last executing test programs: 17.638502835s ago: executing program 3 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xb4}}, 0x0) 17.638306663s ago: executing program 3 (id=1051): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@ipv6_getnexthop={0x44, 0x6a, 0x20, 0x70bd2a, 0x25dfdffd, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c0003800800010002000000340003"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) 17.508467208s ago: executing program 3 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/13], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600308ebf32c9f4000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x400}}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x3) 17.369083112s ago: executing program 3 (id=1053): semop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}], 0x1) 17.368874907s ago: executing program 3 (id=1054): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) 17.318730058s ago: executing program 3 (id=1055): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) 2.554789121s ago: executing program 32 (id=1055): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) 1.579845314s ago: executing program 2 (id=1418): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.562547527s ago: executing program 0 (id=1420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) 1.485420665s ago: executing program 0 (id=1421): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1.39030005s ago: executing program 0 (id=1422): setreuid(0x0, 0xee00) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES64, @ANYRESOCT=0x0], 0x835, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x29ab, 0xd480, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESHEX=r3, @ANYRES32], 0x835, 0x2) set_mempolicy(0x4, 0x0, 0x5) sync() execve(&(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x20}]}}}}}}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 970.83573ms ago: executing program 0 (id=1424): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 970.639973ms ago: executing program 0 (id=1425): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f00000002c0)) 904.863199ms ago: executing program 0 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) close(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40095505, 0x0) 685.58959ms ago: executing program 1 (id=1430): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 685.275025ms ago: executing program 1 (id=1431): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000007000000060000008c"], 0x50) pipe(&(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x108, &(0x7f0000000000)=ANY=[], 0x0) 503.719603ms ago: executing program 2 (id=1432): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 409.17657ms ago: executing program 2 (id=1433): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000480)="7a0000800000210e3000cd7a0100334986dd6c8260938e3e85a1ef3736e0d5efadf27e4d221c200efb57c83489d7b0d656ab9222b5aeac13a1b8", 0x3a, 0x20000000, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd5}, 0x14) 219.063337ms ago: executing program 2 (id=1434): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 218.760935ms ago: executing program 1 (id=1435): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 144.800097ms ago: executing program 1 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) lseek(0xffffffffffffffff, 0x1, 0x4) 144.021116ms ago: executing program 2 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9005}, 0x40040c0) 61.340824ms ago: executing program 1 (id=1438): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x276) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000040000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140), 0x0, 0x8000c61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r2, 0x8, 0x4000, 0x4000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, "47fc66a1cb6609d71573d8b984afd6e393ed0ed9856d61ec2b0ad109a86172c31a8ef1094551d5f46460c531a9ab529307e2b59d39d8b9f2e75d4e8fd68dada223cd7b9d5b41062998b52bf0507f7cf077ca4158419bf2"}, &(0x7f0000000400)=0xffffffffffffffaf) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={r6, 0x5, 0x8, 0xfffffff9, 0x4, 0x4}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, &(0x7f00000001c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 60.804363ms ago: executing program 2 (id=1439): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff7]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0xa400080a) rmdir(&(0x7f0000000100)='./control\x00') r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x101, 0x3, 0xc, 0x13}, {0x7, 0x2, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x5, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x80, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xfffffffb, 0x6, 0x6, 0xaf8, 0x1, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x1, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0x3, 0x5, 0x1, 0x18001, 0x5, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x200, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x8, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0x100, 0x8, 0x0, 0x1, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x6, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x407, 0x2, 0x0, 0xd, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x120004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x2, 0x6, 0x6561, 0x7, 0x4, 0xc, 0x42, 0x3c04, 0x5f, 0x5fa, 0x1]}]}}]}, 0x45c}}, 0x8000) 0s ago: executing program 1 (id=1440): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14855' (ED25519) to the list of known hosts. [ 46.317361][ T40] audit: type=1400 audit(1766715914.809:62): avc: denied { name_bind } for pid=5843 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.343837][ T40] audit: type=1400 audit(1766715914.839:63): avc: denied { execute } for pid=5844 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.351044][ T40] audit: type=1400 audit(1766715914.839:64): avc: denied { execute_no_trans } for pid=5844 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.346265][ T40] audit: type=1400 audit(1766715916.839:65): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.354847][ T40] audit: type=1400 audit(1766715916.849:66): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.356533][ T5844] cgroup: Unknown subsys name 'net' [ 48.523443][ T5844] cgroup: Unknown subsys name 'cpuset' [ 48.527911][ T5844] cgroup: Unknown subsys name 'rlimit' [ 48.782887][ T5872] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.472524][ T5844] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.380595][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 52.380607][ T40] audit: type=1400 audit(1766715920.869:85): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.528950][ T40] audit: type=1400 audit(1766715921.019:86): avc: denied { create } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.540691][ T40] audit: type=1400 audit(1766715921.019:87): avc: denied { read write } for pid=5930 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.548859][ T40] audit: type=1400 audit(1766715921.019:88): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.557048][ T40] audit: type=1400 audit(1766715921.029:89): avc: denied { ioctl } for pid=5930 comm="syz-executor" path="socket:[5649]" dev="sockfs" ino=5649 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.557926][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.569058][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.571726][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.572290][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.574409][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.577390][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.582210][ T5940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.582343][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.585460][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.588123][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.594504][ T5294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.595355][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.598476][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.599248][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.599728][ T5936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.599957][ T5936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.611500][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.614949][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.617584][ T40] audit: type=1400 audit(1766715921.099:90): avc: denied { read } for pid=5938 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.618845][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.628256][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.631939][ T40] audit: type=1400 audit(1766715921.099:91): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.640902][ T40] audit: type=1400 audit(1766715921.099:92): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.805324][ T40] audit: type=1400 audit(1766715921.299:93): avc: denied { module_request } for pid=5934 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.847273][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 52.957501][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 52.978443][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 52.998482][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 53.022785][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.025639][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.028095][ T5934] bridge_slave_0: entered allmulticast mode [ 53.030955][ T5934] bridge_slave_0: entered promiscuous mode [ 53.039771][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.042302][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.045269][ T5934] bridge_slave_1: entered allmulticast mode [ 53.048142][ T5934] bridge_slave_1: entered promiscuous mode [ 53.160382][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.191293][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.193715][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.196258][ T5930] bridge_slave_0: entered allmulticast mode [ 53.198996][ T5930] bridge_slave_0: entered promiscuous mode [ 53.203329][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.206881][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.209256][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.211893][ T5930] bridge_slave_1: entered allmulticast mode [ 53.214581][ T5930] bridge_slave_1: entered promiscuous mode [ 53.278969][ T5934] team0: Port device team_slave_0 added [ 53.287793][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.298152][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.302227][ T5934] team0: Port device team_slave_1 added [ 53.304775][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.307420][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.309999][ T5941] bridge_slave_0: entered allmulticast mode [ 53.313718][ T5941] bridge_slave_0: entered promiscuous mode [ 53.317345][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.320318][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.323000][ T5938] bridge_slave_0: entered allmulticast mode [ 53.325743][ T5938] bridge_slave_0: entered promiscuous mode [ 53.348693][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.351581][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.354457][ T5941] bridge_slave_1: entered allmulticast mode [ 53.358147][ T5941] bridge_slave_1: entered promiscuous mode [ 53.361774][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.364368][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.366965][ T5938] bridge_slave_1: entered allmulticast mode [ 53.370522][ T5938] bridge_slave_1: entered promiscuous mode [ 53.381669][ T5930] team0: Port device team_slave_0 added [ 53.397119][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.399441][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.408515][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.415273][ T5930] team0: Port device team_slave_1 added [ 53.429563][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.432084][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.441389][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.454309][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.459083][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.474253][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.479352][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.482471][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.491796][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.497390][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.501909][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.504191][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.512933][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.539344][ T5941] team0: Port device team_slave_0 added [ 53.548241][ T5938] team0: Port device team_slave_0 added [ 53.557190][ T5941] team0: Port device team_slave_1 added [ 53.567205][ T5938] team0: Port device team_slave_1 added [ 53.583631][ T5934] hsr_slave_0: entered promiscuous mode [ 53.586065][ T5934] hsr_slave_1: entered promiscuous mode [ 53.611601][ T5930] hsr_slave_0: entered promiscuous mode [ 53.614098][ T5930] hsr_slave_1: entered promiscuous mode [ 53.616482][ T5930] debugfs: 'hsr0' already exists in 'hsr' [ 53.618527][ T5930] Cannot create hsr debugfs directory [ 53.627205][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.629517][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.639239][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.645124][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.647440][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.656127][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.661153][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.663514][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.672412][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.689915][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.692701][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.702041][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.765999][ T5941] hsr_slave_0: entered promiscuous mode [ 53.768345][ T5941] hsr_slave_1: entered promiscuous mode [ 53.770507][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 53.772517][ T5941] Cannot create hsr debugfs directory [ 53.840513][ T5938] hsr_slave_0: entered promiscuous mode [ 53.843007][ T5938] hsr_slave_1: entered promiscuous mode [ 53.845155][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 53.847041][ T5938] Cannot create hsr debugfs directory [ 54.030530][ T5934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.038803][ T5934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.043954][ T5934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.054760][ T5934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.092860][ T5930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.099567][ T5930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.107318][ T5930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.116387][ T5930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.173640][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.180099][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.188024][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.194623][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.249563][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.268037][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.273088][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.281508][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.284515][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.290380][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.307825][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.310657][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.324575][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.327022][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.343591][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.375958][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.398565][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.401587][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.419655][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.422227][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.430518][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.433596][ T40] audit: type=1400 audit(1766715922.929:94): avc: denied { sys_module } for pid=5934 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.449503][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.470824][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.474278][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.483929][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.487094][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.503644][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.534031][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.545441][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.555669][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.558084][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.567984][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.570614][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.622123][ T5944] Bluetooth: hci0: command tx timeout [ 54.622128][ T5943] Bluetooth: hci2: command tx timeout [ 54.622383][ T5933] Bluetooth: hci1: command tx timeout [ 54.653429][ T5934] veth0_vlan: entered promiscuous mode [ 54.664288][ T5934] veth1_vlan: entered promiscuous mode [ 54.692781][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.697705][ T5934] veth0_macvtap: entered promiscuous mode [ 54.701577][ T5933] Bluetooth: hci3: command tx timeout [ 54.705734][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.709049][ T5934] veth1_macvtap: entered promiscuous mode [ 54.740652][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.754879][ T5941] veth0_vlan: entered promiscuous mode [ 54.759120][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.770146][ T5930] veth0_vlan: entered promiscuous mode [ 54.773773][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.784706][ T5930] veth1_vlan: entered promiscuous mode [ 54.787842][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.791868][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.795641][ T5941] veth1_vlan: entered promiscuous mode [ 54.802073][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.844347][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.870146][ T5941] veth0_macvtap: entered promiscuous mode [ 54.870361][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.875657][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.883016][ T5930] veth0_macvtap: entered promiscuous mode [ 54.895587][ T5941] veth1_macvtap: entered promiscuous mode [ 54.906400][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.906586][ T5930] veth1_macvtap: entered promiscuous mode [ 54.909604][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.932189][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.939398][ T5938] veth0_vlan: entered promiscuous mode [ 54.945467][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.953704][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.964331][ T5934] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.965240][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.980394][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.983906][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.991092][ T5938] veth1_vlan: entered promiscuous mode [ 54.994716][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.000387][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.004139][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.015702][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.018658][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.028562][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.105801][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.108798][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.112499][ T5938] veth0_macvtap: entered promiscuous mode [ 55.128709][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.130927][ T5938] veth1_macvtap: entered promiscuous mode [ 55.132068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.148885][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.151877][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.177433][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.182113][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.187926][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.197921][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.216436][ T1187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.221290][ T1187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.228128][ T1187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.235731][ T1187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.325595][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.328973][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.347436][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.350334][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.417113][ T6040] netlink: 133536 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.458207][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.464653][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 55.471139][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.484918][ T6042] bridge_slave_1 (unregistering): left allmulticast mode [ 55.487253][ T6042] bridge_slave_1 (unregistering): left promiscuous mode [ 55.489871][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.760951][ T5985] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.934149][ T5985] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 55.937459][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.940109][ T5985] usb 5-1: Product: syz [ 55.941721][ T5985] usb 5-1: Manufacturer: syz [ 55.943368][ T5985] usb 5-1: SerialNumber: syz [ 56.155330][ T5985] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 56.165652][ T5985] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 56.169308][ T5985] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 56.175251][ T5985] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 56.183167][ T5985] usb 5-1: USB disconnect, device number 2 [ 56.333722][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 56.337729][ T6064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18'. [ 56.344311][ T6064] Zero length message leads to an empty skb [ 56.494999][ T6074] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.693592][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 56.696862][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.28'. [ 56.701372][ T5943] Bluetooth: hci2: command tx timeout [ 56.703931][ T5944] Bluetooth: hci1: command tx timeout [ 56.703995][ T5933] Bluetooth: hci0: command tx timeout [ 56.790924][ T5933] Bluetooth: hci3: command