last executing test programs: 2.949028228s ago: executing program 2 (id=3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0xdb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) 2.842345084s ago: executing program 2 (id=6): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_emit_vhci(0x0, 0x11) 2.797987185s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='4', 0x1) 2.687794066s ago: executing program 2 (id=8): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64=r0], 0x7) 2.319834233s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) 2.224969559s ago: executing program 4 (id=9): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socketpair(0x25, 0x6, 0x7, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000380)=0x4e02, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x8c, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x71, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c02db7fc8d899cc5ec2cfc8a94d"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.129757762s ago: executing program 1 (id=2): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='0', 0x1) 1.948581296s ago: executing program 0 (id=1): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x6, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, {0xa, 0xfffd, 0xfffffffd, @remote}, r0, 0xfffffffc}}, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x8000cc, @mcast2, 0x3}, {0xa, 0x4e23, 0x8ae5, @remote}, r2, 0x27}}, 0x48) 1.865995816s ago: executing program 1 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa0}, 0xc000) 1.756415508s ago: executing program 0 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0018"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.671043218s ago: executing program 4 (id=12): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000060, 0x0) 1.644547474s ago: executing program 1 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(0x0, 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000200)={0x1, "b4be8421a3f3090ceb57129c83bb1a1562ae2050097bc3a277628b8fb36a28da220fdf81608f602bc11cfdaec03d294cfbdd855de75763122def77a5c75d51a8"}) 1.583704818s ago: executing program 3 (id=4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0xdb) 1.555803263s ago: executing program 0 (id=14): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.409215714s ago: executing program 3 (id=15): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r6, 0x9}}, 0x10) socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) socketpair$unix(0x1, 0x3, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, &(0x7f0000000140)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0xc0}}}, &(0x7f0000000300)) 935.459495ms ago: executing program 2 (id=16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1) 51.984615ms ago: executing program 3 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e4, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x21c, 0xffffffff, 0xffffffff, 0x21c, 0xffffffff, 0x3, &(0x7f0000000300), {[{{@ipv6={@local, @mcast2, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff], 'syzkaller0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x23, 0x7, 0x1, 0x1}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ipv6header={{0x24}, {0x90, 0x83}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x57dd, 0x200, 0x10000, 'snmp_trap\x00', 'syz1\x00', {0x10}}}}, {{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x19}, [0xff000000, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 'hsr0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x8, 0x3, 0x0, 0x21}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x2, 0x200, 'snmp_trap\x00', {0xc685}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x340) sendto$inet6(r4, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x4, 0xffffffff, @empty}, 0x1c) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='msdos\x00', 0x8080, &(0x7f00000001c0)='discard') r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) sendto$inet6(r4, &(0x7f0000000540)="d2643718f60bc48de06164649966d3dbcdb81e04000000000000003a85bc749d3194b38ff5ea36f6aae15f46d64a9d7ed36d943671e7437426768f5a7e3650bd26ba58ee5348c01f3c724f7eb6f6ce656b8bcb81d7015b138edec188e4699a29496f4bd1ef1154f17e94ee48254ec1e9daaf86c1e25f9a2cc51241fda8164b0a0d7720fc61ebbeb178c00f999bf9141685cac2443159e14af92767afd5cafe4ec32c", 0xa2, 0x4000, 0x0, 0x0) shutdown(r4, 0x1) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x9}, 0x6, 0x2, 0x49f5, 0x5d, 0xc, 'syz0\x00', "36d059535b6f7804c53d19a3003b389993d6c386e54d783611c335309039745b", "f4f3270282bebaf85cdad5aafa299eafe54ae01af586476691af354aa38fc2dd", [{0xc, 0x80, {0x0, 0x8}}, {0x4, 0xe2c9, {0x0, 0x1000}}, {0xb, 0x9, {0x1, 0xc00}}, {0x4, 0x3, {0x2, 0x7}}, {0x7, 0x3, {0x1b6cbd1ce1a6645d, 0x2}}, {0x16c5, 0x8, {0x0, 0x46af}}, {0xfffc, 0x6, {0x2, 0x4}}, {0xfc76, 0x7fff, {0x3, 0x3}}, {0x5, 0xad6a, {0x3, 0x3}}, {0x9, 0x3, {0x3, 0x2}}, {0x4, 0x1, {0x3, 0x200}}, {0x5, 0xff, {0x2, 0x8}}, {0x3, 0x69, {0x0, 0x7}}, {0x7, 0x2, {0x1, 0xac8}}, {0x1, 0x4, {0x0, 0x1}}, {0x7, 0x800, {0x0, 0x10}}, {0x5, 0xa, {0x2, 0xffff}}, {0xff, 0xa, {0x0, 0xb782}}, {0x10, 0x8, {0x0, 0x1ff}}, {0xe, 0x9, {0x3, 0x1}}, {0x1, 0x3, {0x0, 0x8}}, {0x7f, 0x2, {0x3, 0x2}}, {0x200, 0x56e, {0x3, 0xfc}}, {0x635c, 0xc17, {0x1, 0xb}}, {0x4, 0x6, {0x0, 0x40000000}}, {0x9, 0x4, {0x3, 0xb88}}, {0xe, 0x5, {0x3, 0x4}}, {0xd, 0x5, {0x3, 0x5}}, {0x4, 0x4, {0x1, 0x1dd0}}, {0x3, 0xb, {0x2, 0x1}}, {0x7, 0x1, {0x2, 0xfffffffe}}, {0x0, 0xecc, {0x0, 0x4}}, {0x2, 0x9, {0x0, 0x1}}, {0xb, 0x3, {0x0, 0x6}}, {0x80, 0x7, {0x0, 0x4}}, {0x7ff, 0x3, {0x1, 0x2}}, {0x640a, 