last executing test programs: 12.611671816s ago: executing program 0 (id=718): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000019df8fdbfd9329e93992a253748f6b2adbfaea9139a9a52e65137ae5421f768aa59d18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="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", 0x1dd}, {&(0x7f00000011c0)="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", 0x1000}], 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f0000016401010200000000050001000000000008000700"], 0x8c}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/virtio_gpu', 0x80000, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in=@dev, @in=@empty}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40383d0c, &(0x7f0000000040)={0x4}) accept$inet6(r3, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000300)=0x8) setreuid(0x0, r5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@local, 0x0, 0x2b}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 11.734204906s ago: executing program 0 (id=720): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2d5b, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x30}) io_uring_enter(r0, 0x79dc, 0x0, 0x0, 0x0, 0x0) 11.375945009s ago: executing program 0 (id=723): syz_emit_ethernet(0x840, &(0x7f00000020c0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x806, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0xe, 0xfd, "a57f50efcc48763b0a8af3cf9d86f7e4c11e4cff500bd3941c41137b3166165daeb57e5b6263affa1faff7e34295c98cf2d3a63b6a918012980123d4a22db60e1104cfd91882adbf22ecbb0871722bcc6d10a421dd20a0198d179889616710d9fab21b7a7c072efc5ab2e99bd2b7c307d5501423c17d2e1a183a186077086894c860bf80c74c39223b2e25c0d3a1d0b1e16f11241a99ba55128e265b967d8dadce3e0c910221ca828ad6ce7a3d92e00a5104e5eb0c6d18ad39aa2d35e6c778994bbd0b06617574451d2a2f48028246f07cf649417902ee329cc4f6d3b6dd0bf91f072a6ddd73b9f6a5746a0cfe4db6ba03e782e5bfda0a212967de46d7c378753824d700e45eee8dc82e325fbf3773788b43383be21a9469dd4fefdd7f436d6f2c3cf3de6577fefc1885c38b98809f832afc4605157b113dd61e4ac0e40cb0b31a4b2a579c4d95442c02564704604aa47f0bf2928cdf9881663a70dd1fd490dd16698757789cba01eec35d6457ba077d278860ea3ed15906b0ea1cb90b20e532c4b552f6de8c4bc6b111f3ec4a259966c91ee6832d814c5dc30667a100c1c3d0c469131371efe7993324fa4a50c08c57f7f13aff64e3637906fc14c62ecc55a611d67b7c234a42790afdc89488da642a63e344ebca2ac02511a3106c753534871eb5017fb873ea8dd7c6021855e228f1838e5d79c4d632ab02c3b46df12782c6052c8222037c11e1b40ee4779f7b2efdd7512bfca3f83d892b0cd078c076412e02e541cb7278a6a86a91916daaf4cbde5064def62b2b67fd8798ebc1be714835d6c6983756a6183f346bbe17153ee4f303cf2d873926c71df52b65cf61bf28ef23d0fbbfda021aa20b5a090e6416b952fb6368d8634b31d642023e8ecb6d17b533a5e4c34dedcc78b5a8cd5f4fd5add8066bf0bc885e9ee4c7d5e696190034ab6a98f7fe06db416e497f0fd9142b8d30e1698af033120875b0ccae5bb2609a8709126cb60693e0be2bf098e77ef1d32bf626fa3cfa52655ab3225d3f9cf16f2c8b23630b38044cfc543764e40d46e715f62fd91c1973c8fc1cfd219996e28ff72f8f1f609b8f58bd81d03df2ffd232d3caeb188f901c2a4b8be244cb3e171479bae3588c72183e5ab45b54d2fa0766bd254c26bbcd60aa426d6164484bb5edebe57ad2bb6ae4220c72f2a5ea0f742b4c1c58ab581160c742a612b295db8eb31d17dbd011e527b38f4b288b2407d537b4335b0bded96e6bf7f1fb378952d186e68eef41ce506148495b068ed70f6bf041b279aaf93e5f2ba2960068b26c0088c72331c38d0a1ea2cbe61d1deaf664a4b4b65d2b83dd9e5ca8a9ba5d2fada409a49a69c1028ded14f7380d310515badec10f6afdaa885f9990a848aaa307632498e0481cd8c94618176ca70ea7653657384a71a6918d84621002bcd964a5d117ab7e0a434b0b010cfc2117487159233a87e9698e8443fe085fb996976bbe557843aa46683cd9d29534485476cca6a342785cffcf23b6323e4ffec4c7ca082e8e857226cbdf2eb7ee82086f7aba2a74a6717a43f496919c8f24cf27609611913b31789f7bafd523427c518b8951110a8c8b6f42d7730a23b1df9c1ca04c9b4803399974277d577f17d6898368e27d1eb0d64a6ce56dfab75ed0e247c74c4857a0c7084ab1019f579e5f0e55187ef051f38b9650b8fdb3d13b98f74bed7faa1f54c884b21c0585f8406802b2c9c14567f604080341244ebec456f9779cfc722d6f1167f32d4a9854d84f3876a8f978b43b2a04d004a537672ae0ec523d28a899e1c2d1426fac6ccff3ab901295ed903302f81508fa765d1376bcc9cf73fbd2f4aa43995520941824bd344f517d155d92806e69a482638e3f2d4857a69413bd15d0cd9bc00b0727032e928762a8d510ef4485b54c42e552f7b30a802908109dba6bd6009aa39025ea5a11f40d1960694365051c902e0bcbff6ece5e9557c8692583476ec7cf4a8c487d663bf1ee9a5302062885c030f4de01c28437eeccb4976b0a95511d2850521cc3d1c38832d7c173a3bd20b4a2c36267994571c0ebf40da46e0a6767629e25676187c18270f554e1d387249090f673f1f032633a3b1c93cc4d85f34ad292869708205c874eab67636f228b12ec6baac3f76e50a12814f9007c5e5bc75e0fc3d93311fe0a3d348c4d4e9820fcc64d4ac9779c66ed41439199d79d61d70b8864710aafcafad489b5b0b6b9ad9600a8f4b1b4657dfaf58578812a61b7867c4ca9a75699f0664efa49154e1a3f4152988b8914314e60c64da6279bc28ff8984ee65ef3d522c89b6233d74154408f1ee78e2e4914a88b79d7b5e1870f4b84cd08dd6034b723d461fd6bab9de0463dea867cca987b2a02bbf7c8e187794f519f5eabcd84cbf4b1a8f6283edc84d845b4baede14093f8231f4468fca51c5d9b6377e6a5e3ead1fb12fcfe992fdd4d3fda6cc1d646fda361ce0b3e581b6cfb4b0de8768bc779b6cc1cb83a43a298f1d9b7cc49e567eb6824d39603082b776c3d138cc3492305c469201866ec8c13af13c511e0ff722a5dec89e753e115d24b3d014c458b31794e2fae87aa889de0a0a3fc594729c8042767f647b625c21daddae198fdcc01eddb26f36e3ab3ab2e32bc2cb4b3d48743ec2d8ff7942bd81f5daeedbf677f35a444e44d5780a81fb1cb8a6ff6615d1bbca495c36d56de1adbaa6024370b4c63996625a0d66a3650f1b4cee75b480aa98b5eb8e81f133b7939a151451289ab5d1fded3d7cce70d663cc69136f1555fd704f5fcc245b19314dc1e7cd5daa447f335a111838887ce02c1ad8ba72f775574428028c37b2282e09ea51c8966b53f3c81"}, {0x2c, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0x1d0, 0x234, 0x0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@string={{0xc0}, {0xde, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe8000000000000000000000000000aa0003000000000000050200000710"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0099ff000000000000000008009f0004000000080026006c090000"], 0x38}}, 0x0) 10.310224033s ago: executing program 4 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x3c, r1, 0x203, 0x0, 0x0, {0xb}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) 10.035607986s ago: executing program 0 (id=726): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.879136243s ago: executing program 4 (id=728): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x40, 0xf, 0xea, 0x8, 0x1397, 0xbd, 0xd254, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8c, 0x58, 0x73}}]}}]}}, 0x0) 8.306601258s ago: executing program 1 (id=732): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 8.127011591s ago: executing program 1 (id=734): mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) 8.124552245s ago: executing program 2 (id=735): syz_emit_ethernet(0x840, &(0x7f00000020c0)={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x806, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0xe, 0xfd, "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"}, {0x2c, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d0, 0x1d0, 0x234, 0x0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@string={{0xc0}, {0xde, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) userfaultfd(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x11) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000005900)=ANY=[@ANYBLOB="aaaaaaaaaaaa8f064ab6bf7c86dd606410a60020000020010000000000000000000000000001fe8000000000000000000000000000aa0003000000000000050200000710"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0099ff000000000000000008009f0004000000080026006c090000"], 0x38}}, 0x0) 7.996769065s ago: executing program 1 (id=736): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="2b3fff207747"}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x1) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x5e21, 0x10000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, &(0x7f0000000600)=""/69, 0x45}, 0x2}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000800)=""/248, 0xf8}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x5abb}], 0x2, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000002d3, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ff"], 0x54}}, 0x0) 7.666625598s ago: executing program 4 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 6.584997514s ago: executing program 4 (id=739): mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008f}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x345000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x5, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x48) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f00000003c0)='cubic\x00', 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, 0xffffffffffffffff, 0x12, 0x0, 0x0, @prog_id}, 0x20) write$tcp_congestion(r2, &(0x7f0000000380)='reno\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socket$phonet(0x23, 0x2, 0x1) 6.447750195s ago: executing program 0 (id=740): socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', '', [{0x20, 'devices.list\x00'}, {0x20, 'macsec0\x00'}]}, 0x1b) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x0) pipe2(0x0, 0x0) r0 = io_uring_setup(0x3055, &(0x7f00000001c0)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a02088000000000010902240001000000000904000002030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x7, {0x7, 0x0, "78df705a90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/206, 0xce}], 0x1, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x0, 0x300) 6.379075212s ago: executing program 1 (id=742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)={0x0, 0x0, 0x7, {0x7, 0x0, "cf88ec8998"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.355541075s ago: executing program 2 (id=743): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cmdline\x00') r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [], {0x14}}, 0x28}}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), 0xfff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102380, 0x18fec}], 0xb, 0x0, 0x0) getsockopt$inet_int(r3, 0x0, 0x22, 0x0, &(0x7f0000001380)) syz_emit_ethernet(0x7c, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$sequencer(r5, &(0x7f0000000080)=[@t={0x81, 0x1, 0x0, 0x0, @generic=0x40005}], 0x8) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) 5.363020198s ago: executing program 3 (id=746): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x89, 0x4) connect$llc(r0, &(0x7f00000001c0), 0x10) 5.224317857s ago: executing program 2 (id=747): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x7800, 0x7800, 0xe, 0x5, {{0xe, 0x4, 0x1, 0x2a, 0x38, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x27}, {[@timestamp_addr={0x44, 0x24, 0x30, 0x1, 0x0, [{@loopback, 0x6}, {@loopback, 0xa}, {@remote, 0x9}, {@empty, 0x6}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f0000000100)}, 0x20) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5, @ANYBLOB="1f4080"], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="400501c0"], 0x4) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0xee01, r9, 0xffffffffffffffff) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r10, &(0x7f0000001b40)={&(0x7f0000001a40), 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2a, 0x0) r11 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r12 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r11) add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, &(0x7f00000005c0)="630d29a8e6517e7908a1b804c8ad036b9e18953122a05cca140c9c87e183258cd23b02b6431b49f5", 0x28, r12) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000000)="2a491e119d4978f53fbf980e5199c8d30d788bbcd17216778aaa059d6e448925d3ba827f93e6551aa6d6823b7cf65b7aae02b922facefb0494580339d16c2f0beda72f9da1d8c5584e3a32acec456140d6372c618de6e5d1b3921f82857b0ce5d4af682b79032e92ba9a28f1f17bf26de63646933ca9b13729d0346132", 0x7d, r12) write(r0, &(0x7f0000000340)="05000000010001", 0x7) 5.124717575s ago: executing program 3 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000080)={0x0, "dd1e971e01000000eebb81a2bd9d2ba55aeacc0c00e566fe87ee9da7a227006623"}}) 4.092245169s ago: executing program 3 (id=749): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x270, 0x168, 0x9, 0x270, 0xb, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0x228, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x87}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 3.896646066s ago: executing program 3 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x18, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002800000000000278000100"/41], 0x0) r6 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000240)={{0x2, 0x4e24, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xe, {0x2, 0x4e23, @empty}, 'wlan1\x00'}) connect$inet6(r7, 0x0, 0x0) getpid() r8 = syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@msize={'msize', 0x3d, 0x775e1e8}}]}}) 3.858877046s ago: executing program 4 (id=751): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.834914416s ago: executing program 2 (id=752): r0 = socket$nl_rdma(0x10, 0x3, 0x14) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x6, 0x0, 0x414}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x0) 3.639147765s ago: executing program 2 (id=753): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @random="2b3fff207747"}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000040)=0x100000001, 0x1) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x5e21, 0x10000000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, &(0x7f0000000600)=""/69, 0x45}, 0x2}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/87, 0x57}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000800)=""/248, 0xf8}], 0x3, &(0x7f0000001700)=""/4096, 0x1000}, 0x5abb}], 0x2, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x1000000, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) socket$inet6(0xa, 0x80001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x20000000000002d3, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400060000000000ff"], 0x54}}, 0x0) 3.456203647s ago: executing program 1 (id=754): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5411, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r4, &(0x7f00000011c0)=""/4117, 0x200021d5) 2.662801386s ago: executing program 3 (id=755): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x84, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x58, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0xb, 0x3, 0x12, 0x6b, 0x5, 0x2, 0xc, 0x2, 0x6c, 0xc, 0x3, 0x68, 0x2, 0x60, 0x6, 0x24, 0x16, 0x0, 0x7d, 0x66, 0x2, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x12, 0xc, 0x0, 0x16, 0x3, 0x30, 0x16, 0x3, 0x2, 0xb, 0x18, 0xc, 0x1, 0x36, 0x60, 0x2, 0x9, 0x2a, 0x3, 0xb, 0x30, 0x5, 0x16, 0x5, 0x19, 0x18, 0x30, 0x2, 0x36]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa4}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x4008000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@empty, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x40505331, &(0x7f0000000300)={0x10000}) tkill(r7, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r8, 0xc0a85322, &(0x7f00000003c0)) 2.579528323s ago: executing program 0 (id=756): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$kcm(0x10, 0x2, 0x4) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) capset(&(0x7f0000000080), &(0x7f0000000040)={0x200000, 0x200000}) getpid() creat(0x0, 0x0) syz_emit_vhci(0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000001580)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x4000000) landlock_create_ruleset(&(0x7f0000000000)={0x4a22}, 0x10, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.546308277s ago: executing program 1 (id=757): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f0000000200)=ANY=[], 0x0) 412.081813ms ago: executing program 2 (id=758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) 211.01701ms ago: executing program 3 