last executing test programs: 44.749702114s ago: executing program 0 (id=3222): syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 43.829461047s ago: executing program 0 (id=3226): syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x4005, @mcast1, 0x2c4}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 39.983130229s ago: executing program 0 (id=3237): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x202a) 38.900362727s ago: executing program 0 (id=3239): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 37.638120662s ago: executing program 0 (id=3242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x10, 0x0) r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x26, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 36.170830996s ago: executing program 0 (id=3245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = inotify_init() syz_open_pts(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0), 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x0) 20.042679755s ago: executing program 32 (id=3245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = inotify_init() syz_open_pts(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0), 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r5, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r4, 0x0) 9.419087501s ago: executing program 1 (id=3307): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec5617503"], 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9.338221313s ago: executing program 2 (id=3308): gettid() ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x6, 0xfffffffd, 0xffdffff8, 0xffffffff, 0x3, "ff0c0000000000000000000000000200"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffffff, 0x0, 0x980, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_socket_connect_nvme_tcp() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000580)={0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0xd) 8.047132614s ago: executing program 1 (id=3310): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7.072634127s ago: executing program 2 (id=3311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="050000000500000002000000"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 6.688922616s ago: executing program 2 (id=3312): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 5.88119833s ago: executing program 2 (id=3313): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB], 0x48}}, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 4.698379542s ago: executing program 4 (id=3315): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$inet6(0xa, 0x80002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.494426489s ago: executing program 2 (id=3316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r6, 0x89ef, &(0x7f0000000000)) getsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000100)={r0, 0x8, 0xfffffffffffff56f}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, 0x0, 0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8a943, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000000000000004e000000057ca0590ead7c4cb57f2d51108d7585098d165d0520653cc12e0b535d3ddab808a54962b718a3864c043921db13e6f5049cb47889fcaccb645b1c9ceae6c2b588358ec2572f7be576403d2afef46d8bc6fe3cf35f3582dcaed25b3fcf5ce69212685c983b0ecef856e0677f702085d6a2b875ac7727601c2ffaa451009bfba7b398b3a802cf7c4211001e0574982f57e1de5d2046f56328eee01ed88382dabedd21c7db5909c20cf3a17eb1f50da57612208ac47579963c534b03898402ffbb20decafbfad11e2051668b52880a29e3cca4a8a7142b4ec3f107"], 0x14}}, 0x0) 3.933848099s ago: executing program 1 (id=3317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000002020102000000000000028014000180080001000000000008000200e00000020c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000840) 3.928550664s ago: executing program 3 (id=3318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x1f1e) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41) 3.709826241s ago: executing program 4 (id=3319): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec5617503"], 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.703102777s ago: executing program 3 (id=3320): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000700000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5274}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x4, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x80003, 0x7fff, 0x7, 0x80000000, 0xa72, 0x0, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x4ed1, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x8000005, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x5, 0x5f71, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x0, 0x1, 0x9, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x80, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xfffffffb, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x9, 0x80, 0x13, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0xfffffffc, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0xfffffffc, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0xd2, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040000800000000000000074", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3.640297983s ago: executing program 1 (id=3321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0), 0x80000000000003a, 0x0, 0x0) 2.432546106s ago: executing program 4 (id=3322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.817533177s ago: executing program 4 (id=3323): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) 1.669147861s ago: executing program 3 (id=3324): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000380)=0x14) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}], 0x10) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 1.551474773s ago: executing program 4 (id=3325): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e24, 0x4, @private0, 0x10}}, 0x10000, 0x4, 0x81, 0x9, 0x1, 0xa369, 0x7}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, r4, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x4, 0x1000) fanotify_mark(r6, 0x1, 0x8000021, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.474428195s ago: executing program 3 (id=3326): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) 1.11249372s ago: executing program 2 (id=3327): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.07021759s ago: executing program 1 (id=3328): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xde104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "f697663f39991b3da3431f89"}, 0x17) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x6d, 0x0, &(0x7f0000001040)) sendfile(r0, r4, &(0x7f0000000100)=0x10, 0xfffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x15, 0x0, 0x0, 0xb7a}, {0x20, 0xe}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000090000006110040200009500f8ffffffffffffff003482f1227ef9fef639edcb238791c398adbbb961638749d1caa041469b185ad62178fb900f9ebde7500b64a13c3a24e43602db62285b2bb532fcf56e8a5fec0d6b29fbadc4ed1dd4749eec82707d7b84fbe1f700"/132], &(0x7f0000000040)='GPL\x00', 0x7fff}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff3, 0xe}, {0x0, 0xe}, {0x8, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 937.174743ms ago: executing program 3 (id=3329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x1f1e) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41) 934.760218ms ago: executing program 4 (id=3330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 179.593431ms ago: executing program 3 (id=3331): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec5617503"], 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 1 (id=3332): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000500)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, 0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9, r0, 0x0, 0x0, 0x3}]) kernel console output (not intermixed with test programs): .4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 534.725365][ T30] audit: type=1326 audit(1766850897.727:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13677 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 534.774182][ T30] audit: type=1326 audit(1766850897.727:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13677 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 535.079184][T13683] ISOFS: Unable to identify CD-ROM format. [ 535.253289][T13685] can: request_module (can-proto-3) failed. [ 537.247794][T13697] Invalid source name [ 537.630134][T13701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'. [ 537.691047][T13701] 9pnet_virtio: no channels available for device syz [ 538.927154][T13706] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2373'. [ 540.245376][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 540.245410][ T30] audit: type=1326 audit(1766850903.527:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.357786][ T30] audit: type=1326 audit(1766850903.557:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.421386][ T30] audit: type=1326 audit(1766850903.687:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.614800][ T30] audit: type=1326 audit(1766850903.687:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.755327][ T30] audit: type=1326 audit(1766850903.687:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.799984][ T30] audit: type=1326 audit(1766850903.687:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.851645][ T30] audit: type=1326 audit(1766850903.687:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 540.956223][ T30] audit: type=1326 audit(1766850903.687:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 541.039420][ T30] audit: type=1326 audit(1766850903.687:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 541.168935][ T30] audit: type=1326 audit(1766850903.687:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13716 comm="syz.2.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 541.706803][T13749] siw: device registration error -23 [ 542.497367][T13750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 542.503916][T13750] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 542.572258][T13750] vhci_hcd vhci_hcd.0: Device attached [ 542.611635][T13759] can: request_module (can-proto-3) failed. [ 542.623225][T13763] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 542.640581][T13756] vhci_hcd: connection closed [ 542.640933][ T3878] vhci_hcd vhci_hcd.2: stop threads [ 542.710248][ T3878] vhci_hcd vhci_hcd.2: release socket [ 542.716558][ T3878] vhci_hcd vhci_hcd.2: disconnect device [ 545.219084][T13803] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.889469][T13809] netlink: 'syz.1.2401': attribute type 4 has an invalid length. [ 545.937045][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 546.136500][T13826] can: request_module (can-proto-3) failed. [ 546.304097][T13834] fuse: Unknown parameter 'group_i00000000000000000000' [ 546.655663][T13839] Invalid source name [ 546.744664][T13840] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.851362][T13840] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.444239][T13840] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.708061][T13854] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.772523][T13855] siw: device registration error -23 [ 549.715970][T13840] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.202253][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 550.202268][ T30] audit: type=1326 audit(1766850913.477:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 550.220606][T13875] can: request_module (can-proto-3) failed. [ 550.273780][ T30] audit: type=1326 audit(1766850913.477:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 550.336539][ T4385] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.357194][ T4385] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.470543][ T4385] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.696898][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.788513][ T30] audit: type=1326 audit(1766850913.477:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 550.965776][ T30] audit: type=1326 audit(1766850913.477:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 551.138372][ T30] audit: type=1326 audit(1766850913.477:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 551.326320][ T30] audit: type=1326 audit(1766850913.477:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 551.517490][ T30] audit: type=1326 audit(1766850913.477:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 551.945565][ T30] audit: type=1326 audit(1766850913.477:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 553.662827][ T30] audit: type=1326 audit(1766850913.477:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 554.058523][T13888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2424'. [ 554.071774][ T30] audit: type=1326 audit(1766850913.477:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.4.