tx timeout [ 56.822212][ T6104] syz.2.37 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 56.851648][ T6106] syzkaller0: entered promiscuous mode [ 56.854071][ T6106] syzkaller0: entered allmulticast mode [ 56.893522][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 56.900053][ T6112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 56.986539][ T6118] netlink: 'syz.3.44': attribute type 10 has an invalid length. [ 56.989716][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.992360][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.998194][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.000591][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.003536][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.005931][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.011095][ T6118] team0: Port device bridge0 added [ 57.128296][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.132234][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.135019][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.137535][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.140024][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.142598][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.145040][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.147640][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.150313][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.154311][ T55] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 57.160961][ T55] hid-generic 0003:0004:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 57.195637][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.211927][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 57.221136][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54'. [ 57.274992][ T6145] bridge_slave_0: left allmulticast mode [ 57.277083][ T6145] bridge_slave_0: left promiscuous mode [ 57.279563][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.293226][ T6145] bridge_slave_1: left allmulticast mode [ 57.295630][ T6145] bridge_slave_1: left promiscuous mode [ 57.298179][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.307849][ T6145] bond0: (slave bond_slave_0): Releasing backup interface [ 57.337542][ T6145] bond0: (slave bond_slave_1): Releasing backup interface [ 57.347252][ T6145] team0: Port device team_slave_0 removed [ 57.354489][ T6145] team0: Port device team_slave_1 removed [ 57.357855][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.361309][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.365934][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.368618][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.387890][ T6145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 57.454685][ T6155] C: renamed from team_slave_0 (while UP) [ 57.521556][ T40] kauditd_printk_skb: 154 callbacks suppressed [ 57.521566][ T40] audit: type=1400 audit(1766715926.019:249): avc: denied { create } for pid=6158 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.542056][ T40] audit: type=1400 audit(1766715926.039:250): avc: denied { getopt } for pid=6158 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.548362][ T40] audit: type=1400 audit(1766715926.039:251): avc: denied { read write } for pid=6160 comm="syz.0.61" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 57.569806][ T40] audit: type=1400 audit(1766715926.039:252): avc: denied { open } for pid=6160 comm="syz.0.61" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 57.588215][ T40] audit: type=1400 audit(1766715926.079:253): avc: denied { read } for pid=6162 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.591921][ T6165] netlink: 'syz.2.63': attribute type 6 has an invalid length. [ 57.665434][ T40] audit: type=1400 audit(1766715926.159:254): avc: denied { shutdown } for pid=6170 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.673427][ T40] audit: type=1400 audit(1766715926.159:255): avc: denied { connect } for pid=6170 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.681412][ T40] audit: type=1400 audit(1766715926.159:256): avc: denied { name_connect } for pid=6170 comm="syz.0.66" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 57.689132][ T40] audit: type=1400 audit(1766715926.159:257): avc: denied { read } for pid=6170 comm="syz.0.66" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.697279][ T40] audit: type=1400 audit(1766715926.159:258): avc: denied { open } for pid=6170 comm="syz.0.66" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.483063][ T6218] wg2: entered promiscuous mode [ 58.484938][ T6218] wg2: entered allmulticast mode [ 58.780811][ T5944] Bluetooth: hci1: command tx timeout [ 58.782722][ T5943] Bluetooth: hci2: command tx timeout [ 58.784579][ T5933] Bluetooth: hci0: command tx timeout [ 58.861716][ T5933] Bluetooth: hci3: command tx timeout [ 58.999476][ T6239] tipc: Enabling of bearer rejected, failed to enable media [ 59.667950][ T840] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 59.708983][ T6319] fido_id[6319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.744945][ T6326] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 59.944764][ T6344] hub 9-0:1.0: USB hub found [ 59.947949][ T6344] hub 9-0:1.0: 1 port detected [ 60.205166][ T6369] SELinux: policydb table sizes (7,0) do not match mine (8,7) [ 60.205291][ T6369] SELinux: failed to load policy [ 60.329561][ T6384] capability: warning: `syz.0.166' uses deprecated v2 capabilities in a way that may be insecure [ 60.570965][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.617864][ T6403] __nla_validate_parse: 22 callbacks suppressed [ 60.617876][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 60.632484][ T6405] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 60.703517][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 60.721489][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 60.727236][ T54] usb 8-1: config 0 has no interfaces? [ 60.729247][ T54] usb 8-1: New USB device found, idVendor=04ff, idProduct=0066, bcdDevice=d8.b0 [ 60.732576][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.737121][ T54] usb 8-1: config 0 descriptor?? [ 60.808093][ T6414] process 'syz.1.180' launched './file0' with NULL argv: empty string added [ 60.880780][ T5944] Bluetooth: hci1: command tx timeout [ 60.882670][ T5933] Bluetooth: hci0: command tx timeout [ 60.884509][ T5943] Bluetooth: hci2: command tx timeout [ 60.950885][ T5943] Bluetooth: hci3: command tx timeout [ 61.326433][ T6435] syzkaller1: entered promiscuous mode [ 61.328361][ T6435] syzkaller1: entered allmulticast mode [ 61.375548][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 61.461855][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 61.537862][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 61.933910][ T55] usb 8-1: USB disconnect, device number 2 [ 61.951468][ T6469] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 61.958488][ T6469] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.045507][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 62.101830][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 62.195377][ T6477] mmap: syz.1.204 (6477) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.243206][ T6479] pim6reg1: entered promiscuous mode [ 62.245033][ T6479] pim6reg1: entered allmulticast mode [ 62.423686][ T6489] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 62.435666][ T6489] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 62.549817][ T6502] netlink: 'syz.1.217': attribute type 4 has an invalid length. [ 62.605565][ T6509] loop2: detected capacity change from 0 to 7 [ 62.613481][ T6509] Dev loop2: unable to read RDB block 7 [ 62.616620][ T6509] loop2: AHDI p1 p2 p3 [ 62.618713][ T6509] loop2: partition table partially beyond EOD, truncated [ 62.623076][ T6509] loop2: p1 start 1601398130 is beyond EOD, truncated [ 62.626829][ T6509] loop2: p2 start 1702059890 is beyond EOD, truncated [ 62.667582][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 62.667593][ T40] audit: type=1400 audit(1766715931.159:417): avc: denied { create } for pid=6510 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.676688][ T40] audit: type=1400 audit(1766715931.169:418): avc: denied { bind } for pid=6510 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.683342][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 62.684109][ T40] audit: type=1400 audit(1766715931.169:419): avc: denied { connect } for pid=6510 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 62.692832][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 62.732898][ T40] audit: type=1400 audit(1766715931.229:420): avc: denied { write } for pid=6518 comm="syz.1.225" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.745557][ T6520] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.746391][ T40] audit: type=1400 audit(1766715931.229:421): avc: denied { map } for pid=6518 comm="syz.1.225" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.757990][ T40] audit: type=1326 audit(1766715931.239:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.226" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 62.774818][ T40] audit: type=1326 audit(1766715931.239:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.226" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 62.787276][ T40] audit: type=1326 audit(1766715931.239:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.226" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 62.796481][ T40] audit: type=1326 audit(1766715931.239:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.226" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 62.804336][ T40] audit: type=1326 audit(1766715931.239:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.3.226" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 62.848278][ T6531] pimreg: entered allmulticast mode [ 62.858687][ T6531] pimreg: left allmulticast mode [ 62.920076][ T6529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6529 comm=syz.3.230 [ 63.019887][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.238'. [ 63.053684][ T6554] hub 6-0:1.0: USB hub found [ 63.057592][ T6554] hub 6-0:1.0: 1 port detected [ 63.073975][ T6558] xt_hashlimit: max too large, truncated to 1048576 [ 63.490818][ T840] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 63.620976][ T840] usb 8-1: device descriptor read/64, error -71 [ 63.756487][ T6595] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.820641][ T6599] netlink: 'syz.2.261': attribute type 30 has an invalid length. [ 63.881268][ T840] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 64.012571][ T840] usb 8-1: device descriptor read/64, error -71 [ 64.122466][ T840] usb usb8-port1: attempt power cycle [ 64.480790][ T840] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 64.501363][ T840] usb 8-1: device descriptor read/8, error -71 [ 64.740812][ T840] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 64.766067][ T840] usb 8-1: device descriptor read/8, error -71 [ 64.893528][ T840] usb usb8-port1: unable to enumerate USB device [ 64.970901][ T6675] netlink: 'syz.0.298': attribute type 6 has an invalid length. [ 65.162924][ T6703] netlink: 'syz.0.309': attribute type 11 has an invalid length. [ 66.183981][ T6738] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 66.879582][ T6751] __nla_validate_parse: 2 callbacks suppressed [ 66.879600][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 66.977484][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 66.981604][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 