x2c8/0x990 [ 139.565109][ T5105] kobject_add+0x16f/0x240 [ 139.569579][ T5105] ? __pfx_kobject_add+0x10/0x10 [ 139.574573][ T5105] ? do_raw_spin_unlock+0x172/0x230 [ 139.579807][ T5105] ? kobject_put+0xbe/0x5b0 [ 139.584386][ T5105] device_add+0x289/0x1a70 [ 139.588844][ T5105] ? __pfx_dev_set_name+0x10/0x10 [ 139.593924][ T5105] ? __pfx_device_add+0x10/0x10 [ 139.598902][ T5105] ? mgmt_send_event_skb+0x2f2/0x460 [ 139.604232][ T5105] hci_conn_add_sysfs+0x17e/0x230 [ 139.609298][ T5105] le_conn_complete_evt+0x1078/0x1d80 [ 139.614710][ T5105] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.620466][ T5105] ? trace_contention_end+0xea/0x140 [ 139.625874][ T5105] ? __mutex_lock+0x1a6/0x9c0 [ 139.630608][ T5105] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 139.636556][ T5105] ? skb_pull_data+0x166/0x210 [ 139.641381][ T5105] hci_le_meta_evt+0x2e2/0x5d0 [ 139.646186][ T5105] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 139.652645][ T5105] hci_event_packet+0x666/0x1180 [ 139.657620][ T5105] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.662950][ T5105] ? __pfx_hci_event_packet+0x10/0x10 [ 139.668361][ T5105] ? mark_held_locks+0x9f/0xe0 [ 139.673157][ T5105] ? kcov_remote_start+0x3d1/0x6e0 [ 139.678392][ T5105] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.683664][ T5105] hci_rx_work+0x2c6/0x1610 [ 139.688227][ T5105] process_one_work+0x9c5/0x1b40 [ 139.693217][ T5105] ? __pfx_lock_acquire+0x10/0x10 [ 139.698278][ T5105] ? __pfx_process_one_work+0x10/0x10 [ 139.703722][ T5105] ? assign_work+0x1a0/0x250 [ 139.708345][ T5105] worker_thread+0x6c8/0xf20 [ 139.712973][ T5105] ? __kthread_parkme+0x148/0x220 [ 139.718056][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 139.723200][ T5105] kthread+0x2c1/0x3a0 [ 139.727310][ T5105] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.732565][ T5105] ? __pfx_kthread+0x10/0x10 [ 139.737203][ T5105] ret_from_fork+0x45/0x80 [ 139.741677][ T5105] ? __pfx_kthread+0x10/0x10 [ 139.746351][ T5105] ret_from_fork_asm+0x1a/0x30 [ 139.751170][ T5105] [ 139.761274][ T5105] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.775476][ T5105] Bluetooth: hci1: failed to register connection device [ 140.046200][ T785] usb 2-1: No LPM exit latency info found, disabling LPM. [ 140.080005][ T785] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 140.118913][ T785] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.118991][ T785] usb 2-1: config 1 interface 0 has no altsetting 0 [ 140.133339][ T785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 140.133392][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.133430][ T785] usb 2-1: Product: ߬ [ 140.133459][ T785] usb 2-1: SerialNumber: ᐊ [ 140.180619][ T5325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 140.202057][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 140.280260][ T5105] CPU: 0 PID: 5105 Comm: kworker/u9:10 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 140.290347][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.300548][ T5105] Workqueue: hci4 hci_rx_work [ 140.305313][ T5105] Call Trace: [ 140.308642][ T5105] [ 140.311660][ T5105] dump_stack_lvl+0x16c/0x1f0 [ 140.316606][ T5105] sysfs_warn_dup+0x7f/0xa0 [ 140.321192][ T5105] sysfs_create_dir_ns+0x24d/0x2b0 [ 140.327463][ T5105] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 140.327522][ T5105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.327572][ T5105] ? do_raw_spin_unlock+0x172/0x230 [ 140.327619][ T5105] kobject_add_internal+0x2c8/0x990 [ 140.327681][ T5105] kobject_add+0x16f/0x240 [ 140.327750][ T5105] ? __pfx_kobject_add+0x10/0x10 [ 140.327809][ T5105] ? do_raw_spin_unlock+0x172/0x230 [ 140.327853][ T5105] ? kobject_put+0xbe/0x5b0 [ 140.327909][ T5105] device_add+0x289/0x1a70 [ 140.327957][ T5105] ? __pfx_dev_set_name+0x10/0x10 [ 140.328012][ T5105] ? __pfx_device_add+0x10/0x10 [ 140.328060][ T5105] ? mgmt_send_event_skb+0x2f2/0x460 [ 140.328108][ T5105] hci_conn_add_sysfs+0x17e/0x230 [ 140.328160][ T5105] le_conn_complete_evt+0x1078/0x1d80 [ 140.328208][ T5105] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 140.328247][ T5105] ? trace_contention_end+0xea/0x140 [ 140.328285][ T5105] ? __mutex_lock+0x1a6/0x9c0 [ 140.328340][ T5105] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 140.328384][ T5105] ? skb_pull_data+0x166/0x210 [ 140.328432][ T5105] hci_le_meta_evt+0x2e2/0x5d0 [ 140.328479][ T5105] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 140.328556][ T5105] hci_event_packet+0x666/0x1180 [ 140.328600][ T5105] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 140.328648][ T5105] ? __pfx_hci_event_packet+0x10/0x10 [ 140.328690][ T5105] ? mark_held_locks+0x9f/0xe0 [ 140.328727][ T5105] ? kcov_remote_start+0x3d1/0x6e0 [ 140.328776][ T5105] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.328834][ T5105] hci_rx_work+0x2c6/0x1610 [ 140.328886][ T5105] process_one_work+0x9c5/0x1b40 [ 140.328933][ T5105] ? __pfx_lock_acquire+0x10/0x10 [ 140.328971][ T5105] ? __pfx_process_one_work+0x10/0x10 [ 140.329016][ T5105] ? assign_work+0x1a0/0x250 [ 140.329052][ T5105] worker_thread+0x6c8/0xf20 [ 140.329097][ T5105] ? __kthread_parkme+0x148/0x220 [ 140.329148][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 140.329189][ T5105] kthread+0x2c1/0x3a0 [ 140.329238][ T5105] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.329286][ T5105] ? __pfx_kthread+0x10/0x10 [ 140.329335][ T5105] ret_from_fork+0x45/0x80 [ 140.329392][ T5105] ? __pfx_kthread+0x10/0x10 [ 140.329441][ T5105] ret_from_fork_asm+0x1a/0x30 [ 140.329501][ T5105] [ 140.329627][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.340874][ T5105] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.581833][ T5105] Bluetooth: hci4: failed to register connection device [ 140.623361][ T785] usb 2-1: USB disconnect, device number 2 [ 140.646315][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.653217][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.660529][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.663557][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.665550][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 140.666143][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.833989][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.034604][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.312198][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.810976][ T5105] Bluetooth: hci1: command tx timeout [ 141.958357][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.126697][ T5351] hsr_slave_0: left promiscuous mode [ 142.364249][ T5351] hsr_slave_1: left promiscuous mode [ 142.611835][ T5105] Bluetooth: hci4: command tx timeout [ 142.771599][ T5105] Bluetooth: hci3: command tx timeout [ 142.929479][ T5357] netlink: 'syz.2.48': attribute type 2 has an invalid length. [ 142.947949][ T5357] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 142.984912][ T5357] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.48'. [ 143.355057][ T5334] chnl_net:caif_netlink_parms(): no params data found [ 143.631024][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 143.755508][ T62] bridge_slave_1: left allmulticast mode [ 143.773335][ T62] bridge_slave_1: left