0x0, {0x3, 0x1}}, {0x3c9, 0x6, {0x0, 0x6}}, {0x7, 0x1000, {0x1, 0x76beb582}}, {0x9, 0x2, {0x1, 0x9}}]}}}]}, 0x268}}, 0x8000) 0s ago: executing program 2 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x105100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRESHEX=r1, @ANYRES32=r4, @ANYBLOB="0900340014020202250200000a00060008b71100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7e}, @device_a, @device_a, @from_mac, {0x1, 0xe}, @value=@ver_80211n={0x0, 0x7f, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x17, @val={0x8c, 0x10, {0x909, "36831dc8ca4b", @short="76d50701faca5d99"}}}, 0x30) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000080211000000100000000200"/30], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_b, @random="a495f621e873", {0xc, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1}}, @void, @val={0x1, 0x6, [{0x9, 0x1}, {0xc}, {0x36}, {0x2, 0x1}, {0x60}, {0xc}]}, @val={0x3, 0x1, 0xb7}, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x1519, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x10, 0x8c}}, @void, [{0xdd, 0xd, "52f1439b629ee1a116905333ad"}, {0xdd, 0x36, "7c2d38918017a87d6b21c07bd83b06db74c231bd8e524c06f1682bef47d7cb0193c320feada255d767aa2f601c581b7deed44c3d9618"}, {0xdd, 0xcb, "00f5c31d40ea9d6c3a237343578081def69f2aa1257536663fe2c725aba21daa4661ac37a2f48e32f74ebb374ec091c293bc99e4b1b058ff7f41eff40a2b37bd4b298425da2f2d4fba324f2a7723c7493b85fc6086884f1073902dd51e18c577ab22fa594a5dc78c4bcb2b8115d573b8197022d4c921dfc5a1308e8c453785fde3d921ac8707f6742f746d6d27e79099a0428098dcb69a1e3a70c26fd106bf9159e08efe4713460db4ef73d271a98e3fbb337ae1c41bddb1df9354a5cd38eaf4e9f5312a717103952d5e90"}, {0xdd, 0xdf, "1dbec2e72b22b1ffbc7048b49556047c8598e2c292251bbe0fbd08b10599f107837df0ce868f7dff3cb6c64eeb26f90abdf3472966e33a20e5c88b070a930deded05f8cb525dfe364dfb05d5edc7db21f78f380104d7a60e750e3d32d8d44a5355eee21b095c8839cc8327febe6f36173c1746aeed2a24e0ddeb01d68313c2aad8b029a4e8fbf3a7698bc97f65a8e9cc24f693fbf299dee2310131ca4bbc7ad12aea92f12259021bae01eba070c07736bee79c04acedef04a11a22b34b78a539de02c901dd014d2823ab42f7255d387e96f36fb455e84c4e00150ccf1a4da5"}]}, 0x238) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='nodev\x00', &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x101041, 0x92) write(r5, &(0x7f0000000680)='1', 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) r7 = socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r7) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x100) pwrite64(r8, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1', 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x4}) syz_io_uring_setup(0x34, &(0x7f00000002c0)={0x0, 0x4000880e, 0x13100, 0x0, 0x4, 0x0, r9}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) kernel console output (not intermixed with test programs): [ 59.374666][ T30] audit: type=1400 audit(1785715629.694:125): avc: denied { write } for pid=5561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 66.812903][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 66.812920][ T30] audit: type=1400 audit(1785715637.124:129): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.843044][ T30] audit: type=1400 audit(1785715637.154:130): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.846546][ T5597] cgroup: Unknown subsys name 'net' [ 66.871997][ T30] audit: type=1400 audit(1785715637.184:131): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.036798][ T5597] cgroup: Unknown subsys name 'cpuset' [ 67.045897][ T5597] cgroup: Unknown subsys name 'rlimit' [ 67.167001][ T30] audit: type=1400 audit(1785715637.484:132): avc: denied { setattr } for pid=5597 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.190515][ T30] audit: type=1400 audit(1785715637.484:133): avc: denied { create } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.211336][ T30] audit: type=1400 audit(1785715637.484:134): avc: denied { write } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.255384][ T30] audit: type=1400 audit(1785715637.484:135): avc: denied { read } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.276215][ T30] audit: type=1400 audit(1785715637.524:136): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.301860][ T30] audit: type=1400 audit(1785715637.524:137): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.341690][ T5599] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.351465][ T30] audit: type=1400 audit(1785715637.664:138): avc: denied { relabelto } for pid=5599 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.320630][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.527954][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.541293][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.559406][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.568141][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.576416][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.578725][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.584819][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.596751][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.599398][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.612769][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.614546][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.626846][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.628098][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.635525][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.642182][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.649417][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.655695][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.662229][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.669286][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.677888][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.685424][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.698485][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.699960][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.720646][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.729325][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.107110][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.117299][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.174636][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.182476][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.189965][ T5614] bridge_slave_0: entered allmulticast mode [ 72.197519][ T5614] bridge_slave_0: entered promiscuous mode [ 72.237155][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.244349][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.251441][ T5614] bridge_slave_1: entered allmulticast mode [ 72.258439][ T5614] bridge_slave_1: entered promiscuous mode [ 72.306738][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.313939][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.321524][ T5611] bridge_slave_0: entered allmulticast mode [ 72.328589][ T5611] bridge_slave_0: entered promiscuous mode [ 72.343361][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.350528][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.357737][ T5610] bridge_slave_0: entered allmulticast mode [ 72.364995][ T5610] bridge_slave_0: entered promiscuous mode [ 72.384473][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.391596][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.398868][ T5611] bridge_slave_1: entered allmulticast mode [ 72.405784][ T5611] bridge_slave_1: entered promiscuous mode [ 72.412594][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.419771][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.427021][ T5612] bridge_slave_0: entered allmulticast mode [ 72.433788][ T5612] bridge_slave_0: entered promiscuous mode [ 72.441009][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.448770][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.456050][ T5610] bridge_slave_1: entered allmulticast mode [ 72.462856][ T5610] bridge_slave_1: entered promiscuous mode [ 72.476584][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.494539][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.501639][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.509005][ T5612] bridge_slave_1: entered allmulticast mode [ 72.515858][ T5612] bridge_slave_1: entered promiscuous mode [ 72.549418][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.600166][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.612247][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.624543][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.633727][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.640996][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.648271][ T5609] bridge_slave_0: entered allmulticast mode [ 72.655273][ T5609] bridge_slave_0: entered promiscuous mode [ 72.670939][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.689189][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.700864][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.710325][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.717893][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.725079][ T5609] bridge_slave_1: entered allmulticast mode [ 72.731863][ T5609] bridge_slave_1: entered promiscuous mode [ 72.740433][ T5614] team0: Port device team_slave_0 added [ 72.778174][ T5614] team0: Port device team_slave_1 added [ 72.784905][ T5626] Bluetooth: hci0: command tx timeout [ 72.784910][ T5619] Bluetooth: hci4: command tx timeout [ 72.785087][ T5619] Bluetooth: hci3: command tx timeout [ 72.791116][ T5624] Bluetooth: hci1: command tx timeout [ 72.796859][ T5615] Bluetooth: hci2: command tx timeout [ 72.806517][ T5611] team0: Port device team_slave_0 added [ 72.861440][ T5611] team0: Port device team_slave_1 added [ 72.868493][ T5612] team0: Port device team_slave_0 added [ 72.877032][ T5610] team0: Port device team_slave_0 added [ 72.885054][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.910883][ T5612] team0: Port device team_slave_1 added [ 72.917926][ T5610] team0: Port device team_slave_1 added [ 72.925166][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.935413][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.942366][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.968542][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.010135][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.017152][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.044406][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.056734][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.063678][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.089778][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.133305][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.140285][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.166177][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.177507][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.184707][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.210666][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.222430][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.229435][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.255589][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.267971][ T5609] team0: Port device team_slave_0 added [ 73.276052][ T5609] team0: Port device team_slave_1 added [ 73.296277][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.303206][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.329266][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.345387][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.352340][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.378613][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.404518][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.411495][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.437387][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.450784][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.457757][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.483708][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.533716][ T5614] hsr_slave_0: entered promiscuous mode [ 73.540138][ T5614] hsr_slave_1: entered promiscuous mode [ 73.592117][ T5611] hsr_slave_0: entered promiscuous mode [ 73.598603][ T5611] hsr_slave_1: entered promiscuous mode [ 73.604920][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 73.611135][ T5611] Cannot create hsr debugfs directory [ 73.637218][ T5609] hsr_slave_0: entered promiscuous mode [ 73.643302][ T5609] hsr_slave_1: entered promiscuous mode [ 73.649397][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 73.655346][ T5609] Cannot create hsr debugfs directory [ 73.666879][ T5610] hsr_slave_0: entered promiscuous mode [ 73.672919][ T5610] hsr_slave_1: entered promiscuous mode [ 73.679028][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 73.684808][ T5610] Cannot create hsr debugfs directory [ 73.703573][ T5612] hsr_slave_0: entered promiscuous mode [ 73.709750][ T5612] hsr_slave_1: entered promiscuous mode [ 73.716101][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 73.721811][ T5612] Cannot create hsr debugfs directory [ 74.152563][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.166605][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.175352][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.185747][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.193398][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.201993][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.217038][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.229177][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.276881][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.288672][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.296681][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.306845][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.317257][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.326091][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.345803][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.355883][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.419549][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.428617][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.442184][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.453294][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.461752][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.470936][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.489294][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.498255][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.573549][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.582727][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.590991][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.600234][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.615472][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.625042][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.644561][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.653284][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.702981][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.727559][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.737109][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.758465][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.767269][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.786660][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.795918][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.809807][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.818750][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.828312][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.857563][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.864956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.872593][ T5615] Bluetooth: hci1: command tx timeout [ 74.873411][ T5624] Bluetooth: hci0: command tx timeout [ 74.879305][ T5615] Bluetooth: hci2: command tx timeout [ 74.883801][ T5624] Bluetooth: hci3: command tx timeout [ 74.889415][ T5626] Bluetooth: hci4: command tx timeout [ 