67.284499][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 67.288533][ T6775] netlink: 312 bytes leftover after parsing attributes in process `syz.3.338'. [ 67.293111][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 67.356185][ T6783] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 67.708359][ T40] kauditd_printk_skb: 202 callbacks suppressed [ 67.708376][ T40] audit: type=1400 audit(1766715936.199:629): avc: denied { create } for pid=6813 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.775218][ T40] audit: type=1400 audit(1766715936.269:630): avc: denied { create } for pid=6817 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.815240][ T40] audit: type=1400 audit(1766715936.269:631): avc: denied { setopt } for pid=6817 comm="syz.0.359" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.130098][ T40] audit: type=1400 audit(1766715936.619:632): avc: denied { create } for pid=6825 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.140368][ T40] audit: type=1400 audit(1766715936.629:633): avc: denied { mounton } for pid=6825 comm="syz.2.361" path="/93/file0" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.142973][ T6826] ======================================================= [ 68.142973][ T6826] WARNING: The mand mount option has been deprecated and [ 68.142973][ T6826] and is ignored by this kernel. Remove the mand [ 68.142973][ T6826] option from the mount to silence this warning. [ 68.142973][ T6826] ======================================================= [ 68.158456][ T40] audit: type=1400 audit(1766715936.639:634): avc: denied { mount } for pid=6825 comm="syz.2.361" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.177537][ T40] audit: type=1400 audit(1766715936.639:635): avc: denied { mounton } for pid=6825 comm="syz.2.361" path="/93/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 68.221810][ T40] audit: type=1400 audit(1766715936.709:636): avc: denied { mount } for pid=6825 comm="syz.2.361" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.233043][ T40] audit: type=1400 audit(1766715936.729:637): avc: denied { unmount } for pid=6825 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.261144][ T40] audit: type=1400 audit(1766715936.759:638): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.437508][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 69.860978][ T6819] Set syz1 is full, maxelem 65536 reached [ 70.094410][ T6873] syz.1.380 (6873): attempted to duplicate a private mapping with mremap. This is not supported. [ 70.581333][ T6904] tipc: Started in network mode [ 70.583075][ T6904] tipc: Node identity ac14140f, cluster identity 4711 [ 70.585629][ T6904] tipc: New replicast peer: 255.255.255.83 [ 70.587708][ T6904] tipc: Enabled bearer , priority 10 [ 70.674790][ T6914] capability: warning: `syz.1.400' uses 32-bit capabilities (legacy support in use) [ 70.724361][ T6918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.402'. [ 70.731750][ T6918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.402'. [ 70.905590][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'. [ 70.949967][ T6936] hub 9-0:1.0: USB hub found [ 70.953647][ T6936] hub 9-0:1.0: 1 port detected [ 71.343115][ T6966] unsupported nla_type 52263 [ 71.584328][ T840] tipc: Node number set to 2886997007 [ 71.593055][ T6982] netlink: 'syz.2.429': attribute type 21 has an invalid length. [ 71.653072][ T6982] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 71.925730][ T7006] __nla_validate_parse: 9 callbacks suppressed [ 71.925742][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 71.950524][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 72.088025][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 72.097187][ T6910] Set syz1 is full, maxelem 65536 reached [ 72.121413][ T55] hid_parser_main: 9 callbacks suppressed [ 72.121426][ T55] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.133504][ T55] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 72.176399][ T7029] syzkaller0: entered promiscuous mode [ 72.178448][ T7029] syzkaller0: entered allmulticast mode [ 72.204443][ T7027] fido_id[7027]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 72.204954][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 72.213573][ T7032] syz_tun: entered allmulticast mode [ 72.217388][ T7031] syz_tun: left allmulticast mode [ 72.239675][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 72.343013][ T7051] netlink: 'syz.0.457': attribute type 5 has an invalid length. [ 72.390225][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 72.592212][ T7062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.676949][ T7062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.760147][ T7062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.824248][ T7062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.903761][ T72] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.913982][ T72] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.924324][ T72] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.934859][ T72] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.980212][ T40] kauditd_printk_skb: 403 callbacks suppressed [ 72.980227][ T40] audit: type=1326 audit(1766715941.469:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 72.991917][ T40] audit: type=1326 audit(1766715941.479:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.004783][ T40] audit: type=1326 audit(1766715941.479:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.013739][ T40] audit: type=1326 audit(1766715941.479:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.021321][ T40] audit: type=1326 audit(1766715941.479:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.021346][ T40] audit: type=1326 audit(1766715941.479:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.021367][ T40] audit: type=1326 audit(1766715941.479:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.021388][ T40] audit: type=1326 audit(1766715941.479:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.059212][ T40] audit: type=1326 audit(1766715941.479:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.066877][ T40] audit: type=1326 audit(1766715941.479:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7064 comm="syz.3.461" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 73.248611][ T7077] veth0_vlan: entered allmulticast mode [ 73.275650][ T7081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.317152][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 73.342814][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 73.720151][ T7117] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 73.723957][ T7117] SELinux: failed to load policy [ 74.076209][ T7152] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 74.220883][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 74.224013][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 74.565597][ T7186] can0: slcan on ttyS3. [ 74.622580][ T7185] can0 (unregistered): slcan off ttyS3. [ 74.669236][ T7188] SELinux: failed to load policy [ 75.181108][ T852] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 75.276361][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.279038][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.283146][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.286517][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.340905][ T852] usb 8-1: Using ep0 maxpacket: 16 [ 75.344669][ T852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.349375][ T852] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 75.353832][ T852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.360611][ T852] usb 8-1: config 0 descriptor?? [ 75.587369][ T29] cfg80211: failed to load regulatory.db [ 75.760185][ T7260] serio: Serial port ptm0 [ 75.918839][ T7260] serio: Serial port ptm0 [ 76.544265][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.547005][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.761118][ T7306] Falling back ldisc for ptm0. [ 77.136781][ T7312] netlink: 'syz.0.564': attribute type 7 has an invalid length. [ 77.594138][ T7366] sg_write: data in/out 178/14 bytes for SCSI command 0x0-- guessing data in; [ 77.594138][ T7366] program syz.1.582 not setting count and/or reply_len properly [ 77.888762][ T7387] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7387 comm=syz.1.591 [ 77.958122][ T852] usbhid 8-1:0.0: can't add hid device: -71 [ 77.960151][ T852] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 77.969221][ T852] usb 8-1: USB disconnect, device number 7 [ 78.113078][ T7407] __nla_validate_parse: 12 callbacks suppressed [ 78.113090][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 78.130806][ T40] kauditd_printk_skb: 382 callbacks suppressed [ 78.130817][ T40] audit: type=1400 audit(1766715946.619:1434): avc: denied { execute } for pid=7406 comm="syz.1.601" dev="tmpfs" ino=3079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.139826][ T40] audit: type=1400 audit(1766715946.629:1435): avc: denied { execute_no_trans } for pid=7406 comm="syz.1.601" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.228352][ T40] audit: type=1400 audit(1766715946.719:1436): avc: denied { watch watch_reads } for pid=7420 comm="syz.2.606" path="/180/file0" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.237590][ T40] audit: type=1400 audit(1766715946.729:1437): avc: denied { read } for pid=7420 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.390099][ T40] audit: type=1326 audit(1766715946.879:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 78.400808][ T40] audit: type=1326 audit(1766715946.889:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 78.401143][ T852] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 78.409084][ T40] audit: type=1326 audit(1766715946.899:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 78.421028][ T40] audit: type=1326 audit(1766715946.899:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 78.428649][ T40] audit: type=1326 audit(1766715946.899:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 78.436428][ T40] audit: type=1326 audit(1766715946.909:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.1.610" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 78.539042][ T7438] tipc: Started in network mode [ 78.540803][ T7438] tipc: Node identity ac14140f, cluster identity 4711 [ 78.543344][ T7438] tipc: New replicast peer: 255.255.255.83 [ 78.545391][ T7438] tipc: Enabled bearer , priority 10 [ 78.562072][ T852] usb 8-1: device descriptor read/64, error -71 [ 78.734512][ T7455] pim6reg: entered allmulticast mode [ 78.742129][ T7455] pim6reg: left allmulticast mode [ 78.800859][ T852] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 78.931493][ T852] usb 8-1: device descriptor read/64, error -71 [ 79.042023][ T852] usb usb8-port1: attempt power cycle [ 79.363361][ T7479] can0: slcan on ttyS3. [ 79.381486][ T852] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 79.401466][ T852] usb 8-1: device descriptor read/8, error -71 [ 79.451359][ T7478] can0 (unregistered): slcan off ttyS3. [ 79.560862][ T9] tipc: Node number set to 2886997007 [ 79.642873][ T852] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 79.661698][ T852] usb 8-1: device descriptor read/8, error -71 [ 79.691706][ T7502] tipc: Started in network mode [ 79.693389][ T7502] tipc: Node identity ac14140f, cluster identity 4711 [ 79.695818][ T7502] tipc: New replicast peer: 255.255.255.255 [ 79.698629][ T7502] tipc: Enabled bearer , priority 10 [ 79.753859][ T7508] netlink: 48 bytes leftover after