promiscuous mode [ 143.835413][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.854133][ T9] usb 3-1: No LPM exit latency info found, disabling LPM. [ 143.863258][ T9] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 143.880973][ T9] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.896101][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 143.920346][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.935536][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.943993][ T9] usb 3-1: Product: ߬ [ 143.948116][ T9] usb 3-1: SerialNumber: ᐊ [ 143.971411][ T5366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.057563][ T62] bridge_slave_0: left allmulticast mode [ 144.071753][ T62] bridge_slave_0: left promiscuous mode [ 144.077839][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.443828][ T9] usb 3-1: USB disconnect, device number 3 [ 144.869293][ T5105] Bluetooth: hci3: command tx timeout [ 145.658790][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 145.658815][ T30] audit: type=1400 audit(1721236153.826:208): avc: denied { create } for pid=5375 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 145.712919][ T30] audit: type=1400 audit(1721236153.886:209): avc: denied { read } for pid=5375 comm="syz.1.51" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.760054][ T30] audit: type=1400 audit(1721236153.886:210): avc: denied { open } for pid=5375 comm="syz.1.51" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 145.781809][ T5376] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.868464][ T30] audit: type=1400 audit(1721236153.946:211): avc: denied { ioctl } for pid=5375 comm="syz.1.51" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.425843][ T5105] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 146.587835][ T5390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'. [ 146.931961][ T5105] Bluetooth: hci3: command tx timeout [ 147.003003][ T5146] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.101082][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.156850][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.240827][ T5146] usb 3-1: Using ep0 maxpacket: 8 [ 147.252501][ T62] bond0 (unregistering): Released all slaves [ 147.271710][ T5146] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 147.289564][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.438459][ T5146] usb 3-1: config 0 descriptor?? [ 147.456874][ T30] audit: type=1400 audit(1721236155.596:212): avc: denied { search } for pid=4750 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.588141][ T30] audit: type=1400 audit(1721236155.596:213): avc: denied { read } for pid=4750 comm="dhcpcd" name="n68" dev="tmpfs" ino=1700 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.787700][ T30] audit: type=1400 audit(1721236155.596:214): avc: denied { open } for pid=4750 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1700 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.896482][ T30] audit: type=1400 audit(1721236155.596:215): avc: denied { getattr } for pid=4750 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1700 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.001696][ T5146] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 148.827061][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.906123][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.966458][ T5334] bridge_slave_0: entered allmulticast mode [ 149.012736][ T5146] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 149.023843][ T5105] Bluetooth: hci3: command tx timeout [ 149.044070][ T5334] bridge_slave_0: entered promiscuous mode [ 149.083264][ T5146] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 149.152799][ T5390] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 149.191948][ T5146] asix 3-1:0.0: probe with driver asix failed with error -61 [ 149.367387][ T5390] team0: Device veth1_macvtap failed to register rx_handler [ 149.548180][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.601503][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.639841][ T5334] bridge_slave_1: entered allmulticast mode [ 149.684502][ T5334] bridge_slave_1: entered promiscuous mode [ 149.921205][ T30] audit: type=1400 audit(1721236158.086:216): avc: denied { read } for pid=5400 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.112964][ T30] audit: type=1400 audit(1721236158.126:217): avc: denied { open } for pid=5400 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.339645][ T5334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.449525][ T5334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.905612][ T62] hsr_slave_0: left promiscuous mode [ 150.977139][ T62] hsr_slave_1: left promiscuous mode [ 150.990170][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 150.990195][ T30] audit: type=1400 audit(1721236159.156:219): avc: denied { create } for pid=5413 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.028107][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.067750][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.125784][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.139131][ T30] audit: type=1400 audit(1721236159.226:220): avc: denied { map } for pid=5413 comm="syz.4.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.179523][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.281097][ T30] audit: type=1400 audit(1721236159.226:221): avc: denied { read write } for pid=5413 comm="syz.4.58" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.336027][ T62] veth0_macvtap: left promiscuous mode [ 151.369726][ T62] veth1_vlan: left promiscuous mode [ 151.414586][ T62] veth0_vlan: left promiscuous mode [ 151.457795][ T5136] usb 3-1: USB disconnect, device number 4 [ 151.625138][ T30] audit: type=1400 audit(1721236159.786:222): avc: denied { write } for pid=5397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.764480][ T30] audit: type=1400 audit(1721236159.786:223): avc: denied { add_name } for pid=5397 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.901908][ T30] audit: type=1400 audit(1721236159.786:224): avc: denied { create } for pid=5397 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.028183][ T30] audit: type=1400 audit(1721236159.786:225): avc: denied { write } for pid=5397 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.096544][ T30] audit: type=1400 audit(1721236159.826:226): avc: denied { append } for pid=5397 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.408915][ T30] audit: type=1400 audit(1721236160.576:227): avc: denied { remove_name } for pid=5427 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.513936][ T30] audit: type=1400 audit(1721236160.606:228): avc: denied { unlink } for pid=5427 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1765 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 155.900089][ T62] team0 (unregistering): Port device team_slave_1 removed [ 156.014162][ T62] team0 (unregistering): Port device team_slave_0 removed [ 157.098932][ T5438] tipc: Enabling of bearer rejected, failed to enable media [ 157.493470][ T5334] team0: Port device team_slave_0 added [ 157.795379][ T5334] team0: Port device team_slave_1 added [ 