74.928113][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.935201][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.964493][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.023111][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.032935][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.069021][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.086476][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.093549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.116466][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.125364][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.132429][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.152816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.159898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.203484][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.210655][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.223130][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.261288][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.268393][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.283305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.290408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.303367][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.398266][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.466525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.473688][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.510455][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.517640][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.103396][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.155825][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.288486][ T5611] veth0_vlan: entered promiscuous mode [ 76.339442][ T5611] veth1_vlan: entered promiscuous mode [ 76.440325][ T5611] veth0_macvtap: entered promiscuous mode [ 76.469007][ T5611] veth1_macvtap: entered promiscuous mode [ 76.527381][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.575997][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.604931][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.620747][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.693631][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.708547][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.719433][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.782100][ T5609] veth0_vlan: entered promiscuous mode [ 76.838208][ T5612] veth0_vlan: entered promiscuous mode [ 76.845881][ T5614] veth0_vlan: entered promiscuous mode [ 76.869191][ T5609] veth1_vlan: entered promiscuous mode [ 76.885677][ T1016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.899684][ T1016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.901202][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.919287][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.940281][ T5614] veth1_vlan: entered promiscuous mode [ 76.946319][ T5626] Bluetooth: hci3: command tx timeout [ 76.951923][ T5619] Bluetooth: hci0: command tx timeout [ 76.954022][ T5615] Bluetooth: hci1: command tx timeout [ 76.957514][ T5619] Bluetooth: hci4: command tx timeout [ 76.962754][ T5624] Bluetooth: hci2: command tx timeout [ 76.989659][ T5612] veth1_vlan: entered promiscuous mode [ 77.018443][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.020121][ T5610] veth0_vlan: entered promiscuous mode [ 77.032853][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.049565][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 77.049579][ T30] audit: type=1400 audit(1785715647.364:153): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.a0BdEZ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.080155][ T5614] veth0_macvtap: entered promiscuous mode [ 77.089130][ T30] audit: type=1400 audit(1785715647.364:154): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.108290][ T5609] veth0_macvtap: entered promiscuous mode [ 77.112669][ T30] audit: type=1400 audit(1785715647.364:155): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.a0BdEZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.132369][ T5610] veth1_vlan: entered promiscuous mode [ 77.144903][ T30] audit: type=1400 audit(1785715647.364:156): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.175859][ T30] audit: type=1400 audit(1785715647.384:157): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.a0BdEZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.203856][ T5614] veth1_macvtap: entered promiscuous mode [ 77.208070][ T30] audit: type=1400 audit(1785715647.384:158): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/root/syzkaller.a0BdEZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.220484][ T5612] veth0_macvtap: entered promiscuous mode [ 77.237573][ T30] audit: type=1400 audit(1785715647.444:159): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.263544][ T30] audit: type=1400 audit(1785715647.494:160): avc: denied { mounton } for pid=5611 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.271493][ T5609] veth1_macvtap: entered promiscuous mode [ 77.287779][ T30] audit: type=1400 audit(1785715647.494:161): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="gadgetfs" ino=7647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.315040][ T30] audit: type=1400 audit(1785715647.494:162): avc: denied { mount } for pid=5611 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.337359][ T5612] veth1_macvtap: entered promiscuous mode [ 77.353249][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.359525][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.400393][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.445241][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.486287][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.497474][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.525560][ T5610] veth0_macvtap: entered promiscuous mode [ 77.555478][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.590782][ T5610] veth1_macvtap: entered promiscuous mode [ 