last executing test programs: 2m22.880234881s ago: executing program 1 (id=294): futex(0x0, 0x2, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = creat(0x0, 0x1de) close(r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f0000000740)='\\\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', 0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="1802000063f9fffe00000000000000008500000041000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x5}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r2, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x690a, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, 0x24}, &(0x7f0000000200), &(0x7f0000000100)) 2m20.59208005s ago: executing program 1 (id=301): r0 = socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x0, 0x803, 0x0) io_setup(0x7, 0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020301040040000000000000000000000800010001000000053bd670a6206c6fd831ae143098787326c8b136f0035682e7d38ed3"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000010301040000000000000000000000000c000200000000000000000006f9476ce43c57f422f1b31b9c64df8532"], 0x20}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 2m19.215255888s ago: executing program 1 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x0, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r3, &(0x7f00000005c0)=""/102384, 0x18ff0) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 1m29.382259196s ago: executing program 1 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0xa, 0x7, 0x0, "5748d20a0500cb623d994e004bb255c9912a9c050099d8cdd2183b76c78176568e7ffdffffffffc60911194649d33d00", "e5d755ed8dc712c710eaf7a158e7425902d092eae9849a21a601141d546c89ae9edc3443d78840023f6b31e677978f71d1408c73027bf3a182f6d8b48ea2d940", "02f19ebd0f58e3bf691bd5476d1ac7ae9997e063067d19d99652c4a5a777405e", [0x0, 0x1]}) timer_create(0x6, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x4242, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'bridge_slave_1\x00'}}, 0x1e) socket$packet(0x11, 0x2, 0x300) r4 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x0, 0x4, 0x7, 0x606020a, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) syz_emit_ethernet(0x102, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) connect$pppoe(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sync() prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r5 = gettid() tkill(r5, 0x7) 1m26.887865534s ago: executing program 1 (id=327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000714b3d559cf09500"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r1 = socket$inet(0x2, 0x4, 0x8) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000240)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x43}, @local}, 0xc) r2 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x22812, r2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000140)='asymmetric\x00', &(0x7f00000004c0)='\x00\xb2v\xe4~[R;3\x00\x00\x00\x00\xb8\x9bH\x10}\xb0]\xc0\x95\xd9\xa9\xad\xa7V\xac\x95\xb0\xe2b\x98l\xfb\xd5S\xab5\x86,\xb3\x82\xeepW\xca\xd0\xea\xb0\x8d\v\n}\x12;\x00\x00\x00\xad\xb4T\x8f\x95\\\xc7\x13X.;\xb5\xc4]\x9f\x9a\x0f3M\xce\x11\xb4\x97e\xecz=\xa8\x97\xf0\xc5\x9a\x9f8\xa8_v\x9f\nx\xc4\x9f\x84\xa9\aI5\xa2p\x80\xb4}\xae\xc3\fkE\xee\x9e\x1e(\xee-\xd8o\xbd\x16\b~\x83\xf9\xb3@\xc6M\xbej\x90\x12\x9a\x04\xd5\x0292\xa4\xbcC\xf0\xb7\xb9\xd5F\x82#\xb9\x15h\xf9Q\xe5E\xdb\x13\xaa\xa5df\x99\xafwZr&\x9d\xf8\x943q\xac\xff\xb5\x9a\xb3jE\xa5\xfe_\x03\x99\xc6\x86h\xb5w\x18\xad\xcf\x12\t\xd2\xa2\xccS&\xcbu\xc3\xe8\x8fe\x01\xaa\xb7\xe2\xac\xcb|\xff]\xcf\xb2\x8fO\xa6\xe6\xb1\x10\xb8') r4 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x36, &(0x7f0000001d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x328, 0x208, 0x328, 0x0, 0x0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'macvtap0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00', [], [], 'nicvf0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) sendto$unix(r2, &(0x7f0000000340)="2ad6614b040a95ac2cafd08078e001ccd9d582868f5c6cd9d6e88904dd2c598e7627d06596e5854654bfe2a6943ff6c61c9a4c1f23b3318492f6ca6c9110fae7886917ee2f3851aee313c9e40d03c1a398d5da3c58627e7de106e066698480748f", 0x61, 0x0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) sendmmsg$inet6(r5, &(0x7f00000015c0), 0x0, 0x20044051) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) timerfd_gettime(0xffffffffffffffff, 0x0) 1m24.6534798s ago: executing program 1 (id=330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x3}) mkdir(0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000001780), 0x0, &(0x7f0000001c00)=ANY=[]) 1m20.307576017s ago: executing program 4 (id=339): timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80, 0x30, 0x101, 0x410, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = getpgrp(r1) prctl$PR_SET_PTRACER(0x59616d61, r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{}, {}, 0x0, 0x7}) 1m18.876971398s ago: executing program 4 (id=340): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'xfrm0\x00'}) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000140), &(0x7f0000000800)=0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x22, &(0x7f0000000040)=0x3, 0x4) pipe2$watch_queue(&(0x7f0000000100), 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x3) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x4, 0x88, [0x1, 0x7, 0x5, 0x6, 0x100, 0x1ff], 0x0, &(0x7f0000000140), &(0x7f0000000180)=""/136}, &(0x7f0000000240)=0x78) r4 = accept$inet(r2, 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='$((^\x00', 0x40, 0x6, &(0x7f00000000c0)={0x1f, 0xffff, 0x7, 0x2}) dup2(r5, r4) readv(r4, 0x0, 0x0) signalfd4(r4, &(0x7f00000003c0)={[0x1ff]}, 0x8, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000400)) flistxattr(r4, &(0x7f0000000000)=""/52, 0x34) lseek(r4, 0x90b, 0x0) 1m17.255295624s ago: executing program 4 (id=342): sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x24, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x9, 0x67) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x7a}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0xba5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) syz_emit_ethernet(0x10e, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x46, 0x2}, @cond}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m16.714974928s ago: executing program 4 (id=343): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r2 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="bf"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m16.23817718s ago: executing program 4 (id=344): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x1}}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) chdir(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@dyn}, {@flock_openafs}, {}]}) 1m14.947727209s ago: executing program 4 (id=347): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000000180), 0x400000000000077, 0x0) 16.217533243s ago: executing program 2 (id=424): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 14.371785423s ago: executing program 2 (id=428): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x2a2, @time={0x4, 0xa}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "004001", 0x36, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "e4073d2d9d90"}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00', @ANYRES32, @ANYBLOB], 0x0}, 0x90) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 12.532574398s ago: executing program 0 (id=430): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x0, 0x746}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121401, 0x0) write$proc_mixer(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='VOLUME \'M'], 0x35) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, r2, 0x303}, 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002dc0)="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", 0x2a1}], 0x1}}], 0x2, 0x0) 10.978267191s ago: executing program 2 (id=432): sched_setscheduler(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x23b) io_setup(0x3, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000030601030000000000000000000000000500010007000000c7dc802651775dfd48dc69bce38abd42893d2fde7ba8fcbf17eeb02e701fec4e91a84fe4293ff25e3af047f3"], 