parsing attributes in process `syz.0.641'. [ 79.758006][ T7508] netlink: 48 bytes leftover after parsing attributes in process `syz.0.641'. [ 79.771678][ T852] usb usb8-port1: unable to enumerate USB device [ 80.125242][ T7528] netlink: 'syz.2.649': attribute type 29 has an invalid length. [ 80.129847][ T7528] netlink: 'syz.2.649': attribute type 29 has an invalid length. [ 80.830779][ T29] tipc: Node number set to 2886997007 [ 81.070611][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'. [ 81.074891][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'. [ 81.250459][ T7562] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 81.311652][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.661'. [ 81.412327][ T7578] pimreg: entered allmulticast mode [ 81.416525][ T7578] pimreg: left allmulticast mode [ 81.810947][ T7592] netlink: 'syz.0.675': attribute type 29 has an invalid length. [ 81.853802][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'. [ 81.987523][ T7603] tipc: Enabled bearer , priority 0 [ 82.000880][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 82.010849][ T7603] syzkaller0: entered promiscuous mode [ 82.012786][ T7603] syzkaller0: entered allmulticast mode [ 82.015188][ T7603] tipc: Resetting bearer [ 82.023581][ T7602] tipc: Resetting bearer [ 82.130780][ T9] usb 6-1: device descriptor read/64, error -71 [ 82.370929][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 82.510840][ T9] usb 6-1: device descriptor read/64, error -71 [ 82.633661][ T9] usb usb6-port1: attempt power cycle [ 82.827470][ T7602] tipc: Disabling bearer [ 82.833322][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'. [ 82.836534][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.681'. [ 83.001927][ T9] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 83.032563][ T9] usb 6-1: device descriptor read/8, error -71 [ 83.109892][ T7639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.697'. [ 83.151869][ T40] kauditd_printk_skb: 197 callbacks suppressed [ 83.151881][ T40] audit: type=1400 audit(1766715951.649:1641): avc: denied { write } for pid=7642 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.275829][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 83.324564][ T9] usb 6-1: device descriptor read/8, error -71 [ 83.369885][ T7661] __nla_validate_parse: 1 callbacks suppressed [ 83.369897][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.706'. [ 83.376147][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.706'. [ 83.413869][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 83.431691][ T9] usb usb6-port1: unable to enumerate USB device [ 83.439946][ T40] audit: type=1400 audit(1766715951.929:1642): avc: denied { relabelfrom } for pid=7666 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.448034][ T40] audit: type=1400 audit(1766715951.939:1643): avc: denied { relabelto } for pid=7666 comm="syz.2.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.461266][ T40] audit: type=1326 audit(1766715951.949:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.472541][ T40] audit: type=1326 audit(1766715951.949:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.481308][ T40] audit: type=1326 audit(1766715951.949:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.488918][ T40] audit: type=1326 audit(1766715951.949:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.497643][ T40] audit: type=1326 audit(1766715951.949:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.505061][ T40] audit: type=1326 audit(1766715951.949:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.512552][ T40] audit: type=1326 audit(1766715951.949:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.3.710" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff04e58f7c9 code=0x7ffc0000 [ 83.528392][ T7671] netlink: 'syz.3.711': attribute type 3 has an invalid length. [ 83.666691][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.716'. [ 83.697727][ T7686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.718'. [ 83.702242][ T7686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.718'. [ 83.765803][ T7689] hub 9-0:1.0: USB hub found [ 83.767481][ T7689] hub 9-0:1.0: 1 port detected [ 83.781667][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 83.893466][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 83.900345][ T7696] netlink: 'syz.0.723': attribute type 7 has an invalid length. [ 83.905112][ T7696] netlink: 'syz.0.723': attribute type 8 has an invalid length. [ 83.907607][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 83.943631][ T7699] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.948872][ T7699] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 84.159400][ T7724] SELinux: policydb version 0 does not match my version range 15-35 [ 84.165649][ T7724] SELinux: failed to load policy [ 84.510625][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 84.898701][ T7801] netlink: 'syz.1.766': attribute type 13 has an invalid length. [ 84.938010][ T7801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.203374][ T7841] syz.0.783 uses obsolete (PF_INET,SOCK_PACKET) [ 85.372877][ T7847] syzkaller0: entered allmulticast mode [ 85.378877][ T7847] syzkaller0 (unregistering): left allmulticast mode [ 85.570582][ T7852] netlink: 'syz.0.789': attribute type 3 has an invalid length. [ 85.574207][ T7852] netlink: 'syz.0.789': attribute type 3 has an invalid length. [ 85.639201][ T7856] program syz.0.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.040904][ T6002] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.214773][ T6002] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 86.220526][ T6002] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 86.224696][ T6002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.229800][ T6002] usb 5-1: config 0 descriptor?? [ 86.710880][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 86.710924][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 87.126395][ T6002] usbhid 5-1:0.0: can't add hid device: -71 [ 87.129070][ T6002] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 87.136749][ T6002] usb 5-1: USB disconnect, device number 3 [ 87.596377][ T7923] rdma_op ffff8880561679f0 conn xmit_rdma 0000000000000000 [ 88.849951][ T40] kauditd_printk_skb: 309 callbacks suppressed [ 88.849965][ T40] audit: type=1400 audit(1766715957.339:1960): avc: denied { create } for pid=7948 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.862869][ T40] audit: type=1400 audit(1766715957.359:1961): avc: denied { bind } for pid=7948 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.951965][ T40] audit: type=1400 audit(1766715957.449:1962): avc: denied { read } for pid=7957 comm="syz.0.836" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.964052][ T40] audit: type=1400 audit(1766715957.449:1963): avc: denied { setopt } for pid=7960 comm="syz.1.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.964250][ T7958] __nla_validate_parse: 4 callbacks suppressed [ 88.964261][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 88.972674][ T40] audit: type=1400 audit(1766715957.459:1964): avc: denied { open } for pid=7957 comm="syz.0.836" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.989843][ T40] audit: type=1400 audit(1766715957.459:1965): avc: denied { ioctl } for pid=7957 comm="syz.0.836" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.011566][ T7958] team0 (unregistering): Port device C removed [ 89.016754][ T7958] team0 (unregistering): Port device team_slave_1 removed [ 89.170606][ T40] audit: type=1326 audit(1766715957.659:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.2.843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 89.178242][ T40] audit: type=1326 audit(1766715957.659:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.2.843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 89.185981][ T40] audit: type=1326 audit(1766715957.659:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.2.843" exe="/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 89.190800][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.190861][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 89.193825][ T40] audit: type=1326 audit(1766715957.659:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7974 comm="syz.2.843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 89.240516][ T7981] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 89.242235][ T7979] IPVS: stopping master sync thread 7981 ... [ 89.254040][ T7971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.841'. [ 89.279022][ T7985] Invalid argument reading file caps for ./file0 [ 89.451974][ T8000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.854'. [ 89.464088][ T8001] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 89.899723][ T8025] syz.2.864: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 89.905520][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.2.864 Not tainted syzkaller #0 PREEMPT(full) [ 89.905536][ T8025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.905544][ T8025] Call Trace: [ 89.905548][ T8025] [ 89.905552][ T8025] dump_stack_lvl+0x16c/0x1f0 [ 89.905572][ T8025] warn_alloc+0x248/0x3a0 [ 89.905585][ T8025] ? __pfx_warn_alloc+0x10/0x10 [ 89.905596][ T8025] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 89.905610][ T8025] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.905625][ T8025] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.905644][ T8025] ? kasan_save_stack+0x42/0x60 [ 89.905658][ T8025] ? kasan_save_stack+0x33/0x60 [ 89.905669][ T8025] ? kasan_save_track+0x14/0x30 [ 89.905683][ T8025] ? xskq_create+0xfb/0x1d0 [ 89.905694][ T8025] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 89.905718][ T8025] ? xskq_create+0xfb/0x1d0 [ 89.905732][ T8025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 89.905754][ T8025] ? xskq_create+0xfb/0x1d0 [ 89.905764][ T8025] vmalloc_user_noprof+0x9e/0xe0 [ 89.905780][ T8025] ? xskq_create+0xfb/0x1d0 [ 89.905790][ T8025] xskq_create+0xfb/0x1d0 [ 89.905802][ T8025] xsk_setsockopt+0x932/0xc00 [ 89.905820][ T8025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 89.905843][ T8025] ? selinux_socket_setsockopt+0x6a/0x80 [ 89.905857][ T8025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 89.905875][ T8025] do_sock_setsockopt+0xf3/0x1d0 [ 89.905891][ T8025] __sys_setsockopt+0x1a0/0x230 [ 89.905904][ T8025] __x64_sys_setsockopt+0xbd/0x160 [ 89.905913][ T8025] ? do_syscall_64+0x91/0xf80 [ 89.905927][ T8025] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.905941][ T8025] do_syscall_64+0xcd/0xf80 [ 89.905955][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.905967][ T8025] RIP: 0033:0x7f19d178f7c9 [ 89.905976][ T8025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.905987][ T8025] RSP: 002b:00007f19d2697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 89.905998][ T8025] RAX: ffffffffffffffda RBX: 00007f19d19e5fa0 RCX: 00007f19d178f7c9 [ 89.906005][ T8025] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 89.906011][ T8025] RBP: 00007f19d1813f91 R08: 0000000000000004 R09: 0000000000000000 [ 89.906017][ T8025] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.906023][ T8025] R13: 00007f19d19e6038 R14: 00007f19d19e5fa0 R15: 00007ffc750e6f08 [ 89.906038][ T8025] [ 89.906041][ T8025] Mem-Info: [ 89.993408][ T8025] active_anon:8570 inactive_anon:18 isolated_anon:0 [ 89.993408][ T8025] active_file:11652 inactive_file:24425 isolated_file:0 [ 89.993408][ T8025] unevictable:1768 dirty:20 writeback:0 [ 89.993408][ T8025] slab_reclaimable:9017 slab_unreclaimable:79083 [ 89.993408][ T8025] mapped:24552 shmem:2389 pagetables:1554 [ 89.993408][ T8025] sec_pagetables:303 bounce:0 [ 89.993408][ T8025] kernel_misc_reclaimable:0 [ 89.993408][ T8025] free:360042 free_pcp:10660 free_cma:0 [ 90.009361][ T8025] Node 0 active_anon:34112kB inactive_anon:72kB active_file:45860kB inactive_file:94148kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98208kB dirty:80kB writeback:0kB shmem:6020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12864kB pagetables:5232kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB [ 90.020303][ T8025] Node 1 active_anon:168kB inactive_anon:0kB active_file:748kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 90.031427][ T8025] Node 0 DMA free:5288kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:232kB local_pcp:4kB free_cma:0kB [ 90.041970][ T8025] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 90.043930][ T8025] Node 0 DMA32 free:38316kB boost:2048kB min:29596kB low:36480kB high:43364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34112kB inactive_anon:72kB active_file:45860kB inactive_file:93652kB unevictable:3536kB writepending:80kB zspages:0kB present:2080628kB managed:1265192kB mlocked:0kB bounce:0kB free_pcp:11644kB local_pcp:780kB free_cma:0kB [ 90.054981][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 90.057073][ T8025] Node 1 Normal free:1375472kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:168kB inactive_anon:0kB active_file:748kB inactive_file:204kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:28836kB local_pcp:11336kB free_cma:0kB [ 90.068673][ T8025] lowmem_reserve[]: 0 0 0 0 0 [ 90.070324][ T8025] Node 0 DMA: 5*4kB (UM) 3*8kB (UME) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 0*2048kB 0*4096kB = 5292kB [ 90.075917][ T8025] Node 0 DMA32: 199*4kB (UM) 128*8kB (UM) 212*16kB (UME) 189*32kB (UME) 140*64kB (UME) 96*128kB (UME) 16*256kB (ME) 8*512kB (UM) 3*1024kB (M) 0*2048kB 0*4096kB = 43772kB [ 90.083463][ T8025] Node 1 Normal: 2*4kB (E) 9*8kB (ME) 19*16kB (UME) 24*32kB (UME) 18*64kB (UME) 14*128kB (ME) 7*256kB (UM) 11*512kB (UME) 90*1024kB (UME) 9*2048kB (UM) 304*4096kB (UM) = 1367296kB [ 90.089528][ T8025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.092753][ T8025] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.095828][ T8025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.099343][ T8025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.102845][ T8025] 35858 total pagecache pages [ 90.104438][ T8025] 0 pages in swap cache [ 90.105838][ T8025] Free swap = 124996kB [ 90.107229][ T8025] Total swap = 124996kB [ 90.108632][ T8025] 1048443 pages RAM [ 90.109932][ T8025] 0 pages HighMem/MovableOnly [ 90.111616][ T8025] 282834 pages reserved [ 90.113036][ T8025] 0 pages cma reserved [ 90.383240][ T852] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 90.389631][ T852] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 90.423467][ T8048] fido_id[8048]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.564068][ T8059] x_tables: duplicate underflow at hook 1 [ 91.047049][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 91.090515][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 91.104966][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.887'. [ 91.430073][ T8090] netlink: 256 bytes leftover after parsing attributes in process `syz.1.893'. [ 91.433489][ T8090] ksmbd: Unknown IPC event: 3, ignore. [ 91.452495][ T8099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.895'. [ 91.582087][ T8120] ªªªªªª: renamed from vlan0 (while UP) [ 91.585474][ T8119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.906'. [ 91.594206][ T8122] netlink: 56 bytes leftover after parsing attributes in process `syz.1.908'. [ 91.630095][ T8124] syzkaller0: entered promiscuous mode [ 91.632055][ T8124] syzkaller0: entered allmulticast mode [ 91.963058][ T8150] pim6reg: entered allmulticast mode [ 91.966931][ T8150] pim6reg: left allmulticast mode [ 92.004922][ T8155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 92.007243][ T8155] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.010652][ T8155] vhci_hcd vhci_hcd.0: Device attached [ 92.014492][ T8156] vhci_hcd: connection closed [ 92.015814][ T1147] vhci_hcd vhci_hcd.0: stop threads [ 92.019787][ T1147] vhci_hcd vhci_hcd.0: release socket [ 92.022845][ T1147] vhci_hcd vhci_hcd.0: disconnect device [ 92.081853][ T8166] IPv6: Can't replace route, no match found [ 93.203583][ T8224] SELinux: Context Ü is not valid (left unmapped). [ 93.649002][ T8254] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 93.667481][ T8254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.700241][ T8254] bond1: (slave veth3): Enslaving as an active interface with a down link [ 93.715094][ T8254] bond1: (slave dummy0): making interface the new active one [ 93.719224][ T8254] dummy0: entered promiscuous mode [ 93.722763][ T8254] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 93.839303][ T8274] netlink: 'syz.3.971': attribute type 39 has an invalid length. [ 93.892751][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 93.892762][ T40] audit: type=1400 audit(1766715962.389:2116): avc: denied { read } for pid=8273 comm="syz.3.971" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.905893][ T40] audit: type=1400 audit(1766715962.399:2117): avc: denied { open } for pid=8273 comm="syz.3.971" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.933895][ T8278] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.630868][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 94.631023][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.967673][ T40] audit: type=1400 audit(1766715963.459:2118): avc: denied { ioctl } for pid=8313 comm="syz.0.994" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.016525][ T40] audit: type=1326 audit(1766715963.509:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.0.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 95.026107][ T40] audit: type=1326 audit(1766715963.519:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.0.988" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 95.037887][ T40] audit: type=1326 audit(1766715963.519:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.0.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 95.046413][ T40] audit: type=1326 audit(1766715963.519:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.0.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 95.140151][ T8331] program syz.2.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.174348][ T40] audit: type=1326 audit(1766715963.669:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.2.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 95.182822][ T40] audit: type=1326 audit(1766715963.679:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.2.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 95.193097][ T40] audit: type=1326 audit(1766715963.679:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8334 comm="syz.2.996" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 95.229406][ T8341] __nla_validate_parse: 6 callbacks suppressed [ 95.229419][ T8341] netlink: 4236 bytes leftover after parsing attributes in process `syz.2.999'. [ 95.262189][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 95.327810][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1002'. [ 95.465725][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 95.512315][ T10] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 95.528756][ T8362] lo speed is unknown, defaulting to 1000 [ 95.531348][ T8362] lo speed is unknown, defaulting to 1000 [ 95.535103][ T8362] lo speed is unknown, defaulting to 1000 [ 95.541104][ T8362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.551187][ T8362] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 95.569563][ T8362] lo speed is unknown, defaulting to 1000 [ 95.572644][ T8362] lo speed is unknown, defaulting to 1000 [ 95.575316][ T8362] lo speed is unknown, defaulting to 1000 [ 95.578024][ T8362] lo speed is unknown, defaulting to 1000 [ 95.585230][ T8363] fido_id[8363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.029095][ T8384] syzkaller0: entered promiscuous mode [ 96.031058][ T8384] syzkaller0: entered allmulticast mode [ 96.228562][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1021'. [ 96.231705][ T8392] unsupported nlmsg_type 40 [ 96.403656][ T8416] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 96.459700][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1036'. [ 96.475897][ T8426] vlan0: entered allmulticast mode [ 96.477762][ T8426] dummy0: entered allmulticast mode [ 96.649574][ T8441] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.657466][ T8441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.659871][ T8441] IPv6: NLM_F_CREATE should be set when creating new route [ 96.691077][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1044'. [ 96.891436][ T8454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1051'. [ 97.231923][ T8462] random: crng reseeded on system resumption [ 97.580984][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 97.688393][ T72] Bluetooth: hci4: Frame reassembly failed (-84) [ 97.692656][ T72] Bluetooth: hci4: Frame reassembly failed (-84) [ 97.901368][ T8483] Falling back ldisc for ttyS3. [ 97.926936][ T8487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1067'. [ 98.070641][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 98.333179][ T8500] hub 1-0:1.0: USB hub found [ 98.335777][ T8500] hub 1-0:1.0: 2 ports detected [ 99.319066][ T8536] syzkaller0: entered promiscuous mode [ 99.322076][ T8536] syzkaller0: entered allmulticast mode [ 99.439339][ T40] kauditd_printk_skb: 755 callbacks suppressed [ 99.439356][ T40] audit: type=1400 audit(1766715967.929:2881): avc: denied { create } for pid=8539 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.449547][ T40] audit: type=1400 audit(1766715967.939:2882): avc: denied { write } for pid=8539 comm="syz.2.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 99.585837][ T40] audit: type=1400 audit(1766715968.079:2883): avc: denied { read write } for pid=8551 comm="syz.1.1095" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.594526][ T40] audit: type=1400 audit(1766715968.079:2884): avc: denied { open } for pid=8551 comm="syz.1.1095" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.740812][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.743683][ T5933] Bluetooth: hci4: command 0x1003 tx timeout [ 99.964717][ T8573] lo speed is unknown, defaulting to 1000 [ 100.060076][ T40] audit: type=1400 audit(1766715968.549:2885): avc: denied { mount } for pid=8578 comm="syz.1.1106" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.323853][ T8586] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 100.649337][ T8602] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.776264][ T8616] __nla_validate_parse: 3 callbacks suppressed [ 100.776281][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'. [ 100.799796][ T40] audit: type=1400 audit(1766715969.289:2886): avc: denied { ioctl } for pid=8618 comm="syz.2.1125" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.838547][ T40] audit: type=1326 audit(1766715969.329:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.0.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 100.850794][ T40] audit: type=1326 audit(1766715969.329:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.0.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 100.860426][ T40] audit: type=1326 audit(1766715969.329:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.0.