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000280)="14467e7ae487b529f4a45b96d8c46a4f90ddd60dd0ce95e71278a8b3387da84295507a84ea1a69cbe6b904118858b2c18fa1bc469787e47aa88745958597b7256d05944e2a40ac39c9d7eecf4e5d83c796", &(0x7f0000000300)=""/213, &(0x7f00000004c0)="07a59166528a090733928e5ac19c8d8755f59f165a58c1623c60c8fcbbea5d13b901c2ca1ac65c7684b3d42576042637bd2ee3e58659b0d560981ee198244ffdbe37493e435802df87c86bc993487a9ede56e39c117078433611581bee2571193087dbf5edcf0fcb74e6ab7b7ee33de043e5b5d299c72f243857ce97193cd2f88787f4c2", &(0x7f0000000580)="d75c87d445b036ece4890975604d8423c706817c59a1005c732daec8b670a10db964f847c53edcc540646d5c288e9ab9485016f7da4e01eafedfc38bbde76cc7fbba47cdc2fc86808d20c28d105dbd1d7177107d3fcf92ba8f1bb0b02ee36d2ee67c4503b699fdfa2cf77835e69a8f65996f580a49cddc2f2cd2f500f80d83ccac33dc8636165d60a5cbd6f12266d9a62a2bba92e5cb236ba329449e41902dfc623805f62837364747804dd8ed05c5192e668ff687fffb31da3303e7129b25b6470e076b49298d8a8b31ec6c1d1c5b", 0x4, r0}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$tipc(0x2, 0x0, 0x0, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x4, 0x5, 0x5, 0x40}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3, 0x4, 0x19, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x40, 0x6, 0xc0000000}}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="0080ddffab1414aa0c00039583642778c954bcd36639020000000000"], 0x38}}, 0x8000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) 0s ago: executing program 4 (id=760): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @loopback, @multicast1, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x2, 'n'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1019, 0x28, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): _slave_1) entered forwarding state [ 91.004513][ T5518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.113086][ T5519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.141388][ T5519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.154345][ T5519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.167625][ T5519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.191141][ T5518] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.254338][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.261537][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.331624][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.338764][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.399195][ T5525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.468972][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.512982][ T29] audit: type=1400 audit(1722374395.165:178): avc: denied { sys_module } for pid=5529 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.545325][ T5525] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.589286][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.596543][ T940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.645548][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.652837][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.696962][ T5530] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.755908][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.763099][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.812105][ T5566] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.819244][ T5566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.961891][ T5529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.004405][ T5519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.160408][ T5528] Bluetooth: hci1: command tx timeout [ 92.166481][ T5519] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.239624][ T5528] Bluetooth: hci0: command tx timeout [ 92.240272][ T5521] Bluetooth: hci2: command tx timeout [ 92.282477][ T5566] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.289722][ T5566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.363774][ T5518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.373614][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.380970][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.400395][ T5521] Bluetooth: hci3: command tx timeout [ 92.480955][ T5521] Bluetooth: hci4: command tx timeout [ 92.487049][ T5529] veth0_vlan: entered promiscuous mode [ 92.545550][ T5529] veth1_vlan: entered promiscuous mode [ 92.572503][ T5519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.679069][ T5525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.755954][ T5530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.792943][ T5529] veth0_macvtap: entered promiscuous mode [ 92.834369][ T5518] veth0_vlan: entered promiscuous mode [ 92.865755][ T5529] veth1_macvtap: entered promiscuous mode [ 92.959471][ T5518] veth1_vlan: entered promiscuous mode [ 93.025692][ T5529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.056569][ T5519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.069239][ T5525] veth0_vlan: entered promiscuous mode [ 93.097004][ T5529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.146834][ T5529] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.157030][ T5529] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.166847][ T5529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.175902][ T5529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.219595][ T5525] veth1_vlan: entered promiscuous mode [ 93.248291][ T5518] veth0_macvtap: entered promiscuous mode [ 93.288616][ T5518] veth1_macvtap: entered promiscuous mode [ 93.411453][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.428105][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.446119][ T5518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.460231][ T5518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.470974][ T5518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.482530][ T5518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.497591][ T5530] veth0_vlan: entered promiscuous mode [ 93.531600][ T5519] veth0_vlan: entered promiscuous mode [ 93.563453][ T5518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.572621][ T5518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.581975][ T5518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.591125][ T5518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613886][ T5525] veth0_macvtap: entered promiscuous mode [ 93.627977][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.632986][ T5525] veth1_macvtap: entered promiscuous mode [ 93.645024][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.653520][ T5519] veth1_vlan: entered promiscuous mode [ 93.676164][ T5530] veth1_vlan: entered promiscuous mode [ 93.784189][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.798619][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.809134][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.819998][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.832312][ T5525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.889342][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.901775][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.912046][ T5525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.922895][ T5525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.934818][ T5525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.949867][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.957727][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.985784][ T5525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.994680][ T5525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004341][ T5525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.013442][ T5525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.039651][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.047495][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.142737][ T5519] veth0_macvtap: entered promiscuous mode [ 94.176305][ T5519] veth1_macvtap: entered promiscuous mode [ 94.219973][ T3946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.225335][ T5530] veth0_macvtap: entered promiscuous mode [ 94.227812][ T3946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.241529][ T5521] Bluetooth: hci1: command tx timeout [ 94.320226][ T5521] Bluetooth: hci2: command tx timeout [ 94.320285][ T5528] Bluetooth: hci0: command tx timeout [ 94.347921][ T5530] veth1_macvtap: entered promiscuous mode [ 94.381603][ T29] audit: type=1400 audit(1722374398.045:179): avc: denied { setopt } for pid=5598 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.471091][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.492083][ T5528] Bluetooth: hci3: command tx timeout [ 94.508625][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.525294][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.535856][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.545838][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.556876][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.570427][ T5528] Bluetooth: hci4: command tx timeout [ 94.578014][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.590784][ T29] audit: type=1400 audit(1722374398.255:180): avc: denied { map_create } for pid=5600 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.620036][ T29] audit: type=1400 audit(1722374398.255:181): avc: denied { prog_load } for pid=5602 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.662260][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.673727][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.690026][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.707806][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.738554][ T29] audit: type=1400 audit(1722374398.255:182): avc: denied { bpf } for pid=5602 comm="syz.3.245" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.759589][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.809851][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.833992][ T29] audit: type=1400 audit(1722374398.275:183): avc: denied { perfmon } for pid=5602 comm="syz.3.245" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.858737][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.918214][ T29] audit: type=1400 audit(1722374398.275:184): avc: denied { map_read map_write } for pid=5600 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.948881][ T29] audit: type=1400 audit(1722374398.285:185): avc: denied { create } for pid=5602 comm="syz.3.245" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.973223][ T29] audit: type=1400 audit(1722374398.285:186): avc: denied { map } for pid=5602 comm="syz.3.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.071714][ T5605] misc userio: No port type given on /dev/userio [ 95.201462][ T5519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.214733][ T3946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.223020][ T29] audit: type=1400 audit(1722374398.305:187): avc: denied { read write } for pid=5602 comm="syz.3.245" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.253553][ T5519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.266219][ T3946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.283213][ T5519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.292115][ T5519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.310724][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.321336][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.332145][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.342678][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.352610][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.364124][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.376888][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.389333][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.406894][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.453815][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.471002][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.484601][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.551373][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.564872][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.577652][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.588064][ T5530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.617551][ T5530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.651595][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.732510][ T5530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.758249][ T5530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.781129][ T5530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790575][ T5530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.820478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.874653][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.889339][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.085562][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.129768][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.328540][ C0] eth0: bad gso: type: 1, size: 1408 [ 96.455493][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.505130][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.632426][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 96.632445][ T29] audit: type=1400 audit(1722374400.295:207): avc: denied { setopt } for pid=5617 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.665504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.711058][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.952565][ T29] audit: type=1400 audit(1722374400.615:208): avc: denied { read } for pid=5631 comm="syz.2.253" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.977944][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.019814][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.078471][ T29] audit: type=1400 audit(1722374400.615:209): avc: denied { open } for pid=5631 comm="syz.2.253" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.164802][ T29] audit: type=1400 audit(1722374400.615:210): avc: denied { ioctl } for pid=5631 comm="syz.2.253" path="/dev/vhost-vsock" dev="devtmpfs" ino=1086 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.303740][ T29] audit: type=1400 audit(1722374400.685:211): avc: denied { write } for pid=5632 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.745080][ T29] audit: type=1400 audit(1722374400.685:212): avc: denied { connect } for pid=5632 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.159339][ T29] audit: type=1400 audit(1722374400.695:213): avc: denied { name_connect } for pid=5632 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 98.203812][ T29] audit: type=1400 audit(1722374400.875:214): avc: denied { shutdown } for pid=5632 comm="syz.1.240" lport=37434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.286803][ T29] audit: type=1400 audit(1722374400.995:215): avc: denied { setopt } for pid=5632 comm="syz.1.240" lport=37434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.323424][ T29] audit: type=1400 audit(1722374401.145:216): avc: denied { setopt } for pid=5636 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.510459][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.772284][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 98.971140][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.254587][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.307340][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.367090][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 99.394577][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.415163][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.500313][ T9] usb 5-1: config 0 descriptor?? [ 102.280421][ C0] eth0: bad gso: type: 1, size: 1408 [ 102.670806][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 102.670824][ T29] audit: type=1400 audit(1722374403.655:247): avc: denied { create } for pid=5662 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.723684][ T5528] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.733254][ T5528] Bluetooth: hci2: Injecting HCI hardware error event [ 102.743462][ T5521] Bluetooth: hci2: hardware error 0x00 [ 102.968871][ T29] audit: type=1400 audit(1722374403.675:248): avc: denied { ioctl } for pid=5662 comm="syz.1.262" path="/dev/video7" dev="devtmpfs" ino=868 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 103.057517][ T29] audit: type=1400 audit(1722374403.685:249): avc: denied { accept } for pid=5662 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.132773][ T29] audit: type=1400 audit(1722374406.495:250): avc: denied { read } for pid=5642 comm="syz.4.243" name="usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.161657][ T29] audit: type=1400 audit(1722374406.495:251): avc: denied { open } for pid=5642 comm="syz.4.243" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.185901][ T29] audit: type=1400 audit(1722374406.625:252): avc: denied { map } for pid=5642 comm="syz.4.243" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.266548][ T29] audit: type=1400 audit(1722374406.695:253): avc: denied { write } for pid=5675 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.384155][ T5478] usb 5-1: USB disconnect, device number 2 [ 103.521818][ T29] audit: type=1400 audit(1722374407.175:254): avc: denied { connect } for pid=5679 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.613833][ T29] audit: type=1400 audit(1722374407.175:255): avc: denied { write } for pid=5679 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.636113][ T29] audit: type=1400 audit(1722374407.195:256): avc: denied { read } for pid=5679 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 103.880030][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.208477][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 104.226842][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.243984][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.264833][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 104.342526][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.401737][ T25] usb 2-1: config 0 descriptor?? [ 104.649703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.829758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.889887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.920661][ T5712] vivid-008: disconnect [ 105.149665][ T5521] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 105.280508][ C0] eth0: bad gso: type: 1, size: 1408 [ 105.349364][ T5706] vivid-008: reconnect [ 105.711772][ T25] hid-rmi 0003:17EF:6085.