158.994302][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.044515][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.161370][ T5334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.215097][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 159.215120][ T30] audit: type=1400 audit(1721236167.386:233): avc: denied { setopt } for pid=5467 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 159.261649][ T5334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.296320][ T5334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.416269][ T5334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.546378][ T5475] pim6reg1: entered promiscuous mode [ 159.617282][ T5475] pim6reg1: entered allmulticast mode [ 160.205064][ T5334] hsr_slave_0: entered promiscuous mode [ 160.284065][ T5334] hsr_slave_1: entered promiscuous mode [ 160.323374][ T5334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.417653][ T5334] Cannot create hsr debugfs directory [ 161.083583][ T30] audit: type=1400 audit(1721236169.256:234): avc: denied { read } for pid=5492 comm="syz.1.72" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.308281][ T30] audit: type=1400 audit(1721236169.256:235): avc: denied { open } for pid=5492 comm="syz.1.72" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.495966][ T5496] veth0_vlan: entered allmulticast mode [ 162.710981][ T5509] veth0_vlan: left promiscuous mode [ 162.744479][ T5509] veth0_vlan: entered promiscuous mode [ 165.058080][ T30] audit: type=1400 audit(1721236173.226:236): avc: denied { ioctl } for pid=5527 comm="syz.4.77" path="socket:[8024]" dev="sockfs" ino=8024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.033684][ T30] audit: type=1400 audit(1721236173.266:237): avc: denied { bind } for pid=5527 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.056673][ T785] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 166.159349][ T30] audit: type=1400 audit(1721236174.196:238): avc: denied { write } for pid=5527 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.258249][ T30] audit: type=1400 audit(1721236174.196:239): avc: denied { read } for pid=5527 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.279606][ T785] usb 3-1: No LPM exit latency info found, disabling LPM. [ 166.326305][ T785] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 166.360360][ T785] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.370369][ T30] audit: type=1400 audit(1721236174.526:240): avc: denied { bind } for pid=5543 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.392607][ T785] usb 3-1: config 1 interface 0 has no altsetting 0 [ 166.416078][ T785] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.452008][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.465690][ T30] audit: type=1400 audit(1721236174.606:241): avc: denied { connect } for pid=5543 comm="syz.1.79" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.484201][ T785] usb 3-1: Product: ߬ [ 166.494514][ T30] audit: type=1400 audit(1721236174.606:242): avc: denied { setopt } for pid=5543 comm="syz.1.79" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.505793][ T785] usb 3-1: SerialNumber: ᐊ [ 166.552398][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 166.583225][ T5534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.625831][ T30] audit: type=1400 audit(1721236174.776:243): avc: denied { getopt } for pid=5543 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.962327][ T785] usb 3-1: USB disconnect, device number 5 [ 167.442463][ T5334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.478394][ T5334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.557235][ T5334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.659439][ T5334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.467991][ T5334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.134294][ T5334] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.166110][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.174459][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.136966][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.144348][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.773001][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 172.773108][ T5105] CPU: 1 PID: 5105 Comm: kworker/u9:10 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 172.773151][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.773175][ T5105] Workqueue: hci0 hci_rx_work [ 172.773229][ T5105] Call Trace: [ 172.773244][ T5105] [ 172.773258][ T5105] dump_stack_lvl+0x16c/0x1f0 [ 172.773313][ T5105] sysfs_warn_dup+0x7f/0xa0 [ 172.773359][ T5105] sysfs_create_dir_ns+0x24d/0x2b0 [ 172.773404][ T5105] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 172.773448][ T5105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.773496][ T5105] ? do_raw_spin_unlock+0x172/0x230 [ 172.773542][ T5105] kobject_add_internal+0x2c8/0x990 [ 172.773599][ T5105] kobject_add+0x16f/0x240 [ 172.773653][ T5105] ? __pfx_kobject_add+0x10/0x10 [ 172.773707][ T5105] ? do_raw_spin_unlock+0x172/0x230 [ 172.773757][ T5105] ? kobject_put+0xbe/0x5b0 [ 172.773813][ T5105] device_add+0x289/0x1a70 [ 172.773860][ T5105] ? __pfx_dev_set_name+0x10/0x10 [ 172.773910][ T5105] ? __pfx_device_add+0x10/0x10 [ 172.773957][ T5105] ? mgmt_send_event_skb+0x2f2/0x460 [ 172.774001][ T5105] hci_conn_add_sysfs+0x17e/0x230 [ 172.774051][ T5105] le_conn_complete_evt+0x1078/0x1d80 [ 172.774096][ T5105] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 172.774138][ T5105] ? trace_contention_end+0xea/0x140 [ 172.774181][ T5105] ? __mutex_lock+0x1a6/0x9c0 [ 172.774245][ T5105] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 172.774294][ T5105] ? skb_pull_data+0x166/0x210 [ 172.774343][ T5105] hci_le_meta_evt+0x2e2/0x5d0 [ 172.774393][ T5105] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 172.774441][ T5105] hci_event_packet+0x666/0x1180 [ 172.774484][ T5105] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 172.774532][ T5105] ? __pfx_hci_event_packet+0x10/0x10 [ 172.774575][ T5105] ? mark_held_locks+0x9f/0xe0 [ 172.774612][ T5105] ? kcov_remote_start+0x3d1/0x6e0 [ 172.774656][ T5105] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.774731][ T5105] hci_rx_work+0x2c6/0x1610 [ 172.774785][ T5105] process_one_work+0x9c5/0x1b40 [ 172.774831][ T5105] ? __pfx_lock_acquire+0x10/0x10 [ 172.774869][ T5105] ? __pfx_process_one_work+0x10/0x10 [ 172.774913][ T5105] ? assign_work+0x1a0/0x250 [ 172.774958][ T5105] worker_thread+0x6c8/0xf20 [ 172.775033][ T5105] ? __kthread_parkme+0x148/0x220 [ 172.775097][ T5105] ? __pfx_worker_thread+0x10/0x10 [ 172.775138][ T5105] kthread+0x2c1/0x3a0 [ 172.775186][ T5105] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.775234][ T5105] ? __pfx_kthread+0x10/0x10 [ 172.775284][ T5105] ret_from_fork+0x45/0x80 [ 172.775339][ T5105] ? __pfx_kthread+0x10/0x10 [ 172.775388][ T5105] ret_from_fork_asm+0x1a/0x30 [ 172.775448][ T5105] [ 172.776093][ T5105] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.776160][ T5105] Bluetooth: hci0: failed to register connection device [ 173.156014][ T5611] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 173.227378][ T5609] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 80 [ 173.259253][ T5334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.569455][ T5334] veth0_vlan: entered promiscuous mode [ 174.366109][ T5334] veth1_vlan: entered promiscuous mode [ 174.575562][ T5334] veth0_macvtap: entered promiscuous mode [ 174.626402][ T5334] veth1_macvtap: entered promiscuous mode [ 174.773878][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.825642][ T30] audit: type=1400 audit(1721236182.976:244): avc: denied { read write } for pid=5619 comm="syz.2.89" name="radio8" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 174.964710][ T5105] Bluetooth: hci0: command tx timeout [ 174.974884][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.140844][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.038894][ T30] audit: type=1400 audit(1721236182.976:245): avc: denied { open } for pid=5619 comm="syz.2.89" path="/dev/radio8" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 176.068059][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.121893][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.161008][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.194175][ T30] audit: type=1400 audit(1721236182.976:246): avc: denied { ioctl } for pid=5619 comm="syz.2.89" path="/dev/radio8" dev="devtmpfs" ino=925 ioctlcmd=0x5626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 176.241054][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.280752][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.317722][ T30] audit: type=1400 audit(1721236183.386:247): avc: denied { connect } for pid=5619 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.356353][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.440862][ T30] audit: type=1400 audit(1721236183.396:248): avc: denied { write } for pid=5619 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.473756][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.521784][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.540765][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.570850][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.590847][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.627664][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.660836][ T5334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.690140][ T5334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.770242][ T5334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.946521][ T5334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.016850][ T5334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.061688][ T5334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.099264][ T5334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.781057][ T5636] sched: RT throttling activated [ 180.733206][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.798663][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.995878][ T2395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.040218][ T2395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.129385][ T30] audit: type=1400 audit(1721236189.296:249): avc: denied { mount } for pid=5334 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 181.182383][ T5669] pim6reg1: entered promiscuous mode [ 181.220855][ T5669] pim6reg1: entered allmulticast mode [ 181.306617][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 181.422275][ T5675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5675 comm=syz.1.101 [ 181.585814][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.723330][ T30] audit: type=1400 audit(1721236189.896:250): avc: denied { read } for pid=5677 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.802798][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.844703][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.887634][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.934070][ T25] usb 4-1: config 0 descriptor?? [ 181.995003][ T5684] befs: (nullb0): No write support. Marking filesystem read-only [ 182.033777][ T5684] befs: (nullb0): invalid magic header [ 182.382496][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 182.413055][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.454494][ T25] usb 4-1: USB disconnect, device number 7 [ 182.489934][ T5692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 182.516911][ T5260] udevd[5260]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory [ 183.339325][ T30] audit: type=1400 audit(1721236191.166:251): avc: denied { execute } for pid=5695 comm="syz.0.105" name="file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.451142][ T30] audit: type=1400 audit(1721236191.166:252): avc: denied { execute_no_trans } for pid=5695 comm="syz.0.105" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.072723][ T5710] netlink: 148 bytes leftover after parsing attributes in process `syz.1.106'. [ 185.708987][ T5724] netlink: 76 bytes leftover after parsing attributes in process `syz.2.110'. [ 185.790455][ T30] audit: type=1400 audit(1721236193.956:253): avc: denied { ioctl } for pid=5725 comm="syz.3.113" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.030520][ T30] audit: type=1400 audit(1721236193.956:254): avc: denied { set_context_mgr } for pid=5725 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 186.098951][ T5728] binder: 5726:5728 ioctl c00c620f 0 returned -14 [ 186.192144][ T5728] veth0_vlan: entered allmulticast mode [ 186.464340][ T30] audit: type=1400 audit(1721236194.626:255): avc: denied { mount } for pid=5725 comm="syz.3.113" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 186.731264][ T5735] veth0_vlan: left promiscuous mode [ 186.769495][ T5735] veth0_vlan: entered promiscuous mode [ 187.099969][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 187.193384][ T5742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5742 comm=syz.0.114 [ 187.968388][ T5750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.116'. [ 188.845938][ T5760] befs: (nullb0): No write support. Marking filesystem read-only [ 188.874171][ T5760] befs: (nullb0): invalid magic header [ 190.193376][ T5772] pim6reg1: entered promiscuous mode [ 190.241024][ T5772] pim6reg1: entered allmulticast mode [ 190.794260][ T5105] Bluetooth: hci3: link tx timeout [ 190.801161][ T5105] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.451180][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 191.571327][ T5791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5791 comm=syz.3.125 [ 191.663531][ T1792] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.793262][ T5797] netlink: 148 bytes leftover after parsing attributes in process `syz.0.127'. [ 191.903930][ T5800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 191.924398][ T1792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.978838][ T1792] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.019056][ T1792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.095274][ T1792] usb 5-1: config 0 descriptor?? [ 192.529741][ T1792] usbhid 5-1:0.0: can't add hid device: -71 [ 192.613513][ T1792] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.749981][ T1792] usb 5-1: USB disconnect, device number 3 [ 193.013859][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 193.480131][ T5819] netlink: 76 bytes leftover after parsing attributes