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 554.267058][T13901] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2426'. [ 555.122476][T13924] comedi comedi0: Minor 47 could not be opened [ 557.482697][T13943] netlink: 'syz.4.2441': attribute type 10 has an invalid length. [ 558.233716][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 558.233733][ T30] audit: type=1400 audit(1766850921.467:1940): avc: denied { bind } for pid=13944 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 558.467536][T13957] fuse: Bad value for 'fd' [ 558.626058][T13950] can: request_module (can-proto-3) failed. [ 558.670960][ T30] audit: type=1326 audit(1766850921.927:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 558.818061][T13947] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.004362][ T30] audit: type=1326 audit(1766850921.927:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 559.290973][ T30] audit: type=1326 audit(1766850921.927:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 559.516507][ T30] audit: type=1326 audit(1766850921.927:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 559.729873][ T30] audit: type=1326 audit(1766850921.927:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 559.990763][T13947] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.005012][ T30] audit: type=1326 audit(1766850921.927:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 560.253381][ T30] audit: type=1326 audit(1766850921.947:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 560.632485][ T30] audit: type=1326 audit(1766850921.947:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 560.656684][ T30] audit: type=1326 audit(1766850921.947:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.2.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 560.668226][T13970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2449'. [ 560.696800][T13970] 9pnet_virtio: no channels available for device syz [ 560.705359][T13947] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.757808][T13947] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.940401][ T1151] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.968899][ T1151] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.007365][ T1151] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.157426][ T1151] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.722990][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 562.736096][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.838355][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.372362][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.379611][ C0] bridge0: topology change detected, propagating [ 563.387784][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.395047][ C0] bridge0: topology change detected, propagating [ 565.030059][T14018] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.097800][T14018] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.158138][T14018] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.247696][T14018] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.369572][ T4385] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.397349][ T4385] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.431416][ T4385] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.465363][ T4385] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.069891][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 566.069906][ T30] audit: type=1326 audit(1766850929.347:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.100039][ T89] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 566.122345][ T30] audit: type=1326 audit(1766850929.347:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.147417][ T30] audit: type=1326 audit(1766850929.347:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.189061][ T30] audit: type=1326 audit(1766850929.347:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.251301][ T30] audit: type=1326 audit(1766850929.347:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.275033][ T89] usb 5-1: device descriptor read/64, error -71 [ 566.312357][ T30] audit: type=1326 audit(1766850929.347:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.352900][ T30] audit: type=1326 audit(1766850929.347:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.422194][ T30] audit: type=1326 audit(1766850929.347:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.495701][ T30] audit: type=1326 audit(1766850929.347:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.532340][ T89] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 566.589436][ T30] audit: type=1326 audit(1766850929.347:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14046 comm="syz.3.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 566.702266][ T89] usb 5-1: device descriptor read/64, error -71 [ 566.822666][ T89] usb usb5-port1: attempt power cycle [ 567.177593][ T89] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 567.432783][ T89] usb 5-1: device descriptor read/8, error -71 [ 567.694209][ T89] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 567.723838][ T89] usb 5-1: device descriptor read/8, error -71 [ 567.832621][ T89] usb usb5-port1: unable to enumerate USB device [ 570.447173][T14131] netlink: 'syz.4.2501': attribute type 4 has an invalid length. [ 572.435984][T14168] netlink: 'syz.3.2515': attribute type 4 has an invalid length. [ 572.824928][T14180] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2518'. [ 573.002207][ T8484] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 573.374053][ T8484] usb 3-1: device descriptor read/64, error -71 [ 573.917550][T14195] fuse: Bad value for 'fd' [ 574.090392][T14199] netlink: 'syz.1.2524': attribute type 1 has an invalid length. [ 574.112568][ T8484] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 574.282217][ T8484] usb 3-1: device descriptor read/64, error -71 [ 574.392824][ T8484] usb usb3-port1: attempt power cycle [ 574.544617][T14211] siw: device registration error -23 [ 574.616329][T14213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2531'. [ 574.648569][T14213] 9pnet_virtio: no channels available for device syz [ 574.762249][ T8484] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 574.792959][ T8484] usb 3-1: device descriptor read/8, error -71 [ 574.830425][T14205] netlink: 'syz.1.2528': attribute type 4 has an invalid length. [ 575.042220][ T8484] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 575.082893][ T8484] usb 3-1: device descriptor read/8, error -71 [ 575.192603][ T8484] usb usb3-port1: unable to enumerate USB device [ 575.425916][T14236] fuse: Bad value for 'fd' [ 576.349471][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 576.349486][ T30] audit: type=1326 audit(1766850939.627:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.437967][ T30] audit: type=1326 audit(1766850939.667:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.464807][ T30] audit: type=1326 audit(1766850939.667:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.643365][ T30] audit: type=1326 audit(1766850939.667:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.667436][ T30] audit: type=1326 audit(1766850939.667:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.690996][ T30] audit: type=1326 audit(1766850939.667:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.725792][ T30] audit: type=1326 audit(1766850939.667:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.847060][T14266] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2546'. [ 576.856919][ T30] audit: type=1326 audit(1766850939.667:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.906358][ T30] audit: type=1326 audit(1766850939.667:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 576.966700][ T30] audit: type=1326 audit(1766850939.667:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14252 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 581.216850][T14324] use of bytesused == 0 is deprecated and will be removed in the future, [ 581.225674][T14324] use the actual size instead. [ 583.032552][ T7747] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 583.257540][ T7747] usb 3-1: device descriptor read/64, error -71 [ 583.522207][ T7747] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 583.572265][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2575'. [ 583.662469][ T7747] usb 3-1: device descriptor read/64, error -71 [ 583.798540][ T7747] usb usb3-port1: attempt power cycle [ 584.731638][ T7747] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 584.955222][ T7747] usb 3-1: device descriptor read/8, error -71 [ 585.232310][ T7747] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 585.485053][T14388] fuse: Invalid rootmode [ 585.532276][ T7747] usb 3-1: device not accepting address 13, error -71 [ 585.562330][ T7747] usb usb3-port1: unable to enumerate USB device [ 585.760477][T14393] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 586.263705][T14408] fuse: Bad value for 'fd' [ 586.361073][T14409] comedi comedi0: Minor 47 could not be opened [ 589.241649][ T7747] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 590.100264][T14425] fuse: Bad value for 'fd' [ 590.176020][ T7747] usb 2-1: no configurations [ 590.180652][ T7747] usb 2-1: can't read configurations, error -22 [ 590.346593][T14434] 9pnet_virtio: no channels available for device syz [ 590.534603][ T7747] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 591.346222][T14447] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 591.352757][T14447] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 591.361604][T14447] vhci_hcd vhci_hcd.0: Device attached [ 591.649967][ T8395] usb 38-1: SetAddress Request (3) to port 0 [ 591.657709][ T8395] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd [ 592.115422][T14448] vhci_hcd: connection reset by peer [ 592.139113][ T3916] vhci_hcd vhci_hcd.2: stop threads [ 592.183461][ T3916] vhci_hcd vhci_hcd.2: release socket [ 592.234270][ T3916] vhci_hcd vhci_hcd.2: disconnect device [ 594.922569][T14482] 9pnet_virtio: no channels available for device syz [ 594.953856][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 594.953877][ T30] audit: type=1326 audit(1766850958.017:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 595.617725][ T30] audit: type=1326 audit(1766850958.027:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 595.686479][ T30] audit: type=1326 audit(1766850958.027:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 595.719107][ T30] audit: type=1326 audit(1766850958.037:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 595.776435][ T30] audit: type=1326 audit(1766850958.037:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 595.941938][ T30] audit: type=1326 audit(1766850958.037:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 596.145643][ T30] audit: type=1326 audit(1766850958.047:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 596.297495][ T30] audit: type=1326 audit(1766850958.047:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 596.370719][ T30] audit: type=1326 audit(1766850958.057:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 596.427443][ T30] audit: type=1326 audit(1766850958.057:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14477 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 596.832243][ T8395] usb 38-1: device descriptor read/8, error -110 [ 596.895676][T14509] fuse: Bad value for 'fd' [ 597.256237][ T8395] usb usb38-port1: attempt power cycle [ 597.871035][ T8395] usb usb38-port1: unable to enumerate USB device [ 600.419807][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 600.419824][ T30] audit: type=1326 audit(1766850963.697:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fd98f749 code=0x7ffc0000 [ 600.625180][ T30] audit: type=1326 audit(1766850963.697:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fd98f749 code=0x7ffc0000 [ 600.652234][ T30] audit: type=1326 audit(1766850963.747:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fa9fd98f749 code=0x7ffc0000 [ 600.710241][ T30] audit: type=1326 audit(1766850963.747:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14547 comm="syz.1.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9fd98f749 code=0x7ffc0000 [ 601.654957][T14555] fuse: Bad value for 'fd' [ 602.340019][T14568] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 602.346567][T14568] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 602.387123][T14568] vhci_hcd vhci_hcd.0: Device attached [ 602.737256][ T89] usb 36-1: SetAddress Request (6) to port 0 [ 602.769288][ T89] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 603.030769][T14570] vhci_hcd: connection reset by peer [ 603.045806][ T4385] vhci_hcd vhci_hcd.1: stop threads [ 603.083524][ T4385] vhci_hcd vhci_hcd.1: release socket [ 603.154708][ T4385] vhci_hcd vhci_hcd.1: disconnect device [ 603.606454][ T30] audit: type=1326 audit(1766850966.887:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.4.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 603.642326][ T30] audit: type=1326 audit(1766850966.917:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.4.