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.1-1/input0 [ 105.765427][ C0] eth0: bad gso: type: 1, size: 1408 [ 105.782315][ C0] eth0: bad gso: type: 1, size: 1408 [ 106.106768][ T5478] usb 2-1: USB disconnect, device number 2 [ 106.459926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.982271][ T5747] program syz.2.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.358107][ T5747] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.409737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.422056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.579930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.697810][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 108.697829][ T29] audit: type=1400 audit(1722374412.355:276): avc: denied { map } for pid=5755 comm="syz.1.288" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.749936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.800303][ T29] audit: type=1400 audit(1722374412.355:277): avc: denied { execute } for pid=5755 comm="syz.1.288" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.861668][ T29] audit: type=1400 audit(1722374412.405:278): avc: denied { create } for pid=5755 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.880993][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.901012][ T29] audit: type=1400 audit(1722374412.555:279): avc: denied { ioctl } for pid=5755 comm="syz.1.288" path="socket:[8940]" dev="sockfs" ino=8940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.384421][ T5769] vivid-000: disconnect [ 109.567138][ T5760] vivid-000: reconnect [ 109.744670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.335469][ T29] audit: type=1400 audit(1722374413.935:280): avc: denied { ioctl } for pid=5782 comm="syz.0.294" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 111.558295][ T29] audit: type=1400 audit(1722374415.215:281): avc: denied { name_bind } for pid=5795 comm="syz.3.298" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 111.580332][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.619315][ T5796] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.298'. [ 111.679530][ T29] audit: type=1400 audit(1722374415.255:282): avc: denied { node_bind } for pid=5795 comm="syz.3.298" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 111.800049][ T29] audit: type=1400 audit(1722374415.315:283): avc: denied { open } for pid=5799 comm="syz.2.300" path="/dev/ptyq9" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 111.931315][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.939822][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.024073][ T29] audit: type=1400 audit(1722374415.335:284): avc: denied { execute } for pid=5795 comm="syz.3.298" path="/15/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.047753][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.142253][ T29] audit: type=1400 audit(1722374415.465:285): avc: denied { mounton } for pid=5799 comm="syz.2.300" path="/14/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.159269][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.164788][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.178400][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.187220][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.194389][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.461926][ T5801] team0: Port device bridge0 added [ 112.515877][ T5809] bridge_slave_1: left allmulticast mode [ 112.550529][ T5809] bridge_slave_1: left promiscuous mode [ 112.593284][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.444415][ T5826] slcan: can't register candev [ 113.450041][ T5826] Falling back ldisc for ptm0. [ 113.501026][ T5809] bridge_slave_0: left allmulticast mode [ 113.521677][ T5521] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 113.529291][ T5521] Bluetooth: hci3: command 0x206a tx timeout [ 113.544399][ T5809] bridge_slave_0: left promiscuous mode [ 113.565848][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.722011][ T5809] team0: Port device bridge0 removed [ 114.081632][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 114.081650][ T29] audit: type=1400 audit(1722374417.745:294): avc: denied { unmount } for pid=5525 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.164939][ T29] audit: type=1400 audit(1722374417.795:295): avc: denied { write } for pid=5835 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.340149][ T5841] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.365594][ T29] audit: type=1400 audit(1722374417.995:296): avc: denied { ioctl } for pid=5839 comm="syz.0.309" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.525862][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.533544][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.610124][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.618093][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.626279][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.633447][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.696961][ T29] audit: type=1400 audit(1722374419.345:297): avc: denied { write } for pid=5871 comm="syz.4.320" path="socket:[9182]" dev="sockfs" ino=9182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.752132][ T29] audit: type=1400 audit(1722374419.405:298): avc: denied { shutdown } for pid=5871 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.849233][ T5868] team0: Port device bridge0 added [ 115.897554][ T5875] bridge_slave_1: left allmulticast mode [ 115.909504][ T5875] bridge_slave_1: left promiscuous mode [ 115.915403][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.969790][ T5875] bridge_slave_0: left allmulticast mode [ 115.979325][ T5875] bridge_slave_0: left promiscuous mode [ 115.999330][ T5874] Bluetooth: MGMT ver 1.23 [ 116.025951][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.986785][ C0] eth0: bad gso: type: 1, size: 1408 [ 117.290292][ T29] audit: type=1400 audit(1722374420.945:299): avc: denied { read write } for pid=5888 comm="syz.3.324" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.750317][ T5594] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.762729][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 117.932553][ T29] audit: type=1400 audit(1722374420.945:300): avc: denied { open } for pid=5888 comm="syz.3.324" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.977661][ T5594] usb 4-1: device descriptor read/64, error -32 [ 117.990841][ T5875] team0: Port device bridge0 removed [ 118.046704][ T29] audit: type=1400 audit(1722374420.945:301): avc: denied { ioctl } for pid=5888 comm="syz.3.324" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.153679][ T29] audit: type=1400 audit(1722374421.005:302): avc: denied { bind } for pid=5883 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.216747][ T29] audit: type=1400 audit(1722374421.005:303): avc: denied { name_bind } for pid=5883 comm="syz.1.323" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 118.279803][ T5594] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.771806][ T5594] usb 4-1: config 0 has an invalid interface number: 179 but max is 0 [ 118.843411][ T5594] usb 4-1: config 0 has no interface number 0 [ 118.885204][ T5594] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 118.896233][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.905030][ T5594] usb 4-1: Product: syz [ 118.913990][ T5594] usb 4-1: Manufacturer: syz [ 118.928910][ T5904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'. [ 118.961558][ T5594] usb 4-1: SerialNumber: syz [ 118.995084][ T5594] usb 4-1: config 0 descriptor?? [ 119.045597][ T5594] usb-storage 4-1:0.179: USB Mass Storage device detected [ 119.127007][ T5594] usb-storage 4-1:0.179: device ignored [ 119.571740][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 119.571763][ T29] audit: type=1400 audit(1722374423.235:309): avc: denied { bind } for pid=5916 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.627176][ T25] usb 4-1: USB disconnect, device number 3 [ 121.652909][ T5943] netlink: 'syz.3.339': attribute type 11 has an invalid length. [ 122.074661][ T29] audit: type=1400 audit(1722374425.725:310): avc: denied { read } for pid=5937 comm="syz.4.338" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.118720][ T5955] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.341'. [ 122.170070][ T29] audit: type=1400 audit(1722374425.725:311): avc: denied { open } for pid=5937 comm="syz.4.338" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.202007][ T5949] binder: 5937:5949 ioctl c00c620f 20000340 returned -22 [ 122.377542][ T29] audit: type=1400 audit(1722374425.865:312): avc: denied { ioctl } for pid=5937 comm="syz.4.338" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.402860][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.524433][ T5941] veth0_vlan: entered allmulticast mode [ 123.999533][ T5528] Bluetooth: hci3: command 0x206a tx timeout [ 124.006776][ T5521] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 124.580585][ T5949] veth0_vlan: left promiscuous mode [ 124.637152][ T5949] veth0_vlan: entered promiscuous mode [ 125.009950][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.110037][ T29] audit: type=1400 audit(1722374428.755:313): avc: denied { getopt } for pid=5980 comm="syz.3.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.227099][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 126.379915][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.387930][ T9] usb 3-1: Product: syz [ 126.410311][ T29] audit: type=1400 audit(1722374429.145:314): avc: denied { create } for pid=5983 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.535161][ T9] usb 3-1: Manufacturer: syz [ 126.547591][ T9] usb 3-1: SerialNumber: syz [ 126.629641][ T29] audit: type=1400 audit(1722374429.165:315): avc: denied { write } for pid=5983 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.670274][ T9] usb 3-1: config 0 descriptor?? [ 126.728150][ T29] audit: type=1400 audit(1722374429.245:316): avc: denied { watch watch_reads } for pid=5983 comm="syz.0.351" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.921669][ T5986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.349'. [ 127.100218][ T5997] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.353'. [ 127.104870][ T5478] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.140313][ T5478] usb 4-1: Using ep0 maxpacket: 8 [ 128.166482][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 128.193504][ T9] usb 3-1: Please update to version 0.2 or newer [ 128.263131][ T5478] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 128.345544][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.400096][ T9] usb 3-1: USB disconnect, device number 2 [ 128.442410][ T5478] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.519273][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.560985][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.677671][ T6015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.704120][ T5478] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 128.728907][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.776475][ T5478] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.799586][ T5528] Bluetooth: hci1: command 0x206a tx timeout [ 128.806301][ T5521] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 128.862480][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.890172][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.911051][ T5478] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 128.928938][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.941285][ T5478] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.953325][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.002921][ T5478] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.079179][ T5478] usb 4-1: string descriptor 0 read error: -22 [ 129.088710][ T5478] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 129.177889][ T5478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.287450][ T5478] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 129.326110][ C0] eth0: bad gso: type: 1, size: 1408 [ 129.464497][ T6022] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 129.472391][ T6022] vhci_hcd: invalid port number 10 [ 129.477637][ T6022] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 130.202475][ T29] audit: type=1400 audit(1722374433.085:317): avc: denied { write } for pid=6019 comm="syz.2.359" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.395819][ T5567] usb 4-1: USB disconnect, device number 4 [ 130.682058][ T6029] kernel read not supported for file /eth0 (pid: 6029 comm: syz.1.362) [ 130.698304][ T29] audit: type=1400 audit(1722374434.345:318): avc: denied { connect } for pid=6030 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.776868][ T29] audit: type=1800 audit(1722374434.385:319): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.362" name="eth0" dev="mqueue" ino=9539 res=0 errno=0 [ 132.488111][ T29] audit: type=1400 audit(1722374436.145:320): avc: denied { append } for pid=6044 comm="syz.1.367" name="001" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 133.454705][ T6053] vivid-002: kernel_thread() failed [ 133.607377][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.614382][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.868975][ T29] audit: type=1400 audit(1722374437.525:321): avc: denied { listen } for pid=6057 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.963945][ T29] audit: type=1400 audit(1722374437.605:322): avc: denied { mount } for pid=6057 comm="syz.3.370" name="/" dev="rpc_pipefs" ino=10421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 134.066019][ T29] audit: type=1400 audit(1722374437.685:323): avc: denied { unlink } for pid=6066 comm="syz.1.372" name="#1" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 134.107952][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.142914][ T29] audit: type=1400 audit(1722374437.705:324): avc: denied { mount } for pid=6066 comm="syz.1.372" name="/" dev="overlay" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.216485][ T6067] Invalid ELF header magic: != ELF [ 134.234219][ T29] audit: type=1400 audit(1722374437.865:325): avc: denied { module_load } for pid=6066 comm="syz.1.372" path="/17/bus/bus" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 134.260731][ T5521] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 134.273902][ T29] audit: type=1400 audit(1722374437.895:326): avc: denied { ioctl } for pid=6070 comm="syz.4.373" path="socket:[9603]" dev="sockfs" ino=9603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.394985][ T6071] bridge_slave_1: left allmulticast mode [ 134.402973][ T6071] bridge_slave_1: left promiscuous mode [ 134.408998][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.807227][ T6082] program syz.1.