0x1c}}, 0x0) 10.839672949s ago: executing program 0 (id=433): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x23, 0x5, 0x5) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000040)={0x80}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, 0x0, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-', 0x1}], 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4070d0903001f00000000000005000000000800040001000000", 0x24) write$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) 9.777097141s ago: executing program 3 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x0, @remote}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 9.721783354s ago: executing program 2 (id=435): sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') write$P9_RWRITE(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 7.820647748s ago: executing program 2 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20}, 0xe) sendto$inet6(r1, &(0x7f0000000140)='T', 0x1, 0x60004084, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x40540) shutdown(r1, 0x1) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000280)={0x2710, 0x0, &(0x7f00004e5000/0x2000)=nil}) unshare(0x6a040000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.81911558s ago: executing program 0 (id=437): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x1100, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x2b5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) gettid() 6.260101597s ago: executing program 0 (id=438): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000740)) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)=0xe93) fallocate(r0, 0x30, 0x9, 0x10000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001a40)) clock_gettime(0x1, &(0x7f0000000c40)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)={r1, r2+60000000}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000380)=0x100) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='afs_edit_dir\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 6.050945166s ago: executing program 0 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a58000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000004800000000000000af"]) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r5, 0x0, 0x801) 5.921880691s ago: executing program 3 (id=440): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x4, 0x800) chdir(&(0x7f00000000c0)='./bus\x00') r1 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0xd, 0x2}, 0x10}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @random="cce390677742", @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb05", 0x30, 0x2f, 0x0, @private1, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0120d2", 0x0, 0x0, 0x0, @mcast2, @remote}}}}}}}, 0x0) 3.662038942s ago: executing program 3 (id=441): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x161040, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="34020000020000000580000000000000010000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x234) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r4, 0x715, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) 2.328520124s ago: executing program 3 (id=442): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xa) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) 463.192555ms ago: executing program 0 (id=443): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) socket(0x0, 0x2, 0x0) 461.329518ms ago: executing program 3 (id=451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = userfaultfd(0x80001) readv(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) tgkill(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 240.815559ms ago: executing program 2 (id=444): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x3871000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="66b9630a00000f32f30f090f23403e660f388267000f1f0066b9800000c00f326635010000000f300f01c2bad004b0c0ee66b9550b000066b8654d000066ba000000000f30642626660f0da019ff", 0x4e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype0={0x4, 0xb}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=445): io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) creat(0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): en } for pid=6024 comm="syz.4.127" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.756428][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.779095][ T6027] netlink: 4100 bytes leftover after parsing attributes in process `syz.4.127'. [ 226.928987][ T5237] Bluetooth: hci3: command tx timeout [ 227.698454][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.712245][ T29] audit: type=1400 audit(1725141574.783:378): avc: denied { read } for pid=6036 comm="syz.0.129" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 227.738996][ T29] audit: type=1400 audit(1725141574.793:379): avc: denied { open } for pid=6036 comm="syz.0.129" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 227.771431][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.789384][ T1097] bond0 (unregistering): Released all slaves [ 228.761595][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 229.008981][ T5237] Bluetooth: hci3: command tx timeout [ 229.022921][ T1097] hsr_slave_0: left promiscuous mode [ 229.038983][ T1097] hsr_slave_1: left promiscuous mode [ 229.067340][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.110632][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.155678][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.184732][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.350513][ T1097] veth1_macvtap: left promiscuous mode [ 229.356415][ T1097] veth0_macvtap: left promiscuous mode [ 229.362623][ T29] audit: type=1400 audit(1725141576.393:380): avc: denied { create } for pid=6043 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.390062][ T1097] veth1_vlan: left promiscuous mode [ 229.420019][ T1097] veth0_vlan: left promiscuous mode [ 229.426106][ T29] audit: type=1400 audit(1725141576.443:381): avc: denied { connect } for pid=6043 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.739001][ T5231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.989883][ T5231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.032865][ T5231] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.053981][ T5231] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.082681][ T5231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.162399][ T5231] usb 5-1: config 0 descriptor?? [ 230.247375][ T6046] Falling back ldisc for ptm0. [ 230.944282][ T6065] ======================================================= [ 230.944282][ T6065] WARNING: The mand mount option has been deprecated and [ 230.944282][ T6065] and is ignored by this kernel. Remove the mand [ 230.944282][ T6065] option from the mount to silence this warning. [ 230.944282][ T6065] ======================================================= [ 230.979437][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.043194][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 231.043219][ T29] audit: type=1400 audit(1725141578.113:383): avc: denied { unmount } for pid=6051 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.101404][ T5239] Bluetooth: hci3: command tx timeout [ 231.870076][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 232.005329][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 232.655173][ T5231] usbhid 5-1:0.0: can't add hid device: -71 [ 232.669048][ T5231] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.738746][ T5231] usb 5-1: USB disconnect, device number 4 [ 232.932186][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 232.938334][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 233.632273][ T29] audit: type=1400 audit(1725141580.703:384): avc: denied { bind } for pid=6077 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.927740][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.886935][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.536078][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.575827][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.605854][ T5984] bridge_slave_0: entered allmulticast mode [ 235.618069][ T5984] bridge_slave_0: entered promiscuous mode [ 235.630299][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.549986][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.575822][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.597248][ T5984] bridge_slave_1: entered allmulticast mode [ 241.623989][ T5984] bridge_slave_1: entered promiscuous mode [ 241.756336][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.904215][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.082157][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.786923][ T5984] team0: Port device team_slave_0 added [ 242.972558][ T5984] team0: Port device team_slave_1 added [ 242.991932][ T29] audit: type=1400 audit(1725141590.073:385): avc: denied { write } for pid=6109 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.085194][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.140089][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.212397][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.301952][ T29] audit: type=1400 audit(1725141591.383:386): avc: denied { read } for pid=6115 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 245.268059][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.285589][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.348666][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.437294][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.484617][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.695772][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.049991][ T5984] hsr_slave_0: entered promiscuous mode [ 246.101335][ T5984] hsr_slave_1: entered promiscuous mode [ 246.133090][ T5984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.161798][ T5984] Cannot create hsr debugfs directory [ 246.355636][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.619315][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.639333][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.653317][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.680338][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.700300][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 246.710351][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.152378][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.959896][ T29] audit: type=1400 audit(1725141595.043:387): avc: denied { ioctl } for pid=6138 comm="syz.4.142" path="socket:[10980]" dev="sockfs" ino=10980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.064865][ T29] audit: type=1400 audit(1725141595.083:388): avc: denied { bind } for pid=6138 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.167892][ T29] audit: type=1400 audit(1725141595.243:389): avc: denied { connect } for pid=6138 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.274128][ T29] audit: type=1400 audit(1725141595.273:390): avc: denied { write } for pid=6138 comm="syz.4.142" path="socket:[10980]" dev="sockfs" ino=10980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.523197][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.637271][ T1097] bridge_slave_1: left allmulticast mode [ 248.658807][ T1097] bridge_slave_1: left promiscuous mode [ 248.664786][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.691869][ T1097] bridge_slave_0: left allmulticast mode [ 248.697598][ T1097] bridge_slave_0: left promiscuous mode [ 248.719195][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.769996][ T4613] Bluetooth: hci1: command tx timeout [ 249.191248][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.224823][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.273546][ T1097] bond0 (unregistering): Released all slaves [ 249.588809][ T6146] netlink: 'syz.4.143': attribute type 5 has an invalid length. [ 249.596525][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 249.681425][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.688768][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.738631][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.745962][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.785870][ T1097] hsr_slave_0: left promiscuous mode [ 249.794526][ T1097] hsr_slave_1: left promiscuous mode [ 249.803103][ T29] audit: type=1400 audit(1725141596.893:391): avc: denied { rename } for pid=4657 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.831714][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.849347][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.856791][ T29] audit: type=1400 audit(1725141596.893:392): avc: denied { unlink } for pid=4657 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 249.916020][ T29] audit: type=1400 audit(1725141596.893:393): avc: denied { create } for pid=4657 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 250.142697][ T29] audit: type=1400 audit(1725141597.213:394): avc: denied { unmount } for pid=5240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 250.328645][ T29] audit: type=1400 audit(1725141597.393:395): avc: denied { create } for pid=6165 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 250.574552][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 250.665121][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 250.859439][ T4613] Bluetooth: hci1: command tx timeout [ 253.470057][ T4613] Bluetooth: hci1: command tx timeout [ 254.103990][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.596730][ T29] audit: type=1400 audit(1725141601.483:396): avc: denied { read } for pid=6190 comm="syz.4.147" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.938798][ T29] audit: type=1400 audit(1725141602.013:397): avc: denied { search } for pid=4657 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.138662][ T5984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.261270][ T5984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.379838][ T5984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.495297][ T4613] Bluetooth: hci1: command tx timeout [ 255.682202][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.686692][ T1097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.711975][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.725672][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.744129][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.761848][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.772189][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.855578][ T5984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.351851][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.464480][ T1097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.509601][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 256.586808][ T1097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.606113][ T6203] devtmpfs: Unknown parameter 'posixacl' [ 256.665915][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.673469][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.725363][ T1097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.854989][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.862336][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.045948][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.068691][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.085256][ T6131] bridge_slave_0: entered allmulticast mode [ 257.095988][ T6131] bridge_slave_0: entered promiscuous mode [ 257.191673][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.203859][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.212026][ T6131] bridge_slave_1: entered allmulticast mode [ 257.221511][ T6131] bridge_slave_1: entered promiscuous mode [ 257.585509][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.693372][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.756906][ T1097] bridge_slave_1: left allmulticast mode [ 257.771653][ T1097] bridge_slave_1: left promiscuous mode [ 257.788200][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.824859][ T1097] bridge_slave_0: left allmulticast mode [ 257.830988][ T1097] bridge_slave_0: left promiscuous mode [ 257.847168][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.888894][ T5237] Bluetooth: hci0: command tx timeout [ 