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 603.679058][ T30] audit: type=1326 audit(1766850966.917:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.4.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 603.707996][ T30] audit: type=1326 audit(1766850966.917:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.4.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 603.731473][ T30] audit: type=1326 audit(1766850966.917:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.4.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 603.755103][ T30] audit: type=1326 audit(1766850966.917:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14578 comm="syz.4.2643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 604.386872][T14594] fuse: Bad value for 'fd' [ 605.679471][T14603] comedi comedi0: Minor 47 could not be opened [ 608.012206][ T89] usb 36-1: device descriptor read/8, error -110 [ 608.237785][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 608.263496][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 608.263506][ T30] audit: type=1326 audit(1766850971.547:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 608.369731][ T30] audit: type=1326 audit(1766850971.577:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 608.450403][ T30] audit: type=1326 audit(1766850971.577:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 608.518122][ T89] usb usb36-port1: attempt power cycle [ 608.742287][ T30] audit: type=1326 audit(1766850971.577:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 608.842241][ T30] audit: type=1326 audit(1766850971.577:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 608.936275][ T30] audit: type=1326 audit(1766850971.577:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 608.987535][ T30] audit: type=1326 audit(1766850971.587:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 609.038430][ T30] audit: type=1326 audit(1766850971.587:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 609.068221][ T30] audit: type=1326 audit(1766850971.587:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 609.093297][ T30] audit: type=1326 audit(1766850971.587:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4458f749 code=0x7ffc0000 [ 609.172780][ T89] usb usb36-port1: unable to enumerate USB device [ 612.471053][T14671] ISOFS: Unable to identify CD-ROM format. [ 613.134550][T14690] ======================================================= [ 613.134550][T14690] WARNING: The mand mount option has been deprecated and [ 613.134550][T14690] and is ignored by this kernel. Remove the mand [ 613.134550][T14690] option from the mount to silence this warning. [ 613.134550][T14690] ======================================================= [ 613.192409][T14679] netlink: 'syz.2.2674': attribute type 4 has an invalid length. [ 614.412479][ T89] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 614.582284][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 614.589249][ T89] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 614.883942][ T89] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 614.895023][ T89] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 614.908479][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.957319][ T89] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 615.014599][ T89] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 615.070853][ T89] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 615.142346][ T89] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 615.155674][ T89] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 615.165084][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.176558][ T89] usb 5-1: config 0 descriptor?? [ 615.390857][ T89] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 615.476326][T14729] netlink: 'syz.2.2691': attribute type 4 has an invalid length. [ 615.593349][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 615.593363][ T30] audit: type=1400 audit(1766850978.877:2285): avc: denied { read write } for pid=14706 comm="syz.4.2683" name="lp0" dev="devtmpfs" ino=3070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 615.598369][ T89] usb 5-1: USB disconnect, device number 26 [ 615.609929][ T30] audit: type=1400 audit(1766850978.877:2286): avc: denied { open } for pid=14706 comm="syz.4.2683" path="/dev/usb/lp0" dev="devtmpfs" ino=3070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 615.637260][ T89] usblp0: removed [ 616.740662][T14753] tipc: Enabling of bearer rejected, failed to enable media [ 618.302373][ T5935] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 618.482302][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 618.496340][ T5935] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 618.512669][ T5935] usb 3-1: config 0 has no interface number 0 [ 618.525007][ T5935] usb 3-1: config 0 interface 12 has no altsetting 0 [ 618.542216][ T5935] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 618.560588][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.576971][ T5935] usb 3-1: Product: syz [ 618.585554][ T5935] usb 3-1: Manufacturer: syz [ 618.594875][ T5935] usb 3-1: SerialNumber: syz [ 618.608387][ T5935] usb 3-1: config 0 descriptor?? [ 619.363395][ T5935] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 619.401297][ T5935] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 619.426788][ T5935] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 619.452634][ T5935] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 619.479487][ T5935] usb 3-1: USB disconnect, device number 14 [ 619.578310][T14795] pimreg: entered allmulticast mode [ 619.612267][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.921944][T14810] tipc: Enabling of bearer rejected, failed to enable media [ 621.377497][ T30] audit: type=1326 audit(1766850984.657:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 621.419839][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.432960][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.465760][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.473716][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.485102][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.516924][ T30] audit: type=1326 audit(1766850984.657:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14838 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 621.600939][T14840] vcan0 speed is unknown, defaulting to 1000 [ 621.964860][T14840] lo speed is unknown, defaulting to 1000 [ 622.362878][T13460] syz_tun (unregistering): left allmulticast mode [ 623.293336][T14859] tipc: Enabling of bearer rejected, failed to enable media [ 623.446158][ T6385] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.532581][ T5137] Bluetooth: hci5: command tx timeout [ 623.561716][ T6385] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.642203][ T8484] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 623.653635][ T6385] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.306573][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.313840][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.439761][ T8484] usb 2-1: config 255 has too many interfaces: 223, using maximum allowed: 32 [ 624.455535][ T8484] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 624.458392][ T6385] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.466635][ T8484] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 223 [ 624.489730][ T8484] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 624.508397][ T8484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.541290][ T8484] usb 2-1: Product: syz [ 624.557476][ T8484] usb 2-1: Manufacturer: syz [ 624.567624][ T8484] usb 2-1: SerialNumber: syz [ 624.584635][T14840] chnl_net:caif_netlink_parms(): no params data found [ 624.764766][ T30] audit: type=1400 audit(1766850988.037:2289): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 624.991585][T14840] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.999579][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.007262][T14840] bridge_slave_0: entered allmulticast mode [ 625.015376][T14840] bridge_slave_0: entered promiscuous mode [ 625.023211][ T6385] bridge_slave_1: left allmulticast mode [ 625.029717][ T6385] bridge_slave_1: left promiscuous mode [ 625.037440][T14892] overlayfs: failed to resolve './file1': -2 [ 625.041648][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.053343][ T6385] bridge_slave_0: left allmulticast mode [ 625.059304][ T6385] bridge_slave_0: left promiscuous mode [ 625.065461][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.612169][ T5137] Bluetooth: hci5: command tx timeout [ 625.968882][ T6385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.001558][ T6385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.037439][ T6385] bond0 (unregistering): Released all slaves [ 626.783517][ T5935] usb 2-1: USB disconnect, device number 19 [ 626.870036][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2737'. [ 626.881880][T14916] 9pnet_virtio: no channels available for device syz [ 627.163314][ T6385] bond1 (unregistering): Released all slaves [ 627.188083][T14840] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.196350][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.209264][T14840] bridge_slave_1: entered allmulticast mode [ 627.222180][ T89] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 627.234293][T14840] bridge_slave_1: entered promiscuous mode [ 627.269537][ T6385] tipc: Disabling bearer [ 627.310802][ T6385] tipc: Left network mode [ 627.382436][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 627.389579][ T89] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 627.398476][ T89] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.414108][ T89] usb 3-1: config 0 has no interface number 0 [ 627.420296][ T89] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.437239][ T89] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 627.458104][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.519231][T14840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.530506][ T89] usb 3-1: Product: syz [ 627.534866][ T89] usb 3-1: Manufacturer: syz [ 627.565763][ T89] usb 3-1: SerialNumber: syz [ 627.584083][ T89] usb 3-1: config 0 descriptor?? [ 627.589226][T14840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.612061][ T89] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 627.695705][ T5137] Bluetooth: hci5: command tx timeout [ 627.824202][T14840] team0: Port device team_slave_0 added [ 627.873790][T14840] team0: Port device team_slave_1 added [ 628.039947][T14840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.061389][T14840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.122969][T14840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.170282][ T6385] hsr_slave_0: left promiscuous mode [ 628.190946][ T6385] hsr_slave_1: left promiscuous mode [ 628.205667][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.206007][T14959] random: crng reseeded on system resumption [ 628.242267][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.263515][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.295384][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.380618][ T6385] veth1_macvtap: left promiscuous mode [ 628.408692][ T6385] veth0_macvtap: left promiscuous mode [ 628.421748][ T6385] veth1_vlan: left promiscuous mode [ 628.436488][ T6385] veth0_vlan: left promiscuous mode [ 628.680095][ T6385] pimreg (unregistering): left allmulticast mode [ 628.791382][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2749'. [ 628.805090][T14977] 9pnet_virtio: no channels available for device syz [ 628.911732][T14980] fuse: Unknown parameter '0x0000000000000003' [ 629.349664][ T30] audit: type=1400 audit(1766850992.627:2290): avc: denied { write } for pid=14985 comm="syz.1.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 629.731448][ T30] audit: type=1400 audit(1766850992.627:2291): avc: denied { ioctl } for pid=14985 comm="syz.1.2753" path="socket:[46568]" dev="sockfs" ino=46568 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 629.775536][ T5137] Bluetooth: hci5: command tx timeout [ 629.912545][ T6385] team0 (unregistering): Port device team_slave_1 removed [ 629.970903][ T6385] team0 (unregistering): Port device team_slave_0 removed [ 630.046415][ T8395] usb 3-1: USB disconnect, device number 15 [ 632.334605][T14840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.341563][T14840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.368201][T14840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.577306][T14840] hsr_slave_0: entered promiscuous mode [ 632.596355][T14840] hsr_slave_1: entered promiscuous mode [ 632.603721][T14840] debugfs: 'hsr0' already exists in 'hsr' [ 632.605437][ T30] audit: type=1400 audit(1766850995.887:2292): avc: denied { bind } for pid=15037 comm="syz.1.