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.972053][ T6082] Cannot find add_set index 0 as target [ 135.169678][ T5567] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.334042][ C0] eth0: bad gso: type: 1, size: 1408 [ 135.441724][ T5567] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 135.467946][ T5567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.518530][ T5567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.572397][ T5567] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 135.598130][ T5567] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 135.633965][ T5567] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 135.645974][ T5567] usb 4-1: Manufacturer: syz [ 135.672137][ T5567] usb 4-1: config 0 descriptor?? [ 136.131531][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 136.131551][ T29] audit: type=1400 audit(1722374439.785:330): avc: denied { read } for pid=6094 comm="syz.4.380" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.009529][ T29] audit: type=1400 audit(1722374439.785:331): avc: denied { open } for pid=6094 comm="syz.4.380" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.186294][ T29] audit: type=1400 audit(1722374440.625:332): avc: denied { ioctl } for pid=6094 comm="syz.4.380" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.195280][ T5567] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 137.246364][ T5567] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 137.268351][ T5567] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 137.443819][ T29] audit: type=1804 audit(1722374441.105:333): pid=6107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.385" name="/newroot/32/bus/bus" dev="overlay" ino=191 res=1 errno=0 [ 137.523448][ T6107] evm: overlay not supported [ 137.564201][ T6107] Invalid ELF header magic: != ELF [ 137.930002][ T8] usb 4-1: USB disconnect, device number 5 [ 138.131287][ T29] audit: type=1400 audit(1722374441.785:334): avc: denied { mount } for pid=6130 comm="syz.0.390" name="/" dev="hugetlbfs" ino=9718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 138.135788][ T6131] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 138.135788][ T6131] [ 138.176280][ T29] audit: type=1400 audit(1722374441.795:335): avc: denied { remount } for pid=6130 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 138.254307][ T5521] Bluetooth: hci0: Malformed Event: 0x13 [ 138.297799][ T29] audit: type=1400 audit(1722374441.955:336): avc: denied { unmount } for pid=5518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 138.317997][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.319697][ T5521] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 138.334579][ T5521] Bluetooth: hci4: Injecting HCI hardware error event [ 138.346541][ T5528] Bluetooth: hci4: hardware error 0x00 [ 138.374185][ T29] audit: type=1400 audit(1722374442.005:337): avc: denied { search } for pid=4651 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.491474][ T29] audit: type=1400 audit(1722374442.155:338): avc: denied { execute } for pid=6137 comm="syz.2.393" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.545013][ T29] audit: type=1400 audit(1722374442.185:339): avc: denied { ioctl } for pid=6137 comm="syz.2.393" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.672953][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 140.069580][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.150367][ T6165] can0: slcan on ptm0. [ 143.196100][ T5521] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 143.204914][ T5521] Bluetooth: hci0: Injecting HCI hardware error event [ 143.212629][ T5521] Bluetooth: hci0: hardware error 0x00 [ 143.252477][ T5528] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 143.992689][ T6156] can0 (unregistered): slcan off ptm0. [ 144.413504][ T6181] SELinux: Context system_u:object_r:printer_device_t:s0 is not valid (left unmapped). [ 144.515592][ T29] audit: type=1400 audit(1722374448.165:340): avc: denied { relabelto } for pid=6177 comm="syz.1.404" name="file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:printer_device_t:s0" [ 144.557499][ T29] audit: type=1400 audit(1722374448.165:341): avc: denied { associate } for pid=6177 comm="syz.1.404" name="file0" dev="tmpfs" ino=144 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:printer_device_t:s0" [ 144.585013][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.126326][ T29] audit: type=1400 audit(1722374448.785:342): avc: denied { read } for pid=6189 comm="syz.1.407" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.195825][ T29] audit: type=1400 audit(1722374448.825:343): avc: denied { ioctl } for pid=6189 comm="syz.1.407" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.221084][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.273928][ T29] audit: type=1400 audit(1722374448.835:344): avc: denied { write } for pid=6189 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.403922][ T29] audit: type=1400 audit(1722374448.835:345): avc: denied { nlmsg_write } for pid=6189 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.498341][ T29] audit: type=1400 audit(1722374449.125:346): avc: denied { read } for pid=6193 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.517400][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.562195][ T6196] syz.4.410 uses obsolete (PF_INET,SOCK_PACKET) [ 145.741648][ T29] audit: type=1400 audit(1722374449.405:347): avc: denied { mounton } for pid=6199 comm="syz.1.411" path="/syzcgroup/cpu/syz1/syz0/file0" dev="cgroup" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.749841][ T6207] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 145.749841][ T6207] [ 145.765920][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.766878][ T6200] fuse: Unknown parameter '0x0000000000000004' [ 145.947600][ T6200] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 145.969568][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.987794][ T5528] Bluetooth: hci3: Malformed Event: 0x13 [ 145.999636][ T5521] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 146.159641][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 146.201594][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 146.225699][ T6208] Zero length message leads to an empty skb [ 146.273311][ T25] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 146.313346][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.333806][ T25] usb 3-1: Product: syz [ 146.526798][ T25] usb 3-1: Manufacturer: syz [ 146.532868][ T25] usb 3-1: SerialNumber: syz [ 146.558603][ T29] audit: type=1400 audit(1722374450.215:348): avc: denied { connect } for pid=6213 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.738792][ T29] audit: type=1400 audit(1722374451.355:349): avc: denied { bind } for pid=6213 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.812466][ T25] usb 3-1: config 0 descriptor?? [ 147.821208][ T6203] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.893447][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 148.065404][ T25] hub 3-1:0.0: probe with driver hub failed with error -5 [ 148.633436][ T25] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 148.833091][ T25] usb 3-1: USB disconnect, device number 3 [ 148.838942][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 149.059501][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.244997][ T6232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6232 comm=syz.4.421 [ 149.321822][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 149.406938][ T9] usb 2-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 149.436393][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.456844][ T9] usb 2-1: Product: syz [ 149.467282][ T9] usb 2-1: Manufacturer: syz [ 149.477541][ T9] usb 2-1: SerialNumber: syz [ 149.509605][ T9] usb 2-1: config 0 descriptor?? [ 149.541246][ T9] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 149.563094][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 149.589698][ T9] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) error while loading driver (-22) [ 149.840322][ T9] usb 2-1: USB disconnect, device number 3 [ 149.879992][ C0] eth0: bad gso: type: 1, size: 1408 [ 150.249184][ T6245] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.256922][ T6245] vhci_hcd: invalid port number 10 [ 150.262190][ T6245] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 151.020225][ C0] eth0: bad gso: type: 1, size: 1408 [ 152.256871][ T6258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.345336][ T6248] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 152.361468][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 152.361480][ T29] audit: type=1400 audit(1722374456.025:432): avc: denied { create } for pid=6259 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 152.402515][ T6248] netlink: 240 bytes leftover after parsing attributes in process `syz.3.426'. [ 153.559576][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.791723][ T25] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.856395][ T25] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 153.895262][ T25] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 153.933035][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.995332][ T6263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.056361][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.128227][ T29] audit: type=1400 audit(1722374457.785:433): avc: denied { listen } for pid=6278 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 155.231363][ T6286] vivid-004: kernel_thread() failed [ 155.546621][ T5564] usb 1-1: USB disconnect, device number 3 [ 155.869792][ T29] audit: type=1400 audit(1722374459.535:434): avc: denied { name_bind } for pid=6290 comm="syz.4.439" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 155.987358][ T29] audit: type=1400 audit(1722374459.575:435): avc: denied { setopt } for pid=6290 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 156.446001][ T6311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.135732][ T6323] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 157.169595][ T6323] netlink: 240 bytes leftover after parsing attributes in process `syz.0.447'. [ 157.924897][ C0] eth0: bad gso: type: 1, size: 1408 [ 158.300450][ T6355] netlink: 64 bytes leftover after parsing attributes in process `syz.2.454'. [ 159.779868][ T6379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.013508][ T6381] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 160.033963][ T6381] netlink: 240 bytes leftover after parsing attributes in process `syz.1.460'. [ 164.021792][ T6428] IPv6: sit1: Disabled Multicast RS [ 165.355271][ T6442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.475985][ T29] audit: type=1804 audit(1722374469.135:436): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.474" name="/newroot/51/bus/file0" dev="overlay" ino=299 res=1 errno=0 [ 166.891900][ T6450] misc userio: No port type given on /dev/userio [ 166.999955][ T29] audit: type=1400 audit(1722374470.555:437): avc: denied { append } for pid=6449 comm="syz.1.479" name="userio" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.148811][ T29] audit: type=1400 audit(1722374471.805:438): avc: denied { mount } for pid=6470 comm="syz.4.485" name="/" dev="autofs" ino=10995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 168.330852][ T29] audit: type=1400 audit(1722374471.995:439): avc: denied { unmount } for pid=5530 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 168.374813][ T29] audit: type=1400 audit(1722374472.035:440): avc: denied { write } for pid=6477 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.674436][ T6489] program syz.4.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.719979][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.722859][ T6489] Cannot find add_set index 0 as target [ 168.942072][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.966367][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.012456][ T9] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 169.034418][ T9] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 169.044095][ T9] usb 4-1: Product: syz [ 169.061683][ T9] usb 4-1: config 0 descriptor?? [ 169.303048][ T6492] hub 6-0:1.0: USB hub found [ 169.387559][ T6492] hub 6-0:1.0: 1 port detected [ 169.786595][ T29] audit: type=1400 audit(1722374473.445:441): avc: denied { write } for pid=6477 comm="syz.3.487" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.949504][ T29] audit: type=1326 audit(1722374473.595:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.3.