last executing test programs: 2.287962113s ago: executing program 1 (id=1216): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 1.597467874s ago: executing program 1 (id=1232): syz_usb_connect$cdc_ncm(0x0, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x0, 0x10, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x87}, {0x4, 0x24, 0x1a, 0x0, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x200}, @dmm={0x7, 0x24, 0x14, 0x3, 0x101}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) 477.985557ms ago: executing program 0 (id=1266): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 477.283815ms ago: executing program 0 (id=1268): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x3ed, 0x100, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x4) 418.151046ms ago: executing program 0 (id=1270): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 417.640687ms ago: executing program 0 (id=1272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)="2703", 0x2}, {0x0}], 0x2}, 0x5) 417.460648ms ago: executing program 1 (id=1274): r0 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bind$alg(r0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r0, 0x0, 0x0, 0x80000) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) 337.907743ms ago: executing program 1 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x4}) 337.810503ms ago: executing program 2 (id=1277): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 335.25952ms ago: executing program 0 (id=1278): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x800, 0x2, 0x20000000, 0x10000, 0x40}, 0x8, 0x5, [{0x4, 0x6, 0x30, 0x9, 0xc, 0x9}]}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0xfd4}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd4, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x28a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x200002, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xa45b, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x8001, 0x1, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x80, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x80000001, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 268.329208ms ago: executing program 2 (id=1279): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, 0x0, 0x30, 0xa, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa1, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0}}, 0x40) close(0x4) socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000d10ffc)=0x7d10, 0xd) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0xc7d9, @mcast1, 0xe}, @in6={0xa, 0x4e21, 0x5, @local, 0x7fff}, @in6={0xa, 0x0, 0x7, @local, 0x56}], 0x54) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000dbcc0000090000000000000000002663dd54bdd5f1a358d38cd81d8cc9f2c138be27cf683641e589a3d42e1819a7f271bddaeb02b977e0957344b38d0bc22281d143f9bfaf7b6829b9fe402460174f756f399a14a3ecfd9ff570a892570dc9821daf6d557179b28ce258d32e31f126a639f2fd9d51a9dfc34121873e367d25c693233978848e59fec7376069ce2e3b50f4e2d208bd617aac37ff8adebe40b447289a45f0b6a2f4da6e6318be019cbfb876225763fa8e0e049f3c35799f7fc4", @ANYRESOCT=0x0, @ANYBLOB="00000000000000006608000019000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x31) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffd86, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r3], 0xdc}}, 0x0) r5 = socket(0x2b, 0x80801, 0x1) listen(r5, 0x8) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000140)=0x18, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, 0xffffffffffffffff, 0xc9233000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x20015, 0x0, 0xa, 0x9, 0xfffffffe}) write$bt_hci(r6, &(0x7f0000000080)=ANY=[], 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES8], 0x32600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 268.140137ms ago: executing program 1 (id=1280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x190, 0x6c, 0x0, 0x0, 0x0, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'veth0_vlan\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x18, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000], [], 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x32}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d8) 267.890148ms ago: executing program 3 (id=1281): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x29, 0x0, 0x0, 0x0, 0x3e, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x7800, 0x7f, 0xfffffffd, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x1, 0x0, 0x29, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x700, 0x0, 0xfffffffc}}) 208.315084ms ago: executing program 2 (id=1282): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 207.964775ms ago: executing program 1 (id=1283): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 207.876208ms ago: executing program 3 (id=1284): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x4000000, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 207.734101ms ago: executing program 2 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x8, &(0x7f0000000a40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 148.042964ms ago: executing program 2 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)="2703", 0x2}, {0x0}], 0x2}, 0x5) 147.856406ms ago: executing program 3 (id=1287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, r1, 0x21, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) 145.820941ms ago: executing program 0 (id=1288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) 68.148119ms ago: executing program 3 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d30", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 67.807516ms ago: executing program 3 (id=1290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)}, 0x40) 67.728711ms ago: executing program 3 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, r4, 0x0) 0s ago: executing program 2 (id=1292): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x0, 0x92) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0x0, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fc]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:61826' (ED25519) to the list of known hosts. [ 45.835039][ T40] audit: type=1400 audit(1777285499.444:62): avc: denied { name_bind } for pid=5690 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.867539][ T40] audit: type=1400 audit(1777285499.474:63): avc: denied { execute } for pid=5691 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.875818][ T40] audit: type=1400 audit(1777285499.474:64): avc: denied { execute_no_trans } for pid=5691 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.040167][ T40] audit: type=1400 audit(1777285501.654:65): avc: denied { mounton } for pid=5691 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.049688][ T40] audit: type=1400 audit(1777285501.664:66): avc: denied { mount } for pid=5691 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.052572][ T5691] cgroup: Unknown subsys name 'net' [ 48.182443][ T5691] cgroup: Unknown subsys name 'cpuset' [ 48.186729][ T5691] cgroup: Unknown subsys name 'rlimit' [ 48.410003][ T5719] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.092574][ T5691] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.373584][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 52.373599][ T40] audit: type=1400 audit(1777285505.984:82): avc: denied { execmem } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.478342][ T40] audit: type=1400 audit(1777285506.084:83): avc: denied { create } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.487017][ T40] audit: type=1400 audit(1777285506.084:84): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.495843][ T40] audit: type=1400 audit(1777285506.084:85): avc: denied { read write } for pid=5729 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.505118][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.510897][ T40] audit: type=1400 audit(1777285506.084:86): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.515064][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.518288][ T40] audit: type=1400 audit(1777285506.084:87): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.522161][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.528222][ T40] audit: type=1400 audit(1777285506.094:88): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[6628]" dev="sockfs" ino=6628 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.528402][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.532022][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.539821][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.540721][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.540952][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.541356][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.541898][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.542903][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.542936][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.544585][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.545078][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.545975][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.547195][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.547721][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.549583][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.553639][ T40] audit: type=1400 audit(1777285506.164:89): avc: denied { read } for pid=5729 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.564113][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.565564][ T40] audit: type=1400 audit(1777285506.164:90): avc: denied { open } for pid=5729 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.569211][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.570774][ T40] audit: type=1400 audit(1777285506.164:91): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.003705][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.006492][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.008978][ T5729] bridge_slave_0: entered allmulticast mode [ 53.012096][ T5729] bridge_slave_0: entered promiscuous mode [ 53.029938][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.032225][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.034466][ T5729] bridge_slave_1: entered allmulticast mode [ 53.037453][ T5729] bridge_slave_1: entered promiscuous mode [ 53.102741][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.108021][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.121405][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.123753][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.126234][ T5739] bridge_slave_0: entered allmulticast mode [ 53.130493][ T5739] bridge_slave_0: entered promiscuous mode [ 53.133626][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.136314][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.138627][ T5739] bridge_slave_1: entered allmulticast mode [ 53.141480][ T5739] bridge_slave_1: entered promiscuous mode [ 53.198410][ T5729] team0: Port device team_slave_0 added [ 53.200521][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.203197][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.205530][ T5730] bridge_slave_0: entered allmulticast mode [ 53.208153][ T5730] bridge_slave_0: entered promiscuous mode [ 53.216349][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.219181][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.221500][ T5741] bridge_slave_0: entered allmulticast mode [ 53.224235][ T5741] bridge_slave_0: entered promiscuous mode [ 53.227723][ T5729] team0: Port device team_slave_1 added [ 53.234977][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.238076][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.241344][ T5730] bridge_slave_1: entered allmulticast mode [ 53.245237][ T5730] bridge_slave_1: entered promiscuous mode [ 53.251655][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.256541][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.259002][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.261578][ T5741] bridge_slave_1: entered allmulticast mode [ 53.264286][ T5741] bridge_slave_1: entered promiscuous mode [ 53.285626][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.302108][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.305546][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.307792][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.316355][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.321225][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.323472][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.331622][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.344290][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.354298][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.370046][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.379330][ T5739] team0: Port device team_slave_0 added [ 53.389858][ T5741] team0: Port