77.646290][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.680910][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.748272][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.769272][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791414][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.802411][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.834902][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.842842][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.855695][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.894483][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.898799][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.919289][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.934949][ T1229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.949728][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.970163][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.986459][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.021854][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.032445][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.104198][ T1229] usb 3-1: Using ep0 maxpacket: 32 [ 78.128078][ T1229] usb 3-1: config 0 has no interfaces? [ 78.151168][ T1229] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 78.179284][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.180985][ T1229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.197160][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202631][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.253487][ T1229] usb 3-1: Product: syz [ 78.257816][ T3349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.279988][ T1229] usb 3-1: Manufacturer: syz [ 78.298754][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.302281][ T1229] usb 3-1: SerialNumber: syz [ 78.318932][ T5819] netlink: zone id is out of range [ 78.339134][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.348540][ T1229] usb 3-1: config 0 descriptor?? [ 78.350031][ T5819] netlink: zone id is out of range [ 78.368931][ T5819] netlink: zone id is out of range [ 78.391609][ T5819] netlink: zone id is out of range [ 78.417802][ T5819] netlink: zone id is out of range [ 78.419748][ T5817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 78.422973][ T5819] netlink: zone id is out of range [ 78.485035][ T5819] netlink: zone id is out of range [ 78.502577][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.511489][ T5817] openvswitch: netlink: Missing key (keys=40, expected=80) [ 78.523699][ T5819] netlink: zone id is out of range [ 78.529177][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.551945][ T5819] netlink: zone id is out of range [ 78.625882][ T3349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.659925][ T3349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.693304][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 78.707298][ T3349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.724237][ T3349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.815586][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.819982][ T1229] usb 3-1: USB disconnect, device number 2 [ 78.845162][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.904299][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.934955][ T1016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985178][ T1016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.994464][ T1166] Bluetooth: hci5: Frame reassembly failed (-84) [ 79.024587][ T5615] Bluetooth: hci0: command tx timeout [ 79.034021][ T5615] Bluetooth: hci1: command tx timeout [ 79.034060][ T5619] Bluetooth: hci4: command tx timeout [ 79.039429][ T5615] Bluetooth: hci3: command tx timeout [ 79.104273][ T5742] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.173934][ T120] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.266935][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.281672][ T5742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.295588][ T5742] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 79.316811][ T5742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.334448][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 79.347520][ T5742] usb 2-1: config 0 descriptor?? [ 79.357394][ T120] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 79.387050][ T120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.403203][ T120] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.413309][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.443816][ T120] usb 1-1: Product: syz [ 79.457376][ T120] usb 1-1: Manufacturer: syz [ 79.468572][ T120] usb 1-1: SerialNumber: syz [ 79.511411][ T120] usb 1-1: config 0 descriptor?? [ 79.526026][ T120] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 79.536503][ T120] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 79.803267][ T5742] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 79.829506][ T5742] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 79.914887][ T5742] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 79.923028][ T5742] hid-steam 0003:28DE:1142.0001: No HID_FEATURE_REPORT submitted - nothing to read [ 79.947367][ T5742] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 79.975869][ T5742] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 80.136262][ T120] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 80.147246][ T120] em28xx 1-1:0.0: Config register raw data: 0x00 [ 80.447901][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 80.464990][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.480891][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.551340][ T5855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.671912][ T5857] ./bus: Can't lookup blockdev [ 81.024080][ T5624] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 81.365452][ T29] cfg80211: failed to load regulatory.db [ 81.757538][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.767203][ T120] usb 2-1: USB disconnect, device number 2 [ 81.883141][ T120] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 82.029190][ T5804] usb 1-1: USB disconnect, device number 2 [ 82.080330][ T5804] em28xx 1-1:0.0: Disconnecting em28xx [ 82.151286][ T5804] em28xx 1-1:0.0: Freeing device [ 82.171790][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 82.171804][ T30] audit: type=1400 audit(1785715652.484:229): avc: denied { create } for pid=5894 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.177614][ T5896] Zero length message leads to an empty skb [ 82.195012][ T5897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'. [ 82.232867][ T30] audit: type=1400 audit(1785715652.544:230): avc: denied { setopt } for pid=5894 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.293290][ T5897] ip6gre0: Master is either lo or non-ether device [ 82.307113][ T30] audit: type=1400 audit(1785715652.624:231): avc: denied { write } for pid=5877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.343673][ T5897] ip6gre0: Master is either lo or non-ether device [ 82.373228][ T5898] Bluetooth: MGMT ver 1.23 [ 82.397892][ T30] audit: type=1400 audit(1785715652.654:232): avc: denied { map_create } for pid=5894 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.426147][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 82.487552][ T30] audit: type=1400 audit(1785715652.654:233): avc: denied { map_read map_write } for pid=5894 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 82.551075][ T5902] sctp: [Deprecated]: syz.3.25 (pid 5902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.551075][ T5902] Use struct sctp_sack_info instead [ 82.560423][ T30] audit: type=1400 audit(1785715652.684:234): avc: denied { bind } for pid=5894 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.602128][ T5853] ------------[ cut here ]------------ [ 82.607793][ T5853] dev->config->get_status(dev) [ 82.607809][ T5853] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x131/0x170, CPU#1: syz.2.18/5853 [ 82.623538][ T5853] Modules linked in: [ 82.629316][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 82.639283][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.649441][ T5853] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 82.655352][ T5853] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 82.676687][ T5853] RSP: 0018:ffffc900055c7868 EFLAGS: 00010246 [ 82.683950][ T5853] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc90003d7a000 [ 82.691939][ T5853] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff8880314bca80 [ 82.700004][ T5853] RBP: ffff888021369000 R08: 0000000000000001 R09: 0000000000000000 [ 82.708603][ T5853] R10: 00000000000000ff R11: ffffffff81000130 R12: ffffffff8fe277c0 [ 82.717018][ T5853] R13: ffff888021369008 R14: ffff8880213690f0 R15: ffffffff8fe277c0 [ 82.725068][ T5853] FS: 00007f968caba6c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 82.734086][ T5853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.740681][ T5853] CR2: 00007fd88101d060 CR3: 0000000073d03000 CR4: 00000000003526f0 [ 82.748768][ T5853] Call Trace: [ 82.752053][ T5853] [ 82.756134][ T5853] ? __pfx_virtio_dev_remove+0x10/0x10 [ 82.761724][ T5853] device_remove+0xcb/0x180 [ 82.766300][ T5853] device_release_driver_internal+0x44e/0x620 [ 82.772389][ T5853] bus_remove_device+0x2bc/0x560 [ 82.778817][ T5853] ? __pfx_bus_remove_device+0x10/0x10 [ 82.785306][ T5853] ? __pfx_device_remove_attrs+0x10/0x10 [ 82.791339][ T5853] device_del+0x376/0x9b0 [ 82.795904][ T5853] ? __pfx_device_del+0x10/0x10 [ 82.800768][ T5853] ? __pfx___might_resched+0x10/0x10 [ 82.806198][ T5853] ? __pfx_pci_device_is_present+0x10/0x10 [ 82.812076][ T5853] device_unregister+0x1d/0xe0 [ 82.817003][ T5853] unregister_virtio_device+0x39/0x60 [ 82.822395][ T5853] virtio_pci_remove+0x7c/0x110 [ 82.827293][ T5853] pci_device_remove+0xb2/0x1d0 [ 82.832170][ T5853] ? __pfx_pci_device_remove+0x10/0x10 [ 82.837714][ T5853] device_remove+0xcb/0x180 [ 82.842239][ T5853] device_release_driver_internal+0x44e/0x620 [ 82.848392][ T5853] pci_stop_bus_device+0x120/0x160 [ 82.853513][ T5853] pci_stop_and_remove_bus_device+0x58/0xa0 [ 82.859465][ T5853] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 82.866770][ T5853] remove_store+0x123/0x140 [ 82.871300][ T5853] ? __pfx_remove_store+0x10/0x10 [ 82.878199][ T5853] ? find_held_lock+0x2b/0x80 [ 82.883859][ T5853] ? sysfs_file_kobj+0xe4/0x290 [ 82.888734][ T5853] ? sysfs_file_kobj+0xe4/0x290 [ 82.893598][ T5853] ? __pfx_remove_store+0x10/0x10 [ 82.898743][ T5853] dev_attr_store+0x58/0x80 [ 82.903276][ T5853] ? __pfx_dev_attr_store+0x10/0x10 [ 82.908562][ T5853] sysfs_kf_write+0xf2/0x150 [ 82.913198][ T5853] kernfs_fop_write_iter+0x3e0/0x5f0 [ 82.919223][ T5853] ? __pfx_sysfs_kf_write+0x10/0x10 [ 82.924512][ T5853] vfs_write+0x6ac/0x1050 [ 82.928898][ T5853] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 82.933932][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.934755][ T5853] ? __pfx_vfs_write+0x10/0x10 [ 82.947455][ T5853] ksys_write+0x12a/0x250 [ 82.951813][ T5853] ? __pfx_ksys_write+0x10/0x10 [ 82.956951][ T5853] do_syscall_64+0x115/0x870 [ 82.961555][ T5853] ? clear_bhb_loop+0x40/0x90 [ 