258.688575][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.783506][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.797992][ T1097] bond0 (unregistering): Released all slaves [ 259.072347][ T6131] team0: Port device team_slave_0 added [ 259.126528][ T6131] team0: Port device team_slave_1 added [ 259.392340][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.400336][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.436483][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.704434][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.712868][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.745011][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.889854][ T1097] hsr_slave_0: left promiscuous mode [ 259.920040][ T1097] hsr_slave_1: left promiscuous mode [ 259.952366][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.969774][ T5237] Bluetooth: hci0: command tx timeout [ 259.978254][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.011958][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.019733][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.071921][ T1097] veth1_macvtap: left promiscuous mode [ 260.077781][ T1097] veth0_macvtap: left promiscuous mode [ 260.085220][ T1097] veth1_vlan: left promiscuous mode [ 260.091632][ T1097] veth0_vlan: left promiscuous mode [ 261.557417][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 261.587940][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.595599][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.684608][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 262.059618][ T5237] Bluetooth: hci0: command tx timeout [ 262.881074][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.009324][ T6199] chnl_net:caif_netlink_parms(): no params data found [ 263.323797][ T6131] hsr_slave_0: entered promiscuous mode [ 263.350732][ T6131] hsr_slave_1: entered promiscuous mode [ 264.037801][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.128678][ T5237] Bluetooth: hci0: command tx timeout [ 264.148833][ T6131] Cannot create hsr debugfs directory [ 264.576805][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.028041][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.035406][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.083606][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.093131][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.101849][ T6199] bridge_slave_0: entered allmulticast mode [ 265.124373][ T6199] bridge_slave_0: entered promiscuous mode [ 265.136986][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.146309][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.168382][ T6199] bridge_slave_1: entered allmulticast mode [ 265.187244][ T6199] bridge_slave_1: entered promiscuous mode [ 265.207289][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.214638][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.247514][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.450943][ T6199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.488171][ T6199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.931014][ T6199] team0: Port device team_slave_0 added [ 266.038749][ T6199] team0: Port device team_slave_1 added [ 266.467568][ T29] audit: type=1400 audit(1725141613.543:398): avc: denied { mount } for pid=6260 comm="syz.4.156" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 266.829275][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.847258][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.857492][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.868762][ T29] audit: type=1400 audit(1725141613.943:399): avc: denied { name_connect } for pid=6260 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 266.904914][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.916460][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.926258][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.060538][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.067817][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.098684][ T6199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.351905][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.370229][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.403413][ T6199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.902800][ T6199] hsr_slave_0: entered promiscuous mode [ 267.918389][ T6199] hsr_slave_1: entered promiscuous mode [ 267.936440][ T6199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.945619][ T6199] Cannot create hsr debugfs directory [ 268.696605][ T6131] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.871190][ T6131] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.886821][ T29] audit: type=1400 audit(1725141615.963:400): avc: denied { getopt } for pid=6270 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.903326][ T6131] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.937255][ T6131] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.003284][ T1097] bridge_slave_1: left allmulticast mode [ 269.009874][ T1097] bridge_slave_1: left promiscuous mode [ 269.015824][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.018952][ T4613] Bluetooth: hci2: command tx timeout [ 269.057014][ T1097] bridge_slave_0: left allmulticast mode [ 269.067473][ T1097] bridge_slave_0: left promiscuous mode [ 269.076251][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.417820][ T6270] block nbd4: shutting down sockets [ 269.908130][ T6276] netlink: 'syz.4.158': attribute type 3 has an invalid length. [ 270.043308][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.297153][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.316481][ T1097] bond0 (unregistering): Released all slaves [ 270.370969][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.089686][ T4613] Bluetooth: hci2: command tx timeout [ 271.238763][ T1097] hsr_slave_0: left promiscuous mode [ 271.247110][ T1097] hsr_slave_1: left promiscuous mode [ 271.264129][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.276777][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.753997][ T6286] xt_HMARK: proto mask must be zero with L3 mode [ 272.090493][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 272.160062][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 273.185105][ T4613] Bluetooth: hci2: command tx timeout [ 273.240059][ T6292] tipc: Started in network mode [ 273.259968][ T6292] tipc: Node identity fe1a8337c87e, cluster identity 4711 [ 273.282546][ T6292] tipc: Enabled bearer , priority 0 [ 273.681478][ T6295] syzkaller0: MTU too low for tipc bearer [ 273.687376][ T6295] tipc: Disabling bearer [ 274.027440][ T6264] chnl_net:caif_netlink_parms(): no params data found [ 274.267149][ T5984] veth0_vlan: entered promiscuous mode [ 274.357147][ T5984] veth1_vlan: entered promiscuous mode [ 274.862333][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.891408][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.900966][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.913721][ T6264] bridge_slave_0: entered allmulticast mode [ 274.950752][ T6264] bridge_slave_0: entered promiscuous mode [ 275.049003][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.056307][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.073977][ T6264] bridge_slave_1: entered allmulticast mode [ 275.083684][ T6264] bridge_slave_1: entered promiscuous mode [ 275.249601][ T4613] Bluetooth: hci2: command tx timeout [ 275.384019][ T29] audit: type=1400 audit(1725141622.453:401): avc: denied { view } for pid=6324 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 275.567360][ T6264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.604737][ T6264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.822241][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.844146][ T5984] veth0_macvtap: entered promiscuous mode [ 276.063197][ T6199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.090567][ T6199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.153168][ T6264] team0: Port device team_slave_0 added [ 276.170666][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.177971][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.265406][ T6199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.307204][ T6199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.330778][ T5984] veth1_macvtap: entered promiscuous mode [ 276.357840][ T6264] team0: Port device team_slave_1 added [ 276.378384][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.385672][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.562548][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.572613][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.670310][ T6331] usb usb8: usbfs: process 6331 (syz.4.164) did not claim interface 0 before use [ 276.682696][ T29] audit: type=1400 audit(1725141623.733:402): avc: denied { validate_trans } for pid=6328 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 276.795342][ T6264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.095794][ T6264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.157973][ T6264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.413521][ T6264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.615331][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.642096][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.661298][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.966367][ T5984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.018734][ T5984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.031414][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.194113][ T6264] hsr_slave_0: entered promiscuous mode [ 278.221934][ T6264] hsr_slave_1: entered promiscuous mode [ 278.470941][ T5984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.499258][ T5984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.529693][ T5984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.560045][ T5984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.698908][ T1097] bridge_slave_1: left allmulticast mode [ 278.704637][ T1097] bridge_slave_1: left promiscuous mode [ 278.750945][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.793023][ T1097] bridge_slave_0: left allmulticast mode [ 278.804302][ T1097] bridge_slave_0: left promiscuous mode [ 278.810436][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.749391][ T29] audit: type=1400 audit(1725141626.693:403): avc: denied { ioctl } for pid=6343 comm="syz.4.166" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 280.052763][ T29] audit: type=1400 audit(1725141626.753:404): avc: denied { bind } for pid=6343 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.138947][ T29] audit: type=1400 audit(1725141626.763:405): avc: denied { write } for pid=6343 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 282.069755][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.096077][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.112712][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.121000][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.138294][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.152714][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.169406][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.177336][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.191136][ T1097] bond0 (unregistering): Released all slaves [ 282.696165][ T1097] hsr_slave_0: left promiscuous mode [ 282.732126][ T1097] hsr_slave_1: left promiscuous mode [ 282.762531][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.791813][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.942681][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 284.068933][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 284.216920][ T5237] Bluetooth: hci5: command tx timeout [ 286.018371][ T6391] mmap: syz.4.171 (6391) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 286.202347][ T6390] sp0: Synchronizing with TNC [ 286.291851][ T5237] Bluetooth: hci5: command tx timeout [ 286.462287][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.657065][ T6390] libceph: resolve '0.0' (ret=-3): failed [ 286.665977][ T6199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.373899][ T6199] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.598578][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.605798][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.624356][ T6131] veth0_vlan: entered promiscuous mode [ 287.782254][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.030285][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.050266][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.057813][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.258979][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.306576][ T6131] veth1_vlan: entered promiscuous mode [ 288.369303][ T5237] Bluetooth: hci5: command tx timeout [ 288.397899][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.446439][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 289.679870][ T6264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.722898][ T6264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.808155][ T6264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.866923][ T6264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 290.054925][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.068850][ T29] audit: type=1400 audit(1725141637.153:406): avc: denied { create } for pid=6429 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.071817][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.116753][ T6364] bridge_slave_0: entered allmulticast mode [ 290.138785][ T29] audit: type=1400 audit(1725141637.193:407): avc: denied { connect } for pid=6429 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.139459][ T6364] bridge_slave_0: entered promiscuous mode [ 290.183273][ T6433] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 290.210223][ T29] audit: type=1400 audit(1725141637.253:408): avc: denied { ioctl } for pid=6429 comm="syz.4.174" path="socket:[13419]" dev="sockfs" ino=13419 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 290.211555][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.298832][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.306292][ T6364] bridge_slave_1: entered allmulticast mode [ 290.351541][ T6364] bridge_slave_1: entered promiscuous mode [ 290.449309][ T5237] Bluetooth: hci5: command tx timeout [ 294.896878][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.980244][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.014521][ T6131] veth0_macvtap: entered promiscuous mode [ 295.068290][ T6131] veth1_macvtap: entered promiscuous mode [ 295.106753][ T1097] bridge_slave_1: left allmulticast mode [ 295.123287][ T1097] bridge_slave_1: left promiscuous mode [ 295.134781][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.160031][ T1097] bridge_slave_0: left allmulticast mode [ 295.165772][ T1097] bridge_slave_0: left promiscuous mode [ 295.185032][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.321927][ T29] audit: type=1400 audit(1725141642.403:409): avc: denied { mount } for pid=6451 comm="syz.4.176" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 295.493943][ T6457] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 295.583667][ T29] audit: type=1400 audit(1725141642.663:410): avc: denied { relabelto } for pid=6451 comm="syz.4.176" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 295.621070][ T6455] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 295.633013][ T29] audit: type=1400 audit(1725141642.663:411): avc: denied { associate } for pid=6451 comm="syz.4.176" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 295.718719][ T29] audit: type=1400 audit(1725141642.763:412): avc: denied { relabelto } for pid=6451 comm="syz.4.176" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:modules_object_t:s0" [ 295.754553][ T29] audit: type=1400 audit(1725141642.773:413): avc: denied { associate } for pid=6451 comm="syz.4.176" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0" [ 296.540534][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.577631][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.623425][ T1097] bond0 (unregistering): Released all slaves [ 296.864069][ T1097] hsr_slave_0: left promiscuous mode [ 296.901970][ T1097] hsr_slave_1: left promiscuous mode [ 