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 100.871076][ T40] audit: type=1326 audit(1766715969.329:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.0.1126" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 101.109511][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 101.366432][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 101.367817][ T8659] SELinux: unknown common r [ 101.380926][ T8659] SELinux: failed to load policy [ 101.517823][ T8667] netlink: 'wÞ£ÿ': attribute type 21 has an invalid length. [ 101.517838][ T8667] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 101.517845][ T8667] netlink: 100 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 101.582427][ T8671] syzkaller0: entered promiscuous mode [ 101.582450][ T8671] syzkaller0: entered allmulticast mode [ 101.669070][ T840] hid-generic 0000:0100:0001.0007: unknown main item tag 0x0 [ 101.669100][ T840] hid-generic 0000:0100:0001.0007: unknown main item tag 0x0 [ 101.669112][ T840] hid-generic 0000:0100:0001.0007: unknown main item tag 0x0 [ 101.669124][ T840] hid-generic 0000:0100:0001.0007: unknown main item tag 0x0 [ 101.673858][ T840] hid-generic 0000:0100:0001.0007: hidraw1: HID v0.28 Device [syz1] on [ 101.714537][ T8679] fido_id[8679]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.861335][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1159'. [ 102.229315][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1163'. [ 102.311312][ T8706] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.975505][ T8722] syzkaller0: entered promiscuous mode [ 102.977387][ T8722] syzkaller0: entered allmulticast mode [ 103.056997][ T8730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'. [ 103.103243][ T8734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1177'. [ 103.235082][ T8746] vlan2: entered allmulticast mode [ 103.237280][ T8746] dummy0: entered allmulticast mode [ 103.301102][ T8752] syzkaller0: entered promiscuous mode [ 103.302944][ T8752] syzkaller0: entered allmulticast mode [ 103.417666][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 103.499866][ T8763] usb 2-1: USB disconnect, device number 2 [ 103.537391][ T8766] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.680150][ T8779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8779 comm=syz.2.1198 [ 104.325997][ T8811] bond0: entered promiscuous mode [ 104.330047][ T8811] batadv0: entered promiscuous mode [ 104.333726][ T8811] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 104.338330][ T8811] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 104.346101][ T8811] bond0: left promiscuous mode [ 104.348981][ T8811] batadv0: left promiscuous mode [ 104.412384][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 104.456081][ T8815] syzkaller0: entered promiscuous mode [ 104.458784][ T8815] syzkaller0: entered allmulticast mode [ 104.587941][ T8825] hub 9-0:1.0: USB hub found [ 104.589049][ T8824] ip6t_srh: unknown srh match flags 4000 [ 104.590459][ T8825] hub 9-0:1.0: 1 port detected [ 104.634484][ T40] kauditd_printk_skb: 128 callbacks suppressed [ 104.634499][ T40] audit: type=1400 audit(1766715973.129:3019): avc: denied { write } for pid=8826 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.644341][ T40] audit: type=1400 audit(1766715973.129:3020): avc: denied { accept } for pid=8826 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.650985][ T40] audit: type=1400 audit(1766715973.129:3021): avc: denied { read } for pid=8826 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.670164][ T40] audit: type=1400 audit(1766715973.159:3022): avc: denied { setopt } for pid=8830 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.721411][ T40] audit: type=1326 audit(1766715973.219:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 104.732597][ T40] audit: type=1326 audit(1766715973.229:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 104.743552][ T40] audit: type=1326 audit(1766715973.229:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 104.754342][ T40] audit: type=1326 audit(1766715973.229:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 104.767652][ T40] audit: type=1326 audit(1766715973.229:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 104.778862][ T40] audit: type=1326 audit(1766715973.229:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8832 comm="syz.0.1223" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfc718f7c9 code=0x7ffc0000 [ 104.839425][ T8839] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 105.141842][ T1154] dummy0: left promiscuous mode [ 105.310586][ T8883] sctp: [Deprecated]: syz.0.1247 (pid 8883) Use of int in maxseg socket option. [ 105.310586][ T8883] Use struct sctp_assoc_value instead [ 105.319775][ T8883] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 105.333100][ T8883] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 105.586365][ T8890] lo speed is unknown, defaulting to 1000 [ 106.311280][ T8900] lo speed is unknown, defaulting to 1000 [ 106.454553][ T8913] __nla_validate_parse: 1 callbacks suppressed [ 106.454569][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1259'. [ 106.473668][ T6002] IPVS: starting estimator thread 0... [ 106.587262][ T8916] IPVS: using max 23 ests per chain, 55200 per kthread [ 107.165221][ T8963] pim6reg9: entered allmulticast mode [ 107.173850][ T8963] syzkaller1: entered promiscuous mode [ 107.176600][ T8963] syzkaller1: entered allmulticast mode [ 107.244995][ T8966] random: crng reseeded on system resumption [ 107.593071][ T8978] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1287'. [ 107.647365][ T8980] syzkaller0: entered promiscuous mode [ 107.649724][ T8980] syzkaller0: entered allmulticast mode [ 108.263728][ T9010] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 108.292415][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 108.546242][ T9026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.614162][ T9026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.707060][ T9026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.753253][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 108.789917][ T9026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.802517][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.807219][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.809961][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.812422][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.815488][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.817992][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.820621][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.823431][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.825924][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.828383][ T6028] hid-generic 0081:0005:1303.0008: unknown main item tag 0x0 [ 108.833595][ T6028] hid-generic 0081:0005:1303.0008: hidraw0: HID v0.03 Device [syz1] on syz1 [ 108.879704][ T9042] fido_id[9042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.887749][ T9044] Invalid argument reading file caps for ./file0 [ 108.910254][ T1154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.925266][ T1154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.945019][ T1154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.971069][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.091803][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 109.191914][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1327'. [ 109.452627][ T9089] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 109.459293][ T9089] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 109.465148][ T9089] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.474157][ T9091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1341'. [ 109.504646][ T9094] x_tables: unsorted underflow at hook 1 [ 109.550546][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 109.550557][ T40] audit: type=1400 audit(1766715984.184:3178): avc: denied { append } for pid=9084 comm="syz.0.1338" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.716196][ T40] audit: type=1400 audit(1766715984.352:3179): avc: denied { getopt } for pid=9114 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.756272][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 109.956875][ T40] audit: type=1326 audit(1766715984.604:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9126 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 109.963973][ T40] audit: type=1326 audit(1766715984.615:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9126 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 109.970759][ T40] audit: type=1326 audit(1766715984.615:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9126 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 109.977931][ T40] audit: type=1326 audit(1766715984.615:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9126 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 109.984842][ T40] audit: type=1326 audit(1766715984.615:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9126 comm="syz.2.1357" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 110.166888][ T9135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 110.301537][ T40] audit: type=1326 audit(1766715984.972:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 110.308944][ T40] audit: type=1326 audit(1766715984.972:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1364" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 110.316983][ T40] audit: type=1326 audit(1766715984.982:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.2.1364" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f19d178f7c9 code=0x7ffc0000 [ 111.197128][ T9147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.200658][ T9147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.209654][ T9147] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.214118][ T9147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.216333][ T9147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.219946][ T9147] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.225226][ T9147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.228468][ T9147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.231367][ T9147] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.235772][ T9147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.238317][ T9147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.241199][ T9147] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.377966][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1383'. [ 111.454504][ T9194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1385'. [ 111.590438][ T9200] hub 1-0:1.0: USB hub found [ 111.592121][ T9200] hub 1-0:1.0: 2 ports detected [ 112.218601][ T5933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.219659][ T5933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.225498][ T5933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.226175][ T5933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.234206][ T5933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.248568][ T9224] hub 1-0:1.0: USB hub found [ 112.248686][ T9224] hub 1-0:1.0: 2 ports detected [ 112.253283][ T9226] lo speed is unknown, defaulting to 1000 [ 112.313847][ T165] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.336467][ T5943] Bluetooth: hci4: sending frame failed (-49) [ 112.336569][ T5933] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 112.368141][ T9237] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1403'. [ 112.408197][ T165] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.416198][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.418497][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 112.511763][ T165] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.528879][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.531412][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.533770][ T9226] bridge_slave_0: entered allmulticast mode [ 112.536531][ T9226] bridge_slave_0: entered promiscuous mode [ 112.546703][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.551879][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.554874][ T9226] bridge_slave_1: entered allmulticast mode [ 112.558168][ T9226] bridge_slave_1: entered promiscuous mode [ 112.587249][ T165] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.604741][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.606548][ T9265] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:00fc with DS=0x6 [ 112.609239][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.647355][ T9226] team0: Port device team_slave_0 added [ 112.663551][ T9226] team0: Port device team_slave_1 added [ 112.671145][ T9268] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 112.681430][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.683766][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.692206][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.708111][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.710578][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.724948][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.768401][ T9226] hsr_slave_0: entered promiscuous mode [ 112.770651][ T9226] hsr_slave_1: entered promiscuous mode [ 112.772745][ T9226] debugfs: 'hsr0' already exists in 'hsr' [ 112.775206][ T9226] Cannot create hsr debugfs directory [ 112.783517][ T9273] lo speed is unknown, defaulting to 1000 [ 112.836318][ T165] bridge_slave_1: left allmulticast mode [ 112.838990][ T165] bridge_slave_1: left promiscuous mode [ 112.842032][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.846682][ T165] bridge_slave_0: left allmulticast mode [ 112.848488][ T165] bridge_slave_0: left promiscuous mode [ 112.850434][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.093144][ T165] team0: Port device bridge0 removed [ 113.163889][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.170783][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.176292][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.179134][ T165] bond0 (unregistering): Released all slaves [ 113.185257][ T5933] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.266646][ T165] tipc: Disabling bearer [ 113.280908][ T165] tipc: Left network mode [ 113.319550][ T165] IPVS: stopping master sync thread 8001 ... [ 113.568393][ T9226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.579489][ T9226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.595835][ T9226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.603268][ T9226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.637593][ T165] hsr_slave_0: left promiscuous mode [ 113.640057][ T165] hsr_slave_1: left promiscuous mode [ 113.642149][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.646662][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.653173][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.655620][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.669142][ T165] veth1_macvtap: left promiscuous mode [ 113.673134][ T165] veth0_macvtap: left promiscuous mode [ 113.675124][ T165] veth1_vlan: left promiscuous mode [ 113.677085][ T165] veth0_vlan: left promiscuous mode [ 113.957162][ T6002] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.998380][ T165] team0 (unregistering): Port device team_slave_1 removed [ 114.023354][ T165] team0 (unregistering): Port device team_slave_0 removed [ 114.091422][ T6002] usb 5-1: device descriptor read/64, error -71 [ 114.169386][ T5933] Bluetooth: hci1: command tx timeout [ 114.220418][ T56] lo speed is unknown, defaulting to 1000 [ 114.222861][ T56] syz0: Port: 1 Link DOWN [ 114.270304][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.287837][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.294187][ T9343] hub 1-0:1.0: USB hub found [ 114.298140][ T9343] hub 1-0:1.0: 2 ports detected [ 114.309287][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.311980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.326598][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.329141][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.333935][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 114.333945][ T40] audit: type=1326 audit(1766715989.203:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.336244][ T6002] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.345119][ T40] audit: type=1326 audit(1766715989.224:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.354283][ T40] audit: type=1326 audit(1766715989.224:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.374393][ T40] audit: type=1326 audit(1766715989.224:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.386033][ T40] audit: type=1326 audit(1766715989.224:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.398834][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.404884][ T40] audit: type=1326 audit(1766715989.224:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.415073][ T40] audit: type=1326 audit(1766715989.224:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.422480][ T40] audit: type=1326 audit(1766715989.224:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.430105][ T40] audit: type=1326 audit(1766715989.245:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.1.1436" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe4a558f7c9 code=0x7ffc0000 [ 114.438559][ T40] audit: type=1400 audit(1766715989.298:3346): avc: denied { mounton } for pid=9356 comm="syz.1.1438" path="/405" dev="tmpfs" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.462115][ T6002] usb 5-1: device descriptor read/64, error -71 [ 114.508874][ T9369] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 114.533409][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.566654][ T6002] usb usb5-port1: attempt power cycle [ 114.792526][ T9226] veth0_vlan: entered promiscuous mode [ 114.808476][ T9226] veth1_vlan: entered promiscuous mode [ 114.830795][ T9226] veth0_macvtap: entered promiscuous mode [ 114.844075][ T9226] veth1_macvtap: entered promiscuous mode [ 114.855757][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.867572][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.875462][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.879554][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.891052][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.893901][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.909306][ T6002] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.938989][ T6002] usb 5-1: device descriptor read/8, error -71 [ 114.971751][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.975226][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.000940][ T1257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.003325][ T1257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.026264][ T9226] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 115.031480][ T9226] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 115.035170][ T9226] CPU: 1 UID: 0 PID: 9226 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 115.039193][ T9226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.043716][ T9226] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 115.046198][ T9226] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 115.054588][ T9226] RSP: 0018:ffffc90004e77ae0 EFLAGS: 00010202 [ 115.057216][ T9226] RAX: dffffc0000000000 RBX: ffff888038ccaf00 RCX: ffffffff826a4375 [ 115.060616][ T9226] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 115.063992][ T9226] RBP: ffff888038ccaf98 R08: 0000000000000005 R09: 0000000000000000 [ 115.067366][ T9226] R10: 00000000ffffffea R11: ffff888054508b30 R12: 1ffff920009cef6b [ 115.069944][ T9226] R13: 0000000000000000 R14: ffff888034df5cc0 R15: 0000000000000038 [ 115.072533][ T9226] FS: 000055556fea3500(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 115.075492][ T9226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.078317][ T9226] CR2: 00007f820ba65e00 CR3: 000000002c044000 CR4: 0000000000352ef0 [ 115.081805][ T9226] Call Trace: [ 115.083306][ T9226] [ 115.084635][ T9226] __kernfs_new_node+0x7b4/0x990 [ 115.086865][ T9226] ? __pfx___kernfs_new_node+0x10/0x10 [ 115.089280][ T9226] ? find_held_lock+0x2b/0x80 [ 115.091381][ T9226] ? kernfs_root+0xee/0x2a0 [ 115.093255][ T9226] kernfs_new_node+0x13c/0x1e0 [ 115.094875][ T9226] ? kasan_save_track+0x14/0x30 [ 115.096521][ T9226] kernfs_create_dir_ns+0x4c/0x1a0 [ 115.098574][ T9226] cgroup_mkdir+0x40f/0x12e0 [ 115.100269][ T9226] ? __pfx_cgroup_mkdir+0x10/0x10 [ 115.101943][ T9226] kernfs_iop_mkdir+0x111/0x190 [ 115.103561][ T9226] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 115.105254][ T9226] vfs_mkdir+0x731/0xb60 [ 115.106664][ T9226] do_mkdirat+0x442/0x5e0 [ 115.108107][ T9226] ? __pfx_do_mkdirat+0x10/0x10 [ 115.109746][ T9226] ? getname_flags.part.0+0x1c5/0x550 [ 115.111528][ T9226] __x64_sys_mkdirat+0x83/0xb0 [ 115.113132][ T9226] do_syscall_64+0xcd/0xf80 [ 115.114622][ T9226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.116605][ T9226] RIP: 0033:0x7f820bb8df17 [ 115.118083][ T9226] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.124205][ T9226] RSP: 002b:00007ffe89944998 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 115.126906][ T9226] RAX: ffffffffffffffda RBX: 00007ffe899449f0 RCX: 00007f820bb8df17 [ 115.129508][ T9226] RDX: 00000000000001ff RSI: 00007ffe899449f0 RDI: 00000000ffffff9c [ 115.132109][ T9226] RBP: 0000000000000001 R08: 0000000000000017 R09: 00007ffe899446e7 [ 115.134644][ T9226] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 115.137195][ T9226] R13: 0000000000000003 R14: 00007ffe89944e68 R15: 0000000000000000 [ 115.139783][ T9226] [ 115.140835][ T9226] Modules linked in: [ 115.143431][ T9226] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 115.157154][ T5933] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.157165][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.162701][ T9226] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 115.165138][ T9226] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 115.182013][ T9226] RSP: 0018:ffffc90004e77ae0 EFLAGS: 00010202 [ 115.184118][ T9226] RAX: dffffc0000000000 RBX: ffff888038ccaf00 RCX: ffffffff826a4375 [ 115.185563][ T6002] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.188309][ T9226] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 115.192656][ T9226] RBP: ffff888038ccaf98 R08: 0000000000000005 R09: 0000000000000000 [ 115.195367][ T9226] R10: 00000000ffffffea R11: ffff888054508b30 R12: 1ffff920009cef6b [ 115.198118][ T9226] R13: 0000000000000000 R14: ffff888034df5cc0 R15: 0000000000000038 [ 115.200693][ T9226] FS: 000055556fea3500(0000) GS:ffff8880d6af5000(0000) knlGS:0000000000000000 [ 115.203583][ T9226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.206711][ T9226] CR2: 00007ffd7aeda4c0 CR3: 000000002c044000 CR4: 0000000000352ef0 [ 115.209334][ T9226] Kernel panic - not syncing: Fatal exception [ 115.211997][ T9226] Kernel Offset: disabled [ 115.213468][ T9226] Rebooting in 86400 seconds..