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 632.618931][T14840] Cannot create hsr debugfs directory [ 632.788353][ T6385] IPVS: stop unused estimator thread 0... [ 633.152429][ T7494] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 633.372415][ T7494] usb 2-1: Using ep0 maxpacket: 8 [ 633.384329][ T7494] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 633.410479][ T7494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.435153][ T7494] usb 2-1: config 0 has no interface number 0 [ 633.476686][ T7494] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.539800][ T7494] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 633.560639][ T7494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.587911][ T7494] usb 2-1: Product: syz [ 633.606130][ T7494] usb 2-1: Manufacturer: syz [ 633.629498][ T7494] usb 2-1: SerialNumber: syz [ 633.664092][ T7494] usb 2-1: config 0 descriptor?? [ 633.707115][ T7494] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 633.944424][T14840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 633.986601][T14840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 634.005970][T15075] fuse: Unknown parameter 'fd0x0000000000000003' [ 634.016869][T14840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 634.044237][T14840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 634.313139][T15088] random: crng reseeded on system resumption [ 634.382822][T14840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.424847][T14840] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.588132][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.595337][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.432079][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.439265][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.537596][T14840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 635.602076][T14840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.972433][ T8395] usb 2-1: USB disconnect, device number 20 [ 636.226081][T14840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.411770][T14840] veth0_vlan: entered promiscuous mode [ 636.473211][T14840] veth1_vlan: entered promiscuous mode [ 636.573027][T14840] veth0_macvtap: entered promiscuous mode [ 636.607860][T14840] veth1_macvtap: entered promiscuous mode [ 636.816216][T14840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.867677][T14840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.066120][ T3916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.549781][ T3916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.592455][ T3916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.601198][ T3916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.885889][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.925870][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.934555][T15145] fuse: Unknown parameter 'fd0x0000000000000003' [ 638.005664][ T3916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.032639][ T3916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.842962][ T30] audit: type=1400 audit(1766851001.437:2293): avc: denied { mounton } for pid=14840 comm="syz-executor" path="/root/syzkaller.TcXgtC/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 638.884977][ T30] audit: type=1400 audit(1766851002.157:2294): avc: denied { mounton } for pid=14840 comm="syz-executor" path="/root/syzkaller.TcXgtC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 638.913789][ T30] audit: type=1400 audit(1766851002.157:2295): avc: denied { mounton } for pid=14840 comm="syz-executor" path="/root/syzkaller.TcXgtC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=47687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 639.006570][ T30] audit: type=1400 audit(1766851002.227:2296): avc: denied { mounton } for pid=14840 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 639.259045][ T30] audit: type=1326 audit(1766851002.537:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 639.730734][ T30] audit: type=1326 audit(1766851002.727:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 639.754365][ T30] audit: type=1326 audit(1766851002.727:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 639.816688][ T30] audit: type=1326 audit(1766851002.737:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 639.869764][ T30] audit: type=1326 audit(1766851003.037:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 639.897879][ T30] audit: type=1326 audit(1766851003.037:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15157 comm="syz.0.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 640.886048][T15195] syzkaller0: entered promiscuous mode [ 640.891584][T15195] syzkaller0: entered allmulticast mode [ 641.448981][T15204] fuse: Unknown parameter 'fd0x0000000000000003' [ 642.397313][T15228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2798'. [ 642.427522][T15228] 9pnet_virtio: no channels available for device syz [ 644.573258][ T1151] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 646.808090][T15280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2813'. [ 646.822266][T15280] 9pnet_virtio: no channels available for device syz [ 648.336409][T15311] fuse: Bad value for 'group_id' [ 648.341411][T15311] fuse: Bad value for 'group_id' [ 652.195319][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 652.195351][ T30] audit: type=1400 audit(1766851015.457:2327): avc: denied { create } for pid=15351 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 653.841553][ T30] audit: type=1400 audit(1766851017.117:2328): avc: denied { map } for pid=15378 comm="syz.4.2848" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 653.860660][T15377] netlink: set zone limit has 4 unknown bytes [ 654.202186][ T5935] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 654.452187][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 654.459107][ T5935] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 654.467629][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.477976][ T5935] usb 5-1: config 0 has no interface number 0 [ 654.484274][ T5935] usb 5-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.989791][ T5935] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 655.007560][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.022278][ T5935] usb 5-1: Product: syz [ 655.036925][ T5935] usb 5-1: Manufacturer: syz [ 655.041632][ T5935] usb 5-1: SerialNumber: syz [ 655.049897][ T5935] usb 5-1: config 0 descriptor?? [ 655.085460][ T5935] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 656.296324][T15419] random: crng reseeded on system resumption [ 657.483227][ T5935] usb 5-1: USB disconnect, device number 27 [ 660.853666][ T89] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 660.993113][ T30] audit: type=1326 audit(1766851024.197:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.062827][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 661.145767][ T89] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 661.233679][ T89] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.292151][ T30] audit: type=1326 audit(1766851024.197:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.326569][ T89] usb 2-1: config 0 has no interface number 0 [ 661.335583][ T30] audit: type=1326 audit(1766851024.197:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.347798][ T89] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.376929][ T30] audit: type=1326 audit(1766851024.207:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.429950][ T89] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 661.566659][ T30] audit: type=1326 audit(1766851024.207:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.602400][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.635089][ T89] usb 2-1: Product: syz [ 661.655558][ T89] usb 2-1: Manufacturer: syz [ 661.670372][ T89] usb 2-1: SerialNumber: syz [ 661.703350][ T89] usb 2-1: config 0 descriptor?? [ 661.750852][ T89] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 661.753310][ T30] audit: type=1326 audit(1766851024.207:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.825680][ T30] audit: type=1326 audit(1766851024.207:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 661.861383][ T30] audit: type=1326 audit(1766851024.207:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 662.262677][ T30] audit: type=1326 audit(1766851024.217:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 662.291002][ T30] audit: type=1326 audit(1766851024.217:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15496 comm="syz.0.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 662.694163][T15529] random: crng reseeded on system resumption [ 663.007514][T15521] netlink: 'syz.4.2892': attribute type 4 has an invalid length. [ 664.571284][T11957] usb 2-1: USB disconnect, device number 21 [ 665.506930][T15551] syzkaller0: entered promiscuous mode [ 665.766762][T15551] syzkaller0: entered allmulticast mode [ 667.532282][ T5928] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 668.082449][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 668.090440][ T5928] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 668.106169][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.127214][ T5928] usb 5-1: config 0 has no interface number 0 [ 668.133973][ T5928] usb 5-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.032417][ T5928] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 669.050724][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.059158][ T5928] usb 5-1: Product: syz [ 669.072204][ T5928] usb 5-1: Manufacturer: syz [ 669.082166][ T5928] usb 5-1: SerialNumber: syz [ 669.104865][ T5928] usb 5-1: config 0 descriptor?? [ 669.138727][ T5928] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 669.366375][T15599] syzkaller0: entered promiscuous mode [ 669.371879][T15599] syzkaller0: entered allmulticast mode [ 669.748904][T15604] random: crng reseeded on system resumption [ 670.930990][T15620] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 671.015710][ T8395] usb 5-1: USB disconnect, device number 28 [ 671.124106][T15627] capability: warning: `syz.4.2925' uses 32-bit capabilities (legacy support in use) [ 671.166863][T15627] program syz.4.2925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.223736][T15636] tipc: Enabling of bearer rejected, failed to enable media [ 673.258773][T15670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 673.648456][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 673.659391][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 673.668429][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 673.676528][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 673.684075][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 673.725028][T15677] vcan0 speed is unknown, defaulting to 1000 [ 673.846707][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 673.846725][ T30] audit: type=1326 audit(1766851037.117:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 673.854718][T15682] tipc: Started in network mode [ 673.993160][T15682] tipc: Node identity aeabdb75ddb9, cluster identity 4711 [ 673.993365][ T30] audit: type=1326 audit(1766851037.157:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.000835][T15682] tipc: Enabled bearer , priority 0 [ 674.082265][ T30] audit: type=1326 audit(1766851037.177:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.160289][ T30] audit: type=1326 audit(1766851037.177:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.195556][ T30] audit: type=1326 audit(1766851037.177:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.221480][T15677] lo speed is unknown, defaulting to 1000 [ 674.223100][T15682] tipc: Resetting bearer [ 674.264818][ T30] audit: type=1326 audit(1766851037.177:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.319524][ T30] audit: type=1326 audit(1766851037.177:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.362698][T15696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2947'. [ 674.453412][T15694] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2947'. [ 674.462322][ T30] audit: type=1326 audit(1766851037.177:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.493443][T15681] tipc: Disabling bearer [ 674.519538][ T30] audit: type=1326 audit(1766851037.177:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 674.897672][T12355] syz_tun (unregistering): left allmulticast mode [ 674.968471][ T30] audit: type=1326 audit(1766851037.177:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd049d8f749 code=0x7ffc0000 [ 675.134025][T15466] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.337771][T15703] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 675.403782][T15466] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.669798][T15466] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.772504][ T5137] Bluetooth: hci4: command tx timeout [ 675.834990][T15466] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.537204][T15677] chnl_net:caif_netlink_parms(): no params data found [ 676.973181][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.980310][T15677] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.012284][T15677] bridge_slave_0: entered allmulticast mode [ 677.027494][T15677] bridge_slave_0: entered promiscuous mode [ 