296.914691][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.923159][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.949907][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.959719][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.002544][ T1097] veth1_macvtap: left promiscuous mode [ 297.008528][ T1097] veth0_macvtap: left promiscuous mode [ 297.018571][ T1097] veth1_vlan: left promiscuous mode [ 297.025518][ T1097] veth0_vlan: left promiscuous mode [ 298.403569][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 298.499920][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 298.796528][ T5272] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 299.029160][ T5272] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 299.043542][ T5272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.055444][ T5272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 299.065121][ T5272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.079484][ T5272] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 299.098550][ T5272] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 299.107219][ T5272] usb 5-1: Product: syz [ 299.112240][ T5272] usb 5-1: Manufacturer: syz [ 299.170745][ T5272] cdc_wdm 5-1:1.0: skipping garbage [ 299.176041][ T5272] cdc_wdm 5-1:1.0: skipping garbage [ 299.208174][ T5272] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 299.214350][ T5272] cdc_wdm 5-1:1.0: Unknown control protocol [ 299.395521][ T6364] team0: Port device team_slave_0 added [ 299.439497][ T6364] team0: Port device team_slave_1 added [ 299.476740][ T6199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.623894][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.642914][ T5272] usb 5-1: USB disconnect, device number 5 [ 299.656355][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.700292][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.752379][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.773706][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.812656][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.864394][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.883533][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.921262][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.974062][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.988019][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.023691][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.127390][ T6131] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.148254][ T6131] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.157196][ T6131] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.173993][ T6131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.414860][ T6364] hsr_slave_0: entered promiscuous mode [ 300.422438][ T6364] hsr_slave_1: entered promiscuous mode [ 300.429600][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.437230][ T6364] Cannot create hsr debugfs directory [ 300.757081][ T6264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.945386][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.950299][ T6199] veth0_vlan: entered promiscuous mode [ 300.974267][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.099534][ T6264] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.126550][ T6199] veth1_vlan: entered promiscuous mode [ 301.179759][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.189587][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.248186][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.255551][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.498059][ T6501] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.179'. [ 301.551652][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.559045][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.894509][ T29] audit: type=1400 audit(1725141648.973:414): avc: denied { execute } for pid=6503 comm="syz.0.140" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 302.354864][ T6199] veth0_macvtap: entered promiscuous mode [ 302.558767][ T5361] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 302.643942][ T6199] veth1_macvtap: entered promiscuous mode [ 302.718065][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.738264][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.748526][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.760048][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.772946][ T6199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.780926][ T5361] usb 5-1: Using ep0 maxpacket: 16 [ 302.795999][ T5361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.820669][ T5361] usb 5-1: config 0 has no interfaces? [ 302.845449][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.873847][ T5361] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 302.909198][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.920395][ T5361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.932402][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.943122][ T5361] usb 5-1: Product: syz [ 302.947344][ T5361] usb 5-1: Manufacturer: syz [ 302.952846][ T5361] usb 5-1: SerialNumber: syz [ 302.958552][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.972360][ T5361] usb 5-1: config 0 descriptor?? [ 302.992348][ T6199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.011103][ T6199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.023112][ T6199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.035235][ T6199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.046500][ T6199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.699511][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.129089][ T29] audit: type=1400 audit(1725141650.873:415): avc: denied { map } for pid=6515 comm="syz.4.180" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 304.265771][ T6364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.287058][ T6364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.324038][ T6364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.349081][ T29] audit: type=1400 audit(1725141651.423:416): avc: denied { read } for pid=6527 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 304.408302][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.418368][ T6364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.424938][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.621583][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.631009][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.811086][ T6264] veth0_vlan: entered promiscuous mode [ 304.936299][ T6264] veth1_vlan: entered promiscuous mode [ 305.222219][ T6264] veth0_macvtap: entered promiscuous mode [ 305.347012][ T8] usb 5-1: USB disconnect, device number 6 [ 305.475816][ T6264] veth1_macvtap: entered promiscuous mode [ 306.378551][ T29] audit: type=1400 audit(1725141652.773:417): avc: denied { open } for pid=6538 comm="syz.4.184" path="/dev/ptyqd" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 306.555659][ T29] audit: type=1400 audit(1725141652.793:418): avc: denied { ioctl } for pid=6538 comm="syz.4.184" path="/dev/ptyqd" dev="devtmpfs" ino=134 ioctlcmd=0x5406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 306.602860][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.676977][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.730444][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.768944][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.803062][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.098055][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.141008][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.180699][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.202167][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.234907][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.268787][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.311975][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.335206][ T6264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.348186][ T6264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.504083][ T6264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.527782][ T29] audit: type=1400 audit(1725141655.443:419): avc: denied { setopt } for pid=6553 