device team_slave_0 added [ 53.402728][ T5739] team0: Port device team_slave_1 added [ 53.411533][ T5741] team0: Port device team_slave_1 added [ 53.415025][ T5730] team0: Port device team_slave_0 added [ 53.420067][ T5730] team0: Port device team_slave_1 added [ 53.466768][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.469801][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.479475][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.495362][ T5729] hsr_slave_0: entered promiscuous mode [ 53.499034][ T5729] hsr_slave_1: entered promiscuous mode [ 53.504153][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.506963][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.517004][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.521960][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.524778][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.534607][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.539515][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.541768][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.550016][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.554263][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.556633][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.564967][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.568936][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.571405][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.579446][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.656393][ T5741] hsr_slave_0: entered promiscuous mode [ 53.660176][ T5741] hsr_slave_1: entered promiscuous mode [ 53.663097][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 53.665573][ T5741] Cannot create hsr debugfs directory [ 53.696779][ T5739] hsr_slave_0: entered promiscuous mode [ 53.699071][ T5739] hsr_slave_1: entered promiscuous mode [ 53.701521][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 53.703392][ T5739] Cannot create hsr debugfs directory [ 53.720352][ T5730] hsr_slave_0: entered promiscuous mode [ 53.722546][ T5730] hsr_slave_1: entered promiscuous mode [ 53.724708][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 53.726530][ T5730] Cannot create hsr debugfs directory [ 53.991635][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.999041][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.001659][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.006313][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.011882][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.016114][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.018918][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.022706][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.055608][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.061029][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.065101][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.069415][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.072688][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.077008][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.081436][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.085789][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.148963][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.155555][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.158863][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.165549][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.170115][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.175958][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.179792][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.185759][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.248339][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.252707][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.256142][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.260751][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.263969][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.267699][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.272566][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.276318][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.283722][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.321379][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.335740][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.339102][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.353726][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.356048][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.360358][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.396162][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.406849][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.409778][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.417770][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.433174][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.435934][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.456983][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.468150][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.473214][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.476119][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.497591][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.500579][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.506663][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.514670][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.517647][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.534738][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.537718][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.621752][ T5091] Bluetooth: hci1: command tx timeout [ 54.621772][ T5734] Bluetooth: hci2: command tx timeout [ 54.621859][ T5736] Bluetooth: hci3: command tx timeout [ 54.622004][ T5738] Bluetooth: hci0: command tx timeout [ 54.735790][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.763669][ T5729] veth0_vlan: entered promiscuous mode [ 54.772563][ T5729] veth1_vlan: entered promiscuous mode [ 54.785523][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.795828][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.801691][ T5729] veth0_macvtap: entered promiscuous mode [ 54.815257][ T5729] veth1_macvtap: entered promiscuous mode [ 54.820416][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.849024][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.857939][ T5739] veth0_vlan: entered promiscuous mode [ 54.865928][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.881982][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.888748][ T5739] veth1_vlan: entered promiscuous mode [ 54.895227][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.900614][ T5741] veth0_vlan: entered promiscuous mode [ 54.904079][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.907529][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.921030][ T5741] veth1_vlan: entered promiscuous mode [ 54.943996][ T5730] veth0_vlan: entered promiscuous mode [ 54.963088][ T5739] veth0_macvtap: entered promiscuous mode [ 54.969868][ T5730] veth1_vlan: entered promiscuous mode [ 54.981142][ T5739] veth1_macvtap: entered promiscuous mode [ 54.993125][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.996601][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.999261][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.009944][ T5741] veth0_macvtap: entered promiscuous mode [ 55.018228][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.028209][ T5741] veth1_macvtap: entered promiscuous mode [ 55.033460][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.036173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.039711][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.043700][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.053627][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.056159][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.063451][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.066786][ T5730] veth0_macvtap: entered promiscuous mode [ 55.074666][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.081127][ T5730] veth1_macvtap: entered promiscuous mode [ 55.083241][ T5729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.095827][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.100229][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.105603][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.108782][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.124060][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.134871][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.147237][ T230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.158215][ T230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.161523][ T230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.173217][ T230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.176981][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.180677][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.218618][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.221468][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.231000][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.235075][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.255358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.260821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.261103][ T230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.265782][ T230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.286966][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.290042][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.322463][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.326589][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.435853][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.439799][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.447368][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.451079][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.456986][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.463048][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.687365][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.744634][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.793084][ T5895] syzkaller0: entered promiscuous mode [ 55.795536][ T5895] syzkaller0: entered allmulticast mode [ 55.803535][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.809947][ T5889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.363709][ T5905] xt_hashlimit: size too large, truncated to 1048576 [ 56.424706][ T5882] Set syz1 is full, maxelem 65536 reached [ 56.486470][ T5911] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 56.523952][ T5913] Bluetooth: MGMT ver 1.23 [ 56.701416][ T5734] Bluetooth: hci2: command tx timeout [ 56.703279][ T5091] Bluetooth: hci3: command tx timeout [ 56.715246][ T5091] Bluetooth: hci1: command tx timeout [ 57.129233][ T5881] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.292367][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 57.296251][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 57.300411][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 57.303905][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.307938][ T5881] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.311217][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.316333][ T5881] usb 6-1: config 0 descriptor?? [ 57.319545][ T5917] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.509304][ T5808] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.661811][ T5808] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 57.665097][ T5808] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 57.673102][ T5808] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.676760][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.679564][ T5808] usb 8-1: Product: syz [ 57.681200][ T5808] usb 8-1: Manufacturer: syz [ 57.683071][ T5808] usb 8-1: SerialNumber: syz [ 57.688788][ T5808] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 57.700857][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 57.700867][ T40] audit: type=1400 audit(1777285511.314:156): avc: denied { firmware_load } for pid=5808 comm="kworker/3:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 57.707154][ T5926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 57.715420][ T5808] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 57.718450][ T5926] syzkaller0: entered promiscuous mode [ 57.721706][ T5926] syzkaller0: entered allmulticast mode [ 57.732400][ T5881] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 57.751641][ T5881] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 57.932850][ T9] usb 8-1: USB disconnect, device number 2 [ 