677.076952][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.298616][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.342779][T15677] bridge_slave_1: entered allmulticast mode [ 677.358042][T15677] bridge_slave_1: entered promiscuous mode [ 677.371720][T15466] bridge_slave_1: left allmulticast mode [ 677.378417][T15466] bridge_slave_1: left promiscuous mode [ 677.392512][T15466] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.422727][T15466] bridge_slave_0: left allmulticast mode [ 677.440306][T15466] bridge_slave_0: left promiscuous mode [ 677.454097][T15466] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.781893][T15773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2965'. [ 677.798033][T15773] 9pnet_virtio: no channels available for device syz [ 677.852227][ T5137] Bluetooth: hci4: command tx timeout [ 679.131435][T15466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.221191][T15466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.243070][T15466] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 679.254689][T15466] bond0 (unregistering): Released all slaves [ 679.265698][T15749] tipc: Enabled bearer , priority 0 [ 679.288159][T15763] tipc: Resetting bearer [ 679.307811][T15738] tipc: Disabling bearer [ 679.370379][T15466] tipc: Left network mode [ 679.376333][T15677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.420729][T15677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.054427][ T5137] Bluetooth: hci4: command tx timeout [ 680.756896][T15677] team0: Port device team_slave_0 added [ 680.852596][T15677] team0: Port device team_slave_1 added [ 681.252540][T15677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.267156][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.293342][T15677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.306306][T15677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.324668][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.406194][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2979'. [ 681.431428][T15819] 9pnet_virtio: no channels available for device syz [ 681.490193][T15677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.092631][ T5137] Bluetooth: hci4: command tx timeout [ 682.531647][T15677] hsr_slave_0: entered promiscuous mode [ 682.559944][T15677] hsr_slave_1: entered promiscuous mode [ 682.606775][T15677] debugfs: 'hsr0' already exists in 'hsr' [ 682.621974][T15677] Cannot create hsr debugfs directory [ 683.037779][T15466] hsr_slave_0: left promiscuous mode [ 683.105305][T15466] hsr_slave_1: left promiscuous mode [ 683.125905][T15466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.133487][T15466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.152944][T15466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.168059][T15466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.190123][T15466] veth1_vlan: left promiscuous mode [ 683.195998][T15466] veth0_vlan: left promiscuous mode [ 685.675939][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.682533][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.790586][T15466] team0 (unregistering): Port device team_slave_1 removed [ 686.903230][T15466] team0 (unregistering): Port device team_slave_0 removed [ 688.068495][T15849] tipc: Enabled bearer , priority 0 [ 688.076663][T15853] syzkaller0: entered promiscuous mode [ 688.083166][T15853] syzkaller0: entered allmulticast mode [ 688.115901][T15839] tipc: Resetting bearer [ 688.185555][T15884] fuse: Unknown parameter 'grou00000000000000000000' [ 688.257390][T15839] tipc: Disabling bearer [ 689.299361][T15466] IPVS: stop unused estimator thread 0... [ 690.727021][T15677] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 690.883521][T15677] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 690.997796][T15677] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 691.253970][T15677] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 691.580196][T15937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3004'. [ 691.862298][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 693.080236][T15677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.094298][T15677] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.121596][T15677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.135645][T15677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.195909][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.203032][ T7184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.220368][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.227550][ T7184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.607461][T15975] tipc: Enabled bearer , priority 0 [ 693.628939][T15975] syzkaller0: entered promiscuous mode [ 693.642574][T15975] syzkaller0: entered allmulticast mode [ 693.674016][T15974] tipc: Resetting bearer [ 693.723361][T15974] tipc: Disabling bearer [ 693.781547][T15677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.870345][T15677] veth0_vlan: entered promiscuous mode [ 693.912828][T15677] veth1_vlan: entered promiscuous mode [ 694.080835][T15677] veth0_macvtap: entered promiscuous mode [ 694.121824][T15677] veth1_macvtap: entered promiscuous mode [ 694.221868][T15677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.241825][T15997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3009'. [ 694.264265][T15997] 9pnet_virtio: no channels available for device syz [ 694.524051][T15677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.889710][ T3878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.974512][ T3878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.125560][ T3878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.165523][T16007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3014'. [ 695.176689][ T3878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.253816][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'. [ 695.319615][T16010] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.328125][T16010] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.460411][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.480434][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.558142][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.579586][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.098242][T16005] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 697.105032][T16005] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 697.612595][T16005] vhci_hcd vhci_hcd.0: Device attached [ 697.655331][T16005] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3015'. [ 697.738240][T16034] vhci_hcd: connection closed [ 697.747647][ T1314] vhci_hcd vhci_hcd.4: stop threads [ 697.788225][ T1314] vhci_hcd vhci_hcd.4: release socket [ 697.804148][ T1314] vhci_hcd vhci_hcd.4: disconnect device [ 697.832255][ T9107] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 698.032249][T16051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.052904][T16051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 698.062870][T16051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 698.070673][T16051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 698.082815][T16051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.150677][T16049] vcan0 speed is unknown, defaulting to 1000 [ 698.216079][T16058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3023'. [ 698.233579][T16058] 9pnet_virtio: no channels available for device syz [ 699.407983][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 699.407997][ T30] audit: type=1326 audit(1766851062.687:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 699.466351][T13777] syz_tun (unregistering): left allmulticast mode [ 699.519997][ T30] audit: type=1326 audit(1766851062.717:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 699.577065][ T30] audit: type=1326 audit(1766851062.717:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 699.602038][T16049] lo speed is unknown, defaulting to 1000 [ 699.621708][T16069] vcan0 speed is unknown, defaulting to 1000 [ 699.791632][T16069] lo speed is unknown, defaulting to 1000 [ 700.832223][ T5137] Bluetooth: hci0: command tx timeout [ 700.832321][ T30] audit: type=1326 audit(1766851062.717:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.110645][ T30] audit: type=1326 audit(1766851062.717:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.137445][ T30] audit: type=1326 audit(1766851062.717:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.283144][ T30] audit: type=1326 audit(1766851062.717:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.365241][ T30] audit: type=1326 audit(1766851062.717:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.409809][ T30] audit: type=1326 audit(1766851062.717:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.465094][ T30] audit: type=1326 audit(1766851062.717:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.0.3027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 701.772681][T16049] chnl_net:caif_netlink_parms(): no params data found [ 702.014597][T16098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 702.021136][T16098] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 702.046144][T16049] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.054577][T16049] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.061796][T16049] bridge_slave_0: entered allmulticast mode [ 702.069455][T16098] vhci_hcd vhci_hcd.0: Device attached [ 702.076515][T16049] bridge_slave_0: entered promiscuous mode [ 702.089104][T16049] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.096429][T16049] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.103838][T16049] bridge_slave_1: entered allmulticast mode [ 702.111682][T16049] bridge_slave_1: entered promiscuous mode [ 702.138732][T16098] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3034'. [ 702.155676][T16118] vhci_hcd: connection closed [ 702.155842][ T7184] vhci_hcd vhci_hcd.0: stop threads [ 702.602209][ T8484] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 702.670727][ T7184] vhci_hcd vhci_hcd.0: release socket [ 702.676315][ T7184] vhci_hcd vhci_hcd.0: disconnect device [ 702.722533][ T8484] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 702.730079][ T8484] usb 33-1: enqueue for inactive port 0 [ 702.788208][T16049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.811181][T16049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.875795][ T8484] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 702.892505][ T5137] Bluetooth: hci0: command tx timeout [ 703.194961][T16049] team0: Port device team_slave_0 added [ 703.223151][T16049] team0: Port device team_slave_1 added [ 704.235395][T16049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.255840][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.336610][T16049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.311339][T16049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.318574][ T5137] Bluetooth: hci0: command tx timeout [ 705.349496][T16049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.395393][T16049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.468367][T16049] hsr_slave_0: entered promiscuous mode [ 705.475424][T16049] hsr_slave_1: entered promiscuous mode [ 705.844838][T16160] vcan0 speed is unknown, defaulting to 1000 [ 706.549801][T16049] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.685757][T16049] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.785275][T16169] pim6reg1: entered promiscuous mode [ 706.790605][T16169] pim6reg1: entered allmulticast mode [ 706.824595][T16049] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.873676][T16160] lo speed is unknown, defaulting to 1000 [ 706.890467][T16049] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.374266][ T5137] Bluetooth: hci0: command tx timeout [ 707.446934][T16049] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.506472][T16049] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.548032][T16049] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.575966][T16049] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 707.921097][T16049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.962581][T16193] tipc: Enabled bearer , priority 0 [ 708.069169][T16049] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.100488][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.107694][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.138651][T16197] syzkaller0: entered promiscuous mode [ 708.147215][T16197] syzkaller0: entered allmulticast mode [ 708.169153][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.176333][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.232698][T16197] tipc: Resetting bearer [ 708.454381][T16192] tipc: Resetting bearer [ 708.619769][T16192] tipc: Disabling bearer [ 711.512741][T16049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.101595][T16225] vcan0 speed is unknown, defaulting to 1000 [ 712.117662][T16049] veth0_vlan: entered promiscuous mode [ 712.127658][T16049] veth1_vlan: entered promiscuous mode [ 