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.285788][ T29] audit: type=1400 audit(1725141656.363:420): avc: denied { ioctl } for pid=6553 comm="syz.1.187" path="socket:[15038]" dev="sockfs" ino=15038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.412012][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.449980][ T6264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.475621][ T6264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.500529][ T29] audit: type=1400 audit(1725141656.573:421): avc: denied { unmount } for pid=5240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 309.508566][ T6264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.553145][ T6264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.661216][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.668722][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.859926][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.867152][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.014724][ T6568] syz.4.189 uses obsolete (PF_INET,SOCK_PACKET) [ 310.248368][ T6568] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 80 [ 310.791134][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.847619][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.649058][ T29] audit: type=1400 audit(1725141659.673:422): avc: denied { read } for pid=6576 comm="syz.1.192" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 312.722843][ T2548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.731332][ T2548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.809495][ T29] audit: type=1400 audit(1725141659.673:423): avc: denied { open } for pid=6576 comm="syz.1.192" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 312.850234][ T29] audit: type=1400 audit(1725141659.683:424): avc: denied { ioctl } for pid=6576 comm="syz.1.192" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 313.923856][ T29] audit: type=1400 audit(1725141660.993:425): avc: denied { create } for pid=6589 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.014453][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.248269][ T6605] ptrace attach of "./syz-executor exec"[5240] was attempted by "./syz-executor exec"[6605] [ 315.390793][ T6364] veth0_vlan: entered promiscuous mode [ 315.454608][ T6364] veth1_vlan: entered promiscuous mode [ 316.484045][ T6364] veth0_macvtap: entered promiscuous mode [ 316.657126][ T6364] veth1_macvtap: entered promiscuous mode [ 316.849595][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.898697][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.898729][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.898757][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.898779][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.898803][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.898825][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.898850][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.919741][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.952784][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.952810][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.952823][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.952841][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.952854][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.952871][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.952883][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.952900][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.954835][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.987123][ T29] audit: type=1400 audit(1725141664.053:426): avc: denied { ioctl } for pid=6616 comm="syz.2.199" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.029851][ T6364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.029915][ T6364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.029964][ T6364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.030021][ T6364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.271263][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 317.353273][ T6623] SELinux: security_context_str_to_sid () failed with errno=-22 [ 317.461387][ T6619] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.577281][ T6614] tty tty21: ldisc open failed (-12), clearing slot 20 [ 319.226510][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.301776][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.512383][ T2541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.522029][ T2541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.028294][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.034992][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.430410][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 323.851075][ T29] audit: type=1400 audit(1725141670.933:427): avc: denied { create } for pid=6677 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 323.950017][ T29] audit: type=1400 audit(1725141670.943:428): avc: denied { create } for pid=6687 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.014484][ T29] audit: type=1400 audit(1725141670.993:429): avc: denied { getopt } for pid=6687 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.139715][ T29] audit: type=1400 audit(1725141670.993:430): avc: denied { setopt } for pid=6687 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 324.419895][ T29] audit: type=1400 audit(1725141671.493:431): avc: denied { read } for pid=6687 comm="syz.0.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.685753][ T6688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.731654][ T6688] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 325.419858][ T6701] xt_hashlimit: max too large, truncated to 1048576 [ 325.429759][ T6701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.562428][ T6688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.633657][ T6688] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 325.812044][ T6688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.818042][ T6688] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 325.833528][ T6688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.879312][ T6688] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 326.901118][ T6688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.907122][ T6688] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 327.370561][ T29] audit: type=1400 audit(1725141674.443:432): avc: denied { bind } for pid=6718 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 327.512698][ T29] audit: type=1326 audit(1725141674.443:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2421179eb9 code=0x7ffc0000 [ 327.628919][ T29] audit: type=1326 audit(1725141674.443:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2421179eb9 code=0x7ffc0000 [ 327.693989][ T29] audit: type=1400 audit(1725141674.483:435): avc: denied { getopt } for pid=6718 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 327.731369][ T29] audit: type=1326 audit(1725141674.503:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2421179eb9 code=0x7ffc0000 [ 332.468253][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 332.648006][ T6764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 332.655070][ T6764] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.680121][ T6767] vhci_hcd: connection closed [ 332.707121][ T6764] vhci_hcd vhci_hcd.0: Device attached [ 332.777044][ T1105] vhci_hcd: stop threads [ 332.800299][ T1105] vhci_hcd: release socket [ 332.804906][ T1105] vhci_hcd: disconnect device [ 333.195819][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 333.195843][ T29] audit: type=1400 audit(1725141680.273:442): avc: denied { read } for pid=6771 comm="syz.2.227" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.313502][ T29] audit: type=1400 audit(1725141680.313:443): avc: denied { open } for pid=6771 comm="syz.2.227" path="/dev/usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.509464][ T29] audit: type=1400 audit(1725141680.593:444): avc: denied { bind } for pid=6779 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.538338][ T29] audit: type=1400 audit(1725141680.613:445): avc: denied { connect } for pid=6779 