last executing test programs: 19.292276196s ago: executing program 3 (id=194): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)) open_tree(r0, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40000000000ead}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) 14.687493359s ago: executing program 0 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x200058, 0x7c000000, 0x0, 0xffffffffffffffe8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), 0x4) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f00000003c0)={0xffffff92, 0x7d, 0x0, {{0x500, 0x16b, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evbox%\xff\xff\xff\x81\x04\x00\x00\x00\x00\x00\x00\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x8c, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00g{bb\x8b\xfb?)l\x7f\xc8\xab*\xc8\xbbd\xb4\xcb\xf2\xefJi.\x92\xc9\xfe\xa1\f\x91\xe7\xc1\xb2\xff\x1eH3\xe4\x97\x83\xd6f\xa5qv/t\xd1\xacME\xa2\xafr\xab&L\x84p\xa0\x18E\xe2\x90\xf2\x85G\xc2v\xd0\xc5\x9b \x8c\x03\xe8\x82\x10\x97~G}\xd2\xba/\xd2\x8e\x8d\x05\a\xc4\x9d\x9e\xa8\xa6\xeb\xe2\x80C\x04ji<\xd3r\xc8&\x8b\xa9i\xc7\xac\xa4\x90\'\xba$\'3\x8d3\x84<', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x134, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xfd\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\xf3\xbbJ\x03\x13\xec\x98\b\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/308}}, 0x2b4) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001418) fcntl$setlease(r6, 0x400, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x7c1080, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000000c0)=':/})}:*!}\x00', &(0x7f00000001c0)='./file0\x00', r5) ioctl$TIOCSBRK(r5, 0x5427) socket$kcm(0x10, 0x2, 0x0) 13.92165065s ago: executing program 1 (id=209): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0) 12.931230469s ago: executing program 1 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001000000c000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5213) 12.318006144s ago: executing program 1 (id=211): syz_emit_vhci(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001140)={0x3c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}]}]}, @chandef_params]}, 0x3c}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101a40) r4 = socket$qrtr(0x2a, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) sendfile(r7, r5, 0x0, 0x7ffff000) splice(r6, 0x0, r5, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x7e29, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000280)) r9 = io_uring_setup(0x2f64, &(0x7f0000000340)={0x0, 0x1aeb, 0x0, 0x2, 0x315, 0x0, r8}) syz_io_uring_setup(0x60cc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000040), &(0x7f00000005c0)) io_uring_enter(r8, 0x0, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) fchdir(r4) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r11, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x0) dup2(r10, r4) 12.080206409s ago: executing program 3 (id=212): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 7.96495359s ago: executing program 0 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x0, 0x0) 7.92806262s ago: executing program 4 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_coalesce={0x4c, 0x0, 0x0, 0x4000000}}) 7.910585485s ago: executing program 3 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000714b3d559cf09500"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r1 = socket$inet(0x2, 0x4, 0x8) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000240)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}, @local}, 0xc) r2 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x22812, r2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000004c0)='\x00\xb2v\xe4~[R;3\x00\x00\x00\x00\xb8\x9bH\x10}\xb0]\xc0\x95\xd9\xa9\xad\xa7V\xac\x95\xb0\xe2b\x98l\xfb\xd5S\xab5\x86,\xb3\x82\xeepW\xca\xd0\xea\xb0\x8d\v\n}\x12;\x00\x00\x00\xad\xb4T\x8f\x95\\\xc7\x13X.;\xb5\xc4]\x9f\x9a\x0f3M\xce\x11\xb4\x97e\xecz=\xa8\x97\xf0\xc5\x9a\x9f8\xa8_v\x9f\nx\xc4\x9f\x84\xa9\aI5\xa2p\x80\xb4}\xae\xc3\fkE\xee\x9e\x1e(\xee-\xd8o\xbd\x16\b~\x83\xf9\xb3@\xc6M\xbej\x90\x12\x9a\x04\xd5\x0292\xa4\xbcC\xf0\xb7\xb9\xd5F\x82#\xb9\x15h\xf9Q\xe5E\xdb\x13\xaa\xa5df\x99\xafwZr&\x9d\xf8\x943q\xac\xff\xb5\x9a\xb3jE\xa5\xfe_\x03\x99\xc6\x86h\xb5w\x18\xad\xcf\x12\t\xd2\xa2\xccS&\xcbu\xc3\xe8\x8fe\x01\xaa\xb7\xe2\xac\xcb|\xff]\xcf\xb2\x8fO\xa6\xe6\xb1\x10\xb8') r4 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x36, &(0x7f0000001d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x328, 0x208, 0x328, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'macvtap0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'nicvf0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendto$unix(r2, &(0x7f0000000340)="2ad6614b040a95ac2cafd08078e001ccd9d582868f5c6cd9d6e88904dd2c598e7627d06596e5854654bfe2a6943ff6c61c9a4c1f23b3318492f6ca6c9110fae7886917ee2f3851aee313c9e40d03c1a398d5da3c58627e7de106e066698480748f", 0x61, 0x0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) sendmmsg$inet6(r5, &(0x7f00000015c0), 0x0, 0x20044051) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) timerfd_gettime(0xffffffffffffffff, 0x0) 7.810397281s ago: executing program 1 (id=219): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="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", 0xfe44}], 0x5) ioctl$TCFLSH(r0, 0x540b, 0x2) 7.805723361s ago: executing program 2 (id=220): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000d00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x50}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r6, 0x8}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_MAC={0xa, 0x1, @random="a8cb7e0765ca"}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) 6.378916398s ago: executing program 4 (id=221): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x23b) 5.563241239s ago: executing program 3 (id=222): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000100)=0x3, 0x4) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 5.493166835s ago: executing program 1 (id=223): socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) setpriority(0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0xc, 0xc3, 0x0, 0xe, [0x8, 0xae7]}]}}, @timestamp_reply={0x16, 0x0, 0x0, 0xe000, 0x8001, 0x0, 0x0, 0x7}}}}}, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x2, r3}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x14d842, 0x0) r4 = gettid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x3) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.439842878s ago: executing program 2 (id=224): creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) io_setup(0x5ff, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4040001) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000002c0)=""/110, 0x6e}], 0x1}, 0x40000006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)=ANY=[@ANYBLOB="02010009080000000000000000000000030005000000000002000000ac1414000000000000000000030006000000000002000000ac1414200000f8ff00000000"], 0x40}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010009"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) 5.439148839s ago: executing program 4 (id=225): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x0) 5.243078406s ago: executing program 0 (id=226): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3f00}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x1, 0x3}, 0x20) syz_open_procfs(0x0, &(0x7f0000000480)='net/psched\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, 0x14a, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000180)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000080)={r9, 0x3, r7, 0x5}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08001fed1279901177c14b05000300000021ebd4d86cd9d274afaf29bebd6091eec77163505aa557448aba0a384ce994275c6363967b69a3ec2b7af8a10550516ab2a4cfd6e879e7566b5f15a50c04b158f3846a05b616d0b85d0e95b3cd7f02d63d988bbe7431432987a6758f981d2dbf548f152a3c5ae8b129e5a9557307e0a67314d639e78db52af6e34587c0a2835907c583843ae441c3cfb20f84df97644d54a41509298efdd1bb39aae8335738a5274b9b0df49f40bc3bcb0f05e1b897998156205354462a774e3b791a9ac5933db7bef7e83ab5a7ff270a693f99a5d3feac055661b2d6fddf0605fbea6f05e8de61d55e2980b38125522ba990f443d545fb4673f8c90ada5e2152fcf414741130ed26d4ef186ebce3191cdd2cd7eb711ec892451912b84073467cfea7dae63311238cf23554c4b024f76ab47756234025807b46c8689dd7b9cca62197572041f1e17dfe5573c04521c42f53880dd1df8bb6dd494418f84ee4c1e580611ec63169cfd9116476e48b2772f2185fa952b15a5ac0"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="6c57d4ad82c0080836cd3764001e0008"], 0x2c}}, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.126513543s ago: executing program 4 (id=227): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201eb0003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.88687733s ago: executing program 1 (id=228): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x2a, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.879494583s ago: executing program 2 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 3.730753816s ago: executing program 3 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.700619722s ago: executing program 2 (id=231): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffecc, &(0x7f0000000200)=0x101) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x5, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, r4, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x11e, 0x1, &(0x7f0000000100)=@ccm_128={{}, "ee6a8e64a9f4d496", "2742cd9e1a7dee0a5709069c6e67af34", "2a715cd7", "bc0876e56d217c57"}, 0x28) listen(r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2.565811202s ago: executing program 0 (id=232): open(&(0x7f0000000200)='./file0\x00', 0x1eb27c, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.406541569s ago: executing program 3 (id=233): prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "12848098"}}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}, 0xffffff7f}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r4 = gettid() mq_notify(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x14, 0x0, @tid=r4}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) 1.328845689s ago: executing program 2 (id=234): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267735b", 0x41}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="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", 0xfe44}], 0x5) ioctl$TCFLSH(r0, 0x540b, 0x2) 1.263238841s ago: executing program 0 (id=235): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 498.24549ms ago: executing program 4 (id=236): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x23b) 288.10465ms ago: executing program 4 (id=237): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000200)=ANY=[], 0x0) 71.042168ms ago: executing program 0 (id=238): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9b7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f1e715a899c71e4e05b3d340292075ac4f13d51664febfc2748d0dbd7ddd4274c3aee0d"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) io_setup(0xa, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000001980)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='4', 0x1}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0xd, 0x8, 0x2, 0x6, 0xfffffffffffffffc}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)={0x14, r9, 0x607}, 0x14}}, 0x0) 0s ago: executing program 2 (id=239): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000000c0)={0x0, 0x1}) kernel console output (not intermixed with test programs): t tclass=dir permissive=1 [ 102.711159][ T29] audit: type=1400 audit(1722400924.235:96): avc: denied { mount } for pid=5208 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.735484][ T29] audit: type=1400 audit(1722400924.265:97): avc: denied { read } for pid=4882 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 102.769235][ T5212] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 104.657618][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.518907][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 107.518930][ T29] audit: type=1400 audit(1722400929.165:103): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.618917][ T29] audit: type=1400 audit(1722400929.205:104): avc: denied { mount } for pid=5220 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.694375][ T29] audit: type=1400 audit(1722400929.205:105): avc: denied { create } for pid=5220 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.735723][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.746265][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.759546][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.769791][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.778399][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.786249][ T29] audit: type=1400 audit(1722400929.205:106): avc: denied { read write } for pid=5220 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.786783][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.796439][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.825228][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.850215][ T29] audit: type=1400 audit(1722400929.205:107): avc: denied { open } for pid=5220 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.874519][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.894060][ T29] audit: type=1400 audit(1722400929.275:108): avc: denied { ioctl } for pid=5220 comm="syz-executor" path="socket:[3042]" dev="sockfs" ino=3042 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.925005][ T29] audit: type=1400 audit(1722400929.495:109): avc: denied { read } for pid=5220 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.939938][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.955397][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.964985][ T29] audit: type=1400 audit(1722400929.495:110): avc: denied { open } for pid=5220 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.966334][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.997683][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.005376][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.006790][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.015618][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.020856][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.037387][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.039776][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.045407][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.062261][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.070031][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.070418][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.084377][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.087556][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.099845][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.120516][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.140111][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.148471][ T29] audit: type=1400 audit(1722400929.495:111): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.170859][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.178857][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.892128][ T29] audit: type=1400 audit(1722400930.545:112): avc: denied { module_request } for pid=5228 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.030443][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 109.285410][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 109.426427][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 109.453459][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 109.485958][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.494998][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.503435][ T5228] bridge_slave_0: entered allmulticast mode [ 109.512175][ T5228] bridge_slave_0: entered promiscuous mode [ 109.572767][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.580247][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.587579][ T5228] bridge_slave_1: entered allmulticast mode [ 109.596313][ T5228] bridge_slave_1: entered promiscuous mode [ 109.791422][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.842351][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.875038][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 109.919107][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.926388][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.934279][ T5220] bridge_slave_0: entered allmulticast mode [ 109.942119][ T5220] bridge_slave_0: entered promiscuous mode [ 109.953131][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.960435][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.967805][ T5220] bridge_slave_1: entered allmulticast mode [ 109.975527][ T5235] Bluetooth: hci0: command tx timeout [ 109.977928][ T5220] bridge_slave_1: entered promiscuous mode [ 110.043155][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.050602][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.057832][ T5229] bridge_slave_0: entered allmulticast mode [ 110.066802][ T5229] bridge_slave_0: entered promiscuous mode [ 110.142771][ T5228] team0: Port device team_slave_0 added [ 110.183587][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.190938][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.198458][ T5229] bridge_slave_1: entered allmulticast mode [ 110.207043][ T5229] bridge_slave_1: entered promiscuous mode [ 110.209810][ T5235] Bluetooth: hci3: command tx timeout [ 110.219527][ T5222] Bluetooth: hci4: command tx timeout [ 110.219620][ T5226] Bluetooth: hci2: command tx timeout [ 110.248727][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.256313][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.263857][ T5227] bridge_slave_0: entered allmulticast mode [ 110.272057][ T5227] bridge_slave_0: entered promiscuous mode [ 110.282319][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.289646][ T5235] Bluetooth: hci1: command tx timeout [ 110.289811][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.303439][ T5227] bridge_slave_1: entered allmulticast mode [ 110.312362][ T5227] bridge_slave_1: entered promiscuous mode [ 110.342240][ T5228] team0: Port device team_slave_1 added [ 110.353050][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.498564][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.541936][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.557700][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.572924][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.584060][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.591623][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.617785][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.633121][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.640218][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.666540][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.705248][ T5220] team0: Port device team_slave_0 added [ 110.765126][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.809460][ T5220] team0: Port device team_slave_1 added [ 110.836373][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.844072][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.851955][ T5223] bridge_slave_0: entered allmulticast mode [ 110.860149][ T5223] bridge_slave_0: entered promiscuous mode [ 110.953731][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.961410][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.969220][ T5223] bridge_slave_1: entered allmulticast mode [ 110.977578][ T5223] bridge_slave_1: entered promiscuous mode [ 111.008938][ T5229] team0: Port device team_slave_0 added [ 111.021566][ T5227] team0: Port device team_slave_0 added [ 111.094862][ T5229] team0: Port device team_slave_1 added [ 111.126942][ T5227] team0: Port device team_slave_1 added [ 111.141170][ T5228] hsr_slave_0: entered promiscuous mode [ 111.149912][ T5228] hsr_slave_1: entered promiscuous mode [ 111.160824][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.167816][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.194023][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.207406][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.214558][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.240600][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.271463][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.364552][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.372458][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.400415][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.415480][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.444683][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.452036][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.478880][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.493534][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.500650][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.527402][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.587291][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.594629][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.622078][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.731526][ T5223] team0: Port device team_slave_0 added [ 111.752991][ T5223] team0: Port device team_slave_1 added [ 111.818649][ T5220] hsr_slave_0: entered promiscuous mode [ 111.827089][ T5220] hsr_slave_1: entered promiscuous mode [ 111.838589][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.846778][ T5220] Cannot create hsr debugfs directory [ 111.941723][ T5229] hsr_slave_0: entered promiscuous mode [ 111.949692][ T5229] hsr_slave_1: entered promiscuous mode [ 111.956620][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.964703][ T5229] Cannot create hsr debugfs directory [ 112.006254][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.014020][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.040096][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.050750][ T5235] Bluetooth: hci0: command tx timeout [ 112.059802][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.066806][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.093063][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.223064][ T5227] hsr_slave_0: entered promiscuous mode [ 112.230559][ T5227] hsr_slave_1: entered promiscuous mode [ 112.237368][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.246033][ T5227] Cannot create hsr debugfs directory [ 112.290080][ T5235] Bluetooth: hci3: command tx timeout [ 112.290091][ T5226] Bluetooth: hci4: command tx timeout [ 112.301019][ T5235] Bluetooth: hci2: command tx timeout [ 112.369077][ T5226] Bluetooth: hci1: command tx timeout [ 112.533770][ T5223] hsr_slave_0: entered promiscuous mode [ 112.542080][ T5223] hsr_slave_1: entered promiscuous mode [ 112.549022][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.556642][ T5223] Cannot create hsr debugfs directory [ 113.036348][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.063370][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.098569][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.155632][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.294399][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.321664][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.336531][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.353601][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.552530][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.573675][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.677473][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.694096][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.783117][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.845811][ T5227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.866783][ T5227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.884229][ T5227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.931599][ T5227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.986694][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.115457][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.123360][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.133675][ T5226] Bluetooth: hci0: command tx timeout [ 114.188215][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.229456][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.246814][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.254299][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.294757][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.310491][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.326088][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.369550][ T5235] Bluetooth: hci4: command tx timeout [ 114.370062][ T5222] Bluetooth: hci2: command tx timeout [ 114.375143][ T5235] Bluetooth: hci3: command tx timeout [ 114.396434][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.449292][ T5235] Bluetooth: hci1: command tx timeout [ 114.486364][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.493691][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.509273][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.516501][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.746724][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.767119][ T29] audit: type=1400 audit(1722400936.415:113): avc: denied { sys_module } for pid=5228 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.987680][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.043984][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.131232][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.138540][ T5205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.197494][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.204841][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.292307][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.307538][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.380083][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.387347][ T5205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.468872][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.476137][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.526891][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.613794][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.677679][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.752038][ T5228] veth0_vlan: entered promiscuous mode [ 115.784516][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.791839][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.846972][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.854367][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.905121][ T5228] veth1_vlan: entered promiscuous mode [ 116.153261][ T5220] veth0_vlan: entered promiscuous mode [ 116.166471][ T5228] veth0_macvtap: entered promiscuous mode [ 116.214298][ T5235] Bluetooth: hci0: command tx timeout [ 116.231388][ T5228] veth1_macvtap: entered promiscuous mode [ 116.272893][ T5220] veth1_vlan: entered promiscuous mode [ 116.398569][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.458999][ T5235] Bluetooth: hci3: command tx timeout [ 116.459834][ T5226] Bluetooth: hci2: command tx timeout [ 116.464445][ T54] Bluetooth: hci4: command tx timeout [ 116.492418][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.512000][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.528725][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.539308][ T54] Bluetooth: hci1: command tx timeout [ 116.556063][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.565013][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.573925][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.806636][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.872203][ T5220] veth0_macvtap: entered promiscuous mode [ 116.938477][ T5220] veth1_macvtap: entered promiscuous mode [ 116.961337][ T5229] veth0_vlan: entered promiscuous mode [ 117.033410][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.077972][ T5229] veth1_vlan: entered promiscuous mode [ 117.102916][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.117049][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.247666][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.268449][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.282755][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.292417][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.305672][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.348964][ T29] audit: type=1400 audit(1722400938.985:114): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.cCTaNc/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 117.412258][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.423522][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.438737][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.438964][ T29] audit: type=1400 audit(1722400938.995:115): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.465953][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.509021][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.510862][ T29] audit: type=1400 audit(1722400939.005:116): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.cCTaNc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.517780][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.566792][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.588960][ T29] audit: type=1400 audit(1722400939.005:117): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 117.668105][ T29] audit: type=1400 audit(1722400939.055:118): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 117.688324][ T29] audit: type=1400 audit(1722400939.105:119): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 117.712841][ T29] audit: type=1400 audit(1722400939.135:120): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.746020][ T5229] veth0_macvtap: entered promiscuous mode [ 117.820007][ T29] audit: type=1400 audit(1722400939.465:121): avc: denied { read write } for pid=5228 comm="syz-executor" name="loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.867250][ T5229] veth1_macvtap: entered promiscuous mode [ 117.884994][ T29] audit: type=1400 audit(1722400939.465:122): avc: denied { open } for pid=5228 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.971055][ T5223] veth0_vlan: entered promiscuous mode [ 118.133542][ T5223] veth1_vlan: entered promiscuous mode [ 118.167929][ T5227] veth0_vlan: entered promiscuous mode [ 118.298777][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.318741][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.336228][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.347400][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.368248][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.444825][ T5223] veth0_macvtap: entered promiscuous mode [ 118.505613][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.537195][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.544164][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.555040][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.565587][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.581584][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.588837][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.240516][ T5310] delete_channel: no stack [ 119.281129][ T5227] veth1_vlan: entered promiscuous mode [ 119.381608][ T5227] veth0_macvtap: entered promiscuous mode [ 119.446557][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.479048][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.487970][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.502946][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.522617][ T5223] veth1_macvtap: entered promiscuous mode [ 119.643103][ T5227] veth1_macvtap: entered promiscuous mode [ 119.675733][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.690757][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.735659][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.747830][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.758492][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.769281][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.779295][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.790177][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.811435][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.890496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.904111][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.918578][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 119.918601][ T29] audit: type=1400 audit(1722400941.565:135): avc: denied { mounton } for pid=5220 comm="syz-executor" path="/root/syzkaller.33cJP6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.972646][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.989671][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.004385][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.017817][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.029814][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.053006][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.102623][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.119008][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.137863][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.152646][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.176674][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.192368][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.204355][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.216865][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.228739][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.239498][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.251255][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.263113][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.277442][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.392130][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.410567][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.428398][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.516423][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.543546][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.554643][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.581941][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.614052][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.624220][ T29] audit: type=1400 audit(1722400942.265:136): avc: denied { create } for pid=5314 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.633600][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.644560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.685943][ T29] audit: type=1400 audit(1722400942.265:137): avc: denied { write } for pid=5314 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.743990][ T5315] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.831802][ T5227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.861384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.878926][ T5227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.898402][ T5227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.930192][ T5227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.957377][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.990007][ T29] audit: type=1400 audit(1722400942.645:138): avc: denied { create } for pid=5317 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.999321][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.456289][ T29] audit: type=1400 audit(1722400943.085:139): avc: denied { write } for pid=5317 comm="syz.0.8" name="001" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.664023][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.704189][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.733795][ T29] audit: type=1400 audit(1722400943.385:140): avc: denied { mount } for pid=5324 comm="syz.2.10" name="/" dev="hugetlbfs" ino=7215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.855287][ T2522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.858920][ T29] audit: type=1400 audit(1722400943.485:141): avc: denied { unmount } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.940107][ T2522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.039793][ T29] audit: type=1400 audit(1722400943.685:142): avc: denied { create } for pid=5326 comm="syz.0.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.129268][ T29] audit: type=1400 audit(1722400943.725:143): avc: denied { map } for pid=5326 comm="syz.0.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.270893][ T29] audit: type=1400 audit(1722400943.735:144): avc: denied { read write } for pid=5326 comm="syz.0.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.379176][ T5333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.382652][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.466647][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.968660][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.097050][ T5338] Zero length message leads to an empty skb [ 123.773267][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.190542][ T2522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.225112][ T2522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.594617][ T5354] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 124.910160][ T5354] netlink: 636 bytes leftover after parsing attributes in process `syz.2.20'. [ 125.032271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.599879][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 125.599903][ T29] audit: type=1400 audit(1722400947.255:159): avc: denied { mounton } for pid=5361 comm="syz.0.23" path="/6/file1" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.628400][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.862994][ T29] audit: type=1400 audit(1722400947.505:160): avc: denied { read write } for pid=5362 comm="syz.4.5" name="vhost-vsock" dev="devtmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.985643][ T29] audit: type=1400 audit(1722400947.505:161): avc: denied { open } for pid=5362 comm="syz.4.5" path="/dev/vhost-vsock" dev="devtmpfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.032129][ T29] audit: type=1400 audit(1722400947.535:162): avc: denied { ioctl } for pid=5362 comm="syz.4.5" path="/dev/vhost-vsock" dev="devtmpfs" ino=1086 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.149134][ T29] audit: type=1400 audit(1722400947.735:163): avc: denied { create } for pid=5362 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.208560][ T29] audit: type=1400 audit(1722400947.735:164): avc: denied { connect } for pid=5362 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.317878][ T29] audit: type=1400 audit(1722400947.795:165): avc: denied { getopt } for pid=5362 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.114928][ T29] audit: type=1400 audit(1722400948.765:166): avc: denied { mount } for pid=5377 comm="syz.3.26" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.255533][ T29] audit: type=1400 audit(1722400948.895:167): avc: denied { write } for pid=5377 comm="syz.3.26" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.366803][ T29] audit: type=1400 audit(1722400948.895:168): avc: denied { read } for pid=5377 comm="syz.3.26" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.835136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 128.252770][ T5399] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 128.319831][ T5399] netlink: 636 bytes leftover after parsing attributes in process `syz.2.34'. [ 128.740461][ T5400] binder: 5364:5400 ioctl c0306201 20000280 returned -14 [ 130.332652][ T5454] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 130.380228][ T5454] netlink: 636 bytes leftover after parsing attributes in process `syz.3.48'. [ 130.616181][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 130.616204][ T29] audit: type=1400 audit(1722400952.265:195): avc: denied { bind } for pid=5439 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.757106][ T29] audit: type=1400 audit(1722400952.295:196): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 130.859858][ T29] audit: type=1400 audit(1722400952.325:197): avc: denied { setopt } for pid=5439 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.050503][ T29] audit: type=1400 audit(1722400952.695:198): avc: denied { create } for pid=5459 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.171955][ T29] audit: type=1400 audit(1722400952.725:199): avc: denied { write } for pid=5459 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.269007][ T29] audit: type=1400 audit(1722400952.725:200): avc: denied { nlmsg_read } for pid=5459 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 132.097544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 132.107391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 132.135814][ T5271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.148333][ T5285] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.190342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.381277][ T5271] usb 5-1: Using ep0 maxpacket: 32 [ 132.389109][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 132.424759][ T5285] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 132.449239][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.460471][ T5285] usb 2-1: config 0 has no interface number 0 [ 132.466723][ T5285] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.481662][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.499309][ T5271] usb 5-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 132.526691][ T5285] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 132.545430][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.554510][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 132.573723][ T5285] usb 2-1: Product: syz [ 132.578022][ T5285] usb 2-1: SerialNumber: syz [ 132.591071][ T5271] usb 5-1: config 0 descriptor?? [ 132.601767][ T5285] usb 2-1: config 0 descriptor?? [ 132.649183][ T5205] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.651369][ T5285] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 132.757933][ T5285] kernel read not supported for file /slabinfo (pid: 5285 comm: kworker/1:7) [ 132.866249][ T5205] usb 3-1: New USB device found, idVendor=0e41, idProduct=4153, bcdDevice=dd.0c [ 132.899161][ T5205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.907386][ T5205] usb 3-1: Product: syz [ 132.940582][ T29] audit: type=1400 audit(1722400954.595:201): avc: denied { write } for pid=5488 comm="syz.0.61" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 132.942811][ T5205] usb 3-1: Manufacturer: syz [ 132.963416][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.017655][ T5205] usb 3-1: SerialNumber: syz [ 133.066326][ T5205] usb 3-1: config 0 descriptor?? [ 133.092228][ T5271] nintendo 0003:057E:201E.0001: unknown main item tag 0x0 [ 133.095717][ T5205] snd_usb_toneport 3-1:0.0: Line 6 POD Studio GX found [ 133.113564][ T5271] nintendo 0003:057E:201E.0001: item fetching failed at offset 2/8 [ 133.129015][ T5205] usb 3-1: selecting invalid altsetting 2 [ 133.134834][ T5205] snd_usb_toneport 3-1:0.0: set_interface failed [ 133.146506][ T5271] nintendo 0003:057E:201E.0001: HID parse failed [ 133.162296][ T5271] nintendo 0003:057E:201E.0001: probe - fail = -22 [ 133.189065][ T5271] nintendo 0003:057E:201E.0001: probe with driver nintendo failed with error -22 [ 133.193148][ T5205] snd_usb_toneport 3-1:0.0: Line 6 POD Studio GX now disconnected [ 133.252662][ T5205] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 133.279031][ T1177] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.375204][ T9] usb 3-1: USB disconnect, device number 2 [ 133.485638][ T8] usb 2-1: USB disconnect, device number 2 [ 133.583057][ T5273] usb 5-1: USB disconnect, device number 2 [ 133.803718][ T1177] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 134.433328][ T29] audit: type=1400 audit(1722400955.815:202): avc: denied { name_bind } for pid=5493 comm="syz.3.63" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 134.614675][ T1177] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 134.638906][ T1177] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.648098][ T1177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.936910][ T29] audit: type=1400 audit(1722400956.585:203): avc: denied { read } for pid=5502 comm="syz.1.64" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.052586][ T29] audit: type=1400 audit(1722400956.585:204): avc: denied { open } for pid=5502 comm="syz.1.64" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.085432][ T5489] usb usb9: usbfs: process 5489 (syz.0.61) did not claim interface 0 before use [ 135.193403][ T1177] usb 1-1: string descriptor 0 read error: -71 [ 135.241706][ T1177] usb 1-1: USB disconnect, device number 2 [ 135.329640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.469293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 138.715698][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.723909][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.936378][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 140.936411][ T29] audit: type=1400 audit(1722400962.105:208): avc: denied { create } for pid=5563 comm="syz.1.