in process `syz.1.131'. [ 194.408250][ T5827] befs: (nullb0): No write support. Marking filesystem read-only [ 194.862063][ T5827] befs: (nullb0): invalid magic header [ 196.753169][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 196.918590][ T5843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5843 comm=syz.2.139 [ 197.761512][ T5857] pim6reg1: entered promiscuous mode [ 197.771559][ T5857] pim6reg1: entered allmulticast mode [ 197.975747][ T5863] befs: (nullb0): No write support. Marking filesystem read-only [ 197.984517][ T5863] befs: (nullb0): invalid magic header [ 198.171447][ T1792] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.406246][ T1792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.464652][ T1792] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.504726][ T1792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.591551][ T1792] usb 4-1: config 0 descriptor?? [ 198.874150][ T5869] netlink: 148 bytes leftover after parsing attributes in process `syz.2.148'. [ 199.050966][ T1792] usbhid 4-1:0.0: can't add hid device: -71 [ 199.099355][ T1792] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.143191][ T1792] usb 4-1: USB disconnect, device number 8 [ 199.921095][ T5880] netlink: 76 bytes leftover after parsing attributes in process `syz.1.151'. [ 200.300997][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.307813][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.157840][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 201.436437][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 201.512579][ T5887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5887 comm=syz.4.155 [ 202.873973][ T5902] befs: (nullb0): No write support. Marking filesystem read-only [ 202.885739][ T5902] befs: (nullb0): invalid magic header [ 203.262954][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.160'. [ 203.670828][ T785] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 203.863439][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 204.077065][ T785] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 204.086674][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.122844][ T785] usb 3-1: config 0 descriptor?? [ 205.086179][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 205.086729][ T785] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 205.304063][ T5924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5924 comm=syz.1.167 [ 205.374836][ T5904] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 205.413866][ T5904] team0: Device veth1_macvtap failed to register rx_handler [ 205.531072][ T785] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 205.550763][ T785] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 205.584211][ T785] asix 3-1:0.0: probe with driver asix failed with error -61 [ 206.105031][ T5937] netlink: 76 bytes leftover after parsing attributes in process `syz.1.169'. [ 206.130177][ T5935] netlink: 148 bytes leftover after parsing attributes in process `syz.0.170'. [ 206.605028][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 206.777406][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 206.899025][ T5950] batman_adv: batadv1: Adding interface: netdevsim0 [ 206.921817][ T5950] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.083083][ T5950] batman_adv: batadv1: Interface activated: netdevsim0 [ 207.171558][ T5101] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 207.851259][ T5146] usb 3-1: USB disconnect, device number 6 [ 209.037491][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 209.250504][ T5963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5963 comm=syz.3.179 [ 212.854489][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.190'. [ 213.024807][ T6008] netlink: 'syz.3.191': attribute type 2 has an invalid length. [ 213.088939][ T6008] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 213.106525][ T6008] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.191'. [ 213.240864][ T5146] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 213.333293][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 213.441443][ T5146] usb 5-1: Using ep0 maxpacket: 8 [ 213.471463][ T5146] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 213.508565][ T6014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6014 comm=syz.1.194 [ 213.522160][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.555337][ T5146] usb 5-1: config 0 descriptor?? [ 213.828322][ T5146] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 214.017387][ T6031] befs: (nullb0): No write support. Marking filesystem read-only [ 214.050434][ T6031] befs: (nullb0): invalid magic header [ 214.075424][ T6005] netlink: 'syz.4.190': attribute type 10 has an invalid length. [ 214.173709][ T6005] team0: Device veth1_macvtap failed to register rx_handler [ 214.211001][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 214.230621][ T5146] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 214.247965][ T5146] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 214.258781][ T5146] asix 5-1:0.0: probe with driver asix failed with error -61 [ 216.709016][ T785] usb 5-1: USB disconnect, device number 4 [ 217.486371][ T5101] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 217.496681][ T5101] CPU: 0 PID: 5101 Comm: kworker/u9:7 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 217.506806][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.516981][ T5101] Workqueue: hci0 hci_rx_work [ 217.521723][ T5101] Call Trace: [ 217.525057][ T5101] [ 217.528026][ T5101] dump_stack_lvl+0x16c/0x1f0 [ 217.532764][ T5101] sysfs_warn_dup+0x7f/0xa0 [ 217.537336][ T5101] sysfs_create_dir_ns+0x24d/0x2b0 [ 217.542504][ T5101] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 217.548165][ T5101] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 217.553583][ T5101] ? do_raw_spin_unlock+0x172/0x230 [ 217.558832][ T5101] kobject_add_internal+0x2c8/0x990 [ 217.564142][ T5101] kobject_add+0x16f/0x240 [ 217.568688][ T5101] ? __pfx_kobject_add+0x10/0x10 [ 217.573767][ T5101] ? do_raw_spin_unlock+0x172/0x230 [ 217.578999][ T5101] ? kobject_put+0xbe/0x5b0 [ 217.583543][ T5101] device_add+0x289/0x1a70 [ 217.587996][ T5101] ? __pfx_dev_set_name+0x10/0x10 [ 217.593062][ T5101] ? __pfx_device_add+0x10/0x10 [ 217.597964][ T5101] ? mgmt_send_event_skb+0x2f2/0x460 [ 217.603300][ T5101] hci_conn_add_sysfs+0x17e/0x230 [ 217.608394][ T5101] le_conn_complete_evt+0x1078/0x1d80 [ 217.614083][ T5101] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 217.619844][ T5101] ? trace_contention_end+0xea/0x140 [ 217.625170][ T5101] ? __mutex_lock+0x1a6/0x9c0 [ 217.629888][ T5101] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 217.635815][ T5101] ? skb_pull_data+0x166/0x210 [ 217.640706][ T5101] hci_le_meta_evt+0x2e2/0x5d0 [ 217.645524][ T5101] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 217.651970][ T5101] hci_event_packet+0x666/0x1180 [ 217.656936][ T5101] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 217.662256][ T5101] ? __pfx_hci_event_packet+0x10/0x10 [ 217.667678][ T5101] ? mark_held_locks+0x9f/0xe0 [ 217.672468][ T5101] ? kcov_remote_start+0x3d1/0x6e0 [ 217.677635][ T5101] ? lockdep_hardirqs_on+0x7c/0x110 [ 217.682878][ T5101] hci_rx_work+0x2c6/0x1610 [ 217.687433][ T5101] process_one_work+0x9c5/0x1b40 [ 217.692402][ T5101] ? __pfx_lock_acquire+0x10/0x10 [ 217.697464][ T5101] ? __pfx_process_one_work+0x10/0x10 [ 217.702864][ T5101] ? assign_work+0x1a0/0x250 [ 217.707476][ T5101] worker_thread+0x6c8/0xf20 [ 217.712098][ T5101] ? __pfx_worker_thread+0x10/0x10 [ 217.717247][ T5101] kthread+0x2c1/0x3a0 [ 217.721368][ T5101] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.726600][ T5101] ? __pfx_kthread+0x10/0x10 [ 217.731221][ T5101] ret_from_fork+0x45/0x80 [ 217.735673][ T5101] ? __pfx_kthread+0x10/0x10 [ 217.740293][ T5101] ret_from_fork_asm+0x1a/0x30 [ 217.745104][ T5101] [ 217.755083][ T5101] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 217.770958][ T5101] Bluetooth: hci0: failed to register connection device [ 218.491422][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 218.688185][ T6071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6071 comm=syz.1.207 [ 219.512141][ T6078] befs: (nullb0): No write support. Marking filesystem read-only [ 219.532032][ T6078] befs: (nullb0): invalid magic header [ 219.811770][ T5105] Bluetooth: hci0: command tx timeout [ 220.557917][ T5105] Bluetooth: Wrong link type (-71) [ 221.597891][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.219'. [ 221.790138][ T5105] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 221.855542][ T6099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6099 comm=syz.4.219 [ 221.925965][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 221.972609][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.223'. [ 222.104582][ T6112] befs: (nullb0): No write support. Marking filesystem read-only [ 222.115026][ T6112] befs: (nullb0): invalid magic header [ 222.248442][ T5105] Bluetooth: Wrong link type (-71) [ 222.254068][ T5105] Bluetooth: hci2: link tx timeout [ 222.259675][ T5105] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 222.273135][ T5105] Bluetooth: hci2: link tx timeout [ 222.278315][ T5105] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.048756][ T6119] netlink: 76 bytes leftover after parsing attributes in process `syz.1.228'. [ 223.955383][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 224.110021][ T6143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6143 comm=syz.1.234 [ 224.220169][ T5101] Bluetooth: hci0: link tx timeout [ 224.226099][ T5101] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 224.249733][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 224.430806][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 224.935619][ T5105] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 225.614954][ T6157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 226.293321][ T5101] Bluetooth: hci0: command 0x0406 tx timeout [ 226.452353][ T5101] Bluetooth: hci2: command 0x0406 tx timeout [ 226.739641][ T6161] befs: (nullb0): No write support. Marking filesystem read-only [ 227.161477][ T6161] befs: (nullb0): invalid magic header [ 227.191626][ T6164] netlink: 76 bytes leftover after parsing attributes in process `syz.1.241'. [ 227.983152][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 228.173569][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6181 comm=syz.2.246 [ 228.221690][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 228.532830][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 228.883714][ T5104] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 228.906939][ T5104] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 229.800944][ T785] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 230.770270][ T785] usb 2-1: No LPM exit latency info found, disabling LPM. [ 230.795361][ T785] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 230.805329][ T785] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.822015][ T6199] netlink: 76 bytes leftover after parsing attributes in process `syz.2.253'. [ 230.831460][ T785] usb 2-1: config 1 interface 0 has no altsetting 0 [ 230.846448][ T785] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 230.897532][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.013405][ T785] usb 2-1: Product: ߬ [ 231.045356][ T785] usb 2-1: SerialNumber: ᐊ [ 231.068349][ T6195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.124591][ T6202] befs: (nullb0): No write support. Marking filesystem read-only [ 231.142785][ T6202] befs: (nullb0): invalid magic header [ 231.325081][ T30] audit: type=1400 audit(1721236239.486:256): avc: denied { name_bind } for pid=6203 comm="syz.0.255" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 231.526476][ T30] audit: type=1400 audit(1721236239.696:257): avc: denied { create } for pid=6203 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.555410][ T785] usb 2-1: USB disconnect, device number 3 [ 231.654816][ T30] audit: type=1400 audit(1721236239.746:258): avc: denied { read } for pid=6203 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.944319][ T5104] Bluetooth: hci4: command 0x0406 tx timeout [ 232.950450][ T5104] Bluetooth: hci1: command 0x0406 tx timeout [ 233.189954][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 233.229524][ T5101] Bluetooth: hci4: ACL packet for unknown connection handle 203 [ 233.400625][ T6227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6227 comm=syz.1.260 [ 233.502186][ T30] audit: type=1400 audit(1721236241.676:259): avc: denied { rename } for pid=4518 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.624396][ T30] audit: type=1400 audit(1721236241.676:260): avc: denied { unlink } for pid=4518 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 233.691238][ T30] audit: type=1400 audit(1721236241.676:261): avc: denied { create } for pid=4518 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.254510][ T6246] netlink: 76 bytes leftover after parsing attributes in process `syz.4.266'. [ 236.858386][ T6248] befs: (nullb0): No write support. Marking filesystem read-only [ 236.895205][ T6248] befs: (nullb0): invalid magic header [ 238.682624][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 238.868328][ T6272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6272 comm=syz.2.274 [ 239.263194][ T5101] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 239.540917][ T25] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 239.565733][ T6293] befs: (nullb0): No write support. Marking filesystem read-only [ 239.582056][ T6293] befs: (nullb0): invalid magic header [ 239.815142][ T25] usb 2-1: No LPM exit latency info found, disabling LPM. [ 239.852236][ T25] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 239.898789][ T25] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.964835][ T25] usb 2-1: config 1 interface 0 has no altsetting 0 [ 240.008640][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 240.019771][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.034053][ T25] usb 2-1: Product: ߬ [ 240.040133][ T25] usb 2-1: SerialNumber: ᐊ [ 240.325615][ T6287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.634746][ T6302] netlink: 76 bytes leftover after parsing attributes in process `syz.3.282'. [ 240.652733][ T25] usb 2-1: USB disconnect, device number 4 [ 243.145340][ T30] audit: type=1400 