57.991250][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.995435][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.000030][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.004242][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.208404][ T40] audit: type=1400 audit(1777285511.814:157): avc: denied { write } for pid=5916 comm="syz.1.16" name="hiddev0" dev="devtmpfs" ino=2845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.213152][ T59] usb 6-1: USB disconnect, device number 2 [ 58.744780][ T40] audit: type=1400 audit(1777285512.354:158): avc: denied { connect } for pid=5936 comm="syz.1.22" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.753910][ T40] audit: type=1400 audit(1777285512.354:159): avc: denied { setopt } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.753986][ T5937] veth0: entered promiscuous mode [ 58.761899][ T40] audit: type=1400 audit(1777285512.364:160): avc: denied { create } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.766900][ T5938] syzkaller0: entered promiscuous mode [ 58.773093][ T40] audit: type=1400 audit(1777285512.364:161): avc: denied { bind } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.775906][ T5938] syzkaller0: entered allmulticast mode [ 58.781529][ T5091] Bluetooth: hci1: command tx timeout [ 58.781673][ T40] audit: type=1400 audit(1777285512.364:162): avc: denied { getopt } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.781748][ T5734] Bluetooth: hci3: command tx timeout [ 58.782980][ T5808] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 58.786405][ T40] audit: type=1400 audit(1777285512.404:163): avc: denied { setopt } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.792145][ T5091] Bluetooth: hci2: command tx timeout [ 58.792956][ T5808] ath9k_htc: Failed to initialize the device [ 58.794827][ T40] audit: type=1400 audit(1777285512.414:164): avc: denied { read } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.795687][ T5936] veth0: left promiscuous mode [ 58.797971][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 58.803282][ T40] audit: type=1400 audit(1777285512.414:165): avc: denied { accept } for pid=5936 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.838441][ T5940] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 58.903444][ T5941] erspan1: entered allmulticast mode [ 58.941812][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 58.964157][ T5943] Bluetooth: MGMT ver 1.23 [ 58.967576][ T5943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56319 sclass=netlink_route_socket pid=5943 comm=syz.0.24 [ 58.987206][ T5940] Zero length message leads to an empty skb [ 59.030523][ T5943] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 59.033820][ T5943] netlink: 224 bytes leftover after parsing attributes in process `syz.0.24'. [ 59.048454][ T5943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=5943 comm=syz.0.24 [ 59.086796][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 59.090180][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 59.092990][ T5948] netlink: 'syz.0.26': attribute type 14 has an invalid length. [ 59.095978][ T5948] netlink: 'syz.0.26': attribute type 13 has an invalid length. [ 59.120124][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.171589][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.28'. [ 59.279235][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 59.282586][ T9] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 59.285990][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 59.292492][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.66 [ 59.295472][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.298174][ T9] usb 8-1: Product: syz [ 59.299930][ T9] usb 8-1: Manufacturer: syz [ 59.301707][ T9] usb 8-1: SerialNumber: syz [ 59.311683][ T9] ldusb 8-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 59.515335][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.518289][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.564691][ T5963] netlink: 84 bytes leftover after parsing attributes in process `syz.0.33'. [ 59.568839][ T5963] netlink: 84 bytes leftover after parsing attributes in process `syz.0.33'. [ 59.572443][ T5963] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 59.775713][ T24] usb 8-1: USB disconnect, device number 3 [ 59.777631][ C0] ldusb 8-1:1.0: usb_submit_urb failed (-19) [ 59.779547][ T5923] ldusb 8-1:1.0: Couldn't submit interrupt_out_urb -19 [ 59.784568][ T24] ldusb 8-1:1.0: LD USB Device #0 now disconnected [ 60.526934][ T5971] netlink: 76 bytes leftover after parsing attributes in process `syz.3.36'. [ 60.534737][ T5971] syzkaller0: entered promiscuous mode [ 60.537215][ T5971] syzkaller0: entered allmulticast mode [ 60.545925][ T5971] tc action pedit offset 48 out of bounds [ 60.547894][ T5971] tc action pedit offset 48 out of bounds [ 60.550565][ T5971] tc action pedit offset 48 out of bounds [ 60.552572][ T5971] tc action pedit offset 48 out of bounds [ 60.554406][ T5971] tc action pedit offset 48 out of bounds [ 60.556221][ T5971] tc action pedit offset 48 out of bounds [ 60.558032][ T5971] tc action pedit offset 48 out of bounds [ 60.559960][ T5971] tc action pedit offset 48 out of bounds [ 60.561762][ T5971] tc action pedit offset 48 out of bounds [ 60.563580][ T5971] tc action pedit offset 48 out of bounds [ 60.565417][ T5971] 0: reclassify loop, rule prio 0, protocol 800 [ 60.763488][ T5928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.781447][ T5974] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 60.791187][ T5974] netlink: 'syz.3.37': attribute type 3 has an invalid length. [ 60.805741][ T5974] netlink: 224 bytes leftover after parsing attributes in process `syz.3.37'. [ 60.808899][ T5977] nftables ruleset with unbound set [ 60.869922][ T5091] Bluetooth: hci3: command tx timeout [ 60.872684][ T5091] Bluetooth: hci2: command tx timeout [ 60.875795][ T5734] Bluetooth: hci1: command tx timeout [ 61.050322][ T6003] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 61.060909][ T5998] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 61.597517][ T6017] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 61.815165][ T1484] cfg80211: failed to load regulatory.db [ 61.973714][ T6039] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 61.980075][ T6039] netlink: 'syz.1.59': attribute type 3 has an invalid length. [ 62.285512][ T6067] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 62.321159][ T6067] syz.0.70 (6067) used greatest stack depth: 18984 bytes left [ 62.770265][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 62.770282][ T40] audit: type=1400 audit(1777285516.384:216): avc: denied { create } for pid=6088 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.780496][ T40] audit: type=1400 audit(1777285516.384:217): avc: denied { connect } for pid=6088 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.868928][ T6089] __nla_validate_parse: 4 callbacks suppressed [ 62.868939][ T6089] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.78'. [ 62.874198][ T6089] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 62.879582][ T40] audit: type=1400 audit(1777285516.494:218): avc: denied { name_bind } for pid=6096 comm="syz.3.80" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.940719][ T40] audit: type=1400 audit(1777285516.544:219): avc: denied { bind } for pid=6103 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.946756][ T40] audit: type=1400 audit(1777285516.544:220): avc: denied { listen } for pid=6103 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.955445][ T40] audit: type=1400 audit(1777285516.554:221): avc: denied { write } for pid=6103 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.036313][ T6108] syzkaller0: entered promiscuous mode [ 63.038769][ T6108] syzkaller0: entered allmulticast mode [ 63.163972][ T6112] tipc: Started in network mode [ 63.166885][ T6112] tipc: Node identity 3a08eb8651ff, cluster identity 4711 [ 63.173819][ T6112] tipc: Enabled bearer , priority 0 [ 63.177440][ T6112] syzkaller0: entered promiscuous mode [ 63.180009][ T6112] syzkaller0: entered allmulticast mode [ 63.195610][ T6112] tipc: Resetting bearer [ 63.199551][ T6111] tipc: Resetting bearer [ 63.206414][ T6111] tipc: Disabling bearer [ 63.362591][ T40] audit: type=1400 audit(1777285516.974:222): avc: denied { create } for pid=6121 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.369854][ T40] audit: type=1400 audit(1777285516.974:223): avc: denied { ioctl } for pid=6121 comm="syz.1.92" path="socket:[10613]" dev="sockfs" ino=10613 ioctlcmd=0x89b1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.406648][ T40] audit: type=1400 audit(1777285517.014:224): avc: denied { map } for pid=6127 comm="syz.2.94" path="socket:[10001]" dev="sockfs" ino=10001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.416307][ T40] audit: type=1400 audit(1777285517.014:225): avc: denied { read accept } for pid=6127 comm="syz.2.94" path="socket:[10001]" dev="sockfs" ino=10001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.421349][ T6130] hmac(sha224): entered promiscuous mode [ 63.742410][ T6102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 63.772734][ T6136] netlink: 'syz.3.97': attribute type 8 has an invalid length. [ 63.776548][ T6136] netlink: 'syz.3.97': attribute type 9 has an invalid length. [ 63.860057][ T6142] netlink: 'syz.3.100': attribute type 13 has an invalid length. [ 63.862752][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 63.865575][ T6142] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 63.944791][ T6148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=6148 comm=syz.3.103 [ 64.037633][ T6151] netlink: 48 bytes leftover after parsing attributes in process `syz.3.104'. [ 64.906130][ T6153] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.175317][ T6156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 67.621580][ T6241] netlink: 'syz.3.133': attribute type 8 has an invalid length. [ 67.624147][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 67.630021][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.633384][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.712443][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 67.872274][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 67.872284][ T40] audit: type=1400 audit(1777285521.484:249): avc: denied { ioctl } for pid=6274 comm="syz.1.151" path="socket:[10763]" dev="sockfs" ino=10763 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 67.938679][ T40] audit: type=1400 audit(1777285521.544:250): avc: denied { write } for pid=6284 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.947104][ T40] audit: type=1400 audit(1777285521.544:251): avc: denied { nlmsg_write } for pid=6284 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.119357][ T6215] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 68.196025][ T6306] netlink: 'syz.2.164': attribute type 14 has an invalid length. [ 68.198571][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 68.201593][ T6306] bond0: option xmit_hash_policy: invalid value (191) [ 68.214087][ T40] audit: type=1400 audit(1777285521.824:252): avc: denied { bind } for pid=6308 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 68.233861][ T6312] syzkaller1: entered promiscuous mode [ 68.235730][ T6312] syzkaller1: entered allmulticast mode [ 68.271537][ T40] audit: type=1400 audit(1777285521.884:253): avc: denied { ioctl } for pid=6311 comm="syz.2.167" path="socket:[10830]" dev="sockfs" ino=10830 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.334933][ T6324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=6324 comm=syz.0.173 [ 68.372448][ T6327] netlink: 'syz.2.174': attribute type 8 has an invalid length. [ 68.447850][ T6332] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 69.090792][ T6386] block nbd0: not configured, cannot reconfigure [ 69.101555][ T6320] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 69.138006][ T40] audit: type=1400 audit(1777285522.744:254): avc: denied { create } for pid=6382 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 69.172286][ T40] audit: type=1400 audit(1777285522.784:255): avc: denied { accept } for pid=6387 comm="syz.1.202" lport=41000 faddr=fc00::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.231708][ T6397] netlink: 'syz.3.205': attribute type 27 has an invalid length. [ 69.282348][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.286992][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.335994][ T40] audit: type=1400 audit(1777285522.944:256): avc: denied { read } for pid=6396 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.342409][ T5091] Bluetooth: hci3: command 0x0405 tx timeout [ 69.372225][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.375195][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.381600][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.391500][ T40] audit: type=1400 audit(1777285523.004:257): avc: denied { execute } for pid=6396 comm="syz.3.205" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 69.393535][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.402084][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.406369][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.408749][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.418128][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.421653][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.429675][ T6400] veth1_vlan: left promiscuous mode [ 69.431809][ T6400] veth0_vlan: left promiscuous mode [ 69.434115][ T6400] veth0_vlan: entered promiscuous mode [ 69.438176][ T6400] veth1_vlan: entered promiscuous mode [ 69.442893][ T6400] veth1_macvtap: left promiscuous mode [ 69.445155][ T6400] veth0_macvtap: left promiscuous mode [ 69.447681][ T6400] veth0_macvtap: entered promiscuous mode [ 69.450720][ T6400] veth1_macvtap: entered promiscuous mode [ 69.455788][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.458413][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.461189][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.464010][ T6400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.558938][ T40] audit: type=1400 audit(1777285523.164:258): avc: denied { write } for pid=6423 comm="syz.0.