82.966293][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.972193][ T5853] RIP: 0033:0x7f968bb9e019 [ 82.976672][ T5853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.997950][ T5853] RSP: 002b:00007f968caba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.007400][ T5853] RAX: ffffffffffffffda RBX: 00007f968be25fa0 RCX: 00007f968bb9e019 [ 83.015467][ T5853] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 83.023447][ T5853] RBP: 00007f968bc3500c R08: 0000000000000000 R09: 0000000000000000 [ 83.032133][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.040172][ T5853] R13: 00007f968be26038 R14: 00007f968be25fa0 R15: 00007ffdf05f1ff8 [ 83.048221][ T5853] [ 83.051250][ T5853] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.058524][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 83.067629][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 83.077679][ T5853] Call Trace: [ 83.080954][ T5853] [ 83.083880][ T5853] dump_stack_lvl+0x100/0x190 [ 83.088567][ T5853] vpanic+0x552/0x970 [ 83.092548][ T5853] ? __pfx_vpanic+0x10/0x10 [ 83.097058][ T5853] panic+0xd1/0xe0 [ 83.100778][ T5853] ? __pfx_panic+0x10/0x10 [ 83.105209][ T5853] check_panic_on_warn.cold+0x19/0x34 [ 83.110591][ T5853] ? virtio_dev_remove+0x131/0x170 [ 83.115706][ T5853] __warn.cold+0x191/0x318 [ 83.120125][ T5853] __report_bug+0x30f/0x440 [ 83.124631][ T5853] ? virtio_dev_remove+0x131/0x170 [ 83.129749][ T5853] ? __pfx___report_bug+0x10/0x10 [ 83.134790][ T5853] ? kasan_quarantine_put+0x104/0x240 [ 83.140172][ T5853] ? virtio_dev_remove+0x131/0x170 [ 83.145292][ T5853] report_bug+0xb2/0x220 [ 83.149541][ T5853] ? virtio_dev_remove+0x131/0x170 [ 83.154657][ T5853] handle_bug+0x16a/0x2a0 [ 83.158996][ T5853] exc_invalid_op+0x17/0x50 [ 83.163504][ T5853] asm_exc_invalid_op+0x1a/0x20 [ 83.168355][ T5853] RIP: 0010:virtio_dev_remove+0x131/0x170 [ 83.174080][ T5853] Code: c3 89 c6 e8 11 a1 7c fc 84 db 75 18 e8 f8 a6 7c fc 48 89 ef 5b be 01 00 00 00 5d 41 5c 41 5d e9 f5 fd ff ff e8 e0 a6 7c fc 90 <0f> 0b 90 eb dd e8 15 31 ed fc e9 36 ff ff ff e8 ab 30 ed fc eb b1 [ 83.193685][ T5853] RSP: 0018:ffffc900055c7868 EFLAGS: 00010246 [ 83.199752][ T5853] RAX: 0000000000080000 RBX: 00000000000000ff RCX: ffffc90003d7a000 [ 83.207724][ T5853] RDX: 0000000000080000 RSI: ffffffff858dbb00 RDI: ffff8880314bca80 [ 83.215696][ T5853] RBP: ffff888021369000 R08: 0000000000000001 R09: 0000000000000000 [ 83.223661][ T5853] R10: 00000000000000ff R11: ffffffff81000130 R12: ffffffff8fe277c0 [ 83.231628][ T5853] R13: ffff888021369008 R14: ffff8880213690f0 R15: ffffffff8fe277c0 [ 83.239628][ T5853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.245699][ T5853] ? virtio_dev_remove+0x130/0x170 [ 83.250827][ T5853] ? virtio_dev_remove+0x130/0x170 [ 83.255946][ T5853] ? __pfx_virtio_dev_remove+0x10/0x10 [ 83.261410][ T5853] device_remove+0xcb/0x180 [ 83.265916][ T5853] device_release_driver_internal+0x44e/0x620 [ 83.271995][ T5853] bus_remove_device+0x2bc/0x560 [ 83.276936][ T5853] ? __pfx_bus_remove_device+0x10/0x10 [ 83.282481][ T5853] ? __pfx_device_remove_attrs+0x10/0x10 [ 83.288131][ T5853] device_del+0x376/0x9b0 [ 83.292470][ T5853] ? __pfx_device_del+0x10/0x10 [ 83.297327][ T5853] ? __pfx___might_resched+0x10/0x10 [ 83.302611][ T5853] ? __pfx_pci_device_is_present+0x10/0x10 [ 83.308430][ T5853] device_unregister+0x1d/0xe0 [ 83.313201][ T5853] unregister_virtio_device+0x39/0x60 [ 83.318583][ T5853] virtio_pci_remove+0x7c/0x110 [ 83.323439][ T5853] pci_device_remove+0xb2/0x1d0 [ 83.328301][ T5853] ? __pfx_pci_device_remove+0x10/0x10 [ 83.333760][ T5853] device_remove+0xcb/0x180 [ 83.338272][ T5853] device_release_driver_internal+0x44e/0x620 [ 83.344363][ T5853] pci_stop_bus_device+0x120/0x160 [ 83.349479][ T5853] pci_stop_and_remove_bus_device+0x58/0xa0 [ 83.355379][ T5853] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 83.361888][ T5853] remove_store+0x123/0x140 [ 83.366395][ T5853] ? __pfx_remove_store+0x10/0x10 [ 83.371425][ T5853] ? find_held_lock+0x2b/0x80 [ 83.376100][ T5853] ? sysfs_file_kobj+0xe4/0x290 [ 83.380958][ T5853] ? sysfs_file_kobj+0xe4/0x290 [ 83.385824][ T5853] ? __pfx_remove_store+0x10/0x10 [ 83.390854][ T5853] dev_attr_store+0x58/0x80 [ 83.395368][ T5853] ? __pfx_dev_attr_store+0x10/0x10 [ 83.400576][ T5853] sysfs_kf_write+0xf2/0x150 [ 83.405181][ T5853] kernfs_fop_write_iter+0x3e0/0x5f0 [ 83.410470][ T5853] ? __pfx_sysfs_kf_write+0x10/0x10 [ 83.415680][ T5853] vfs_write+0x6ac/0x1050 [ 83.420024][ T5853] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 83.425839][ T5853] ? __pfx_vfs_write+0x10/0x10 [ 83.430635][ T5853] ksys_write+0x12a/0x250 [ 83.434975][ T5853] ? __pfx_ksys_write+0x10/0x10 [ 83.439843][ T5853] do_syscall_64+0x115/0x870 [ 83.444435][ T5853] ? clear_bhb_loop+0x40/0x90 [ 83.449115][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.455009][ T5853] RIP: 0033:0x7f968bb9e019 [ 83.459425][ T5853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.479031][ T5853] RSP: 002b:00007f968caba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.487443][ T5853] RAX: ffffffffffffffda RBX: 00007f968be25fa0 RCX: 00007f968bb9e019 [ 83.495411][ T5853] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 000000000000000a [ 83.503379][ T5853] RBP: 00007f968bc3500c R08: 0000000000000000 R09: 0000000000000000 [ 83.511346][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.519312][ T5853] R13: 00007f968be26038 R14: 00007f968be25fa0 R15: 00007ffdf05f1ff8 [ 83.527299][ T5853] [ 83.530538][ T5853] Kernel Offset: disabled [ 83.534843][ T5853] Rebooting in 86400 seconds..