712.751550][T16049] veth0_macvtap: entered promiscuous mode [ 712.761514][T16049] veth1_macvtap: entered promiscuous mode [ 712.779552][T16049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.792984][T16049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.925373][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.936607][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.404983][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.414812][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.472687][T16249] tipc: Started in network mode [ 713.486386][T16249] tipc: Node identity ee75f382e7d4, cluster identity 4711 [ 713.494332][T16249] tipc: Enabled bearer , priority 0 [ 713.508973][T16249] syzkaller0: entered promiscuous mode [ 713.518345][T16249] syzkaller0: entered allmulticast mode [ 713.541672][T16249] tipc: Resetting bearer [ 713.566361][T16248] tipc: Resetting bearer [ 713.606128][T16248] tipc: Disabling bearer [ 713.632135][T16225] lo speed is unknown, defaulting to 1000 [ 713.661100][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.669439][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.779859][T16254] faux_driver vgem: [drm] Unknown color mode 4091; guessing buffer size. [ 713.790883][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 713.790899][ T30] audit: type=1400 audit(1766851077.077:2484): avc: denied { map } for pid=16253 comm="syz.3.3070" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 713.879518][ T30] audit: type=1400 audit(1766851077.107:2485): avc: denied { execute } for pid=16253 comm="syz.3.3070" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 713.887350][ T3878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.945050][ T3878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.507503][T16289] syz_tun: entered allmulticast mode [ 718.518070][T16288] syz_tun: left allmulticast mode [ 718.794980][T16303] fuse: Bad value for 'user_id' [ 718.800033][T16303] fuse: Bad value for 'user_id' [ 719.722708][T16051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.733478][T16051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.741662][T16051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.753248][T16051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.760765][T16051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.853251][T16308] vcan0 speed is unknown, defaulting to 1000 [ 720.659999][T16308] lo speed is unknown, defaulting to 1000 [ 721.548478][T16308] chnl_net:caif_netlink_parms(): no params data found [ 721.852655][ T5137] Bluetooth: hci2: command tx timeout [ 722.339833][T11120] syz_tun (unregistering): left allmulticast mode [ 722.702297][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 723.233989][ T10] usb 5-1: config 255 has too many interfaces: 223, using maximum allowed: 32 [ 723.257212][T16308] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.259034][ T10] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 223 [ 723.264730][T16308] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.282304][T16308] bridge_slave_0: entered allmulticast mode [ 723.289754][T16308] bridge_slave_0: entered promiscuous mode [ 723.299011][T16308] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.306421][T16308] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.313688][T16308] bridge_slave_1: entered allmulticast mode [ 723.321225][T16308] bridge_slave_1: entered promiscuous mode [ 723.367087][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 723.379038][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.390503][ T10] usb 5-1: Product: syz [ 723.395334][ T10] usb 5-1: Manufacturer: syz [ 723.399948][ T10] usb 5-1: SerialNumber: syz [ 723.414276][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 723.477433][T16308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.508717][T16308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.848796][T16308] team0: Port device team_slave_0 added [ 723.857670][T16308] team0: Port device team_slave_1 added [ 723.901155][T16308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.908334][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.934397][ T5137] Bluetooth: hci2: command tx timeout [ 723.945872][T16308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.985287][T16308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.011716][T16308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.124703][T16308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.266839][T16308] hsr_slave_0: entered promiscuous mode [ 724.285716][T16308] hsr_slave_1: entered promiscuous mode [ 724.305222][T16308] debugfs: 'hsr0' already exists in 'hsr' [ 724.310986][T16308] Cannot create hsr debugfs directory [ 724.452184][ T10] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 724.682667][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 724.700024][ T10] sq930x 5-1:255.0: probe with driver sq930x failed with error -22 [ 724.724839][T16308] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.739687][ T10] usb 5-1: USB disconnect, device number 29 [ 724.751158][T16308] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.695672][T16308] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.718652][T16308] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.012218][ T5137] Bluetooth: hci2: command tx timeout [ 726.020783][T16308] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.062202][T16308] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.607390][T16308] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.635956][T16308] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.080684][T16308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 727.183682][T16308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 727.228795][T16308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 727.330813][T16308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 727.865444][T16308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.891353][T16308] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.905444][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.912662][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.968270][ T3878] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.975455][ T3878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.092288][ T5137] Bluetooth: hci2: command tx timeout [ 729.980541][T16308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.085783][T16308] veth0_vlan: entered promiscuous mode [ 730.124176][T16308] veth1_vlan: entered promiscuous mode [ 730.302286][T16308] veth0_macvtap: entered promiscuous mode [ 730.349386][T16427] vcan0 speed is unknown, defaulting to 1000 [ 730.359197][T16308] veth1_macvtap: entered promiscuous mode [ 730.733672][T16308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.134037][T16308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.080421][ T3808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.187160][ T3808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.239639][T16427] lo speed is unknown, defaulting to 1000 [ 732.313128][ T3808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.396894][ T3808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.661786][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.675648][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.214095][ T3419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.276913][ T3419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.352307][ T8395] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 734.492687][ T30] audit: type=1326 audit(1766851097.777:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 734.552619][ T8395] usb 2-1: Using ep0 maxpacket: 32 [ 734.575376][ T8395] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 734.612276][ T8395] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 734.621961][ T8395] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 734.635078][ T30] audit: type=1326 audit(1766851097.797:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 734.682301][ T8395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 734.693047][ T30] audit: type=1326 audit(1766851097.797:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 734.821679][ T8395] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 734.832692][ T8395] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 734.847434][ T8395] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 734.856597][ T8395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.887740][ T8395] usb 2-1: config 0 descriptor?? [ 735.838944][ T30] audit: type=1326 audit(1766851097.797:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 736.196603][ T30] audit: type=1326 audit(1766851097.797:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 736.385275][ T30] audit: type=1326 audit(1766851097.797:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 736.444950][ T8395] usb 2-1: can't set config #0, error -71 [ 736.476961][ T8395] usb 2-1: USB disconnect, device number 22 [ 736.501298][ T30] audit: type=1326 audit(1766851097.797:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 736.555002][ T30] audit: type=1326 audit(1766851097.797:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 736.602176][ T30] audit: type=1326 audit(1766851097.797:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 737.170915][ T30] audit: type=1326 audit(1766851097.807:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16468 comm="syz.4.3124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 737.275436][T16491] fuse: Bad value for 'fd' [ 738.012730][T16501] vcan0 speed is unknown, defaulting to 1000 [ 738.303284][T16501] lo speed is unknown, defaulting to 1000 [ 742.835880][T16562] fuse: Invalid rootmode [ 743.180168][T16559] vcan0 speed is unknown, defaulting to 1000 [ 743.231938][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 743.231953][ T30] audit: type=1326 audit(1766851106.507:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 743.292304][ T30] audit: type=1326 audit(1766851106.507:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 743.316171][ T30] audit: type=1326 audit(1766851106.507:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 743.396026][ T30] audit: type=1326 audit(1766851106.507:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 744.186146][ T30] audit: type=1326 audit(1766851106.507:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 744.210434][ T30] audit: type=1326 audit(1766851106.507:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 744.236326][T16573] tipc: Enabled bearer , priority 0 [ 744.312781][T16578] syzkaller0: entered promiscuous mode [ 744.318279][T16578] syzkaller0: entered allmulticast mode [ 744.364774][ T30] audit: type=1326 audit(1766851106.507:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 744.384221][T16573] tipc: Resetting bearer [ 744.575199][ T30] audit: type=1326 audit(1766851106.507:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 744.598775][ T30] audit: type=1326 audit(1766851106.507:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 744.642994][T16570] tipc: Resetting bearer [ 745.303901][ T30] audit: type=1326 audit(1766851106.507:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16567 comm="syz.4.