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 141.661040][ T5571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 141.679256][ T29] audit: type=1400 audit(1722400962.855:209): avc: denied { read write } for pid=5565 comm="syz.3.78" name="video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 141.749443][ T5570] vim2m vim2m.0: vidioc_s_fmt queue busy [ 141.801057][ T29] audit: type=1400 audit(1722400962.855:210): avc: denied { open } for pid=5565 comm="syz.3.78" path="/dev/video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 141.824325][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.899113][ T29] audit: type=1400 audit(1722400963.305:211): avc: denied { ioctl } for pid=5566 comm="syz.4.79" path="socket:[7095]" dev="sockfs" ino=7095 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.923679][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.938000][ T5570] capability: warning: `syz.3.78' uses deprecated v2 capabilities in a way that may be insecure [ 142.027551][ T5577] netlink: 'syz.2.82': attribute type 3 has an invalid length. [ 142.037792][ T5577] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 142.045469][ T5577] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.82'. [ 142.297633][ T29] audit: type=1400 audit(1722400963.385:212): avc: denied { ioctl } for pid=5565 comm="syz.3.78" path="/dev/video3" dev="devtmpfs" ino=853 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 142.690464][ T5581] syz.1.80: attempt to access beyond end of device [ 142.690464][ T5581] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 142.703640][ T5581] VFS: unable to read V7 FS superblock on device nbd1. [ 142.710587][ T5581] VFS: could not find a valid V7 on nbd1. [ 144.514072][ T29] audit: type=1400 audit(1722400963.645:213): avc: denied { connect } for pid=5565 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.617421][ T29] audit: type=1400 audit(1722400963.655:214): avc: denied { bind } for pid=5565 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.753153][ T29] audit: type=1400 audit(1722400963.665:215): avc: denied { create } for pid=5575 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.882826][ T29] audit: type=1400 audit(1722400964.335:216): avc: denied { mounton } for pid=5573 comm="syz.1.80" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.932406][ T29] audit: type=1400 audit(1722400964.605:217): avc: denied { setopt } for pid=5565 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 146.673610][ T5282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 146.727818][ T5614] netlink: 'syz.0.91': attribute type 32 has an invalid length. [ 146.737127][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 146.737149][ T29] audit: type=1400 audit(1722400968.375:227): avc: denied { write } for pid=5612 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.801218][ T29] audit: type=1400 audit(1722400968.375:228): avc: denied { nlmsg_write } for pid=5612 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 146.906637][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.955372][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.986577][ T5282] usb 4-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 147.008504][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.018865][ T5273] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.056917][ T5282] usb 4-1: config 0 descriptor?? [ 147.239137][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 147.248249][ T5273] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 147.285559][ T5273] usb 5-1: config 0 has no interface number 0 [ 147.314969][ T5273] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.344057][ T5273] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 147.360517][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 147.371603][ T5273] usb 5-1: Product: syz [ 147.375975][ T5273] usb 5-1: SerialNumber: syz [ 147.691152][ T5273] usb 5-1: config 0 descriptor?? [ 148.039181][ T5282] wacom 0003:056A:037E.0002: unknown main item tag 0x0 [ 148.060088][ T5273] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 148.227075][ T5282] wacom 0003:056A:037E.0002: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 148.370066][ T5282] usb 4-1: USB disconnect, device number 2 [ 148.580660][ T9] usb 5-1: USB disconnect, device number 3 [ 148.754742][ T29] audit: type=1400 audit(1722400970.405:229): avc: denied { read } for pid=5633 comm="syz.0.98" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 148.866121][ T29] audit: type=1400 audit(1722400970.405:230): avc: denied { open } for pid=5633 comm="syz.0.98" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 148.931236][ T29] audit: type=1400 audit(1722400970.515:231): avc: denied { create } for pid=5635 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.242171][ T29] audit: type=1400 audit(1722400971.885:232): avc: denied { map } for pid=5647 comm="syz.0.104" path="socket:[7886]" dev="sockfs" ino=7886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 150.357070][ T5656] sctp: [Deprecated]: syz.1.105 (pid 5656) Use of int in maxseg socket option. [ 150.357070][ T5656] Use struct sctp_assoc_value instead [ 150.386561][ T29] audit: type=1400 audit(1722400971.935:233): avc: denied { bind } for pid=5648 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.625332][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.379282][ T29] audit: type=1400 audit(1722400971.935:234): avc: denied { name_bind } for pid=5648 comm="syz.1.105" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.401067][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.491706][ T29] audit: type=1400 audit(1722400971.935:235): avc: denied { node_bind } for pid=5648 comm="syz.1.105" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 151.495028][ T25] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 151.583304][ T25] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 151.597092][ T29] audit: type=1400 audit(1722400972.005:236): avc: denied { setopt } for pid=5648 comm="syz.1.105" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.597755][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 151.618434][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.737940][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.156875][ T5646] usb usb9: usbfs: process 5646 (syz.4.103) did not claim interface 0 before use [ 152.180872][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 152.189656][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 152.209140][ T25] usb 5-1: string descriptor 0 read error: -71 [ 152.243768][ T25] usb 5-1: USB disconnect, device number 4 [ 152.338133][ T29] audit: type=1400 audit(1722400973.985:237): avc: denied { create } for pid=5669 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.471838][ T5285] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.787589][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.799139][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.819009][ T5285] usb 3-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75 [ 152.834223][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.844861][ T29] audit: type=1400 audit(1722400974.485:238): avc: denied { ioctl } for pid=5669 comm="syz.3.111" path="socket:[8294]" dev="sockfs" ino=8294 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.869294][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.970000][ T5285] usb 3-1: config 0 descriptor?? [ 153.559075][ T29] audit: type=1400 audit(1722400975.205:239): avc: denied { create } for pid=5675 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.588167][ T5285] wacom 0003:056A:037E.0003: unknown main item tag 0x0 [ 153.620981][ T5285] wacom 0003:056A:037E.0003: Unknown device_type for 'HID 056a:037e'. Ignoring. [ 153.689026][ T29] audit: type=1400 audit(1722400975.255:240): avc: denied { map } for pid=5675 comm="syz.1.113" path="socket:[8310]" dev="sockfs" ino=8310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.019091][ T29] audit: type=1400 audit(1722400975.255:241): avc: denied { read } for pid=5675 comm="syz.1.113" path="socket:[8310]" dev="sockfs" ino=8310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.424207][ T5685] netlink: 'syz.4.114': attribute type 5 has an invalid length. [ 154.451060][ T29] audit: type=1400 audit(1722400975.935:242): avc: denied { ioctl } for pid=5677 comm="syz.4.114" path="socket:[7922]" dev="sockfs" ino=7922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.349033][ T29] audit: type=1400 audit(1722400975.945:243): avc: denied { name_bind } for pid=5677 comm="syz.4.114" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 155.639169][ T29] audit: type=1400 audit(1722400976.185:244): avc: denied { read } for pid=5677 comm="syz.4.114" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.914010][ T29] audit: type=1400 audit(1722400976.195:245): avc: denied { open } for pid=5677 comm="syz.4.114" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.946036][ T5691] netlink: 9 bytes leftover after parsing attributes in process `syz.1.116'. [ 155.956999][ T5691] 0·: renamed from hsr_slave_1 (while UP) [ 156.023690][ T9] usb 3-1: USB disconnect, device number 3 [ 156.169068][ T5691] 0·: entered allmulticast mode [ 156.175323][ T5691] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 156.458961][ T29] audit: type=1400 audit(1722400976.235:246): avc: denied { ioctl } for pid=5677 comm="syz.4.114" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.478381][ T5273] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.758984][ T5273] usb 3-1: Using ep0 maxpacket: 16 [ 164.786438][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.804276][ T29] audit: type=1400 audit(1722400986.405:247): avc: denied { read } for pid=5706 comm="syz.4.122" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.870888][ T5707] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 164.888707][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.989120][ T29] audit: type=1400 audit(1722400986.405:248): avc: denied { open } for pid=5706 comm="syz.4.122" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 164.989150][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.286339][ T5273] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.286393][ T29] audit: type=1400 audit(1722400986.525:249): avc: denied { ioctl } for pid=5706 comm="syz.4.122" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 165.378365][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.470299][ T5273] usb 3-1: config 0 descriptor?? [ 165.739463][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 166.213920][ T5273] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 166.289941][ T5273] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 166.516733][ T5273] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 166.619019][ T5273] microsoft 0003:045E:07DA.0004: no inputs found [ 166.719119][ T5273] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 166.919405][ T5273] usb 3-1: USB disconnect, device number 4 [ 167.511174][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.561670][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.589752][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.699251][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.711267][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 167.719543][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.804718][ T29] audit: type=1400 audit(1722400989.445:250): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 167.972949][ T29] audit: type=1400 audit(1722400989.485:251): avc: denied { open } for pid=5706 comm="syz.4.122" path="/dev/ptyqd" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 168.213920][ T5226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.223350][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.249378][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.263183][ T5226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.271541][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.271992][ T5222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.282270][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.292567][ T5222] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.302449][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.311571][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.366276][ T5222] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 168.375240][ T5222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.939225][ T2522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.147269][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.158026][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.171686][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.191987][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.254220][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.262403][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.532606][ T2522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.842045][ T2522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.889286][ T54] Bluetooth: hci5: command tx timeout [ 169.955440][ T2522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.982752][ T5728] netlink: 'syz.4.126': attribute type 6 has an invalid length. [ 170.369086][ T54] Bluetooth: hci1: command tx timeout [ 170.529279][ T54] Bluetooth: hci6: command tx timeout [ 170.622825][ T1177] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.838907][ T1177] usb 5-1: Using ep0 maxpacket: 32 [ 170.865730][ T1177] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 170.875033][ T1177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.883673][ T1177] usb 5-1: Product: syz [ 170.889275][ T1177] usb 5-1: Manufacturer: syz [ 170.893936][ T1177] usb 5-1: SerialNumber: syz [ 170.915978][ T1177] usb 5-1: config 0 descriptor?? [ 170.950541][ T29] audit: type=1400 audit(1722400992.605:252): avc: denied { search } for pid=4882 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.954675][ T1177] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 170.989965][ T29] audit: type=1400 audit(1722400992.625:253): avc: denied { read } for pid=4882 comm="dhcpcd" name="n68" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.014824][ T29] audit: type=1400 audit(1722400992.625:254): avc: denied { open } for pid=4882 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.042450][ T29] audit: type=1400 audit(1722400992.635:255): avc: denied { getattr } for pid=4882 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=1966 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 171.336074][ T54] Bluetooth: hci2: command tx timeout [ 171.495109][ T2522] bridge_slave_1: left allmulticast mode [ 171.503788][ T25] usb 5-1: USB disconnect, device number 5 [ 171.526956][ T2522] bridge_slave_1: left promiscuous mode [ 171.542644][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.596090][ T2522] bridge_slave_0: left allmulticast mode [ 171.602254][ T29] audit: type=1400 audit(1722400993.245:256): avc: denied { read } for pid=5737 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.651369][ T2522] bridge_slave_0: left promiscuous mode [ 171.657669][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.680372][ T29] audit: type=1400 audit(1722400993.245:257): avc: denied { open } for pid=5737 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.719627][ T29] audit: type=1400 audit(1722400993.245:258): avc: denied { getattr } for pid=5737 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.970400][ T54] Bluetooth: hci5: command tx timeout [ 172.449364][ T54] Bluetooth: hci1: command tx timeout [ 172.547707][ T29] audit: type=1400 audit(1722400994.195:259): avc: denied { write } for pid=5736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.741452][ T29] audit: type=1400 audit(1722400994.225:260): avc: denied { add_name } for pid=5736 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.780052][ T29] audit: type=1400 audit(1722400994.225:261): avc: denied { create } for pid=5736 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.798986][ T54] Bluetooth: hci6: command tx timeout [ 172.872467][ T5750] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.499391][ T54] Bluetooth: hci2: command tx timeout [ 174.049548][ T54] Bluetooth: hci5: command tx timeout [ 174.530530][ T54] Bluetooth: hci1: command tx timeout [ 174.537770][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.556706][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.582034][ T2522] bond0 (unregistering): Released all slaves [ 174.849238][ T54] Bluetooth: hci6: command tx timeout [ 175.569375][ T54] Bluetooth: hci2: command tx timeout [ 175.870152][ T5713] chnl_net:caif_netlink_parms(): no params data found [ 176.130601][ T54] Bluetooth: hci5: command tx timeout [ 176.177800][ T5723] chnl_net:caif_netlink_parms(): no params data found [ 176.238532][ T5718] chnl_net:caif_netlink_parms(): no params data found [ 176.290751][ T2522] hsr_slave_0: left promiscuous mode [ 176.329625][ T2522] 0·: left promiscuous mode [ 176.351166][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.375126][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.396699][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.414124][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.513393][ T2522] veth1_macvtap: left promiscuous mode [ 176.540673][ T2522] veth0_macvtap: left promiscuous mode [ 176.546547][ T2522] veth1_vlan: left promiscuous mode [ 176.567103][ T2522] veth0_vlan: left promiscuous mode [ 176.609409][ T54] Bluetooth: hci1: command tx timeout [ 176.822902][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 176.822953][ T29] audit: type=1400 audit(1722400998.455:269): avc: denied { watch_mount watch_reads } for pid=5780 comm="syz.4.131" path="/26" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.942755][ T54] Bluetooth: hci6: command tx timeout [ 177.657243][ T54] Bluetooth: hci2: command tx timeout [ 178.323560][ T29] audit: type=1400 audit(1722400999.955:270): avc: denied { mount } for pid=5794 comm="syz.4.134" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.494135][ T29] audit: type=1400 audit(1722401000.145:271): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.674577][ T29] audit: type=1400 audit(1722401000.325:272): avc: denied { read } for pid=5796 comm="syz.4.135" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.704327][ T29] audit: type=1400 audit(1722401000.325:273): avc: denied { open } for pid=5796 comm="syz.4.135" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.740702][ T29] audit: type=1400 audit(1722401000.325:274): avc: denied { ioctl } for pid=5796 comm="syz.4.135" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.767964][ T29] audit: type=1400 audit(1722401000.325:275): avc: denied { read write } for pid=5796 comm="syz.4.135" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.795143][ T29] audit: type=1400 audit(1722401000.325:276): avc: denied { open } for pid=5796 comm="syz.4.135" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.824563][ T29] audit: type=1400 audit(1722401000.325:277): avc: denied { ioctl } for pid=5796 comm="syz.4.135" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.940440][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 178.949103][ T5273] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.014407][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 179.128916][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 179.144013][ T5273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.162579][ T5273] usb 5-1: string descriptor 0 read error: -22 [ 179.169121][ T5273] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 179.178463][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.197674][ T5273] usb 5-1: config 0 descriptor?? [ 180.139668][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 180.238302][ T5797] netlink: 'syz.4.135': attribute type 10 has an invalid length. [ 180.270184][ T5273] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 180.381445][ T5273] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 180.389843][ T5273] dib0700: firmware download failed at 7 with -22 [ 180.458454][ T5273] usb 5-1: USB disconnect, device number 6 [ 180.708481][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.715874][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.723576][ T5713] bridge_slave_0: entered allmulticast mode [ 180.732534][ T5713] bridge_slave_0: entered promiscuous mode [ 180.752263][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.759613][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.766879][ T5713] bridge_slave_1: entered allmulticast mode [ 180.776554][ T5713] bridge_slave_1: entered promiscuous mode [ 180.982814][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.996692][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.020050][ T5723] bridge_slave_0: entered allmulticast mode [ 181.057035][ T5723] bridge_slave_0: entered promiscuous mode [ 181.072622][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.093131][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.106210][ T5723] bridge_slave_1: entered allmulticast mode [ 181.114191][ T5723] bridge_slave_1: entered promiscuous mode [ 181.134776][ T29] audit: type=1400 audit(1722401002.785:278): avc: denied { bind } for pid=5811 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 181.298933][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.307007][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.317620][ T5717] bridge_slave_0: entered allmulticast mode [ 181.343123][ T5717] bridge_slave_0: entered promiscuous mode [ 181.414679][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.437003][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.491055][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.498585][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.506743][ T5718] bridge_slave_0: entered allmulticast mode [ 181.517719][ T5718] bridge_slave_0: entered promiscuous mode [ 181.544438][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.554255][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.572169][ T5718] bridge_slave_1: entered allmulticast mode [ 181.597223][ T5718] bridge_slave_1: entered promiscuous mode [ 181.617193][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.630354][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.650436][ T5717] bridge_slave_1: entered allmulticast mode [ 181.673492][ T5717] bridge_slave_1: entered promiscuous mode [ 181.746792][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.764813][ T5811] dccp_close: ABORT with 52 bytes unread [ 182.215460][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.246376][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.309887][ T5713] team0: Port device team_slave_0 added [ 182.337040][ T5713] team0: Port device team_slave_1 added [ 182.462795][ T5718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.515054][ T5718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.564625][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.678493][ T5826] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 182.688021][ T5826] netlink: 'syz.4.137': attribute type 3 has an invalid length. [ 182.697342][ T5826] netlink: 224 bytes leftover after parsing attributes in process `syz.4.137'. [ 183.553579][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 183.553599][ T29] audit: type=1400 audit(1722401005.205:288): avc: denied { write } for pid=5831 comm="syz.4.138" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 183.667586][ T5835] overlayfs: missing 'lowerdir' [ 183.715439][ T5723] team0: Port device team_slave_0 added [ 183.730375][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.743944][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.775997][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.834299][ T5718] team0: Port device team_slave_0 added [ 183.875181][ T5717] team0: Port device team_slave_0 added [ 183.902407][ T5723] team0: Port device team_slave_1 added [ 183.956854][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.965820][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.997521][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.079789][ T5718] team0: Port device team_slave_1 added [ 184.093625][ T5717] team0: Port device team_slave_1 added [ 184.270183][ T29] audit: type=1400 audit(1722401005.915:289): avc: denied { read } for pid=5837 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 184.315482][ T2522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.480027][ T54] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 184.491443][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.505647][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.533297][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.581570][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.597323][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.891739][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.925751][ T29] audit: type=1400 audit(1722401006.395:290): avc: denied { ioctl } for pid=5840 comm="syz.4.140" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 185.136486][ T2522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.215449][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.235577][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.405430][ T5718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.437791][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.463923][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.508060][ T5718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.683367][ T5718] hsr_slave_0: entered promiscuous mode [ 185.700891][ T5718] hsr_slave_1: entered promiscuous mode [ 185.719963][ T5718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.738053][ T5718] Cannot create hsr debugfs directory [ 185.906071][ T29] audit: type=1400 audit(1722401007.555:291): avc: denied { read write } for pid=5845 comm="syz.4.141" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.957463][ T29] audit: type=1400 audit(1722401007.555:292): avc: denied { open } for pid=5845 comm="syz.4.141" path="/dev/input/event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.998361][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.006604][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.035319][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.057939][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.077906][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.106254][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.219203][ T29] audit: type=1400 audit(1722401007.865:293): avc: denied { ioctl } for pid=5845 comm="syz.4.141" path="/dev/input/event0" dev="devtmpfs" ino=835 ioctlcmd=0x4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 186.345216][ T2522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.431229][ T5713] hsr_slave_0: entered promiscuous mode [ 186.438668][ T5713] hsr_slave_1: entered promiscuous mode [ 186.447433][ T5713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.455413][ T5713] Cannot create hsr debugfs directory [ 186.529953][ T54] Bluetooth: hci3: command tx timeout [ 186.597284][ T2522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.747905][ T5717] hsr_slave_0: entered promiscuous mode [ 186.759476][ T5717] hsr_slave_1: entered promiscuous mode [ 186.767628][ T5717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.775558][ T5717] Cannot create hsr debugfs directory [ 186.845398][ T5723] hsr_slave_0: entered promiscuous mode [ 186.854903][ T5723] hsr_slave_1: entered promiscuous mode [ 186.875056][ T5723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.898048][ T5723] Cannot create hsr debugfs directory [ 187.217658][ T5718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.240421][ T5282] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.430961][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 187.453097][ T5282] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.529778][ T5282] usb 5-1: string descriptor 0 read error: -22 [ 187.536398][ T5282] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 187.546931][ T5718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.551243][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.570065][ T5282] usb 5-1: config 0 descriptor?? [ 187.895386][ T5718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.424203][ T2522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.480839][ T5852] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 188.506421][ T5282] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 188.556179][ T5282] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 188.565421][ T5282] dib0700: firmware download failed at 7 with -22 [ 188.596444][ T5282] usb 5-1: USB disconnect, device number 7 [ 188.770948][ T5718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.882400][ T2522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.027388][ T2522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.170817][ T2522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.407556][ T5718] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.523658][ T5718] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.579691][ T5718] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.659512][ T5282] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.704916][ T5718] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.849013][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 189.858648][ T5282] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.879578][ T5282] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.918900][ T5282] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.938665][ T2522] bridge_slave_1: left allmulticast mode [ 189.943555][ T5282] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.967548][ T2522] bridge_slave_1: left promiscuous mode [ 189.973672][ T5282] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.973719][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.016482][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.045527][ T2522] bridge_slave_0: left allmulticast mode [ 190.078705][ T2522] bridge_slave_0: left promiscuous mode [ 190.085876][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.123161][ T2522] bridge_slave_1: left allmulticast mode [ 190.138879][ T2522] bridge_slave_1: left promiscuous mode [ 190.144803][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.173946][ T2522] bridge_slave_0: left allmulticast mode [ 190.188964][ T2522] bridge_slave_0: left promiscuous mode [ 190.195036][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.227240][ T2522] bridge_slave_1: left allmulticast mode [ 190.243806][ T2522] bridge_slave_1: left promiscuous mode [ 190.251681][ T5282] usb 5-1: GET_CAPABILITIES returned 0 [ 190.257458][ T5282] usbtmc 5-1:16.0: can't read capabilities [ 190.259438][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.321765][ T2522] bridge_slave_0: left allmulticast mode [ 190.327614][ T2522] bridge_slave_0: left promiscuous mode [ 190.353947][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.578877][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.591722][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.600884][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.611628][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.624523][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.633695][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.643405][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.652860][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.662027][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.674660][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.683825][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.693824][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.706717][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.715888][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.725553][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.734810][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 190.756778][ T5271] usb 5-1: USB disconnect, device number 8 [ 192.339754][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.381298][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.424636][ T2522] bond0 (unregistering): Released all slaves [ 192.526271][ T29] audit: type=1400 audit(1722401014.165:294): avc: denied { connect } for pid=5888 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.679881][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.698317][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.729788][ T2522] bond0 (unregistering): Released all slaves [ 192.985022][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.005552][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.023376][ T2522] bond0 (unregistering): Released all slaves [ 193.883631][ T29] audit: type=1400 audit(1722401015.535:295): avc: denied { write } for pid=5896 comm="syz.4.146" name="fib_trie" dev="proc" ino=4026533149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 194.041900][ T5718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.091724][ T5713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.145877][ T5713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.522291][ T5713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.581643][ T5713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.627901][ T5718] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.695021][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.702768][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.970319][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.977696][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.265398][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 196.369350][ T2522] hsr_slave_0: left promiscuous mode [ 196.389631][ T2522] hsr_slave_1: left promiscuous mode [ 196.400955][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.415116][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.418965][ T29] audit: type=1400 audit(1722401018.065:296): avc: denied { bind } for pid=5916 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.442685][ T29] audit: type=1400 audit(1722401018.065:297): avc: denied { listen } for pid=5916 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.444026][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.474003][ T29] audit: type=1400 audit(1722401018.065:298): avc: denied { accept } for pid=5916 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.482539][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.514257][ T2522] hsr_slave_0: left promiscuous mode [ 196.526160][ T2522] hsr_slave_1: left promiscuous mode [ 196.534148][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.543894][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.556984][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.579452][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.621686][ T2522] hsr_slave_0: left promiscuous mode [ 196.637988][ T2522] hsr_slave_1: left promiscuous mode [ 196.644928][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.647839][ T5920] netlink: 100 bytes leftover after parsing attributes in process `syz.4.149'. [ 196.664240][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.674852][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.689512][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.689942][ T5920] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 196.703638][ T5920] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.715826][ T5920] vhci_hcd vhci_hcd.0: Device attached [ 196.720704][ T29] audit: type=1400 audit(1722401018.375:299): avc: denied { create } for pid=5919 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.755896][ T29] audit: type=1400 audit(1722401018.395:300): avc: denied { connect } for pid=5919 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.799396][ T29] audit: type=1400 audit(1722401018.395:301): avc: denied { create } for pid=5919 comm="syz.4.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.855750][ T2522] veth1_macvtap: left promiscuous mode [ 196.863617][ T2522] veth0_macvtap: left promiscuous mode [ 196.870376][ T2522] veth1_vlan: left promiscuous mode [ 196.875784][ T2522] veth0_vlan: left promiscuous mode [ 196.888302][ T2522] veth1_macvtap: left promiscuous mode [ 196.895776][ T2522] veth0_macvtap: left promiscuous mode [ 196.902484][ T2522] veth1_vlan: left promiscuous mode [ 196.909448][ T2522] veth0_vlan: left promiscuous mode [ 196.917622][ T2522] veth1_macvtap: left promiscuous mode [ 196.923583][ T2522] veth0_macvtap: left promiscuous mode [ 196.931212][ T2522] veth1_vlan: left promiscuous mode [ 196.936709][ T2522] veth0_vlan: left promiscuous mode [ 197.010110][ T5273] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 197.099055][ T5285] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.299157][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 197.313217][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 197.328630][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 197.340768][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.351807][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.365227][ T5285] usb 5-1: config 0 descriptor?? [ 197.372296][ T5920] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 197.389834][ T5285] hub 5-1:0.0: USB hub found [ 197.618287][ T5285] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 197.930071][ T5285] hid-generic 0003:046D:C314.0005: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 198.199080][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 198.264379][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 198.377710][ T5921] vhci_hcd: connection reset by peer [ 198.418949][ T62] vhci_hcd: stop threads [ 198.427486][ T62] vhci_hcd: release socket [ 198.436725][ T62] vhci_hcd: disconnect device [ 198.505278][ T8] usb 5-1: USB disconnect, device number 9 [ 199.103857][ T29] audit: type=1400 audit(1722401020.755:302): avc: denied { setattr } for pid=5927 comm="syz.4.150" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.150690][ T29] audit: type=1400 audit(1722401020.795:303): avc: denied { write } for pid=5927 comm="syz.4.150" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.198985][ T29] audit: type=1400 audit(1722401020.825:304): avc: denied { open } for pid=5927 comm="syz.4.150" path="/45/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.329417][ T29] audit: type=1400 audit(1722401020.975:305): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.360714][ T29] audit: type=1400 audit(1722401021.015:306): avc: denied { search } for pid=4650 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.880677][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 199.963222][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 200.145699][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.152204][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.842963][ T29] audit: type=1400 audit(1722401022.495:307): avc: denied { write } for pid=5934 comm="syz.4.152" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.865624][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.791995][ T5943] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 201.799930][ T5943] netlink: 'syz.4.154': attribute type 3 has an invalid length. [ 201.807670][ T5943] netlink: 224 bytes leftover after parsing attributes in process `syz.4.154'. [ 202.192807][ T5273] vhci_hcd: vhci_device speed not set [ 202.220678][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 202.334091][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 203.360856][ T5717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.609853][ T5717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.693326][ T5717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.763273][ T5718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.868973][ T5717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.966006][ T5952] netlink: 100 bytes leftover after parsing attributes in process `syz.4.156'. [ 204.012921][ T5952] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 204.019543][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.046791][ T29] audit: type=1400 audit(1722401025.695:308): avc: denied { sys_module } for pid=5718 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 204.109281][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 204.150814][ T5953] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 1 [ 204.164126][ T62] vhci_hcd: stop threads [ 204.168445][ T62] vhci_hcd: release socket [ 204.184635][ T62] vhci_hcd: disconnect device [ 204.336838][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.529239][ T5273] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 204.594297][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.681768][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.690104][ T5282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.705463][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.712730][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.742531][ T5718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.796934][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 204.814518][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 204.841217][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 204.869616][ T5273] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 204.882160][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.905266][ T5273] usb 5-1: config 0 descriptor?? [ 204.931962][ T5952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.967450][ T5273] hub 5-1:0.0: USB hub found [ 205.157783][ T5723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.203748][ T5273] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 205.251289][ T5723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.313337][ T5723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.338493][ T5723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.418331][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.477714][ T5273] hid-generic 0003:046D:C314.0006: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.4-1/input0 [ 205.483996][ T5718] veth0_vlan: entered promiscuous mode [ 205.626059][ T5718] veth1_vlan: entered promiscuous mode [ 205.816679][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.970225][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.977613][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.011147][ T5718] veth0_macvtap: entered promiscuous mode [ 206.061675][ T5271] usb 5-1: USB disconnect, device number 10 [ 206.097519][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.104908][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.258033][ T5718] veth1_macvtap: entered promiscuous mode [ 206.453676][ T5718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.478863][ T5718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.493067][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.564743][ T5718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.582541][ T5718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.595967][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.622904][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.678290][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.755978][ T5718] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.795340][ T5718] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.818431][ T5718] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.839513][ T5718] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.003199][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.201200][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.208504][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.363017][ T5713] veth0_vlan: entered promiscuous mode [ 208.466890][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.474393][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.513620][ T29] audit: type=1400 audit(1722401030.165:309): avc: denied { write } for pid=4650 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.554940][ T29] audit: type=1400 audit(1722401030.165:310): avc: denied { remove_name } for pid=4650 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.611218][ T29] audit: type=1400 audit(1722401030.165:311): avc: denied { rename } for pid=4650 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.663613][ T5713] veth1_vlan: entered promiscuous mode [ 208.684239][ T29] audit: type=1400 audit(1722401030.165:312): avc: denied { add_name } for pid=4650 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.757666][ T29] audit: type=1400 audit(1722401030.165:313): avc: denied { unlink } for pid=4650 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.832606][ T29] audit: type=1400 audit(1722401030.165:314): avc: denied { create } for pid=4650 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.937282][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.956942][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.028607][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 209.037818][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 209.282204][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.300410][ T29] audit: type=1400 audit(1722401030.955:315): avc: denied { write } for pid=5999 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.340017][ T5713] veth0_macvtap: entered promiscuous mode [ 209.406599][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.439748][ T5713] veth1_macvtap: entered promiscuous mode [ 209.460087][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.491155][ T29] audit: type=1400 audit(1722401031.145:316): avc: denied { read } for pid=5999 comm="syz.4.159" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 209.629829][ T29] audit: type=1400 audit(1722401031.245:317): avc: denied { open } for pid=5999 comm="syz.4.159" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 209.642534][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.708609][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.720040][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.730972][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.745563][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.761691][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.775628][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.799001][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.839279][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.885532][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.026485][ T5713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.061489][ T6014] syz.3.121 uses obsolete (PF_INET,SOCK_PACKET) [ 210.068680][ T5713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.091585][ T5713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.110691][ T5713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.338220][ T5717] veth0_vlan: entered promiscuous mode [ 210.539894][ T5717] veth1_vlan: entered promiscuous mode [ 210.673861][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.684122][ T29] audit: type=1400 audit(1722401032.335:318): avc: denied { connect } for pid=6021 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.697179][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 210.803781][ T2522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.869644][ T2522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.105570][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 211.111540][ T2522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.131308][ T2522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.179148][ T6032] overlayfs: missing 'lowerdir' [ 211.221688][ T5717] veth0_macvtap: entered promiscuous mode [ 211.297516][ T5717] veth1_macvtap: entered promiscuous mode [ 211.538630][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.588869][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.629054][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.657215][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.704107][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.735338][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.770695][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.815868][ T5723] veth0_vlan: entered promiscuous mode [ 211.859091][ T25] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 211.881694][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.905258][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.925173][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.937263][ T6047] dccp_invalid_packet: invalid packet type [ 211.943854][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.959214][ T5717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.988154][ T5717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.021244][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.058273][ T5723] veth1_vlan: entered promiscuous mode [ 212.075740][ T25] usb 4-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.113427][ T5717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.142464][ T25] usb 4-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 212.171504][ T5717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.193825][ T25] usb 4-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 212.210082][ T5717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.210250][ T5717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.253401][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 212.259943][ T25] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 212.259992][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.260029][ T25] usb 4-1: Product: syz [ 212.260056][ T25] usb 4-1: Manufacturer: syz [ 212.260084][ T25] usb 4-1: SerialNumber: syz [ 212.264191][ T25] usb 4-1: config 0 descriptor?? [ 212.265679][ T6038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.388687][ T25] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 212.844337][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 213.361723][ T5723] veth0_macvtap: entered promiscuous mode [ 213.985826][ T5723] veth1_macvtap: entered promiscuous mode [ 214.046025][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.064992][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.077804][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.089656][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.100680][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.112929][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.126964][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.150911][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.164752][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.343438][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.449500][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.519603][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.596968][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.638901][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.700408][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.738981][ T5723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.777424][ T5723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.822021][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.900529][ T5723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.935924][ T5723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.987247][ T5723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.013030][ T5723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.046035][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 215.179326][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.187237][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.442537][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.468377][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.868424][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.908951][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.979626][ T9] usb 4-1: USB disconnect, device number 3 [ 216.059320][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 216.059344][ T29] audit: type=1400 audit(1722401037.715:323): avc: denied { block_suspend } for pid=6079 comm="syz.1.120" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.264801][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.312842][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.459709][ T29] audit: type=1400 audit(1722401038.105:324): avc: denied { ioctl } for pid=6085 comm="syz.0.172" path="socket:[12435]" dev="sockfs" ino=12435 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.870257][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 217.802264][ T6111] dccp_invalid_packet: invalid packet type [ 217.956215][ T29] audit: type=1400 audit(1722401039.605:325): avc: denied { read } for pid=6110 comm="syz.3.177" path="socket:[12469]" dev="sockfs" ino=12469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 218.076139][ T6105] kvm: emulating exchange as write [ 218.093542][ T29] audit: type=1400 audit(1722401039.675:326): avc: denied { write } for pid=6110 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 220.568704][ T54] Bluetooth: hci3: unexpected event 0x09 length: 17 > 3 [ 221.114930][ T6143] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 221.133713][ T6143] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 221.492737][ T29] audit: type=1400 audit(1722401043.145:327): avc: denied { append } for pid=6129 comm="syz.1.180" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.609171][ T54] Bluetooth: hci3: command tx timeout [ 222.674232][ T6154] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 223.234661][ C1] eth0: bad gso: type: 1, size: 1408 [ 223.435206][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 225.519612][ T5273] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 226.550785][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 226.703658][ T5273] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 226.742012][ T5273] usb 5-1: config 179 has no interface number 0 [ 226.769206][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 226.855431][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 226.915041][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 226.974494][ T5273] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 227.106681][ T5273] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 227.289160][ T5273] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 227.298370][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.424441][ T5273] usb 5-1: can't set config #179, error -71 [ 227.482250][ T5273] usb 5-1: USB disconnect, device number 11 [ 227.779887][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 227.907277][ T6213] tipc: Started in network mode [ 227.939166][ T6213] tipc: Node identity d6653c0b7e65, cluster identity 4711 [ 228.000176][ T6213] tipc: Enabled bearer , priority 0 [ 228.443875][ T6219] tipc: Resetting bearer [ 228.576784][ T29] audit: type=1400 audit(1722401050.225:328): avc: denied { execute } for pid=6225 comm="syz.1.205" path="/9/cpuacct.usage_sys" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.695534][ T6210] tipc: Resetting bearer [ 229.023018][ T9] tipc: Node number set to 2818587659 [ 229.292456][ T5273] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 229.583929][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 229.633440][ T5273] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.715536][ T5273] usb 3-1: config 179 has no interface number 0 [ 229.837247][ T5273] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.928972][ T5273] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.989221][ T5273] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.050544][ T5273] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 230.074771][ T6246] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 230.101240][ T5273] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.125802][ T6246] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.209'. [ 230.139314][ T5273] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 230.148630][ T6246] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 230.172168][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.245883][ T6238] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.831510][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.969882][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.137837][ T5282] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 231.464245][ T46] usb 3-1: USB disconnect, device number 5 [ 231.464267][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 231.478598][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 231.501731][ T46] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 232.317950][ T29] audit: type=1400 audit(1722401053.925:329): avc: denied { ioctl } for pid=6263 comm="syz.2.213" path="socket:[12682]" dev="sockfs" ino=12682 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 232.354043][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.538574][ T6266] mmap: syz.2.214 (6266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 232.937284][ T5222] Bluetooth: hci3: command 0x0406 tx timeout [ 235.144499][ T6210] tipc: Disabling bearer [ 235.855237][ T29] audit: type=1400 audit(1722401057.435:330): avc: denied { ioctl } for pid=6271 comm="syz.0.216" path="/dev/ptyq5" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 236.461580][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 236.700827][ T6287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.866387][ T29] audit: type=1400 audit(1722401058.445:331): avc: denied { map } for pid=6276 comm="syz.3.218" path="socket:[12714]" dev="sockfs" ino=12714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 237.034512][ T29] audit: type=1400 audit(1722401058.495:332): avc: denied { accept } for pid=6276 comm="syz.3.218" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.585066][ T29] audit: type=1400 audit(1722401059.235:333): avc: denied { write } for pid=6294 comm="syz.4.221" path="socket:[12724]" dev="sockfs" ino=12724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 237.969313][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 238.231923][ T6308] capability: warning: `syz.4.225' uses 32-bit capabilities (legacy support in use) [ 239.492111][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 239.765544][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 240.727121][ T25] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 240.768341][ T25] usb 5-1: config 0 has no interface number 0 [ 240.790445][ T25] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.818955][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.876824][ T25] usb 5-1: config 0 descriptor?? [ 240.909561][ T25] cp210x 5-1:0.255: cp210x converter detected [ 241.178098][ T29] audit: type=1400 audit(1722401062.825:334): avc: denied { map } for pid=6333 comm="syz.2.231" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.268448][ T29] audit: type=1400 audit(1722401062.855:335): avc: denied { execute } for pid=6333 comm="syz.2.231" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 241.379579][ T29] audit: type=1400 audit(1722401062.895:336): avc: denied { setopt } for pid=6333 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.480988][ T25] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 241.526332][ T29] audit: type=1400 audit(1722401062.915:337): avc: denied { listen } for pid=6333 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.641393][ T25] usb 5-1: cp210x converter now attached to ttyUSB0 [ 241.718120][ T25] usb 5-1: USB disconnect, device number 12 [ 241.721704][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.826691][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 241.922506][ T25] cp210x 5-1:0.255: device disconnected [ 242.330077][ T29] audit: type=1326 audit(1722401063.975:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6350 comm="syz.0.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cac7773b9 code=0x0 [ 243.354942][ C0] ================================================================== [ 243.363065][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0 [ 243.371439][ C0] Read of size 4 at addr ffffc900033ffa50 by task syz.4.237/6365 [ 243.379404][ C0] [ 243.381769][ C0] CPU: 0 UID: 0 PID: 6365 Comm: syz.4.237 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 243.392466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 243.402540][ C0] Call Trace: [ 243.405832][ C0] [ 243.408703][ C0] dump_stack_lvl+0x116/0x1f0 [ 243.413466][ C0] print_report+0xc3/0x620 [ 243.417914][ C0] ? __virt_addr_valid+0x5e/0x590 [ 243.422968][ C0] kasan_report+0xd9/0x110 [ 243.427497][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 243.432894][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 243.438285][ C0] xdp_do_check_flushed+0x41c/0x4e0 [ 243.443504][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 243.448902][ C0] net_rx_action+0xa92/0x1010 [ 243.453612][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 243.458780][ C0] ? __pfx_mark_lock+0x10/0x10 [ 243.463572][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 243.468797][ C0] ? sched_clock+0x38/0x60 [ 243.473240][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 243.478537][ C0] ? mark_held_locks+0x9f/0xe0 [ 243.483311][ C0] handle_softirqs+0x216/0x8f0 [ 243.488093][ C0] ? handle_edge_irq+0x40f/0xd10 [ 243.493063][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 243.498370][ C0] irq_exit_rcu+0xbb/0x120 [ 243.502809][ C0] common_interrupt+0xb0/0xd0 [ 243.507510][ C0] [ 243.510467][ C0] [ 243.513415][ C0] asm_common_interrupt+0x26/0x40 [ 243.518457][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 243.524891][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 31 54 f6 48 89 df e8 ee ae 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 25 46 f6 65 8b 05 d6 a6 ef 74 85 c0 74 16 5b [ 243.544507][ C0] RSP: 0018:ffffc900033ff8b0 EFLAGS: 00000246 [ 243.550586][ C0] RAX: 0000000000000006 RBX: ffff88806068e090 RCX: 1ffffffff28c98cb [ 243.558563][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc580 RDI: ffffffff8bb08240 [ 243.566540][ C0] RBP: 0000000000000292 R08: 0000000000000001 R09: fffffbfff28c50e3 [ 243.574522][ C0] R10: ffffffff9462871f R11: 0000000000000000 R12: 0000000000000016 [ 243.582497][ C0] R13: dffffc0000000000 R14: ffff8880b9237f90 R15: ffff8880b9238048 [ 243.590497][ C0] folio_batch_move_lru+0x2b5/0x3b0 [ 243.595713][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 243.600668][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 243.606400][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 243.611448][ C0] ? mas_next_slot+0x12b0/0x21d0 [ 243.616431][ C0] lru_add_drain_cpu+0x534/0x860 [ 243.621390][ C0] lru_add_drain+0x109/0x440 [ 243.626085][ C0] exit_mmap+0x18b/0xb20 [ 243.630344][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 243.635127][ C0] __mmput+0x12a/0x480 [ 243.639212][ C0] mmput+0x62/0x70 [ 243.642946][ C0] do_exit+0x9bf/0x2bb0 [ 243.647109][ C0] ? get_signal+0x8f2/0x2770 [ 243.651724][ C0] ? __pfx_do_exit+0x10/0x10 [ 243.656330][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 243.661370][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 243.667375][ C0] do_group_exit+0xd3/0x2a0 [ 243.671920][ C0] get_signal+0x25fd/0x2770 [ 243.676450][ C0] ? vfs_write+0x917/0x1140 [ 243.680963][ C0] ? vfs_write+0x14d/0x1140 [ 243.685480][ C0] ? __pfx_get_signal+0x10/0x10 [ 243.690357][ C0] ? __pfx_do_futex+0x10/0x10 [ 243.695043][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 243.700631][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 243.706805][ C0] ? ksys_write+0x1ab/0x260 [ 243.711311][ C0] ? __pfx_ksys_write+0x10/0x10 [ 243.716265][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 243.721914][ C0] do_syscall_64+0xda/0x250 [ 243.726425][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.732332][ C0] RIP: 0033:0x7f550dd773b9 [ 243.736763][ C0] Code: Unable to access opcode bytes at 0x7f550dd7738f. [ 243.743866][ C0] RSP: 002b:00007f550ea740f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 243.752312][ C0] RAX: fffffffffffffe00 RBX: 00007f550df05f88 RCX: 00007f550dd773b9 [ 243.760288][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f550df05f88 [ 243.768277][ C0] RBP: 00007f550df05f80 R08: 00007f550ea746c0 R09: 00007f550ea746c0 [ 243.776276][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f550df05f8c [ 243.784250][ C0] R13: 000000000000000b R14: 00007ffc3a68d4c0 R15: 00007ffc3a68d5a8 [ 243.792580][ C0] [ 243.795606][ C0] [ 243.797931][ C0] The buggy address belongs to stack of task syz.4.237/6365 [ 243.805209][ C0] and is located at offset 24 in frame: [ 243.811187][ C0] exit_mmap+0x0/0xb20 [ 243.815291][ C0] [ 243.817640][ C0] This frame has 2 objects: [ 243.822156][ C0] [32, 96) 'vmi' [ 243.822171][ C0] [128, 256) 'tlb' [ 243.825796][ C0] [ 243.831904][ C0] The buggy address belongs to the virtual mapping at [ 243.831904][ C0] [ffffc900033f8000, ffffc90003401000) created by: [ 243.831904][ C0] kernel_clone+0xfd/0x980 [ 243.849358][ C0] [ 243.851675][ C0] The buggy address belongs to the physical page: [ 243.858099][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801aaeaf00 pfn:0x1aaea [ 243.868250][ C0] memcg:ffff8880283ad082 [ 243.872575][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 243.879723][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 243.888357][ C0] raw: ffff88801aaeaf00 0000000000000000 00000001ffffffff ffff8880283ad082 [ 243.896950][ C0] page dumped because: kasan: bad access detected [ 243.903470][ C0] page_owner tracks the page as allocated [ 243.909218][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 6294, tgid 6294 (syz.4.221), ts 237127387230, free_ts 222617214715 [ 243.927556][ C0] post_alloc_hook+0x2d1/0x350 [ 243.932345][ C0] get_page_from_freelist+0x1351/0x2e50 [ 243.937920][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 243.943226][ C0] alloc_pages_mpol_noprof+0x275/0x610 [ 243.948703][ C0] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 243.954619][ C0] copy_process+0x2f3b/0x8de0 [ 243.959325][ C0] kernel_clone+0xfd/0x980 [ 243.963764][ C0] __do_sys_clone3+0x1f5/0x270 [ 243.968530][ C0] do_syscall_64+0xcd/0x250 [ 243.973065][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.978971][ C0] page last free pid 6149 tgid 6149 stack trace: [ 243.985383][ C0] free_unref_folios+0x9e9/0x1390 [ 243.990421][ C0] folios_put_refs+0x560/0x760 [ 243.995201][ C0] free_pages_and_swap_cache+0x45f/0x510 [ 244.000885][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 244.007055][ C0] tlb_finish_mmu+0x168/0x7b0 [ 244.011749][ C0] exit_mmap+0x3d1/0xb20 [ 244.016014][ C0] __mmput+0x12a/0x480 [ 244.020109][ C0] mmput+0x62/0x70 [ 244.023869][ C0] do_exit+0x9bf/0x2bb0 [ 244.028034][ C0] do_group_exit+0xd3/0x2a0 [ 244.032550][ C0] __x64_sys_exit_group+0x3e/0x50 [ 244.037582][ C0] x64_sys_call+0x14a9/0x16a0 [ 244.042279][ C0] do_syscall_64+0xcd/0x250 [ 244.046792][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.052777][ C0] [ 244.055121][ C0] Memory state around the buggy address: [ 244.060859][ C0] ffffc900033ff900: f1 f1 f1 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 [ 244.069018][ C0] ffffc900033ff980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 244.077199][ C0] >ffffc900033ffa00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 [ 244.085366][ C0] ^ [ 244.092057][ C0] ffffc900033ffa80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 244.100137][ C0] ffffc900033ffb00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 [ 244.108209][ C0] ================================================================== [ 244.116389][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.123627][ C0] CPU: 0 UID: 0 PID: 6365 Comm: syz.4.237 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 244.134254][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 244.144512][ C0] Call Trace: [ 244.147809][ C0] [ 244.150658][ C0] dump_stack_lvl+0x3d/0x1f0 [ 244.155282][ C0] panic+0x6f5/0x7a0 [ 244.159247][ C0] ? __pfx_panic+0x10/0x10 [ 244.163700][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 244.168835][ C0] check_panic_on_warn+0xab/0xb0 [ 244.173801][ C0] end_report+0x117/0x180 [ 244.178145][ C0] kasan_report+0xe9/0x110 [ 244.182587][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 244.187981][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 244.193379][ C0] xdp_do_check_flushed+0x41c/0x4e0 [ 244.198602][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 244.203988][ C0] net_rx_action+0xa92/0x1010 [ 244.208679][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 244.213893][ C0] ? __pfx_mark_lock+0x10/0x10 [ 244.218670][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 244.223889][ C0] ? sched_clock+0x38/0x60 [ 244.228431][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 244.233324][ C0] ? mark_held_locks+0x9f/0xe0 [ 244.238122][ C0] handle_softirqs+0x216/0x8f0 [ 244.242911][ C0] ? handle_edge_irq+0x40f/0xd10 [ 244.247866][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 244.253174][ C0] irq_exit_rcu+0xbb/0x120 [ 244.257613][ C0] common_interrupt+0xb0/0xd0 [ 244.262306][ C0] [ 244.265237][ C0] [ 244.268269][ C0] asm_common_interrupt+0x26/0x40 [ 244.273512][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 244.279987][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 31 54 f6 48 89 df e8 ee ae 54 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 25 46 f6 65 8b 05 d6 a6 ef 74 85 c0 74 16 5b [ 244.299617][ C0] RSP: 0018:ffffc900033ff8b0 EFLAGS: 00000246 [ 244.305701][ C0] RAX: 0000000000000006 RBX: ffff88806068e090 RCX: 1ffffffff28c98cb [ 244.313764][ C0] RDX: 0000000000000000 RSI: ffffffff8b4cc580 RDI: ffffffff8bb08240 [ 244.321764][ C0] RBP: 0000000000000292 R08: 0000000000000001 R09: fffffbfff28c50e3 [ 244.329754][ C0] R10: ffffffff9462871f R11: 0000000000000000 R12: 0000000000000016 [ 244.337754][ C0] R13: dffffc0000000000 R14: ffff8880b9237f90 R15: ffff8880b9238048 [ 244.345744][ C0] folio_batch_move_lru+0x2b5/0x3b0 [ 244.350967][ C0] ? __pfx_lru_add_fn+0x10/0x10 [ 244.355831][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 244.361567][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 244.366605][ C0] ? mas_next_slot+0x12b0/0x21d0 [ 244.371560][ C0] lru_add_drain_cpu+0x534/0x860 [ 244.376517][ C0] lru_add_drain+0x109/0x440 [ 244.381123][ C0] exit_mmap+0x18b/0xb20 [ 244.385552][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 244.390340][ C0] __mmput+0x12a/0x480 [ 244.394427][ C0] mmput+0x62/0x70 [ 244.398174][ C0] do_exit+0x9bf/0x2bb0 [ 244.402344][ C0] ? get_signal+0x8f2/0x2770 [ 244.406951][ C0] ? __pfx_do_exit+0x10/0x10 [ 244.411548][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 244.416605][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 244.422039][ C0] do_group_exit+0xd3/0x2a0 [ 244.426574][ C0] get_signal+0x25fd/0x2770 [ 244.431112][ C0] ? vfs_write+0x917/0x1140 [ 244.435654][ C0] ? vfs_write+0x14d/0x1140 [ 244.440166][ C0] ? __pfx_get_signal+0x10/0x10 [ 244.445034][ C0] ? __pfx_do_futex+0x10/0x10 [ 244.449823][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 244.455387][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.461645][ C0] ? ksys_write+0x1ab/0x260 [ 244.466152][ C0] ? __pfx_ksys_write+0x10/0x10 [ 244.471033][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 244.476675][ C0] do_syscall_64+0xda/0x250 [ 244.481186][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.487094][ C0] RIP: 0033:0x7f550dd773b9 [ 244.491511][ C0] Code: Unable to access opcode bytes at 0x7f550dd7738f. [ 244.498699][ C0] RSP: 002b:00007f550ea740f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 244.507213][ C0] RAX: fffffffffffffe00 RBX: 00007f550df05f88 RCX: 00007f550dd773b9 [ 244.515190][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f550df05f88 [ 244.523251][ C0] RBP: 00007f550df05f80 R08: 00007f550ea746c0 R09: 00007f550ea746c0 [ 244.531227][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f550df05f8c [ 244.539207][ C0] R13: 000000000000000b R14: 00007ffc3a68d4c0 R15: 00007ffc3a68d5a8 [ 244.547186][ C0] [ 244.550331][ C0] Kernel Offset: disabled [ 244.554772][ C0] Rebooting in 86400 seconds..