audit(1721236251.316:262): avc: denied { unmount } for pid=5334 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.391072][ T785] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 243.499676][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 243.591813][ T5101] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 243.611790][ T785] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 243.613408][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.613447][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.615154][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.615194][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.617112][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.617150][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.618862][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.618900][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.620609][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.620647][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.645715][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.645762][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.654928][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.654973][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.657841][ T785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.657883][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 243.701316][ T785] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.701369][ T785] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.701409][ T785] usb 4-1: Product: syz [ 243.701437][ T785] usb 4-1: Manufacturer: syz [ 243.701465][ T785] usb 4-1: SerialNumber: syz [ 243.718997][ T785] usb 4-1: config 0 descriptor?? [ 243.727584][ T785] yurex 4-1:0.0: Could not find endpoints [ 243.732174][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 243.865786][ T5105] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 243.933683][ T5105] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 244.023196][ T5144] usb 4-1: USB disconnect, device number 9 [ 245.521174][ T785] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 245.744388][ T785] usb 4-1: No LPM exit latency info found, disabling LPM. [ 245.781975][ T785] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 245.844964][ T6358] netlink: 76 bytes leftover after parsing attributes in process `syz.2.299'. [ 245.863665][ T785] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.906805][ T785] usb 4-1: config 1 interface 0 has no altsetting 0 [ 245.939270][ T785] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.055639][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.078709][ T785] usb 4-1: Product: ߬ [ 246.089308][ T785] usb 4-1: SerialNumber: ᐊ [ 246.201398][ T6352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 246.598274][ T785] usb 4-1: USB disconnect, device number 10 [ 249.665019][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 249.955581][ T6385] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 250.021240][ T6385] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 250.126632][ T6387] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 250.173087][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 250.189182][ T6387] bond1 (unregistering): Released all slaves [ 250.379748][ T25] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 250.421256][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.445614][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.469317][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.485351][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.512825][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.548344][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.594594][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.620986][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.652211][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.677467][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.717117][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.744501][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.776127][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.793174][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.235782][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.265547][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.279471][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 251.289370][ T25] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 251.298332][ T25] usb 5-1: Product: syz [ 251.303049][ T25] usb 5-1: Manufacturer: syz [ 251.341951][ T25] usb 5-1: SerialNumber: syz [ 251.370325][ T25] usb 5-1: config 0 descriptor?? [ 251.398162][ T25] yurex 5-1:0.0: Could not find endpoints [ 251.423398][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'. [ 251.679501][ T9] usb 5-1: USB disconnect, device number 5 [ 251.981560][ T30] audit: type=1400 audit(1721236260.156:263): avc: denied { create } for pid=6400 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.028553][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 252.083130][ T30] audit: type=1400 audit(1721236260.216:264): avc: denied { write } for pid=6400 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 252.104531][ T6398] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 252.224639][ T6399] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 252.343828][ T6399] bond1 (unregistering): Released all slaves [ 261.661840][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.668246][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.337188][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 357.460711][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 357.467819][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6394/1:b..l [ 357.476324][ C0] rcu: (detected by 0, t=10502 jiffies, g=25309, q=234 ncpus=2) [ 357.484178][ C0] task:syz.2.309 state:R running task stack:27024 pid:6394 tgid:6394 ppid:5086 flags:0x00000000 [ 357.497412][ C0] Call Trace: [ 357.500751][ C0] [ 357.503724][ C0] __schedule+0xe37/0x5490 [ 357.508211][ C0] ? __pfx_mark_lock+0x10/0x10 [ 357.513026][ C0] ? hlock_class+0x4e/0x130 [ 357.517774][ C0] ? __pfx_mark_lock+0x10/0x10 [ 357.522639][ C0] ? __pfx___schedule+0x10/0x10 [ 357.527575][ C0] ? mark_held_locks+0x9f/0xe0 [ 357.532418][ C0] preempt_schedule_irq+0x51/0x90 [ 357.537577][ C0] irqentry_exit+0x36/0x90 [ 357.542406][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 357.548492][ C0] RIP: 0010:lock_acquire+0x160/0x560 [ 357.554013][ C0] Code: 0c 01 48 89 f8 83 e0 07 83 c0 03 38 c8 7c 08 84 c9 0f 85 b3 03 00 00 8b 92 dc 0a 00 00 85 d2 0f 85 d6 00 00 00 9c 8f 44 24 08 <48> 8b 6c 24 08 fa 48 c7 c7 80 b7 2c 8b e8 fe 08 80 09 48 89 e8 45 [ 357.573684][ C0] RSP: 0018:ffffc90003367a98 EFLAGS: 00000246 [ 357.579921][ C0] RAX: 0000000000000007 RBX: 1ffff9200066cf55 RCX: 0000000000000000 [ 357.588078][ C0] RDX: 0000000000000000 RSI: ffffffff8b904e60 RDI: ffff888029e246dc [ 357.596124][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff1fca81b [ 357.604157][ C0] R10: ffffffff8fe540df R11: 0000000000000002 R12: 0000000000000000 [ 357.612180][ C0] R13: 0000000000000000 R14: ffffffff8dbb15e0 R15: 0000000000000000 [ 