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb29278f749 code=0x7ffc0000 [ 745.674792][T16570] tipc: Disabling bearer [ 745.800525][T16559] lo speed is unknown, defaulting to 1000 [ 745.800575][ T8484] tipc: Node number set to 161608578 [ 747.058958][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.065485][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.476969][T16611] fuse: Invalid rootmode [ 749.043340][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3171'. [ 749.603272][T16651] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 749.609792][T16651] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 749.618025][T16651] vhci_hcd vhci_hcd.0: Device attached [ 749.628755][T16652] vhci_hcd: connection closed [ 749.645385][ T3419] vhci_hcd vhci_hcd.0: stop threads [ 749.714937][ T3419] vhci_hcd vhci_hcd.0: release socket [ 749.720415][ T3419] vhci_hcd vhci_hcd.0: disconnect device [ 749.762709][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 749.762724][ T30] audit: type=1326 audit(1766851113.047:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 749.830969][ T30] audit: type=1326 audit(1766851113.047:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 749.887705][ T30] audit: type=1326 audit(1766851113.047:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 749.932287][ T30] audit: type=1326 audit(1766851113.047:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 750.133412][ T30] audit: type=1326 audit(1766851113.047:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 750.163809][ T30] audit: type=1326 audit(1766851113.047:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 750.220843][T16658] vcan0 speed is unknown, defaulting to 1000 [ 750.251050][ T30] audit: type=1326 audit(1766851113.047:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 750.278883][ T30] audit: type=1326 audit(1766851113.047:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 750.326795][ T30] audit: type=1326 audit(1766851113.047:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 750.360703][ T30] audit: type=1326 audit(1766851113.047:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16654 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38138f749 code=0x7ffc0000 [ 751.134087][T16674] fuse: Bad value for 'user_id' [ 751.139107][T16674] fuse: Bad value for 'user_id' [ 752.200527][T16658] lo speed is unknown, defaulting to 1000 [ 752.244349][T16668] siw: device registration error -23 [ 755.274249][T16051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 755.284716][T16051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 755.294371][T16051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 755.305169][T16747] vcan0 speed is unknown, defaulting to 1000 [ 755.314364][T16051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 755.321874][T16051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 756.108447][T16766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3206'. [ 756.350012][T16751] vcan0 speed is unknown, defaulting to 1000 [ 756.357755][T16747] lo speed is unknown, defaulting to 1000 [ 756.669268][T11362] syz_tun (unregistering): left allmulticast mode [ 756.922160][ T5935] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 757.094811][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 757.113744][ T5935] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 757.123018][ T5935] usb 4-1: config 0 has no interface number 0 [ 757.129176][ T5935] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 757.138828][T16751] lo speed is unknown, defaulting to 1000 [ 757.161700][ T5935] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 757.187593][ T5935] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 757.216735][ T5935] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 757.248734][ T5935] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.285452][ T5935] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 757.315575][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.335795][ T5935] usb 4-1: Product: syz [ 757.350923][ T5935] usb 4-1: Manufacturer: syz [ 757.356223][ T5935] usb 4-1: SerialNumber: syz [ 757.372241][ T5137] Bluetooth: hci1: command tx timeout [ 757.398219][ T5935] usb 4-1: config 0 descriptor?? [ 757.692619][ T5935] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 757.925203][T16751] chnl_net:caif_netlink_parms(): no params data found [ 758.003218][ T8395] usb 4-1: USB disconnect, device number 12 [ 758.148840][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 758.148855][ T30] audit: type=1326 audit(1766851121.427:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.181033][ T30] audit: type=1326 audit(1766851121.427:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.206068][ T30] audit: type=1326 audit(1766851121.437:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.231307][ T30] audit: type=1326 audit(1766851121.437:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.261957][T16751] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.262788][ T30] audit: type=1326 audit(1766851121.437:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.290304][T16751] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.294561][ T30] audit: type=1326 audit(1766851121.437:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.323221][T16751] bridge_slave_0: entered allmulticast mode [ 758.325103][ T30] audit: type=1326 audit(1766851121.437:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.330557][T16751] bridge_slave_0: entered promiscuous mode [ 758.368695][ T30] audit: type=1326 audit(1766851121.437:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.376801][T16751] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.396036][ T30] audit: type=1326 audit(1766851121.437:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.401840][T16751] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.423082][ T30] audit: type=1326 audit(1766851121.437:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.0.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec678f749 code=0x7ffc0000 [ 758.483515][T16751] bridge_slave_1: entered allmulticast mode [ 758.514716][T16751] bridge_slave_1: entered promiscuous mode [ 758.615985][T16751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.630248][T16751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.670826][T16751] team0: Port device team_slave_0 added [ 758.683230][T16751] team0: Port device team_slave_1 added [ 758.759497][T16751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.769395][T16751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.773135][T16805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3217'. [ 758.805866][T16751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.824362][T16751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.831432][T16751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.858767][T16751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.876377][T16805] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3217'. [ 759.452187][ T5137] Bluetooth: hci1: command tx timeout [ 759.510740][T16751] hsr_slave_0: entered promiscuous mode [ 759.520696][T16751] hsr_slave_1: entered promiscuous mode [ 759.527310][T16751] debugfs: 'hsr0' already exists in 'hsr' [ 759.541197][T16751] Cannot create hsr debugfs directory [ 760.201507][T16751] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.379512][T16751] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.435276][T16818] vcan0 speed is unknown, defaulting to 1000 [ 760.479407][T16751] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.573504][T16751] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.939012][T16818] lo speed is unknown, defaulting to 1000 [ 760.952952][T16751] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 760.970276][T16751] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 761.007277][T16751] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 761.045640][T16751] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 761.219778][T16751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.248128][T16751] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.261355][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.268554][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.527944][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.535064][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.553925][ T5137] Bluetooth: hci1: command tx timeout [ 761.756851][T16847] fuse: Bad value for 'rootmode' [ 763.613859][ T5137] Bluetooth: hci1: command tx timeout [ 764.013329][T16751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.037396][T16870] fuse: Bad value for 'fd' [ 765.093108][T16874] vcan0 speed is unknown, defaulting to 1000 [ 766.559207][T16751] veth0_vlan: entered promiscuous mode [ 766.664488][T16751] veth1_vlan: entered promiscuous mode [ 766.725882][T16874] lo speed is unknown, defaulting to 1000 [ 766.841599][T16751] veth0_macvtap: entered promiscuous mode [ 766.916391][T16751] veth1_macvtap: entered promiscuous mode [ 767.025034][T16751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.237838][T16751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.287900][T16576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.317262][T16576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.356856][T16576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.408259][T16576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.680532][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.640929][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.760327][T16883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.892313][T16883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.034861][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 769.034876][ T30] audit: type=1804 audit(1766851132.317:2686): pid=16916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3245" name="/newroot/109/bus" dev="tmpfs" ino=583 res=1 errno=0 [ 771.254209][T16937] input: syz0 as /devices/virtual/input/input11 [ 780.783857][ T30] audit: type=1400 audit(1766851143.967:2687): avc: denied { write } for pid=17004 comm="syz.3.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 783.331309][T17030] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 783.337832][T17030] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 783.464907][T17030] vhci_hcd vhci_hcd.0: Device attached [ 783.506730][T17031] vhci_hcd: connection closed [ 783.506960][ T1151] vhci_hcd vhci_hcd.4: stop threads [ 783.517195][ T1151] vhci_hcd vhci_hcd.4: release socket [ 783.528901][ T1151] vhci_hcd vhci_hcd.4: disconnect device [ 783.594298][T17038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 783.673996][T17035] vcan0 speed is unknown, defaulting to 1000 [ 785.291478][ T30] audit: type=1326 audit(1766851148.567:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 785.377169][ T30] audit: type=1326 audit(1766851148.567:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 785.493871][ T30] audit: type=1326 audit(1766851148.567:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 785.604347][T16051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 785.615805][T16051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 785.624323][T16051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 785.633537][T16051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 785.641173][T16051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 786.246401][ T30] audit: type=1326 audit(1766851148.567:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.307407][T17053] vcan0 speed is unknown, defaulting to 1000 [ 786.314389][T17035] lo speed is unknown, defaulting to 1000 [ 786.331960][ T30] audit: type=1326 audit(1766851148.567:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.480257][ T30] audit: type=1326 audit(1766851148.567:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.626236][ T30] audit: type=1326 audit(1766851148.567:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.664368][ T30] audit: type=1326 audit(1766851148.567:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.702231][ T30] audit: type=1326 audit(1766851148.567:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.751370][ T30] audit: type=1326 audit(1766851148.567:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 786.914680][ T30] audit: type=1326 audit(1766851148.567:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 787.316055][ T30] audit: type=1326 audit(1766851148.567:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 787.376992][ T30] audit: type=1326 audit(1766851148.567:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 787.772891][T16051] Bluetooth: hci3: command tx timeout [ 788.021235][T17053] lo speed is unknown, defaulting to 1000 [ 789.647028][ T7184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.772140][T16051] Bluetooth: hci3: command tx timeout [ 791.287512][ T7184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.298679][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 791.298693][ T30] audit: type=1326 audit(1766851154.587:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.345586][T17094] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 791.352127][T17094] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 791.398006][T17094] vhci_hcd vhci_hcd.0: Device attached [ 791.406599][T17099] vhci_hcd: connection closed [ 791.407128][ T3916] vhci_hcd vhci_hcd.1: stop threads [ 791.411722][T17053] chnl_net:caif_netlink_parms(): no params data found [ 791.411837][ T3916] vhci_hcd vhci_hcd.1: release socket [ 791.450975][ T30] audit: type=1326 audit(1766851154.617:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.510343][ T3916] vhci_hcd vhci_hcd.1: disconnect device [ 791.517605][ T30] audit: type=1326 audit(1766851154.617:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.606873][ T30] audit: type=1326 audit(1766851154.617:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.669590][ T7184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.687342][ T30] audit: type=1326 audit(1766851154.617:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.692114][T17104] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 791.720302][ T30] audit: type=1326 audit(1766851154.617:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.720344][ T30] audit: type=1326 audit(1766851154.617:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.720379][ T30] audit: type=1326 audit(1766851154.617:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.720414][ T30] audit: type=1326 audit(1766851154.617:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.835242][ T30] audit: type=1326 audit(1766851154.617:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.3.