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.702605][ T6437] xt_hashlimit: size too large, truncated to 1048576 [ 69.943558][ T6455] hmac(sha224): entered promiscuous mode [ 70.026538][ T6460] Set syz1 is full, maxelem 65536 reached [ 70.050009][ T6464] syzkaller0: entered promiscuous mode [ 70.051845][ T6464] syzkaller0: entered allmulticast mode [ 70.056137][ T6464] tipc: Started in network mode [ 70.057785][ T6464] tipc: Node identity 4e1bd26bfe62, cluster identity 4711 [ 70.060337][ T6464] tipc: Enabled bearer , priority 0 [ 70.063518][ T6463] tipc: Resetting bearer [ 70.072131][ T6463] tipc: Disabling bearer [ 70.412444][ T6426] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 70.847318][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 70.862821][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.880548][ T6519] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 71.234164][ T6551] syzkaller0: entered promiscuous mode [ 71.236007][ T6551] syzkaller0: entered allmulticast mode [ 71.577171][ T6576] syzkaller0: entered promiscuous mode [ 71.579026][ T6576] syzkaller0: entered allmulticast mode [ 71.593169][ T6515] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.618084][ T6580] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 71.850332][ T6603] block nbd0: not configured, cannot reconfigure [ 71.858184][ T6599] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 71.896300][ T6607] netlink: 'syz.0.286': attribute type 6 has an invalid length. [ 71.918073][ T6607] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 71.920765][ T6607] netlink: 224 bytes leftover after parsing attributes in process `syz.0.286'. [ 72.052875][ T6619] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.290'. [ 72.072189][ T6623] team0: No ports can be present during mode change [ 72.240036][ T6645] syzkaller0: entered promiscuous mode [ 72.241959][ T6645] syzkaller0: entered allmulticast mode [ 72.308373][ T6657] netlink: 'syz.3.308': attribute type 3 has an invalid length. [ 72.311256][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 72.367119][ T1484] hsr0: entered promiscuous mode [ 72.419006][ T6678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.319'. [ 72.474482][ T6681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.489601][ T6683] syzkaller0: entered promiscuous mode [ 72.491726][ T6683] syzkaller0: entered allmulticast mode [ 72.600267][ T6693] block nbd0: not configured, cannot reconfigure [ 72.653229][ T6699] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 72.700327][ T6699] IPVS: length: 162 != 8 [ 72.834504][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 73.285696][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 73.285706][ T40] audit: type=1400 audit(1777285526.894:275): avc: denied { ioctl } for pid=6744 comm="syz.1.349" path="pid:[4026532866]" dev="nsfs" ino=4026532866 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 73.321554][ T40] audit: type=1400 audit(1777285526.934:276): avc: denied { shutdown } for pid=6748 comm="syz.1.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.336810][ T6751] netlink: 'syz.3.352': attribute type 27 has an invalid length. [ 73.365421][ T40] audit: type=1400 audit(1777285526.974:277): avc: denied { setopt } for pid=6754 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.373232][ T40] audit: type=1400 audit(1777285526.984:278): avc: denied { name_bind } for pid=6756 comm="syz.1.355" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.395634][ T5808] IPVS: starting estimator thread 0... [ 73.419615][ T5734] Bluetooth: hci3: command 0x0405 tx timeout [ 73.440109][ T6768] netlink: 220 bytes leftover after parsing attributes in process `syz.1.360'. [ 73.442998][ T6768] netlink: 'syz.1.360': attribute type 2 has an invalid length. [ 73.471292][ T40] audit: type=1400 audit(1777285527.084:279): avc: denied { accept } for pid=6771 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.489823][ T6762] IPVS: using max 45 ests per chain, 108000 per kthread [ 73.522382][ T40] audit: type=1400 audit(1777285527.134:280): avc: denied { setopt } for pid=6771 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.524152][ T6777] Bluetooth: MGMT ver 1.23 [ 73.578655][ T6781] tipc: Failed to remove unknown binding: 66,0,0/0:2720975986/2720975988 [ 73.582079][ T6781] tipc: Failed to remove unknown binding: 66,0,0/0:2720975986/2720975987 [ 73.737863][ T6794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6794 comm=syz.2.372 [ 73.771327][ T6794] bond1: option resend_igmp: invalid value (2878) [ 73.773237][ T6794] bond1: option resend_igmp: allowed values 0 - 255 [ 73.775802][ T6794] bond1 (unregistering): Released all slaves [ 74.415330][ T6825] syzkaller0: entered promiscuous mode [ 74.418009][ T6825] syzkaller0: entered allmulticast mode [ 74.650046][ T6803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.682271][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 74.685844][ T40] audit: type=1400 audit(1777285528.294:281): avc: denied { name_connect } for pid=6826 comm="syz.0.380" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 74.785666][ T6835] tipc: Enabled bearer , priority 0 [ 74.790871][ T6835] syzkaller0: entered promiscuous mode [ 74.793432][ T6835] syzkaller0: entered allmulticast mode [ 74.812798][ T6835] tipc: Resetting bearer [ 74.817761][ T6833] tipc: Resetting bearer [ 74.825255][ T6833] tipc: Disabling bearer [ 75.033927][ T6857] netlink: 164 bytes leftover after parsing attributes in process `syz.1.392'. [ 75.237041][ T40] audit: type=1400 audit(1777285528.844:282): avc: denied { write } for pid=6867 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 75.760401][ T6893] netlink: 'syz.0.404': attribute type 12 has an invalid length. [ 75.762913][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 75.765709][ T6893] bond0: option primary_reselect: invalid value (191) [ 75.933854][ T6911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6911 comm=syz.3.412 [ 75.951312][ T40] audit: type=1400 audit(1777285529.564:283): avc: denied { nlmsg_read } for pid=6912 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.231247][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.567768][ T40] audit: type=1400 audit(1777285530.174:284): avc: denied { setopt } for pid=6930 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.695979][ T6933] xt_bpf: check failed: parse error [ 77.012627][ T6962] netlink: 256 bytes leftover after parsing attributes in process `syz.0.430'. [ 77.050917][ T6967] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 77.200940][ T6980] syzkaller0: entered promiscuous mode [ 77.202742][ T6980] syzkaller0: entered allmulticast mode [ 77.463732][ T6984] bridge_slave_0: left allmulticast mode [ 77.466153][ T6984] bridge_slave_0: left promiscuous mode [ 77.469706][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.480443][ T6984] bridge_slave_1: left allmulticast mode [ 77.482225][ T6984] bridge_slave_1: left promiscuous mode [ 77.484345][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.506034][ T6984] bond0: (slave bond_slave_0): Releasing backup interface [ 77.518858][ T6984] bond0: (slave bond_slave_1): Releasing backup interface [ 77.528250][ T6984] team0: Port device team_slave_0 removed [ 77.538231][ T6984] team0: Port device team_slave_1 removed [ 77.540741][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.543292][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.547048][ T6984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.549971][ T6984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.553854][ T6984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.602341][ T6995] batman_adv: batadv0: Adding interface: dummy0 [ 77.604540][ T6995] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.613571][ T6995] batman_adv: batadv0: Interface activated: dummy0 [ 77.618659][ T6995] batadv0: mtu less than device minimum [ 77.622346][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.627790][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.632847][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.637480][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.642025][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.646847][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.651541][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.656511][ T6995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 77.817194][ T7012] netlink: 'syz.3.452': attribute type 8 has an invalid length. [ 77.959805][ T7029] netlink: 'syz.0.458': attribute type 27 has an invalid length. [ 78.013515][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.016049][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.030669][ T7029] batman_adv: batadv0: Interface deactivated: dummy0 [ 78.060928][ T7038] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.459'. [ 78.114829][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.123096][ T7029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.264690][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.267706][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.270756][ T7033] batman_adv: batadv0: Interface activated: dummy0 [ 78.285759][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.296347][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.298631][ T7033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.303070][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.305539][ T7033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.313759][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.341424][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.346095][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 78.346162][ T40] audit: type=1400 audit(1777285531.954:288): avc: denied { connect } for pid=7053 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.358219][ T7033] hsr0: left promiscuous mode [ 78.367829][ T7033] veth1_vlan: left promiscuous mode [ 78.371287][ T7033] veth0_vlan: left promiscuous mode [ 78.373675][ T7033] veth0_vlan: entered promiscuous mode [ 78.377323][ T7033] veth1_vlan: entered promiscuous mode [ 78.383183][ T7033] veth1_macvtap: left promiscuous mode [ 78.385373][ T7033] veth0_macvtap: left promiscuous mode [ 78.387887][ T7033] veth0_macvtap: entered promiscuous mode [ 78.393253][ T7033] veth1_macvtap: entered promiscuous mode [ 78.401148][ T7033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.403796][ T7033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.406403][ T7033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.409162][ T7033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.414309][ T7033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.424482][ T7058] netlink: 'syz.1.464': attribute type 8 has an invalid length. [ 78.435055][ T74] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.438029][ T74] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.441201][ T74] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.459646][ T74] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.620999][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 78.626041][ T40] audit: type=1400 audit(1777285532.234:289): avc: denied { listen } for pid=7071 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.633282][ T40] audit: type=1400 audit(1777285532.234:290): avc: denied { getopt } for pid=7071 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.684665][ T7072] netlink: 52 bytes leftover after parsing attributes in process `syz.1.470'. [ 78.687745][ T7072] netlink: 'syz.1.470': attribute type 1 has an invalid length. [ 78.778061][ T7083] netlink: 'syz.3.473': attribute type 8 has an invalid length. [ 78.807572][ T40] audit: type=1400 audit(1777285532.414:291): avc: denied { bind } for pid=7080 comm="syz.1.