357.620207][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 357.625287][ C0] ? net_generic+0xea/0x2a0 [ 357.629847][ C0] ? __pfx_lock_release+0x10/0x10 [ 357.634925][ C0] net_generic+0x36/0x2a0 [ 357.639347][ C0] ? net_generic+0x30/0x2a0 [ 357.643909][ C0] nfulnl_rcv_nl_event+0x47/0x270 [ 357.648997][ C0] notifier_call_chain+0xb9/0x410 [ 357.654086][ C0] ? __pfx_nfulnl_rcv_nl_event+0x10/0x10 [ 357.659777][ C0] blocking_notifier_call_chain+0x69/0xa0 [ 357.665564][ C0] netlink_release+0x183f/0x1ff0 [ 357.670593][ C0] ? netlink_release+0x1df/0x1ff0 [ 357.675679][ C0] ? __pfx_netlink_release+0x10/0x10 [ 357.681019][ C0] ? __pfx_locks_remove_file+0x10/0x10 [ 357.686536][ C0] __sock_release+0xb0/0x270 [ 357.691194][ C0] ? __pfx_sock_close+0x10/0x10 [ 357.696176][ C0] sock_close+0x1c/0x30 [ 357.700383][ C0] __fput+0x408/0xbb0 [ 357.704431][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.709700][ C0] task_work_run+0x14e/0x250 [ 357.714375][ C0] ? __pfx_task_work_run+0x10/0x10 [ 357.719554][ C0] ? xfd_validate_state+0x5d/0x180 [ 357.724760][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 357.730489][ C0] do_syscall_64+0xda/0x250 [ 357.735066][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.741038][ C0] RIP: 0033:0x7f4b91175a99 [ 357.745581][ C0] RSP: 002b:00007ffd9e5b8778 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 357.754057][ C0] RAX: 0000000000000000 RBX: 00007f4b91305a60 RCX: 00007f4b91175a99 [ 357.762072][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 357.770087][ C0] RBP: 00007f4b91305a60 R08: 0000000000000006 R09: 0000000d9e5b8a9f [ 357.778202][ C0] R10: 00000000005df600 R11: 0000000000000246 R12: 000000000003d902 [ 357.786228][ C0] R13: 0000000000000032 R14: 00007f4b91305a60 R15: 00007ffd9e5b8860 [ 357.794368][ C0] [ 357.797557][ C0] rcu: rcu_preempt kthread starved for 10086 jiffies! g25309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 357.808812][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 357.818832][ C0] rcu: RCU grace-period kthread stack dump: [ 357.824769][ C0] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 357.836571][ C0] Call Trace: [ 357.839887][ C0] [ 357.842858][ C0] __schedule+0xe37/0x5490 [ 357.847347][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 357.852806][ C0] ? __pfx___schedule+0x10/0x10 [ 357.857716][ C0] ? schedule+0x298/0x350 [ 357.862107][ C0] ? __pfx_lock_release+0x10/0x10 [ 357.867196][ C0] ? __pfx___mod_timer+0x10/0x10 [ 357.872201][ C0] ? lock_acquire+0x1b1/0x560 [ 357.877076][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 357.882711][ C0] schedule+0xe7/0x350 [ 357.887016][ C0] schedule_timeout+0x136/0x2a0 [ 357.891943][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 357.897573][ C0] ? __pfx_process_timeout+0x10/0x10 [ 357.902928][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.908795][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 357.914318][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 357.919256][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 357.924626][ C0] ? rcu_gp_init+0xc82/0x1630 [ 357.929377][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 357.934638][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.940597][ C0] rcu_gp_kthread+0x271/0x380 [ 357.945426][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 357.950693][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.955961][ C0] ? __kthread_parkme+0x148/0x220 [ 357.961047][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 357.966309][ C0] kthread+0x2c1/0x3a0 [ 357.970434][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.975780][ C0] ? __pfx_kthread+0x10/0x10 [ 357.980548][ C0] ret_from_fork+0x45/0x80 [ 357.985048][ C0] ? __pfx_kthread+0x10/0x10 [ 357.989706][ C0] ret_from_fork_asm+0x1a/0x30 [ 357.994566][ C0] [ 357.997638][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 358.004028][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 358.013449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 358.023720][ C0] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 358.029063][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 38 d3 17 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 68 92 af 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 358.048724][ C0] RSP: 0018:ffffffff8d807d70 EFLAGS: 00000246 [ 358.054848][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8aebe9a9 [ 358.063126][ C0] RDX: 0000000000000001 RSI: ffff88801a681000 RDI: ffff88801a681064 [ 358.071141][ C0] RBP: ffff88801a681064 R08: 0000000000000001 R09: ffffed1017246fe1 [ 358.080738][ C0] R10: ffff8880b9237f0b R11: 0000000000000000 R12: ffff88801ab63800 [ 358.088802][ C0] R13: ffffffff8e747200 R14: 0000000000000000 R15: 0000000000000000 [ 358.096917][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 358.105998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.112723][ C0] CR2: 00007f13f1809527 CR3: 000000005cb30000 CR4: 00000000003506f0 [ 358.121178][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.129195][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.137214][ C0] Call Trace: [ 358.140532][ C0] [ 358.143423][ C0] ? show_regs+0x8c/0xa0 [ 358.147747][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 358.154158][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 358.159456][ C0] ? rcu_sched_clock_irq+0x2501/0x33f0 [ 358.164993][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 358.170685][ C0] ? tmigr_requires_handle_remote+0x14c/0x480 [ 358.176823][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 358.183327][ C0] ? hrtimer_run_queues+0x97/0x450 [ 358.188513][ C0] ? update_process_times+0x175/0x220 [ 358.193957][ C0] ? __pfx_update_process_times+0x10/0x10 [ 358.199739][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 358.205373][ C0] ? update_wall_time+0x1c/0x40 [ 358.210277][ C0] ? tick_nohz_handler+0x376/0x530 [ 358.215543][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 358.221068][ C0] ? __hrtimer_run_queues+0x657/0xcc0 [ 358.226500][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 358.232288][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 358.238414][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 358.243601][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 358.249827][ C0] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 358.255699][ C0] [ 358.258664][ C0] [ 358.261634][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.267855][ C0] ? ct_kernel_exit+0x139/0x190 [ 358.272776][ C0] ? acpi_safe_halt+0x1a/0x20 [ 358.277505][ C0] acpi_idle_enter+0xc5/0x160 [ 358.282259][ C0] cpuidle_enter_state+0x85/0x500 [ 358.287447][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 358.293550][ C0] cpuidle_enter+0x4e/0xa0 [ 358.298046][ C0] do_idle+0x313/0x3f0 [ 358.302185][ C0] ? __pfx_do_idle+0x10/0x10 [ 358.306824][ C0] cpu_startup_entry+0x4f/0x60 [ 358.311641][ C0] rest_init+0x16b/0x2b0 [ 358.315942][ C0] ? acpi_subsystem_init+0x133/0x180 [ 358.321304][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 358.326921][ C0] start_kernel+0x3df/0x4c0 [ 358.331492][ C0] x86_64_start_reservations+0x18/0x30 [ 358.337022][ C0] x86_64_start_kernel+0xb2/0xc0 [ 358.342129][ C0] common_startup_64+0x13e/0x148 [ 358.347168][ C0]