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a6777299 code=0x0 [ 170.240335][ T6500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.581641][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.793234][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.832314][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.867737][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.924450][ T8] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 170.944129][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.995167][ T8] usb 2-1: config 0 descriptor?? [ 172.477664][ T6513] misc userio: No port type given on /dev/userio [ 172.551637][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 172.750684][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 172.771970][ T8] hid-udraw 0003:20D6:CB17.0003: item fetching failed at offset 5/7 [ 172.832203][ T8] hid-udraw 0003:20D6:CB17.0003: parse failed [ 172.846775][ T9] usb 4-1: USB disconnect, device number 6 [ 172.885796][ T8] hid-udraw 0003:20D6:CB17.0003: probe with driver hid-udraw failed with error -22 [ 172.927872][ T8] usb 2-1: USB disconnect, device number 4 [ 173.090424][ T6518] sock: sock_timestamping_bind_phc: sock not bind to device [ 174.571088][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.2.504'. [ 175.479614][ T6550] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.488981][ T6550] vhci_hcd: invalid port number 10 [ 175.494272][ T6550] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 176.632882][ T6557] warning: `syz.1.508' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.367697][ T29] audit: type=1400 audit(1722374481.025:443): avc: denied { read } for pid=6569 comm="syz.3.513" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 177.927289][ T29] audit: type=1400 audit(1722374481.055:444): avc: denied { open } for pid=6569 comm="syz.3.513" path="/59/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 177.950052][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.182231][ T6567] kvm: emulating exchange as write [ 182.196610][ T6620] SELinux: Context system_u:object_r:iptables_exec_t:s0 is not valid (left unmapped). [ 182.680204][ T29] audit: type=1400 audit(1722374485.875:445): avc: denied { relabelto } for pid=6617 comm="syz.1.525" name="file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:iptables_exec_t:s0" [ 182.718355][ T29] audit: type=1400 audit(1722374485.875:446): avc: denied { associate } for pid=6617 comm="syz.1.525" name="file0" dev="tmpfs" ino=273 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:iptables_exec_t:s0" [ 183.118604][ T29] audit: type=1400 audit(1722374486.775:447): avc: denied { rmdir } for pid=5519 comm="syz-executor" name="file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:iptables_exec_t:s0" [ 184.269600][ T6629] sched: RT throttling activated [ 184.488362][ T6642] capability: warning: `syz.1.533' uses deprecated v2 capabilities in a way that may be insecure [ 185.509660][ T5595] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 185.730077][ T5595] usb 5-1: Using ep0 maxpacket: 16 [ 185.741502][ T5595] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 185.761736][ T5595] usb 5-1: config 0 has no interface number 0 [ 185.765621][ T6659] block nbd0: NBD_DISCONNECT [ 185.771654][ T5595] usb 5-1: config 0 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.797468][ T5595] usb 5-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.801682][ T6659] block nbd0: Disconnected due to user request. [ 185.811024][ T5595] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 4.00 [ 185.829242][ T6659] block nbd0: shutting down sockets [ 185.962836][ T5595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.228520][ T5595] usb 5-1: config 0 descriptor?? [ 186.589816][ T5595] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.7/input/input7 [ 186.870777][ T25] usb 5-1: USB disconnect, device number 3 [ 186.878244][ T4654] pxrc 5-1:0.7: pxrc_open - usb_submit_urb failed, error: -19 [ 188.554313][ T29] audit: type=1400 audit(1722374492.215:448): avc: denied { watch } for pid=6684 comm="syz.2.545" path="/67" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.677297][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.725787][ T6711] lo speed is unknown, defaulting to 1000 [ 196.803486][ T6711] lo speed is unknown, defaulting to 1000 [ 196.878643][ T6711] lo speed is unknown, defaulting to 1000 [ 198.349868][ T29] audit: type=1400 audit(1722374501.955:449): avc: denied { connect } for pid=6724 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.029683][ T29] audit: type=1400 audit(1722374501.955:450): avc: denied { write } for pid=6724 comm="syz.3.557" path="socket:[11797]" dev="sockfs" ino=11797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.581166][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.785392][ T6711] infiniband syz1: set active [ 200.134349][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 200.143836][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.152871][ T9] usb 4-1: Product: syz [ 200.157408][ T9] usb 4-1: Manufacturer: syz [ 200.256791][ T6711] infiniband syz1: added lo [ 200.261460][ T9] usb 4-1: SerialNumber: syz [ 200.267304][ T46] lo speed is unknown, defaulting to 1000 [ 200.291412][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 200.297723][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 200.311782][ T6711] syz1: rxe_create_cq: returned err = -12 [ 200.318119][ T6711] infiniband syz1: Couldn't create ib_mad CQ [ 200.374864][ T6711] infiniband syz1: Couldn't open port 1 [ 200.569910][ T6711] RDS/IB: syz1: added [ 200.576193][ T6711] smc: adding ib device syz1 with port count 1 [ 200.616975][ T6711] smc: ib device syz1 port 1 has pnetid [ 200.666254][ T5595] lo speed is unknown, defaulting to 1000 [ 200.673779][ T29] audit: type=1400 audit(1722374504.335:451): avc: denied { append } for pid=6732 comm="syz.3.559" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.923246][ T6711] lo speed is unknown, defaulting to 1000 [ 200.966368][ T9] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 201.241912][ T6747] can0: slcan on ptm0. [ 201.851754][ T6740] can0 (unregistered): slcan off ptm0. [ 202.080134][ T6746] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 202.125481][ T6751] pim6reg1: entered promiscuous mode [ 202.131238][ T6746] netlink: 240 bytes leftover after parsing attributes in process `syz.0.563'. [ 202.145964][ T6751] pim6reg1: entered allmulticast mode [ 203.842354][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 203.853082][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.567'. [ 205.282068][ T29] audit: type=1400 audit(1722374506.305:452): avc: denied { create } for pid=6753 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 205.349569][ T29] audit: type=1400 audit(1722374506.305:453): avc: denied { write } for pid=6753 comm="syz.0.567" path="socket:[11851]" dev="sockfs" ino=11851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 205.490082][ T29] audit: type=1400 audit(1722374506.525:455): avc: denied { connect } for pid=6752 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 205.541836][ T6711] lo speed is unknown, defaulting to 1000 [ 205.589600][ T29] audit: type=1400 audit(1722374506.495:454): avc: denied { setopt } for pid=6752 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 205.694638][ T29] audit: type=1400 audit(1722374507.545:456): avc: denied { ioctl } for pid=6753 comm="syz.0.567" path="socket:[11853]" dev="sockfs" ino=11853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.767765][ T29] audit: type=1400 audit(1722374507.555:457): avc: denied { bind } for pid=6753 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.147178][ T6772] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.568'. [ 207.214788][ T29] audit: type=1400 audit(1722374510.875:458): avc: denied { create } for pid=6774 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.380013][ T29] audit: type=1400 audit(1722374510.915:459): avc: denied { setopt } for pid=6774 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.479539][ T29] audit: type=1400 audit(1722374510.945:460): avc: denied { bind } for pid=6774 comm="syz.1.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.609560][ T29] audit: type=1400 audit(1722374510.945:461): avc: denied { node_bind } for pid=6774 comm="syz.1.574" saddr=10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 208.007115][ T6711] lo speed is unknown, defaulting to 1000 [ 209.839276][ T6789] can0: slcan on ptm0. [ 210.540191][ T6782] can0 (unregistered): slcan off ptm0. [ 210.837648][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 210.837668][ T29] audit: type=1400 audit(1722374514.485:463): avc: denied { getopt } for pid=6795 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.637502][ T6803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'. [ 211.646595][ T6803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'. [ 212.391048][ T5528] Bluetooth: hci1: command 0x206a tx timeout [ 212.424329][ C0] eth0: bad gso: type: 1, size: 1408 [ 212.480737][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.499559][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.511201][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.520274][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.527882][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.535849][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.663982][ T6809] program syz.0.582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.738629][ T46] IPVS: starting estimator thread 0... [ 212.781329][ T6811] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 212.816137][ T1305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.829821][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.856754][ T6711] lo speed is unknown, defaulting to 1000 [ 212.913687][ T6812] IPVS: using max 19 ests per chain, 45600 per kthread [ 214.640874][ T5528] Bluetooth: hci5: command tx timeout [ 216.719591][ T5528] Bluetooth: hci5: command tx timeout [ 221.199698][ T5528] Bluetooth: hci5: command tx timeout [ 223.280676][ T5528] Bluetooth: hci5: command tx timeout [ 225.260604][ T29] audit: type=1400 audit(1722374528.915:464): avc: denied { unmount } for pid=5518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.740338][ T6838] openvswitch: netlink: Missing key (keys=44, expected=100) [ 226.266747][ T8] IPVS: starting estimator thread 0... [ 226.274438][ T6846] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 226.342937][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.354487][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.370073][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.372782][ T4607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.383245][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.393635][ T6847] IPVS: using max 19 ests per chain, 45600 per kthread [ 226.393719][ T4607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.415013][ T4607] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.430532][ T4607] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 226.438121][ T4607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.452139][ T5528] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.462506][ T5528] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 226.485717][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 228.569917][ T5528] Bluetooth: hci7: command tx timeout [ 228.575803][ T54] Bluetooth: hci6: command tx timeout [ 230.655253][ T5528] Bluetooth: hci6: command tx timeout [ 230.655291][ T54] Bluetooth: hci7: command tx timeout [ 230.920598][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.933142][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.946582][ T6806] lo speed is unknown, defaulting to 1000 [ 230.947017][ T6844] netlink: 2124 bytes leftover after parsing attributes in process `syz.4.593'. [ 231.007727][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.360130][ T5519] syz-executor (5519) used greatest stack depth: 21152 bytes left [ 232.451750][ T6711] lo speed is unknown, defaulting to 1000 [ 232.655788][ T2546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.736439][ T54] Bluetooth: hci6: command tx timeout [ 232.736447][ T5528] Bluetooth: hci7: command tx timeout [ 232.826381][ T6850] lo speed is unknown, defaulting to 1000 [ 232.960160][ T2546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.167165][ T2546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.187402][ T6848] lo speed is unknown, defaulting to 1000 [ 233.199974][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.332609][ T2546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.882648][ C0] eth0: bad gso: type: 1, size: 1408 [ 233.952578][ C0] eth0: bad gso: type: 1, size: 1408 [ 234.441516][ T6806] chnl_net:caif_netlink_parms(): no params data found [ 234.703775][ T2546] bridge_slave_1: left allmulticast mode [ 234.713282][ T2546] bridge_slave_1: left promiscuous mode [ 234.721505][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.751163][ T2546] bridge_slave_0: left allmulticast mode [ 234.756869][ T2546] bridge_slave_0: left promiscuous mode [ 234.767974][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.799994][ T54] Bluetooth: hci7: command tx timeout [ 234.805480][ T5528] Bluetooth: hci6: command tx timeout [ 234.828940][ T29] audit: type=1400 audit(1722374538.485:465): avc: denied { setopt } for pid=6898 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.945402][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.968446][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.994512][ T2546] bond0 (unregistering): Released all slaves [ 236.051873][ T6850] chnl_net:caif_netlink_parms(): no params data found [ 237.639999][ T5478] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 237.696347][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.708798][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.716404][ T6806] bridge_slave_0: entered allmulticast mode [ 237.725115][ T6806] bridge_slave_0: entered promiscuous mode [ 237.736754][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.747380][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.755520][ T6806] bridge_slave_1: entered allmulticast mode [ 237.765003][ T6806] bridge_slave_1: entered promiscuous mode [ 237.859946][ T5478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.897776][ T5478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.967799][ T5478] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 238.009481][ T5478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.040090][ T5478] usb 5-1: config 0 descriptor?? [ 238.194075][ T6806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.218223][ T29] audit: type=1400 audit(1722374541.875:466): avc: denied { search } for pid=4883 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.291125][ T29] audit: type=1400 audit(1722374541.875:467): avc: denied { read } for pid=4883 comm="dhcpcd" name="n72" dev="tmpfs" ino=3076 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.321440][ T29] audit: type=1400 audit(1722374541.875:468): avc: denied { open } for pid=4883 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=3076 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.337453][ T2546] hsr_slave_0: left promiscuous mode [ 238.347429][ T29] audit: type=1400 audit(1722374541.875:469): avc: denied { getattr } for pid=4883 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=3076 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.378021][ T2546] hsr_slave_1: left promiscuous mode [ 238.402791][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.417766][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.436857][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.450423][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.515624][ T2546] veth1_macvtap: left promiscuous mode [ 238.522191][ T2546] veth0_macvtap: left promiscuous mode [ 238.528014][ T2546] veth1_vlan: left promiscuous mode [ 238.532103][ T5478] wacom 0003:056A:0300.0004: unknown main item tag 0x0 [ 238.540007][ T2546] veth0_vlan: left promiscuous mode [ 238.549950][ T5478] wacom 0003:056A:0300.0004: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 238.577451][ T5478] wacom 0003:056A:0300.0004: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.4-1/input0 [ 238.626060][ T5478] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0300.0004/input/input8 [ 238.760534][ T5478] usb 5-1: USB disconnect, device number 4 [ 240.107663][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 240.182437][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 240.681571][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.688976][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.696590][ T6850] bridge_slave_0: entered allmulticast mode [ 240.709181][ T6850] bridge_slave_0: entered promiscuous mode [ 240.731352][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.738569][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.752372][ T6850] bridge_slave_1: entered allmulticast mode [ 240.760231][ T6850] bridge_slave_1: entered promiscuous mode [ 240.774271][ T6806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.993336][ T29] audit: type=1400 audit(1722374544.655:470): avc: denied { create } for pid=6942 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 241.036938][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 241.083978][ T6850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.121860][ T6806] team0: Port device team_slave_0 added [ 241.184936][ T6850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.294083][ T29] audit: type=1400 audit(1722374544.955:471): avc: denied { read } for pid=6950 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.344325][ T6806] team0: Port device team_slave_1 added [ 241.347554][ T29] audit: type=1400 audit(1722374544.955:472): avc: denied { open } for pid=6950 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.397706][ T29] audit: type=1400 audit(1722374544.985:473): avc: denied { getattr } for pid=6950 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.516804][ T6959] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 241.523875][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 241.596042][ T6959] vhci_hcd vhci_hcd.0: Device attached [ 241.602802][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.639870][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.686213][ T6806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.724534][ T6850] team0: Port device team_slave_0 added [ 241.744829][ T6960] vhci_hcd: connection closed [ 241.761604][ T6832] vhci_hcd: stop threads [ 241.765013][ T29] audit: type=1400 audit(1722374545.425:474): avc: denied { write } for pid=6949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.770750][ T6806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.775139][ T29] audit: type=1400 audit(1722374545.425:475): avc: denied { add_name } for pid=6949 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.802414][ T6832] vhci_hcd: release socket [ 241.849143][ T29] audit: type=1400 audit(1722374545.425:476): avc: denied { create } for pid=6949 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.883892][ T6806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.909892][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.911535][ T6832] vhci_hcd: disconnect device [ 241.916721][ T9] usb 10-1: SetAddress Request (2) to port 0 [ 241.930379][ T9] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 241.937974][ T29] audit: type=1400 audit(1722374545.425:477): avc: denied { write } for pid=6949 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 241.964031][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.975452][ T6806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.006463][ T29] audit: type=1400 audit(1722374545.425:478): avc: denied { append } for pid=6949 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.039548][ T29] audit: type=1400 audit(1722374545.695:479): avc: denied { remove_name } for pid=6970 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.052012][ T6850] team0: Port device team_slave_1 added [ 242.223325][ T2546] IPVS: stop unused estimator thread 0... [ 242.335596][ T6806] hsr_slave_0: entered promiscuous mode [ 242.405189][ T6806] hsr_slave_1: entered promiscuous mode [ 242.441007][ T6806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.670800][ T6806] Cannot create hsr debugfs directory [ 242.964701][ C0] eth0: bad gso: type: 1, size: 1408 [ 243.008707][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.024341][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.036836][ T6848] bridge_slave_0: entered allmulticast mode [ 243.046058][ T6848] bridge_slave_0: entered promiscuous mode [ 243.063022][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.089237][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.125431][ T6850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.194242][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.208911][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.218524][ T6848] bridge_slave_1: entered allmulticast mode [ 243.227979][ T6848] bridge_slave_1: entered promiscuous mode [ 243.315974][ T6850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.335211][ T6850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.361121][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.418601][ T6850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.303189][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.364228][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.553196][ T7000] syz.0.623 (7000): drop_caches: 4 [ 244.568573][ T7001] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 244.696907][ T6848] team0: Port device team_slave_0 added [ 244.848118][ T2546] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.923082][ T6850] hsr_slave_0: entered promiscuous mode [ 244.947975][ T6850] hsr_slave_1: entered promiscuous mode [ 245.002055][ T6850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.013038][ T6850] Cannot create hsr debugfs directory [ 245.037192][ T6848] team0: Port device team_slave_1 added [ 245.142941][ T2546] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.681576][ T2546] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.364768][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 246.364787][ T29] audit: type=1400 audit(1722374549.445:483): avc: denied { sqpoll } for pid=7013 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 246.390345][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.397771][ T29] audit: type=1400 audit(1722374550.015:484): avc: denied { ioctl } for pid=7016 comm="syz.0.625" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 246.423041][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.431016][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.437966][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.463822][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.610832][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.612856][ T7024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.624721][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.637480][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.663667][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.749596][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.848876][ T7026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.869283][ T2546] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.039996][ T9] usb 10-1: device descriptor read/8, error -110 [ 247.051675][ T29] audit: type=1400 audit(1722374550.715:485): avc: denied { write } for pid=4651 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.159799][ T29] audit: type=1400 audit(1722374550.715:486): avc: denied { remove_name } for pid=4651 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.245030][ T29] audit: type=1400 audit(1722374550.715:487): avc: denied { rename } for pid=4651 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.335985][ T29] audit: type=1400 audit(1722374550.715:488): avc: denied { add_name } for pid=4651 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.370550][ T9] usb 10-1: SetAddress Request (3) to port 0 [ 247.392126][ T9] usb 10-1: new SuperSpeed USB device number 3 using vhci_hcd [ 247.433464][ T29] audit: type=1400 audit(1722374550.715:489): avc: denied { unlink } for pid=4651 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.445740][ T6848] hsr_slave_0: entered promiscuous mode [ 247.491620][ T1849] IPVS: starting estimator thread 0... [ 247.497522][ T7034] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 247.501212][ T29] audit: type=1400 audit(1722374550.715:490): avc: denied { create } for pid=4651 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 247.544447][ T6848] hsr_slave_1: entered promiscuous mode [ 247.553233][ T6848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.565661][ T6848] Cannot create hsr debugfs directory [ 247.600514][ T7035] IPVS: using max 18 ests per chain, 43200 per kthread [ 248.758652][ T2546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.177704][ T2546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.312084][ T29] audit: type=1400 audit(1722374552.975:491): avc: denied { ioctl } for pid=7051 comm="syz.4.631" path="/dev/ptp0" dev="devtmpfs" ino=1075 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 249.512063][ T2546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.966627][ T7059] input: syz0 as /devices/virtual/input/input11 [ 250.291176][ T7059] tipc: Started in network mode [ 250.296392][ T7059] tipc: Node identity 86ef5de40e3, cluster identity 4711 [ 250.305096][ T7059] tipc: Enabled bearer , priority 0 [ 250.631865][ T2546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.682233][ T7056] tipc: Disabling bearer [ 252.153652][ T2546] bridge_slave_1: left allmulticast mode [ 252.159345][ T2546] bridge_slave_1: left promiscuous mode [ 252.179681][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.202584][ T2546] bridge_slave_0: left allmulticast mode [ 252.213302][ T2546] bridge_slave_0: left promiscuous mode [ 252.241758][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.480399][ T9] usb 10-1: device descriptor read/8, error -110 [ 252.620001][ T9] usb usb10-port1: attempt power cycle [ 252.830477][ T9] usb 10-1: SetAddress Request (4) to port 0 [ 252.856026][ T9] usb 10-1: new SuperSpeed USB device number 4 using vhci_hcd [ 253.432184][ T7097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.788430][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.810163][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.837428][ T2546] bond0 (unregistering): Released all slaves [ 254.004156][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.024229][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.050712][ T2546] bond0 (unregistering): Released all slaves [ 254.119064][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.638'. [ 254.138049][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 254.194392][ T7093] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 254.321640][ T29] audit: type=1400 audit(1722374557.985:492): avc: denied { unmount } for pid=5518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 254.369019][ T6806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.414586][ T6806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.565366][ T6806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.750687][ T6806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.873714][ T7109] IPv6: Can't replace route, no match found [ 256.230430][ T29] audit: type=1400 audit(1722374559.895:493): avc: denied { read } for pid=7125 comm="syz.0.646" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 256.267865][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.329751][ T29] audit: type=1400 audit(1722374559.925:494): avc: denied { open } for pid=7125 comm="syz.0.646" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 256.479820][ C0] eth0: bad gso: type: 1, size: 1408 [ 256.523622][ T7130] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 256.530261][ T7130] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 256.553921][ T6806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.682489][ T7130] vhci_hcd vhci_hcd.0: Device attached [ 256.722456][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.761240][ T7136] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 256.781969][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.789133][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.916196][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.923429][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.048984][ T7127] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 257.131825][ T7129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 257.207993][ T6806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.297041][ T6850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.343234][ T6850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.395015][ T6850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.450397][ T7133] vhci_hcd: connection closed [ 257.455543][ T1122] vhci_hcd: stop threads [ 257.487600][ T1122] vhci_hcd: release socket [ 257.487881][ T6850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.503494][ T1122] vhci_hcd: disconnect device [ 257.606139][ T2546] hsr_slave_0: left promiscuous mode [ 257.665588][ T2546] hsr_slave_1: left promiscuous mode [ 257.677859][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.700037][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.742265][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.760613][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.785824][ T2546] hsr_slave_0: left promiscuous mode [ 257.795995][ T2546] hsr_slave_1: left promiscuous mode [ 257.820757][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.828233][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.837218][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.845306][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.894860][ T2546] veth1_macvtap: left promiscuous mode [ 257.901377][ T2546] veth0_macvtap: left promiscuous mode [ 257.908172][ T2546] veth1_vlan: left promiscuous mode [ 257.915441][ T2546] veth0_vlan: left promiscuous mode [ 257.924086][ T2546] veth1_macvtap: left promiscuous mode [ 257.933637][ T2546] veth0_macvtap: left promiscuous mode [ 257.939260][ T2546] veth1_vlan: left promiscuous mode [ 257.946011][ T2546] veth0_vlan: left promiscuous mode [ 258.000054][ T9] usb 10-1: device descriptor read/8, error -110 [ 258.127047][ T2546] infiniband syz1: set down [ 258.311545][ T9] usb 10-1: SetAddress Request (5) to port 0 [ 258.334121][ T9] usb 10-1: new SuperSpeed USB device number 5 using vhci_hcd [ 259.229962][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 259.378038][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 259.877988][ T11] smc: removing ib device syz1 [ 261.107257][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 261.246625][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 261.852152][ T5567] lo speed is unknown, defaulting to 1000 [ 261.999926][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.097065][ T7169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.142786][ T6848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.181446][ T6848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.225246][ T6848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.258824][ T6848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.257435][ T6806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.442595][ T9] usb 10-1: device descriptor read/8, error -110 [ 263.590498][ T9] usb usb10-port1: unable to enumerate USB device [ 263.673725][ T1849] vhci_hcd: vhci_device speed not set [ 263.731270][ T6850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.745383][ T6806] veth0_vlan: entered promiscuous mode [ 263.795885][ T6806] veth1_vlan: entered promiscuous mode [ 264.013127][ T6850] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.077796][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.106112][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.113405][ T5567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.176261][ T6806] veth0_macvtap: entered promiscuous mode [ 264.206356][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.242022][ T7188] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 264.248689][ T7188] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.285819][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.293195][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.304843][ T7185] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.332657][ T6806] veth1_macvtap: entered promiscuous mode [ 264.338675][ T7188] vhci_hcd vhci_hcd.0: Device attached [ 264.358476][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.365885][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.403553][ T7185] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.458096][ T7185] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.470734][ T5567] vhci_hcd: vhci_device speed not set [ 264.510908][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.518097][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.543983][ T5567] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 264.681425][ T7190] vhci_hcd: connection reset by peer [ 264.714177][ T1122] vhci_hcd: stop threads [ 264.738493][ T1122] vhci_hcd: release socket [ 264.743612][ T1122] vhci_hcd: disconnect device [ 264.788283][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.811118][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.825660][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.839329][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.855927][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.985584][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.033047][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.063430][ T6806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.074148][ T6806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.088334][ T6806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.127826][ T6806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.137278][ T6806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.147374][ T6806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.156260][ T6806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.624674][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.670673][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.722626][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.000932][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.338179][ T6850] veth0_vlan: entered promiscuous mode [ 266.692226][ T6850] veth1_vlan: entered promiscuous mode [ 267.337955][ T29] audit: type=1400 audit(1722374570.985:495): avc: denied { read } for pid=7230 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.429533][ T29] audit: type=1400 audit(1722374571.085:496): avc: denied { block_suspend } for pid=7230 comm="syz.0.662" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 267.638595][ T5528] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.648854][ T5528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.661157][ T5528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.674426][ T5528] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.691121][ T5528] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.698750][ T5528] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.073009][ T6848] veth0_vlan: entered promiscuous mode [ 268.216539][ T6850] veth0_macvtap: entered promiscuous mode [ 268.489218][ T6848] veth1_vlan: entered promiscuous mode [ 268.709637][ T29] audit: type=1400 audit(1722374572.255:497): avc: denied { ioctl } for pid=7247 comm="syz.4.664" path="/dev/ptyqc" dev="devtmpfs" ino=133 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 269.445381][ T6850] veth1_macvtap: entered promiscuous mode [ 269.602183][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.613513][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.627256][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.640749][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.667666][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.680644][ T5567] vhci_hcd: vhci_device speed not set [ 269.699462][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.727621][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.760826][ T54] Bluetooth: hci1: command tx timeout [ 269.857072][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.882900][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.905984][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.943714][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.979008][ T6850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.023747][ T6850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.061804][ T6850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.215787][ T6848] veth0_macvtap: entered promiscuous mode [ 270.383633][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.633396][ T6850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.686049][ T6850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.701627][ T6850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.724661][ T6850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.744188][ T29] audit: type=1400 audit(1722374574.405:498): avc: denied { bind } for pid=7274 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.771812][ T6848] veth1_macvtap: entered promiscuous mode [ 270.787109][ T29] audit: type=1400 audit(1722374574.425:499): avc: denied { name_bind } for pid=7274 comm="syz.4.666" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 270.812251][ T29] audit: type=1400 audit(1722374574.425:500): avc: denied { node_bind } for pid=7274 comm="syz.4.666" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 270.879052][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.224823][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.343870][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 271.389546][ T29] audit: type=1400 audit(1722374575.035:501): avc: denied { ioctl } for pid=7290 comm="syz.0.668" path="socket:[15585]" dev="sockfs" ino=15585 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 271.519254][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.655171][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.679735][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.690319][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.711862][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.727605][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.745547][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.759245][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.777303][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.816382][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.840336][ T54] Bluetooth: hci1: command tx timeout [ 271.900250][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.913848][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.935529][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.977211][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.996675][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.015038][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.036290][ T6848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.054104][ T6848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.096953][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.154370][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.207323][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.356888][ T6848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.379644][ T6848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.388451][ T6848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.411186][ T6848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.439053][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.451459][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.460719][ T7237] bridge_slave_0: entered allmulticast mode [ 272.473823][ T7237] bridge_slave_0: entered promiscuous mode [ 272.581644][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.616377][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.636122][ T7237] bridge_slave_1: entered allmulticast mode [ 272.649005][ T7237] bridge_slave_1: entered promiscuous mode [ 272.859206][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.912290][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.924815][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.991864][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.084222][ T1122] bridge_slave_1: left allmulticast mode [ 273.099108][ T1122] bridge_slave_1: left promiscuous mode [ 273.111517][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.132978][ T1122] bridge_slave_0: left allmulticast mode [ 273.144016][ T1122] bridge_slave_0: left promiscuous mode [ 273.155540][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.816311][ T7342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7342 comm=syz.4.675 [ 273.857338][ T7342] trusted_key: encrypted_key: insufficient parameters specified [ 273.920078][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.920202][ T54] Bluetooth: hci1: command tx timeout [ 273.941914][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.957245][ T1122] bond0 (unregistering): Released all slaves [ 273.997642][ T7237] team0: Port device team_slave_0 added [ 274.138281][ T7237] team0: Port device team_slave_1 added [ 274.166347][ T2546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.218631][ T2546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.550813][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.664662][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.185053][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.198507][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.206425][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.239453][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.437890][ T7357] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 275.480526][ T7357] netlink: 'syz.4.678': attribute type 1 has an invalid length. [ 275.492917][ T7357] netlink: 'syz.4.678': attribute type 1 has an invalid length. [ 275.508178][ T7357] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 275.516950][ T7357] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 275.643866][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.671672][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.679268][ T29] audit: type=1400 audit(1722374579.335:502): avc: denied { connect } for pid=7361 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.703150][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 275.785033][ T7357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7357 comm=syz.4.678 [ 275.906638][ T29] audit: type=1400 audit(1722374579.565:503): avc: denied { connect } for pid=7355 comm="syz.4.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 275.943468][ T7237] hsr_slave_0: entered promiscuous mode [ 276.002881][ T54] Bluetooth: hci1: command tx timeout [ 276.035008][ T7237] hsr_slave_1: entered promiscuous mode [ 276.128354][ T1122] hsr_slave_0: left promiscuous mode [ 276.176122][ T1122] hsr_slave_1: left promiscuous mode [ 276.190701][ T7375] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.682'. [ 276.200930][ T7365] netlink: 72 bytes leftover after parsing attributes in process `syz.0.680'. [ 276.210606][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.218709][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.227159][ T7375] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 276.271311][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.295709][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.404473][ T1122] veth1_macvtap: left promiscuous mode [ 276.468479][ T1122] veth0_macvtap: left promiscuous mode [ 276.488392][ T1122] veth1_vlan: left promiscuous mode [ 276.518210][ T1122] veth0_vlan: left promiscuous mode [ 278.281305][ T29] audit: type=1400 audit(1722374581.835:504): avc: denied { setopt } for pid=7397 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.559508][ T29] audit: type=1400 audit(1722374583.215:505): avc: denied { getopt } for pid=7415 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 279.806511][ T7424] netlink: 'syz.3.692': attribute type 2 has an invalid length. [ 279.821760][ T7424] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 279.837134][ T7424] netlink: 'syz.3.692': attribute type 1 has an invalid length. [ 279.845474][ T7424] netlink: 'syz.3.692': attribute type 2 has an invalid length. [ 279.863947][ T7424] netlink: 'syz.3.692': attribute type 2 has an invalid length. [ 279.983078][ T7428] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.694'. [ 280.010890][ T7428] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 280.071870][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 280.156279][ T7433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7433 comm=syz.3.692 [ 280.467231][ T7436] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7436 comm=syz.4.695 [ 280.488021][ T29] audit: type=1400 audit(1722374584.145:506): avc: denied { audit_read } for pid=7435 comm="syz.4.695" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 280.517810][ T7436] trusted_key: encrypted_key: insufficient parameters specified [ 280.970978][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 281.098918][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 282.410372][ T7455] 9pnet_fd: Insufficient options for proto=fd [ 282.579979][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 285.783229][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 286.276489][ T29] audit: type=1400 audit(1722374589.935:507): avc: denied { connect } for pid=7477 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.300445][ T5595] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 286.421593][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7490 comm=syz.3.707 [ 286.475913][ T7491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7491 comm=syz.0.705 [ 286.519651][ T5595] usb 5-1: Using ep0 maxpacket: 8 [ 286.537263][ T5595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.577907][ T7478] trusted_key: encrypted_key: insufficient parameters specified [ 286.589481][ T5595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.605985][ T5595] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.646895][ T5595] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 286.660647][ T5595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.680433][ T5595] usb 5-1: config 0 descriptor?? [ 287.194408][ T5595] belkin 0003:050D:3201.0005: item fetching failed at offset 5/7 [ 287.244232][ T5595] belkin 0003:050D:3201.0005: parse failed [ 287.252809][ T5595] belkin 0003:050D:3201.0005: probe with driver belkin failed with error -22 [ 287.326062][ T7237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.393933][ T7237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.430978][ T7237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.460959][ T7237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.722552][ T5567] usb 5-1: USB disconnect, device number 5 [ 288.096522][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.200350][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.257026][ T1849] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.264406][ T1849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.386125][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.394485][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.639671][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 288.714004][ T7237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.269987][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.718'. [ 289.289818][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'. [ 289.614348][ T7547] bond1: entered allmulticast mode [ 289.630107][ T7547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.861599][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.126430][ T7237] veth0_vlan: entered promiscuous mode [ 290.175534][ T7237] veth1_vlan: entered promiscuous mode [ 290.301668][ T7237] veth0_macvtap: entered promiscuous mode [ 290.317573][ T7237] veth1_macvtap: entered promiscuous mode [ 290.421432][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.450060][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.490521][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.510540][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.527137][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.576741][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.598783][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.614031][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.654607][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.713910][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.751226][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.762592][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.838322][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.863835][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.892353][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.911253][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.956149][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.018383][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.122454][ T7237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.147132][ T7237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.183471][ T7237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.198345][ T7237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.725427][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.747467][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.896702][ T6832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.905659][ T6832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.230226][ T46] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 292.416639][ T7586] fuse: Bad value for 'fd' [ 292.429562][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 292.461291][ T29] audit: type=1400 audit(1722374596.115:508): avc: denied { create } for pid=7585 comm="syz.2.