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.849764][ T7086] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 78.852291][ T7086] netlink: 476 bytes leftover after parsing attributes in process `syz.3.474'. [ 78.855148][ T7086] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.474'. [ 79.095491][ T7099] warning: `syz.3.480' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.376764][ T40] audit: type=1400 audit(1777285532.984:292): avc: denied { bind } for pid=7122 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.383357][ T40] audit: type=1400 audit(1777285532.984:293): avc: denied { name_bind } for pid=7122 comm="syz.3.492" src=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 79.390258][ T40] audit: type=1400 audit(1777285532.984:294): avc: denied { node_bind } for pid=7122 comm="syz.3.492" saddr=2001::2 src=16386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 79.402891][ T40] audit: type=1400 audit(1777285533.014:295): avc: denied { accept } for pid=7122 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.464079][ T7127] netlink: 'syz.0.494': attribute type 1 has an invalid length. [ 79.480897][ T7127] bond2: entered promiscuous mode [ 79.483287][ T7127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.545278][ T7127] bond2: (slave veth3): making interface the new active one [ 79.547716][ T7127] veth3: entered promiscuous mode [ 79.550405][ T7127] bond2: (slave veth3): Enslaving as an active interface with an up link [ 79.744911][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.748211][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.753163][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.817746][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.821736][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.826491][ T7155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.831481][ T7155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.837679][ T7155] veth1_vlan: left promiscuous mode [ 79.840184][ T7155] veth0_vlan: left promiscuous mode [ 79.842353][ T7155] veth0_vlan: entered promiscuous mode [ 79.845611][ T7155] veth1_vlan: entered promiscuous mode [ 79.849656][ T7155] veth1_macvtap: left promiscuous mode [ 79.851940][ T7155] veth0_macvtap: left promiscuous mode [ 79.854161][ T7155] veth0_macvtap: entered promiscuous mode [ 79.856531][ T7155] veth1_macvtap: entered promiscuous mode [ 79.861543][ T7155] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 79.863992][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.867414][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.870837][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.873612][ T7155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.884890][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.887313][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.890958][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.893278][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.928519][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.938465][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.943018][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.001894][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.067663][ T7177] veth0: entered promiscuous mode [ 80.128819][ T7177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.187180][ T7184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.191541][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 80.241825][ T7177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.406649][ T7177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.491716][ T40] audit: type=1400 audit(1777285534.104:296): avc: denied { bind } for pid=7205 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 80.508303][ T7177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.517196][ T5731] IPVS: starting estimator thread 0... [ 80.581658][ T40] audit: type=1400 audit(1777285534.194:297): avc: denied { getopt } for pid=7212 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.609702][ T7208] IPVS: using max 45 ests per chain, 108000 per kthread [ 80.622045][ T7216] tipc: Started in network mode [ 80.623759][ T7216] tipc: Node identity 2ab67d5fa54, cluster identity 4711 [ 80.626526][ T7216] tipc: Enabled bearer , priority 0 [ 80.639834][ T7216] syzkaller0: entered promiscuous mode [ 80.641705][ T7216] syzkaller0: entered allmulticast mode [ 80.668087][ T74] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.676191][ T74] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.689990][ T7216] tipc: Resetting bearer [ 80.698294][ T7215] tipc: Resetting bearer [ 80.721069][ T7215] tipc: Disabling bearer [ 80.749722][ T74] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.775079][ T74] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.786244][ T7176] veth0: left promiscuous mode [ 80.809463][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 81.112404][ T5823] IPVS: starting estimator thread 0... [ 81.209279][ T7277] IPVS: using max 45 ests per chain, 108000 per kthread [ 81.713669][ T7320] netlink: 'syz.3.559': attribute type 27 has an invalid length. [ 81.729359][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.731842][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.761841][ T7320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.765644][ T7320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.882030][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.886313][ T7321] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.893981][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.905420][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.907771][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.911950][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.914223][ T7321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.922155][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.925602][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.933403][ T7321] veth1_vlan: left promiscuous mode [ 81.935580][ T7321] veth0_vlan: left promiscuous mode [ 81.940083][ T7321] veth0_vlan: entered promiscuous mode [ 81.953391][ T7321] veth1_vlan: entered promiscuous mode [ 81.961491][ T7321] veth1_macvtap: left promiscuous mode [ 81.964623][ T7321] veth0_macvtap: left promiscuous mode [ 81.968409][ T7321] veth0_macvtap: entered promiscuous mode [ 81.972802][ T7321] veth1_macvtap: entered promiscuous mode [ 81.990854][ T7321] 8021q: adding VLAN 0 to HW filter on device eth0 [ 81.995528][ T7321] 8021q: adding VLAN 0 to HW filter on device eth1 [ 82.001340][ T7321] 8021q: adding VLAN 0 to HW filter on device eth2 [ 82.011098][ T7321] 8021q: adding VLAN 0 to HW filter on device eth3 [ 82.490981][ T7353] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 82.520205][ T7370] netlink: 'syz.2.575': attribute type 27 has an invalid length. [ 82.538966][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.541442][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.568882][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.574835][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.679316][ T230] net_ratelimit: 90 callbacks suppressed [ 82.679333][ T230] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 82.688457][ T230] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 82.696648][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.701367][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.708106][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.728463][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.731037][ T7374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.734949][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.737380][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.746121][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.751225][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.759389][ T7374] veth1_vlan: left promiscuous mode [ 82.762267][ T7374] veth0_vlan: left promiscuous mode [ 82.764631][ T7374] veth0_vlan: entered promiscuous mode [ 82.768323][ T7374] veth1_vlan: entered promiscuous mode [ 82.772794][ T7374] veth1_macvtap: left promiscuous mode [ 82.775020][ T7374] veth0_macvtap: left promiscuous mode [ 82.777497][ T7374] veth0_macvtap: entered promiscuous mode [ 82.782255][ T7374] veth1_macvtap: entered promiscuous mode [ 82.786874][ T7374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.789851][ T7374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.793472][ T7374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.796232][ T7374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.998186][ T1484] IPVS: starting estimator thread 0... [ 83.090961][ T7396] IPVS: using max 44 ests per chain, 105600 per kthread [ 83.209818][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 83.214578][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 83.604193][ T7424] IPVS: rr: FWM 3 0x00000003 - no destination available [ 83.729725][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 83.734181][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 83.843982][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 83.843993][ T40] audit: type=1400 audit(1777285537.454:302): avc: denied { setopt } for pid=7444 comm="syz.1.605" lport=44778 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.857123][ T7398] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 84.036954][ T7467] sctp: [Deprecated]: syz.0.613 (pid 7467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.036954][ T7467] Use struct sctp_sack_info instead [ 84.241670][ T74] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 84.247589][ T74] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 84.259728][ T7492] IPVS: length: 162 != 8 [ 84.301715][ T7499] syzkaller0: entered promiscuous mode [ 84.303537][ T7499] syzkaller0: entered allmulticast mode [ 84.759204][ T1188] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 84.914628][ T7473] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 85.307559][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.365236][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.420061][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.424624][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.955047][ T7525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 86.000689][ T7552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6011 sclass=netlink_route_socket pid=7552 comm=syz.1.649 [ 86.011374][ T7552] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 86.108304][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.110972][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.118804][ T7556] batman_adv: batadv0: Interface deactivated: dummy0 [ 86.160964][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.170309][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.198633][ T7558] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 86.404683][ T230] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.409429][ T230] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.413067][ T230] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.416624][ T230] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.419601][ T230] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.422549][ T230] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.425360][ T230] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.428161][ T230] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.145136][ T7566] xt_hashlimit: size too large, truncated to 1048576 [ 87.344577][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.402595][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.458697][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.465202][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.116353][ T7599] xt_hashlimit: size too large, truncated to 1048576 [ 88.294462][ T168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.298051][ T168] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.305715][ T168] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.309640][ T168] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.048693][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.051234][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.087093][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.093909][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.236924][ T74] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.240344][ T74] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.266747][ T74] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.274231][ T74] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.090480][ T7652] net_ratelimit: 6 callbacks suppressed [ 90.090495][ T7652] Set syz1 is full, maxelem 65536 reached [ 90.333892][ T7731] veth0: entered promiscuous mode [ 90.339325][ T7730] veth0: left promiscuous mode [ 90.535691][ T7739] syzkaller0: entered promiscuous mode [ 90.537836][ T7739] syzkaller0: entered allmulticast mode [ 90.607616][ T7743] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 90.621472][ T7743] bond3: entered promiscuous mode [ 90.623332][ T7743] bond3: entered allmulticast mode [ 90.625419][ T7743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.644425][ T7743] erspan1: entered allmulticast mode [ 90.648104][ T7743] bond3: (slave erspan1): making interface the new active one [ 90.651300][ T7743] erspan1: entered promiscuous mode [ 90.657711][ T7743] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 90.671140][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 90.700471][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 90.703569][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 90.706767][ T7748] netlink: 'syz.2.726': attribute type 14 has an invalid length. [ 90.710126][ T7748] netlink: 'syz.2.726': attribute type 13 has an invalid length. [ 90.819409][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.729'. [ 93.136284][ T7714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.160906][ T7771] netlink: 84 bytes leftover after parsing attributes in process `syz.2.737'. [ 93.164189][ T7771] netlink: 84 bytes leftover after parsing attributes in process `syz.2.737'. [ 93.167229][ T7771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 93.179851][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 93.181948][ T7775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.744'. [ 93.187035][ T7775] syzkaller0: entered promiscuous mode [ 93.187891][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 93.188859][ T7775] syzkaller0: entered allmulticast mode [ 93.191735][ T7774] netlink: 'syz.1.736': attribute type 14 has an invalid length. [ 93.197226][ T7774] netlink: 'syz.1.736': attribute type 13 has an invalid length. [ 93.211200][ T40] audit: type=1400 audit(1777285546.824:303): avc: denied { write } for pid=7772 comm="syz.1.736" path="socket:[15997]" dev="sockfs" ino=15997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.252608][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56319 sclass=netlink_route_socket pid=7784 comm=syz.1.741 [ 93.312577][ T7784] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 93.315121][ T7784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.741'. [ 93.323220][ T40] audit: type=1400 audit(1777285546.934:304): avc: denied { read } for pid=7783 comm="syz.1.741" lport=40743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.335765][ T7784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=7784 comm=syz.1.741 [ 93.416276][ T7810] netlink: 'syz.1.752': attribute type 14 has an invalid length. [ 93.419586][ T7810] netlink: 'syz.1.752': attribute type 13 has an invalid length. [ 93.521855][ T7821] syzkaller0: entered promiscuous mode [ 93.523823][ T7821] syzkaller0: entered allmulticast mode [ 94.159650][ T7830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56319 sclass=netlink_route_socket pid=7830 comm=syz.3.758 [ 94.160554][ T7828] syzkaller0: entered promiscuous mode [ 94.165431][ T7828] syzkaller0: entered allmulticast mode [ 94.219401][ T7830] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 94.237408][ T7830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8217 sclass=netlink_route_socket pid=7830 comm=syz.3.758 [ 94.325708][ T7841] syzkaller0: entered promiscuous mode [ 94.327530][ T7841] syzkaller0: entered allmulticast mode [ 94.578171][ T7863] syzkaller0: entered promiscuous mode [ 94.581283][ T7863] syzkaller0: entered allmulticast mode [ 95.190374][ T7887] syzkaller0: entered promiscuous mode [ 95.192459][ T7887] syzkaller0: entered allmulticast mode [ 95.335072][ T7892] syzkaller0: entered promiscuous mode [ 95.337445][ T7892] syzkaller0: entered allmulticast mode [ 96.303535][ T7795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.405307][ T7918] syzkaller0: entered promiscuous mode [ 96.407586][ T7918] syzkaller0: entered allmulticast mode [ 96.522595][ T7926] __nla_validate_parse: 13 callbacks suppressed [ 96.522606][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.803'. [ 96.533471][ T7926] syzkaller0: entered promiscuous mode [ 96.535248][ T7926] syzkaller0: entered allmulticast mode [ 97.458986][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.3.837'. [ 97.462673][ T8005] syzkaller0: entered promiscuous mode [ 97.464657][ T8005] syzkaller0: entered allmulticast mode [ 97.690754][ T8009] syzkaller0: entered promiscuous mode [ 97.692514][ T8009] syzkaller0: entered allmulticast mode [ 98.003605][ T7990] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 98.725782][ T8017] netlink: 76 bytes leftover after parsing attributes in process `syz.3.843'. [ 98.731731][ T8017] syzkaller0: entered promiscuous mode [ 98.734108][ T8017] syzkaller0: entered allmulticast mode [ 99.568648][ T7932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.618552][ T8039] netlink: 76 bytes leftover after parsing attributes in process `syz.2.853'. [ 99.631381][ T8039] syzkaller0: entered promiscuous mode [ 99.633961][ T8039] syzkaller0: entered allmulticast mode [ 99.640420][ T8039] tcf_pedit_act: 7 callbacks suppressed [ 99.640429][ T8039] tc action pedit offset 48 out of bounds [ 99.644498][ T8039] tc action pedit offset 48 out of bounds [ 99.646393][ T8039] tc action pedit offset 48 out of bounds [ 99.648281][ T8039] tc action pedit offset 48 out of bounds [ 99.650157][ T8039] tc action pedit offset 48 out of bounds [ 99.652015][ T8039] tc action pedit offset 48 out of bounds [ 99.653831][ T8039] tc action pedit offset 48 out of bounds [ 99.655679][ T8039] tc action pedit offset 48 out of bounds [ 99.657519][ T8039] tc action pedit offset 48 out of bounds [ 99.659417][ T8039] tc action pedit offset 48 out of bounds [ 99.661244][ T8039] 0: reclassify loop, rule prio 0, protocol 800 [ 99.704506][ T8047] syzkaller0: entered promiscuous mode [ 99.707028][ T8047] syzkaller0: entered allmulticast mode [ 100.133865][ T8086] syzkaller0: entered promiscuous mode [ 100.135706][ T8086] syzkaller0: entered allmulticast mode [ 101.561892][ T8113] syzkaller0: entered promiscuous mode [ 101.564211][ T8113] syzkaller0: entered allmulticast mode [ 102.930860][ T8063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.005676][ T8131] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 103.027042][ T8136] syzkaller0: entered promiscuous mode [ 103.028926][ T8136] syzkaller0: entered allmulticast mode [ 103.380133][ T5808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.542640][ T5808] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.546489][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 103.550148][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.553727][ T5808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.559001][ T5808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.562973][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.576008][ T5808] usb 5-1: config 0 descriptor?? [ 103.578951][ T8151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.011270][ T5808] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 104.025582][ T5808] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 104.250326][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.253817][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.257208][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.261541][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.470762][ T5808] usb 5-1: USB disconnect, device number 2 [ 105.055592][ T8182] xt_hashlimit: size too large, truncated to 1048576 [ 105.971993][ T8192] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 107.049930][ T8161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.199091][ T8216] xt_hashlimit: size too large, truncated to 1048576 [ 107.349405][ T5878] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.530888][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.534743][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 107.538533][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.542349][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.546572][ T5878] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.549819][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.555558][ T5878] usb 5-1: config 0 descriptor?? [ 107.557793][ T8201] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.966495][ T5878] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 107.976239][ T5878] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.230158][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.234271][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.237673][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.240654][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.446371][ T5808] usb 5-1: USB disconnect, device number 3 [ 109.806103][ T8235] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.280492][ T8223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.381030][ T8251] xt_hashlimit: size too large, truncated to 1048576 [ 110.531012][ T8261] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.629446][ T5731] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.802505][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.806185][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 110.809911][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.813449][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.817477][ T5731] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.820618][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.820638][ T8294] xt_hashlimit: size too large, truncated to 1048576 [ 110.824431][ T5731] usb 6-1: config 0 descriptor?? [ 110.827530][ T8253] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.235575][ T5731] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 111.242292][ T5731] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.490615][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.495175][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.499819][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.504497][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.510292][ T5808] usb 6-1: USB disconnect, device number 3 [ 112.438906][ T8323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.957'. [ 112.465048][ T8323] syzkaller0: entered promiscuous mode [ 112.467409][ T8323] syzkaller0: entered allmulticast mode [ 113.534343][ T8272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.589670][ T5731] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 113.677646][ T8344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.966'. [ 113.706873][ T8344] syzkaller0: entered promiscuous mode [ 113.709395][ T8344] syzkaller0: entered allmulticast mode [ 113.760551][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.766594][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 113.774914][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.778465][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.784649][ T5731] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.787570][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.794954][ T5731] usb 6-1: config 0 descriptor?? [ 113.799067][ T8325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.207123][ T5731] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 114.235664][ T5731] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.460922][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.465733][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.483349][ T5808] usb 6-1: USB disconnect, device number 4 [ 115.280449][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.979'. [ 115.297630][ T8383] syzkaller0: entered promiscuous mode [ 115.299539][ T8383] syzkaller0: entered allmulticast mode [ 116.740198][ T8349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.782536][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 116.944144][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.948558][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 116.954628][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.959493][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.964464][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.967376][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.975586][ T10] usb 6-1: config 0 descriptor?? [ 116.983670][ T8399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.396789][ T10] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 117.407106][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 117.651832][ T5731] usb 6-1: USB disconnect, device number 5 [ 118.490845][ T8459] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1011'. [ 118.493836][ T8459] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1011'. [ 118.496683][ T8459] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 120.017504][ T8428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.081589][ T8476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1017'. [ 120.170656][ T8484] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1021'. [ 120.174344][ T8484] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1021'. [ 120.208349][ T8487] xt_hashlimit: size too large, truncated to 1048576 [ 120.290584][ T5731] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 120.440600][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.444778][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 120.448325][ T5731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 120.451987][ T5731] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.457670][ T5731] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.460880][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.465144][ T5731] usb 6-1: config 0 descriptor?? [ 120.468085][ T8472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.502191][ T8516] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1031'. [ 120.505076][ T8516] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1031'. [ 120.880520][ T5731] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 120.887535][ T5731] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 120.950238][ T8532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1037'. [ 120.956334][ T8532] syzkaller0: entered promiscuous mode [ 120.958846][ T8532] syzkaller0: entered allmulticast mode [ 121.038543][ T8488] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.130219][ T8543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1041'. [ 121.131738][ T5731] usb 6-1: USB disconnect, device number 6 [ 121.293403][ T8557] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 121.382814][ T8567] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1050'. [ 121.387409][ T8567] syzkaller0: entered promiscuous mode [ 121.389936][ T8567] syzkaller0: entered allmulticast mode [ 122.169501][ T5731] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.323292][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.327018][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 122.330799][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.334448][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.338690][ T5731] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.344249][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.347998][ T5731] usb 5-1: config 0 descriptor?? [ 122.351533][ T8620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.560329][ T8690] syzkaller0: entered promiscuous mode [ 122.562137][ T8690] syzkaller0: entered allmulticast mode [ 122.761310][ T5731] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 122.770239][ T5731] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 123.031475][ T5808] usb 5-1: USB disconnect, device number 4 [ 123.190770][ T8733] syzkaller0: entered promiscuous mode [ 123.192818][ T8733] syzkaller0: entered allmulticast mode [ 123.569017][ T8706] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 123.629335][ T8756] __nla_validate_parse: 5 callbacks suppressed [ 123.629347][ T8756] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1118'. [ 123.636412][ T8756] syzkaller0: entered promiscuous mode [ 123.644074][ T8756] syzkaller0: entered allmulticast mode [ 123.707052][ T8765] syzkaller0: entered promiscuous mode [ 123.708992][ T8765] syzkaller0: entered allmulticast mode [ 124.660084][ T8777] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 124.784305][ T8802] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1137'. [ 124.789180][ T8802] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1137'. [ 124.854514][ T8810] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1140'. [ 124.877056][ T8812] syzkaller0: entered promiscuous mode [ 124.878852][ T8812] syzkaller0: entered allmulticast mode [ 125.266705][ T8849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1153'. [ 125.271830][ T8847] syzkaller0: entered promiscuous mode [ 125.274628][ T8847] syzkaller0: entered allmulticast mode [ 125.742793][ T8890] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1168'. [ 125.783732][ T8820] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 125.918672][ T40] audit: type=1400 audit(1777285579.524:305): avc: denied { connect } for pid=8916 comm="syz.1.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.469265][ T1356] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 126.621607][ T1356] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.625543][ T1356] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 126.631821][ T1356] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.635415][ T1356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.638618][ T1356] usb 8-1: Product: syz [ 126.640468][ T1356] usb 8-1: Manufacturer: syz [ 126.642408][ T1356] usb 8-1: SerialNumber: syz [ 126.857086][ T8936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.977062][ T8931] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.019463][ T8940] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1184'. [ 127.236459][ T8965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1191'. [ 127.239917][ T8965] syzkaller0: entered promiscuous mode [ 127.241699][ T8965] syzkaller0: entered allmulticast mode [ 127.421333][ T8979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1195'. [ 127.463781][ T8936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 127.649549][ T5731] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 127.670252][ T1356] cdc_ncm 8-1:1.0: bind() failure [ 127.677135][ T1356] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 127.683504][ T1356] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 127.686761][ T1356] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 127.691071][ T1356] usb 8-1: USB disconnect, device number 4 [ 127.810461][ T5731] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 127.813844][ T5731] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 127.817431][ T5731] usb 7-1: config 0 has no interface number 0 [ 127.821181][ T5731] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 127.824309][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.827117][ T5731] usb 7-1: Product: syz [ 127.828592][ T5731] usb 7-1: Manufacturer: syz [ 127.830237][ T5731] usb 7-1: SerialNumber: syz [ 127.833887][ T5731] usb 7-1: config 0 descriptor?? [ 128.193722][ T8976] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 128.232657][ T9005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1203'. [ 128.235985][ T9005] syzkaller0: entered promiscuous mode [ 128.237747][ T9005] syzkaller0: entered allmulticast mode [ 128.242191][ T5731] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 128.246298][ T5731] uvcvideo 7-1:0.64: No valid video chain found. [ 128.256153][ T5731] usb 7-1: USB disconnect, device number 2 [ 128.591697][ T9026] mmap: syz.1.1210 (9026) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.808486][ T9050] __nla_validate_parse: 1 callbacks suppressed [ 128.808497][ T9050] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1220'. [ 128.813531][ T9050] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1220'. [ 129.018616][ T40] audit: type=1400 audit(1777285582.624:306): avc: denied { unlink } for pid=9073 comm="syz.0.1226" name="#1" dev="tmpfs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.025803][ T40] audit: type=1400 audit(1777285582.634:307): avc: denied { mount } for pid=9073 comm="syz.0.1226" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 129.332578][ T40] audit: type=1400 audit(1777285582.944:308): avc: denied { read write } for pid=9083 comm="syz.2.1230" name="vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.340422][ T40] audit: type=1400 audit(1777285582.944:309): avc: denied { open } for pid=9083 comm="syz.2.1230" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.348030][ T40] audit: type=1400 audit(1777285582.944:310): avc: denied { ioctl } for pid=9083 comm="syz.2.1230" path="/dev/vhost-vsock" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.357618][ T9032] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.443754][ T9097] syzkaller0: entered promiscuous mode [ 129.445521][ T9097] syzkaller0: entered allmulticast mode [ 129.558532][ T9104] capability: warning: `syz.2.1237' uses deprecated v2 capabilities in a way that may be insecure [ 129.629374][ T5878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 129.689384][ T40] audit: type=1400 audit(1777285583.304:311): avc: denied { write } for pid=9109 comm="syz.3.1239" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.711861][ T40] audit: type=1400 audit(1777285583.324:312): avc: denied { write } for pid=9115 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.754596][ T40] audit: type=1400 audit(1777285583.364:313): avc: denied { create } for pid=9118 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.768215][ T40] audit: type=1400 audit(1777285583.364:314): avc: denied { setopt } for pid=9118 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.800467][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.803764][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.806708][ T5878] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.813405][ T5878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.817003][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.820757][ T5878] usb 6-1: Product: syz [ 129.822278][ T5878] usb 6-1: Manufacturer: syz [ 129.823814][ T5878] usb 6-1: SerialNumber: syz [ 129.833951][ T5878] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 129.839186][ T5878] cdc_ncm 6-1:1.0: bind() failure [ 129.943985][ T9110] kvm_intel: kvm [9109]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x50c5 [ 129.958462][ T9110] kvm: kvm [9109]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x5b07 [ 129.962506][ T9110] kvm: kvm [9109]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xb0a0 [ 129.977898][ T9110] kvm: kvm [9109]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x9326 [ 130.032333][ T5808] usb 6-1: USB disconnect, device number 7 [ 130.386559][ T9169] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1264'. [ 130.409855][ T9144] kvm_intel: kvm [9143]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x2809 [ 130.422536][ T9144] kvm: kvm [9143]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x4604 [ 130.431932][ T5091] Bluetooth: hci3: link tx timeout [ 130.434552][ T5091] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 130.436291][ T9144] kvm: kvm [9143]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x162b [ 130.439874][ T5091] Bluetooth: hci3: link tx timeout [ 130.442988][ T5091] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.568299][ T9189] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1274'. [ 130.571503][ T9189] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1274'. [ 130.574372][ T9189] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 130.670806][ T9199] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1278'. [ 130.679614][ T9199] syzkaller0: entered promiscuous mode [ 130.681467][ T9199] syzkaller0: entered allmulticast mode [ 130.869844][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1289'. [ 130.919090][ T9228] binder: 9227:9228 ioctl c0306201 0 returned -14 [ 130.958482][ T9230] loop6: detected capacity change from 0 to 8 [ 131.010510][ T9230] [ 131.011551][ T9230] ====================================================== [ 131.014370][ T9230] WARNING: possible circular locking dependency detected [ 131.017072][ T9230] syzkaller #0 Not tainted [ 131.018693][ T9230] ------------------------------------------------------ [ 131.021537][ T9230] syz.2.1292/9230 is trying to acquire lock: [ 131.023878][ T9230] ffff88801ce86210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 131.028000][ T9230] [ 131.028000][ T9230] but task is already holding lock: [ 131.030966][ T9230] ffff888028904ae0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 131.035452][ T9230] [ 131.035452][ T9230] which lock already depends on the new lock. [ 131.035452][ T9230] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.039228][ T9230] [ 131.039228][ T9230] the existing dependency chain (in reverse order) is: [ 131.042942][ T9230] [ 131.042942][ T9230] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 131.046430][ T9230] blk_alloc_queue+0x610/0x790 [ 131.048604][ T9230] blk_mq_alloc_queue+0x174/0x290 [ 131.050464][ T9230] __blk_mq_alloc_disk+0x29/0x120 [ 131.052734][ T9230] loop_add+0x498/0xb60 [ 131.054679][ T9230] loop_init+0x1d3/0x200 [ 131.056419][ T9230] do_one_initcall+0x121/0x750 [ 131.058443][ T9230] kernel_init_freeable+0x6ea/0x7b0 [ 131.060749][ T9230] kernel_init+0x1f/0x1e0 [ 131.062579][ T9230] ret_from_fork+0x72b/0xd50 [ 131.064435][ T9230] ret_from_fork_asm+0x1a/0x30 [ 131.066595][ T9230] [ 131.066595][ T9230] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 