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f30a818f749 code=0x7ffc0000 [ 791.872380][T17104] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 791.912426][T17104] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 791.931017][T17104] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 792.036841][T17104] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 792.055427][ T7184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.070849][T17104] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 792.081029][T17104] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 792.545167][T17104] kvm: requested 76266 ns i8254 timer period limited to 200000 ns [ 792.812306][T16051] Bluetooth: hci3: command tx timeout [ 792.818660][T17053] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.827510][T17053] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.852226][T17053] bridge_slave_0: entered allmulticast mode [ 792.868700][T17053] bridge_slave_0: entered promiscuous mode [ 792.887544][T17120] tipc: Started in network mode [ 792.922251][T17120] tipc: Node identity 269351dfefaf, cluster identity 4711 [ 793.008619][T17120] tipc: Enabled bearer , priority 0 [ 793.063546][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.072637][T17053] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.109071][T17053] bridge_slave_1: entered allmulticast mode [ 793.162811][T17053] bridge_slave_1: entered promiscuous mode [ 793.200840][T17127] syzkaller0: entered promiscuous mode [ 793.244678][T17127] syzkaller0: entered allmulticast mode [ 793.554815][T17053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.022404][T17118] tipc: Resetting bearer [ 794.046321][T17118] tipc: Disabling bearer [ 795.041104][T16051] Bluetooth: hci3: command tx timeout [ 795.639502][T17053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.992390][ T5977] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 796.252150][ T5977] usb 5-1: Using ep0 maxpacket: 16 [ 796.691009][ T5977] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.780783][ T5977] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.791551][ T5977] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 796.814345][ T7184] bridge_slave_1: left allmulticast mode [ 796.820019][ T7184] bridge_slave_1: left promiscuous mode [ 796.832245][ T5977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 796.929607][ T5977] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 796.939349][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.946699][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.966075][ T5977] usb 5-1: config 0 descriptor?? [ 796.996528][ T7184] bridge_slave_0: left allmulticast mode [ 797.014752][ T7184] bridge_slave_0: left promiscuous mode [ 797.047234][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.192213][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 797.192245][ T30] audit: type=1400 audit(1766851160.407:2746): avc: denied { ioctl } for pid=17165 comm="syz.2.3308" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 798.015327][ T5977] hid (null): invalid report_size 14339 [ 798.096436][ T5977] hid (null): bogus close delimiter [ 798.108218][ T5977] hid (null): unknown global tag 0x3c [ 798.140823][ T5977] hid (null): unknown global tag 0xc [ 798.219141][ T5977] usb 5-1: USB disconnect, device number 30 [ 800.352293][ T7184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.378554][ T7184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.408612][ T7184] bond0 (unregistering): Released all slaves [ 800.545245][T17053] team0: Port device team_slave_0 added [ 800.551396][T17175] netlink: 'syz.3.3309': attribute type 12 has an invalid length. [ 801.057198][T17053] team0: Port device team_slave_1 added [ 801.156779][ T7184] tipc: Left network mode [ 801.231282][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 801.465363][T17213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3320'. [ 801.499789][T17053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.552113][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.592204][T17053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.614508][T17219] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3320'. [ 802.665559][T17053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.680106][T17053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.790694][T17053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.677813][T17053] hsr_slave_0: entered promiscuous mode [ 803.753237][T17053] hsr_slave_1: entered promiscuous mode [ 803.760588][T17242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3325'. [ 803.802729][T17053] debugfs: 'hsr0' already exists in 'hsr' [ 803.812182][T17053] Cannot create hsr debugfs directory [ 803.843625][T17242] 9pnet_virtio: no channels available for device syz [ 804.202710][ T7184] hsr_slave_0: left promiscuous mode [ 804.669308][ T7184] hsr_slave_1: left promiscuous mode [ 804.686190][ T7184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.706729][ T7184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.834252][ T7184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.844187][ T7184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.888604][ T7184] veth1_macvtap: left promiscuous mode [ 804.898418][ T7184] veth0_macvtap: left promiscuous mode [ 804.906075][ T7184] veth1_vlan: left promiscuous mode [ 805.010598][ T7184] veth0_vlan: left promiscuous mode [ 910.882024][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 910.888999][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17264/1:b..l [ 910.897381][ C1] rcu: (detected by 1, t=10502 jiffies, g=75065, q=555 ncpus=2) [ 910.905070][ C1] task:modprobe state:R running task stack:24968 pid:17264 tgid:17264 ppid:16883 task_flags:0x40000c flags:0x00080001 [ 910.919371][ C1] Call Trace: [ 910.922640][ C1] [ 910.925547][ C1] ? __schedule+0x10b9/0x6150 [ 910.930202][ C1] __schedule+0x1139/0x6150 [ 910.934705][ C1] ? __pfx___schedule+0x10/0x10 [ 910.939560][ C1] ? mark_held_locks+0x49/0x80 [ 910.944300][ C1] preempt_schedule_irq+0x51/0x90 [ 910.949300][ C1] irqentry_exit+0x1d8/0x8c0 [ 910.953867][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 910.959823][ C1] RIP: 0010:__orc_find+0x86/0xf0 [ 910.964738][ C1] Code: f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 <48> 01 da 49 39 d5 73 af 4c 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 [ 910.984319][ C1] RSP: 0018:ffffc900041df6f8 EFLAGS: 00000246 [ 910.990362][ C1] RAX: ffffffff91261974 RBX: ffffffff90a0fd10 RCX: dffffc0000000000 [ 910.998309][ C1] RDX: fffffffff10866c9 RSI: 0000000000000000 RDI: ffffffff90a0fcf4 [ 911.006252][ C1] RBP: ffffffff90a0fd08 R08: ffffffff912619b0 R09: 00000000d27c185d [ 911.014196][ C1] R10: 0000000000000002 R11: 000000000000a963 R12: ffffffff90a0fd18 [ 911.022148][ C1] R13: ffffffff81a963ad R14: ffffffff90a0fcf4 R15: ffffffff90a0fd04 [ 911.030094][ C1] ? stack_trace_save+0x8d/0xc0 [ 911.034931][ C1] ? stack_trace_save+0x8d/0xc0 [ 911.039754][ C1] unwind_next_frame+0x2ec/0x20b0 [ 911.044755][ C1] ? stack_trace_save+0x8e/0xc0 [ 911.049575][ C1] ? __unwind_start+0x45f/0x7f0 [ 911.054401][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 911.060550][ C1] arch_stack_walk+0x94/0x100 [ 911.065208][ C1] ? stack_trace_save+0x8e/0xc0 [ 911.070035][ C1] stack_trace_save+0x8e/0xc0 [ 911.074686][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 911.080054][ C1] ? __lock_acquire+0x436/0x2890 [ 911.084966][ C1] kasan_save_stack+0x33/0x60 [ 911.089639][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 911.094812][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 911.100938][ C1] __call_rcu_common.constprop.0+0xa5/0xa10 [ 911.106808][ C1] kmem_cache_free+0x171/0x770 [ 911.111544][ C1] ? exit_mmap+0x507/0xb60 [ 911.115936][ C1] ? exit_mmap+0x507/0xb60 [ 911.120325][ C1] exit_mmap+0x507/0xb60 [ 911.124560][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 911.129300][ C1] ? __lock_acquire+0x436/0x2890 [ 911.134218][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 911.139744][ C1] __mmput+0x12a/0x410 [ 911.143795][ C1] mmput+0x62/0x70 [ 911.147490][ C1] do_exit+0x7d7/0x2bd0 [ 911.151618][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 911.156619][ C1] ? __pfx_do_exit+0x10/0x10 [ 911.161210][ C1] ? rcu_is_watching+0x12/0xc0 [ 911.165949][ C1] do_group_exit+0xd3/0x2a0 [ 911.170424][ C1] __x64_sys_exit_group+0x3e/0x50 [ 911.175447][ C1] x64_sys_call+0x151c/0x1740 [ 911.180100][ C1] do_syscall_64+0xcd/0xf80 [ 911.184580][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.190446][ C1] RIP: 0033:0x7fc1b51546c5 [ 911.194831][ C1] RSP: 002b:00007ffca432d6e8 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 911.203213][ C1] RAX: ffffffffffffffda RBX: 00007fc1b5255fe8 RCX: 00007fc1b51546c5 [ 911.211157][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 911.219100][ C1] RBP: 0000000000000001 R08: 00007ffca432d678 R09: 0000000000000000 [ 911.227055][ C1] R10: 00007ffca432d510 R11: 0000000000000206 R12: 0000000000000000 [ 911.235000][ C1] R13: 0000000000000001 R14: 00007fc1b5254680 R15: 00007fc1b5256000 [ 911.242969][ C1] [ 911.245975][ C1] rcu: rcu_preempt kthread starved for 10537 jiffies! g75065 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 911.257140][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 911.267094][ C1] rcu: RCU grace-period kthread stack dump: [ 911.272977][ C1] task:rcu_preempt state:R running task stack:28120 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 911.286428][ C1] Call Trace: [ 911.289696][ C1] [ 911.292606][ C1] ? __schedule+0x10b9/0x6150 [ 911.297263][ C1] __schedule+0x1139/0x6150 [ 911.301740][ C1] ? __lock_acquire+0x436/0x2890 [ 911.306650][ C1] ? __mod_timer+0x8f2/0xd30 [ 911.311217][ C1] ? __pfx___schedule+0x10/0x10 [ 911.316037][ C1] ? find_held_lock+0x2b/0x80 [ 911.320688][ C1] ? schedule+0x2d7/0x3a0 [ 911.324991][ C1] schedule+0xe7/0x3a0 [ 911.329032][ C1] schedule_timeout+0x123/0x290 [ 911.333855][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 911.339198][ C1] ? __pfx_process_timeout+0x10/0x10 [ 911.344463][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 911.350240][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 911.355675][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 911.360428][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 911.365712][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 911.370888][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 911.375800][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 911.380631][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 911.386439][ C1] rcu_gp_kthread+0x26d/0x380 [ 911.391092][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 911.396267][ C1] ? rcu_is_watching+0x12/0xc0 [ 911.401008][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 911.406179][ C1] ? __kthread_parkme+0x19e/0x250 [ 911.411173][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 911.416347][ C1] kthread+0x3c5/0x780 [ 911.420392][ C1] ? __pfx_kthread+0x10/0x10 [ 911.424966][ C1] ? rcu_is_watching+0x12/0xc0 [ 911.429721][ C1] ? __pfx_kthread+0x10/0x10 [ 911.434302][ C1] ret_from_fork+0x983/0xb10 [ 911.438873][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 911.444043][ C1] ? __switch_to+0x7af/0x10d0 [ 911.448695][ C1] ? __pfx_kthread+0x10/0x10 [ 911.453260][ C1] ret_from_fork_asm+0x1a/0x30 [ 911.458076][ C1] [ 911.461068][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 911.467362][ C1] Sending NMI from CPU 1 to CPUs 0: [ 911.472564][ C0] NMI backtrace for cpu 0 [ 911.472588][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 911.472609][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 911.472620][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 911.472647][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 911.472665][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 911.472680][ C0] RAX: 000000000171ae03 RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 911.472692][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 911.472704][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 911.472716][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 911.472728][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b4d0 R15: 0000000000000000 [ 911.472740][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 911.472757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.472769][ C0] CR2: 0000200001000000 CR3: 000000001d356000 CR4: 00000000003526f0 [ 911.472781][ C0] Call Trace: [ 911.472787][ C0] [ 911.472793][ C0] default_idle+0x13/0x20 [ 911.472818][ C0] default_idle_call+0x6c/0xb0 [ 911.472843][ C0] do_idle+0x38d/0x510 [ 911.472871][ C0] ? __pfx_do_idle+0x10/0x10 [ 911.472900][ C0] cpu_startup_entry+0x4f/0x60 [ 911.472927][ C0] rest_init+0x16b/0x2b0 [ 911.472941][ C0] ? acpi_subsystem_init+0x133/0x180 [ 911.472959][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 911.472979][ C0] start_kernel+0x3ef/0x4d0 [ 911.473006][ C0] x86_64_start_reservations+0x18/0x30 [ 911.473034][ C0] x86_64_start_kernel+0x130/0x190 [ 911.473062][ C0] common_startup_64+0x13e/0x148 [ 911.473091][ C0]