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.830508][ T46] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 292.849916][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.858485][ T46] usb 5-1: Product: syz [ 292.865577][ T46] usb 5-1: Manufacturer: syz [ 292.872372][ T46] usb 5-1: SerialNumber: syz [ 292.887707][ T46] usb 5-1: config 0 descriptor?? [ 293.117153][ T46] usb 5-1: invalid MIDI EP [ 293.166157][ T46] usb 5-1: snd-bcd2000: error during probing [ 293.193568][ T46] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 293.220136][ T46] usb 5-1: USB disconnect, device number 6 [ 293.284678][ T29] audit: type=1400 audit(1722374596.935:509): avc: denied { setattr } for pid=7587 comm="syz.3.731" name="vbi4" dev="devtmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 293.440509][ T29] audit: type=1400 audit(1722374597.105:510): avc: denied { shutdown } for pid=7594 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 295.710018][ T5595] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 295.920682][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.936863][ T5595] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.961422][ T5595] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 295.971431][ T5595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.005674][ T5595] usb 2-1: config 0 descriptor?? [ 296.370839][ T29] audit: type=1400 audit(1722374600.035:511): avc: denied { create } for pid=7634 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 296.417703][ T29] audit: type=1400 audit(1722374600.075:512): avc: denied { setopt } for pid=7634 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 296.443015][ T29] audit: type=1400 audit(1722374600.075:513): avc: denied { connect } for pid=7634 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 297.559149][ T7638] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7638 comm=syz.2.747 [ 297.620916][ T46] usb 2-1: USB disconnect, device number 5 [ 297.639144][ T7638] trusted_key: encrypted_key: insufficient parameters specified [ 298.171368][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 298.451076][ T7657] 9pnet_fd: Insufficient options for proto=fd [ 299.069563][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 299.335075][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.069519][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.089311][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.161718][ T46] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 300.193144][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.422888][ T46] usb 5-1: config 0 descriptor?? [ 301.593962][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 301.600237][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.647364][ C0] ================================================================== [ 301.655474][ C0] BUG: KASAN: stack-out-of-bounds in xdp_do_check_flushed+0x41c/0x4e0 [ 301.663754][ C0] Read of size 4 at addr ffffc90003367a50 by task syz.1.757/7670 [ 301.671492][ C0] [ 301.673843][ C0] CPU: 0 UID: 0 PID: 7670 Comm: syz.1.757 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 301.684458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 301.694549][ C0] Call Trace: [ 301.697847][ C0] [ 301.700703][ C0] dump_stack_lvl+0x116/0x1f0 [ 301.705520][ C0] print_report+0xc3/0x620 [ 301.709974][ C0] ? __virt_addr_valid+0x5e/0x590 [ 301.715036][ C0] kasan_report+0xd9/0x110 [ 301.719489][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 301.725326][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 301.730745][ C0] xdp_do_check_flushed+0x41c/0x4e0 [ 301.736000][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 301.741412][ C0] net_rx_action+0xa92/0x1010 [ 301.746126][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 301.751278][ C0] ? __pfx_mark_lock+0x10/0x10 [ 301.756078][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 301.759964][ T46] usb 5-1: USB disconnect, device number 7 [ 301.761299][ C0] ? sched_clock+0x38/0x60 [ 301.771529][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 301.776419][ C0] ? mark_held_locks+0x9f/0xe0 [ 301.781221][ C0] handle_softirqs+0x216/0x8f0 [ 301.786032][ C0] ? handle_edge_irq+0x40f/0xd10 [ 301.791008][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 301.796335][ C0] irq_exit_rcu+0xbb/0x120 [ 301.800792][ C0] common_interrupt+0xb0/0xd0 [ 301.805531][ C0] [ 301.808480][ C0] [ 301.811426][ C0] asm_common_interrupt+0x26/0x40 [ 301.816511][ C0] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 301.821922][ C0] Code: 03 00 83 f8 07 89 c5 0f 87 82 00 00 00 48 8d 3c ed 60 1b 7b 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 60 1b 7b 8d 48 b8 00 00 00 00 00 fc ff df 48 89 [ 301.841563][ C0] RSP: 0018:ffffc90003367500 EFLAGS: 00000246 [ 301.847670][ C0] RAX: dffffc0000000000 RBX: 0000000000037ec8 RCX: ffffffff8168761b [ 301.855765][ C0] RDX: 1ffffffff1af636c RSI: ffffffff8bb081c0 RDI: ffffffff8d7b1b60 [ 301.863765][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff202559b [ 301.871762][ C0] R10: ffffffff9012acdf R11: 0000000000000000 R12: 0000000000000000 [ 301.879764][ C0] R13: 0000000000000000 R14: ffffffff8ddb52e0 R15: 0000000000000000 [ 301.887768][ C0] ? lock_acquire+0xbb/0x560 [ 301.892403][ C0] lock_acquire+0x47b/0x560 [ 301.896949][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 301.902013][ C0] ? page_ext_put+0x48/0xd0 [ 301.906550][ C0] ? page_table_check_clear.part.0+0x3a7/0x540 [ 301.912826][ C0] __page_table_check_pte_clear+0x1c0/0x580 [ 301.918757][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 301.924864][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 301.931337][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 301.937479][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 301.944736][ C0] unmap_page_range+0x21ac/0x3c10 [ 301.949807][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 301.955208][ C0] ? uprobe_munmap+0x20/0x5d0 [ 301.960016][ C0] unmap_single_vma+0x194/0x2b0 [ 301.964913][ C0] unmap_vmas+0x22f/0x490 [ 301.969275][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 301.974153][ C0] ? __pfx_lock_release+0x10/0x10 [ 301.979276][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 301.984391][ C0] exit_mmap+0x1b8/0xb20 [ 301.988635][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 301.993398][ C0] __mmput+0x12a/0x480 [ 301.997473][ C0] mmput+0x62/0x70 [ 302.001285][ C0] do_exit+0x9bf/0x2bb0 [ 302.005474][ C0] ? get_signal+0x8f2/0x2770 [ 302.010065][ C0] ? __pfx_do_exit+0x10/0x10 [ 302.014646][ C0] do_group_exit+0xd3/0x2a0 [ 302.019142][ C0] get_signal+0x25fd/0x2770 [ 302.023643][ C0] ? vfs_write+0x917/0x1140 [ 302.028134][ C0] ? vfs_write+0x14d/0x1140 [ 302.032638][ C0] ? __pfx_get_signal+0x10/0x10 [ 302.037496][ C0] ? __pfx_do_futex+0x10/0x10 [ 302.042171][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 302.047741][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 302.053894][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 302.059530][ C0] do_syscall_64+0xda/0x250 [ 302.064053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.069943][ C0] RIP: 0033:0x7f764d177299 [ 302.074362][ C0] Code: Unable to access opcode bytes at 0x7f764d17726f. [ 302.081365][ C0] RSP: 002b:00007f764dfb00f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.089779][ C0] RAX: fffffffffffffe00 RBX: 00007f764d305f88 RCX: 00007f764d177299 [ 302.097774][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f764d305f88 [ 302.105846][ C0] RBP: 00007f764d305f80 R08: 00007f764dfb06c0 R09: 00007f764dfb06c0 [ 302.113839][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f764d305f8c [ 302.121812][ C0] R13: 000000000000000b R14: 00007ffcbab8b8e0 R15: 00007ffcbab8b9c8 [ 302.129886][ C0] [ 302.132904][ C0] [ 302.135215][ C0] The buggy address belongs to stack of task syz.1.757/7670 [ 302.142480][ C0] and is located at offset 24 in frame: [ 302.148089][ C0] exit_mmap+0x0/0xb20 [ 302.152154][ C0] [ 302.154470][ C0] This frame has 2 objects: [ 302.158986][ C0] [32, 96) 'vmi' [ 302.158996][ C0] [128, 256) 'tlb' [ 302.162641][ C0] [ 302.168752][ C0] The buggy address belongs to the virtual mapping at [ 302.168752][ C0] [ffffc90003360000, ffffc90003369000) created by: [ 302.168752][ C0] kernel_clone+0xfd/0x980 [ 302.186209][ C0] [ 302.188555][ C0] The buggy address belongs to the physical page: [ 302.194994][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807cc1b000 pfn:0x7cc1b [ 302.205095][ C0] memcg:ffff888079e45602 [ 302.209371][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 302.216502][ C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 302.225087][ C0] raw: ffff88807cc1b000 0000000000000000 00000001ffffffff ffff888079e45602 [ 302.233776][ C0] page dumped because: kasan: bad access detected [ 302.240187][ C0] page_owner tracks the page as allocated [ 302.245896][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 7669, tgid 7669 (syz.1.757), ts 300447823726, free_ts 300175479893 [ 302.264130][ C0] post_alloc_hook+0x2d1/0x350 [ 302.268899][ C0] get_page_from_freelist+0x1351/0x2e50 [ 302.274453][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 302.279729][ C0] alloc_pages_mpol_noprof+0x275/0x610 [ 302.285177][ C0] __vmalloc_node_range_noprof+0xa6a/0x1520 [ 302.291064][ C0] copy_process+0x2f3b/0x8de0 [ 302.295742][ C0] kernel_clone+0xfd/0x980 [ 302.300140][ C0] __do_sys_clone3+0x1f5/0x270 [ 302.304892][ C0] do_syscall_64+0xcd/0x250 [ 302.309529][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.315434][ C0] page last free pid 7667 tgid 7665 stack trace: [ 302.321757][ C0] free_unref_page+0x64a/0xe40 [ 302.326529][ C0] vfree+0x181/0x7a0 [ 302.330417][ C0] bpf_check+0x1acd/0xa210 [ 302.334845][ C0] bpf_prog_load+0xedb/0x2660 [ 302.339539][ C0] __sys_bpf+0x8e9/0x4a20 [ 302.343876][ C0] __x64_sys_bpf+0x78/0xc0 [ 302.348377][ C0] do_syscall_64+0xcd/0x250 [ 302.352930][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.358936][ C0] [ 302.361259][ C0] Memory state around the buggy address: [ 302.367286][ C0] ffffc90003367900: 00 f2 f2 f2 00 f2 f2 f2 00 00 f2 f2 00 00 00 00 [ 302.375434][ C0] ffffc90003367980: 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 [ 302.383584][ C0] >ffffc90003367a00: 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 [ 302.391633][ C0] ^ [ 302.398317][ C0] ffffc90003367a80: 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 [ 302.406374][ C0] ffffc90003367b00: 00 00 00 00 00 00 00 f3 f3 f3 f3 00 00 00 00 00 [ 302.414440][ C0] ================================================================== [ 302.422625][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 302.429821][ C0] CPU: 0 UID: 0 PID: 7670 Comm: syz.1.757 Not tainted 6.11.0-rc1-syzkaller-00044-g22f546873149 #0 [ 302.440399][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 302.450471][ C0] Call Trace: [ 302.453776][ C0] [ 302.456614][ C0] dump_stack_lvl+0x3d/0x1f0 [ 302.461212][ C0] panic+0x6f5/0x7a0 [ 302.465117][ C0] ? __pfx_panic+0x10/0x10 [ 302.469545][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 302.474672][ C0] check_panic_on_warn+0xab/0xb0 [ 302.479623][ C0] end_report+0x117/0x180 [ 302.483979][ C0] kasan_report+0xe9/0x110 [ 302.488506][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 302.493886][ C0] ? xdp_do_check_flushed+0x41c/0x4e0 [ 302.499268][ C0] xdp_do_check_flushed+0x41c/0x4e0 [ 302.504602][ C0] __napi_poll.constprop.0+0xd1/0x550 [ 302.509988][ C0] net_rx_action+0xa92/0x1010 [ 302.514660][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 302.519764][ C0] ? __pfx_mark_lock+0x10/0x10 [ 302.524517][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 302.529708][ C0] ? sched_clock+0x38/0x60 [ 302.534112][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 302.538961][ C0] ? mark_held_locks+0x9f/0xe0 [ 302.543723][ C0] handle_softirqs+0x216/0x8f0 [ 302.548511][ C0] ? handle_edge_irq+0x40f/0xd10 [ 302.553470][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 302.558858][ C0] irq_exit_rcu+0xbb/0x120 [ 302.563297][ C0] common_interrupt+0xb0/0xd0 [ 302.568008][ C0] [ 302.570926][ C0] [ 302.573839][ C0] asm_common_interrupt+0x26/0x40 [ 302.578866][ C0] RIP: 0010:rcu_is_watching+0x41/0xc0 [ 302.584336][ C0] Code: 03 00 83 f8 07 89 c5 0f 87 82 00 00 00 48 8d 3c ed 60 1b 7b 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <75> 5c 48 03 1c ed 60 1b 7b 8d 48 b8 00 00 00 00 00 fc ff df 48 89 [ 302.603945][ C0] RSP: 0018:ffffc90003367500 EFLAGS: 00000246 [ 302.610027][ C0] RAX: dffffc0000000000 RBX: 0000000000037ec8 RCX: ffffffff8168761b [ 302.618127][ C0] RDX: 1ffffffff1af636c RSI: ffffffff8bb081c0 RDI: ffffffff8d7b1b60 [ 302.626113][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff202559b [ 302.634134][ C0] R10: ffffffff9012acdf R11: 0000000000000000 R12: 0000000000000000 [ 302.642113][ C0] R13: 0000000000000000 R14: ffffffff8ddb52e0 R15: 0000000000000000 [ 302.650090][ C0] ? lock_acquire+0xbb/0x560 [ 302.654780][ C0] lock_acquire+0x47b/0x560 [ 302.659278][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 302.664294][ C0] ? page_ext_put+0x48/0xd0 [ 302.668790][ C0] ? page_table_check_clear.part.0+0x3a7/0x540 [ 302.674955][ C0] __page_table_check_pte_clear+0x1c0/0x580 [ 302.680858][ C0] ? __page_table_check_pte_clear+0x1ba/0x580 [ 302.686975][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 302.693476][ C0] ? const_folio_flags.constprop.0+0x56/0x150 [ 302.699545][ C0] ? __tlb_remove_folio_pages_size.constprop.0+0x162/0x560 [ 302.706749][ C0] unmap_page_range+0x21ac/0x3c10 [ 302.711784][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 302.717150][ C0] ? uprobe_munmap+0x20/0x5d0 [ 302.721827][ C0] unmap_single_vma+0x194/0x2b0 [ 302.726759][ C0] unmap_vmas+0x22f/0x490 [ 302.731077][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 302.735913][ C0] ? __pfx_lock_release+0x10/0x10 [ 302.740944][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 302.746042][ C0] exit_mmap+0x1b8/0xb20 [ 302.750587][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 302.755455][ C0] __mmput+0x12a/0x480 [ 302.759534][ C0] mmput+0x62/0x70 [ 302.763274][ C0] do_exit+0x9bf/0x2bb0 [ 302.767443][ C0] ? get_signal+0x8f2/0x2770 [ 302.772032][ C0] ? __pfx_do_exit+0x10/0x10 [ 302.776618][ C0] do_group_exit+0xd3/0x2a0 [ 302.781112][ C0] get_signal+0x25fd/0x2770 [ 302.785654][ C0] ? vfs_write+0x917/0x1140 [ 302.790152][ C0] ? vfs_write+0x14d/0x1140 [ 302.794641][ C0] ? __pfx_get_signal+0x10/0x10 [ 302.799493][ C0] ? __pfx_do_futex+0x10/0x10 [ 302.804175][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 302.809744][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 302.815899][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 302.821551][ C0] do_syscall_64+0xda/0x250 [ 302.826038][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.831936][ C0] RIP: 0033:0x7f764d177299 [ 302.836362][ C0] Code: Unable to access opcode bytes at 0x7f764d17726f. [ 302.843379][ C0] RSP: 002b:00007f764dfb00f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.851802][ C0] RAX: fffffffffffffe00 RBX: 00007f764d305f88 RCX: 00007f764d177299 [ 302.859782][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f764d305f88 [ 302.867759][ C0] RBP: 00007f764d305f80 R08: 00007f764dfb06c0 R09: 00007f764dfb06c0 [ 302.875737][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f764d305f8c [ 302.883711][ C0] R13: 000000000000000b R14: 00007ffcbab8b8e0 R15: 00007ffcbab8b9c8 [ 302.891676][ C0] [ 302.895005][ C0] Kernel Offset: disabled [ 302.899339][ C0] Rebooting in 86400 seconds..