131.069576][ T9230] fs_reclaim_acquire+0xc4/0x100 [ 131.071393][ T9230] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 131.073820][ T9230] __kernfs_iattrs+0x124/0x3e0 [ 131.075974][ T9230] __kernfs_setattr+0x4d/0x3c0 [ 131.077879][ T9230] kernfs_iop_setattr+0xda/0x130 [ 131.079942][ T9230] notify_change+0xb25/0x1330 [ 131.082075][ T9230] do_truncate+0x1df/0x240 [ 131.083957][ T9230] path_openat+0x2a55/0x31a0 [ 131.085785][ T9230] do_file_open+0x20e/0x430 [ 131.087857][ T9230] do_sys_openat2+0x10d/0x1e0 [ 131.089997][ T9230] __x64_sys_openat+0x12d/0x210 [ 131.092000][ T9230] do_syscall_64+0x10b/0xf80 [ 131.093862][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.096463][ T9230] [ 131.096463][ T9230] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 131.099571][ T9230] __lock_acquire+0x14b8/0x2630 [ 131.101819][ T9230] lock_acquire+0x1b1/0x370 [ 131.103957][ T9230] down_read+0x99/0x450 [ 131.105755][ T9230] kernfs_iop_getattr+0x9c/0xf0 [ 131.107760][ T9230] vfs_getattr_nosec+0x2d4/0x430 [ 131.109867][ T9230] vfs_getattr+0x4a/0x60 [ 131.111831][ T9230] loop_query_min_dio_size.isra.0+0x117/0x250 [ 131.114254][ T9230] lo_ioctl+0x13aa/0x1bc0 [ 131.115835][ T9230] blkdev_ioctl+0x5ad/0x6f0 [ 131.117478][ T9230] __x64_sys_ioctl+0x18e/0x210 [ 131.119648][ T9230] do_syscall_64+0x10b/0xf80 [ 131.121734][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.124121][ T9230] [ 131.124121][ T9230] other info that might help us debug this: [ 131.124121][ T9230] [ 131.128061][ T9230] Chain exists of: [ 131.128061][ T9230] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 131.128061][ T9230] [ 131.133381][ T9230] Possible unsafe locking scenario: [ 131.133381][ T9230] [ 131.135776][ T9230] CPU0 CPU1 [ 131.137485][ T9230] ---- ---- [ 131.139177][ T9230] lock(&q->q_usage_counter(io)#23); [ 131.140872][ T9230] lock(fs_reclaim); [ 131.142922][ T9230] lock(&q->q_usage_counter(io)#23); [ 131.145375][ T9230] rlock(&root->kernfs_iattr_rwsem); [ 131.147114][ T9230] [ 131.147114][ T9230] *** DEADLOCK *** [ 131.147114][ T9230] [ 131.149620][ T9230] 3 locks held by syz.2.1292/9230: [ 131.151241][ T9230] #0: ffff88802916d430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 131.154520][ T9230] #1: ffff888028904ae0 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 131.158160][ T9230] #2: ffff888028904b18 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 131.161846][ T9230] [ 131.161846][ T9230] stack backtrace: [ 131.163701][ T9230] CPU: 0 UID: 0 PID: 9230 Comm: syz.2.1292 Not tainted syzkaller #0 PREEMPT(full) [ 131.163715][ T9230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.163721][ T9230] Call Trace: [ 131.163726][ T9230] [ 131.163731][ T9230] dump_stack_lvl+0x100/0x190 [ 131.163745][ T9230] print_circular_bug.cold+0x178/0x1c7 [ 131.163764][ T9230] check_noncircular+0x146/0x160 [ 131.163780][ T9230] __lock_acquire+0x14b8/0x2630 [ 131.163798][ T9230] lock_acquire+0x1b1/0x370 [ 131.163811][ T9230] ? kernfs_iop_getattr+0x9c/0xf0 [ 131.163824][ T9230] ? __pfx___might_resched+0x10/0x10 [ 131.163841][ T9230] down_read+0x99/0x450 [ 131.163854][ T9230] ? kernfs_iop_getattr+0x9c/0xf0 [ 131.163865][ T9230] ? find_held_lock+0x2b/0x80 [ 131.163875][ T9230] ? __pfx_down_read+0x10/0x10 [ 131.163886][ T9230] ? kernfs_root+0xee/0x2a0 [ 131.163899][ T9230] kernfs_iop_getattr+0x9c/0xf0 [ 131.163911][ T9230] vfs_getattr_nosec+0x2d4/0x430 [ 131.163925][ T9230] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 131.163937][ T9230] vfs_getattr+0x4a/0x60 [ 131.163951][ T9230] loop_query_min_dio_size.isra.0+0x117/0x250 [ 131.163966][ T9230] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 131.163985][ T9230] lo_ioctl+0x13aa/0x1bc0 [ 131.163999][ T9230] ? __pfx_lo_ioctl+0x10/0x10 [ 131.164012][ T9230] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 131.164030][ T9230] ? kasan_quarantine_put+0x104/0x240 [ 131.164046][ T9230] ? blk_get_meta_cap+0xd4/0x6c0 [ 131.164066][ T9230] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 131.164083][ T9230] ? blkdev_common_ioctl+0x515/0x2b80 [ 131.164100][ T9230] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 131.164118][ T9230] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.164133][ T9230] ? do_vfs_ioctl+0x226/0x13e0 [ 131.164143][ T9230] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 131.164153][ T9230] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 131.164169][ T9230] ? __fget_files+0x215/0x3d0 [ 131.164182][ T9230] ? __pfx_lo_ioctl+0x10/0x10 [ 131.164195][ T9230] blkdev_ioctl+0x5ad/0x6f0 [ 131.164211][ T9230] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.164226][ T9230] ? selinux_file_ioctl+0x13b/0x290 [ 131.164238][ T9230] ? selinux_file_ioctl+0xb6/0x290 [ 131.164252][ T9230] ? __pfx_blkdev_ioctl+0x10/0x10 [ 131.164268][ T9230] __x64_sys_ioctl+0x18e/0x210 [ 131.164278][ T9230] do_syscall_64+0x10b/0xf80 [ 131.164290][ T9230] ? clear_bhb_loop+0x40/0x90 [ 131.164302][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.164313][ T9230] RIP: 0033:0x7f70cc39cdd9 [ 131.164322][ T9230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.164332][ T9230] RSP: 002b:00007f70cd265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.164342][ T9230] RAX: ffffffffffffffda RBX: 00007f70cc615fa0 RCX: 00007f70cc39cdd9 [ 131.164349][ T9230] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 131.164355][ T9230] RBP: 00007f70cc432d69 R08: 0000000000000000 R09: 0000000000000000 [ 131.164361][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.164367][ T9230] R13: 00007f70cc616038 R14: 00007f70cc615fa0 R15: 00007ffcfcd61448 [ 131.164377][ T9230] [ 131.276173][ T9209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 131.351456][ T9231] bond1: (slave syz_tun): Releasing backup interface [ 131.407649][ T168] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.429306][ T5808] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.496629][ T168] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.555107][ T168] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.634699][ T168] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.732290][ T168] bridge_slave_1: left allmulticast mode [ 131.734168][ T168] bridge_slave_1: left promiscuous mode [ 131.736031][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.738880][ T168] bridge_slave_0: left allmulticast mode [ 131.741178][ T168] bridge_slave_0: left promiscuous mode [ 131.743540][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.875223][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.879684][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.883317][ T168] bond0 (unregistering): Released all slaves [ 131.890198][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 131.890212][ T40] audit: type=1400 audit(1777285585.504:322): avc: denied { search } for pid=5443 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.901673][ T40] audit: type=1400 audit(1777285585.504:323): avc: denied { search } for pid=5443 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.910753][ T40] audit: type=1400 audit(1777285585.504:324): avc: denied { search } for pid=5443 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.920215][ T40] audit: type=1400 audit(1777285585.534:325): avc: denied { read open } for pid=9235 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.930794][ T40] audit: type=1400 audit(1777285585.534:326): avc: denied { getattr } for pid=9235 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.940098][ T40] audit: type=1400 audit(1777285585.534:327): avc: denied { add_name } for pid=9234 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.946985][ T40] audit: type=1400 audit(1777285585.534:328): avc: denied { create } for pid=9234 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.951645][ T168] hmac(sha224): left promiscuous mode [ 131.954104][ T40] audit: type=1400 audit(1777285585.534:329): avc: denied { write } for pid=9234 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=6355 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.964063][ T40] audit: type=1400 audit(1777285585.534:330): avc: denied { append } for pid=9234 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=6355 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 131.973267][ T40] audit: type=1400 audit(1777285585.574:331): avc: denied { remove_name } for pid=9237 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=6355 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.987550][ T5443] 8021q: adding VLAN 0 to HW filter on device eth2 [ 132.104370][ T5443] 8021q: adding VLAN 0 to HW filter on device eth3 [ 132.169406][ T168] hsr_slave_0: left promiscuous mode [ 132.171957][ T168] hsr_slave_1: left promiscuous mode [ 132.174558][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.177651][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.181441][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.184342][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.188253][ T168] veth1_macvtap: left promiscuous mode [ 132.190181][ T168] veth0_macvtap: left promiscuous mode [ 132.192620][ T168] veth1_vlan: left promiscuous mode [ 132.194911][ T168] veth0_vlan: left promiscuous mode [ 132.296412][ T168] team0 (unregistering): Port device team_slave_1 removed [ 132.310386][ T168] team0 (unregistering): Port device team_slave_0 removed [ 132.353565][ T5443] 8021q: adding VLAN 0 to HW filter on device eth4 [ 132.459269][ T5091] Bluetooth: hci3: command 0x0405 tx timeout [ 132.478385][ T5443] 8021q: adding VLAN 0 to HW filter on device eth5 [ 132.662197][ T168] IPVS: stop unused estimator thread 0... [ 133.235943][ T5443] 8021q: adding VLAN 0 to HW filter on device eth6 [ 133.348203][ T5443] 8021q: adding VLAN 0 to HW filter on device eth7 [ 133.384489][ T168] bridge_slave_1: left allmulticast mode [ 133.386395][ T168] bridge_slave_1: left promiscuous mode [ 133.388249][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.393035][ T168] bridge_slave_0: left allmulticast mode [ 133.394862][ T168] bridge_slave_0: left promiscuous mode [ 133.396727][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.400229][ T168] bridge_slave_1: left allmulticast mode [ 133.402113][ T168] bridge_slave_1: left promiscuous mode [ 133.403948][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.406991][ T168] bridge_slave_0: left allmulticast mode [ 133.410272][ T168] bridge_slave_0: left promiscuous mode [ 133.412682][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.522705][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.526547][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.530492][ T168] bond0 (unregistering): Released all slaves [ 133.550617][ T168] bond3 (unregistering): (slave erspan1): Releasing active interface [ 133.553187][ T168] erspan1 (unregistering): left promiscuous mode [ 133.661162][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.664534][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.667676][ T168] bond0 (unregistering): Released all slaves [ 133.672449][ T168] bond1 (unregistering): Released all slaves [ 133.679866][ T168] bond2 (unregistering): (slave veth3): Releasing backup interface [ 133.683172][ T168] veth3: left promiscuous mode [ 133.685920][ T168] bond2 (unregistering): Released all slaves [ 133.691643][ T168] bond3 (unregistering): Released all slaves [ 133.698219][ T5443] 8021q: adding VLAN 0 to HW filter on device eth8 [ 133.753936][ T168] tipc: Left network mode [ 133.764380][ T168] tipc: Left network mode [ 133.795604][ T5443] 8021q: adding VLAN 0 to HW filter on device eth9 [ 133.800279][ T168] IPVS: stopping master sync thread 6332 ... [ 133.912309][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 133.999241][ T5443] 8021q: adding VLAN 0 to HW filter on device eth11 [ 134.111237][ T5443] 8021q: adding VLAN 0 to HW filter on device eth12 [ 134.210222][ T5443] 8021q: adding VLAN 0 to HW filter on device eth13 [ 134.238841][ T168] hsr_slave_0: left promiscuous mode [ 134.241001][ T168] hsr_slave_1: left promiscuous mode [ 134.242894][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.245314][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.250886][ T168] hsr_slave_0: left promiscuous mode [ 134.252797][ T168] hsr_slave_1: left promiscuous mode [ 134.254676][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.257205][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.259961][ T168] batman_adv: batadv0: Removing interface: dummy0 [ 134.299822][ T168] team0 (unregistering): Port device team_slave_1 removed [ 134.304451][ T168] team0 (unregistering): Port device team_slave_0 removed [ 134.391518][ T168] team0 (unregistering): Port device team_slave_1 removed [ 134.396909][ T168] team0 (unregistering): Port device team_slave_0 removed [ 135.113298][ T168] IPVS: stop unused estimator thread 0... [ 135.115495][ T168] IPVS: stop unused estimator thread 0... [ 137.660521][ T1432] ieee802154 phy1 wpan1: encryption failed: -22