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.741190][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.334152][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 336.081075][ T29] audit: type=1400 audit(1725141683.153:446): avc: denied { shutdown } for pid=6814 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 336.451890][ T6815] netlink: 'syz.4.234': attribute type 4 has an invalid length. [ 337.394347][ T6827] netlink: 'syz.4.234': attribute type 4 has an invalid length. [ 337.634343][ T6832] evm: overlay not supported [ 339.284262][ T6843] vivid-000: disconnect [ 339.334718][ T29] audit: type=1400 audit(1725141686.393:447): avc: denied { create } for pid=6836 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 339.385869][ T6843] vivid-000: reconnect [ 339.409032][ T29] audit: type=1400 audit(1725141686.433:448): avc: denied { write } for pid=6836 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 339.577363][ T29] audit: type=1400 audit(1725141686.653:449): avc: denied { create } for pid=6848 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.730350][ T29] audit: type=1400 audit(1725141686.803:450): avc: denied { mount } for pid=6850 comm="syz.2.241" name="/" dev="configfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 339.861499][ T29] audit: type=1400 audit(1725141686.843:451): avc: denied { write } for pid=6850 comm="syz.2.241" name="/" dev="configfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 340.055996][ T29] audit: type=1400 audit(1725141686.923:452): avc: denied { listen } for pid=6855 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 340.137794][ T29] audit: type=1400 audit(1725141686.933:453): avc: denied { create } for pid=6855 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 340.157022][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.328234][ T29] audit: type=1400 audit(1725141687.023:454): avc: denied { accept } for pid=6855 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 340.488621][ T29] audit: type=1400 audit(1725141687.553:455): avc: denied { unmount } for pid=6264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 340.685820][ T29] audit: type=1400 audit(1725141687.763:456): avc: denied { setopt } for pid=6866 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.705341][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.319522][ T6867] ipt_REJECT: TCP_RESET invalid for non-tcp [ 345.360497][ T29] audit: type=1400 audit(1725141692.443:457): avc: denied { accept } for pid=6897 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.058583][ T29] audit: type=1400 audit(1725141693.433:458): avc: denied { read } for pid=6910 comm="syz.0.252" path="socket:[15848]" dev="sockfs" ino=15848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.879488][ T29] audit: type=1400 audit(1725141704.773:459): avc: denied { read } for pid=6973 comm="syz.1.264" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 358.085190][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 358.909045][ T29] audit: type=1400 audit(1725141704.773:460): avc: denied { open } for pid=6973 comm="syz.1.264" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.192121][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 359.570603][ T29] audit: type=1400 audit(1725141706.653:461): avc: denied { write } for pid=6987 comm="syz.2.266" path="socket:[15993]" dev="sockfs" ino=15993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 362.002511][ T29] audit: type=1400 audit(1725141708.873:462): avc: denied { read } for pid=6987 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 362.108672][ T29] audit: type=1400 audit(1725141709.033:463): avc: denied { ioctl } for pid=6987 comm="syz.2.266" path="socket:[15993]" dev="sockfs" ino=15993 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 363.413408][ T29] audit: type=1326 audit(1725141709.833:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.0.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2f9d79eb9 code=0x0 [ 364.419935][ T29] audit: type=1400 audit(1725141711.493:465): avc: denied { setattr } for pid=7022 comm="syz.3.274" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 365.782824][ T7042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.278'. [ 367.314076][ T29] audit: type=1400 audit(1725141714.383:466): avc: denied { create } for pid=7058 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 367.992809][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880777d4c00: rx timeout, send abort [ 368.503074][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880777d4c00: abort rx timeout. Force session deactivation [ 369.298696][ T29] audit: type=1400 audit(1725141716.113:467): avc: denied { ioctl } for pid=7066 comm="syz.0.293" path="socket:[16890]" dev="sockfs" ino=16890 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 372.982899][ T29] audit: type=1400 audit(1725141720.033:468): avc: denied { map } for pid=7074 comm="syz.2.284" path="socket:[16117]" dev="sockfs" ino=16117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 373.611254][ T29] audit: type=1400 audit(1725141720.693:469): avc: denied { setopt } for pid=7094 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.642654][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 375.346595][ T7109] netlink: 210620 bytes leftover after parsing attributes in process `syz.2.289'. [ 376.166076][ T7116] netlink: 'syz.2.289': attribute type 2 has an invalid length. [ 376.592992][ T7121] overlayfs: missing 'lowerdir' [ 380.750327][ T29] audit: type=1400 audit(1725141727.833:470): avc: denied { listen } for pid=7126 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.462802][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.469385][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.637356][ T7170] overlayfs: missing 'lowerdir' [ 392.238116][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.288842][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.301435][ T4613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.341254][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.355483][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.365300][ T4613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 392.550760][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 392.559635][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 392.567169][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 392.575564][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 392.583789][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 392.592532][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.048083][ T29] audit: type=1400 audit(1725141740.123:471): avc: denied { create } for pid=7172 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 393.158878][ T29] audit: type=1400 audit(1725141740.173:472): avc: denied { write } for pid=7172 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 393.767189][ T7188] loop7: detected capacity change from 0 to 16384 [ 393.958882][ T7193] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 394.690452][ T4613] Bluetooth: hci3: command tx timeout [ 395.418407][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 396.724816][ T7207] CIFS: Unable to determine destination address [ 396.768613][ T4613] Bluetooth: hci3: command tx timeout [ 396.771583][ T29] audit: type=1400 audit(1725141743.813:473): avc: denied { mounton } for pid=7205 comm="syz.0.311" path="/proc/136/task" dev="proc" ino=16295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 398.874187][ T4613] Bluetooth: hci3: command tx timeout [ 399.766117][ T29] audit: type=1400 audit(1725141746.133:474): avc: denied { create } for pid=7209 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 399.828566][ T29] audit: type=1400 audit(1725141746.143:475): avc: denied { bind } for pid=7209 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 399.916259][ T29] audit: type=1400 audit(1725141746.143:476): avc: denied { write } for pid=7209 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.928797][ T4613] Bluetooth: hci3: command tx timeout [ 401.551408][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.562723][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.574393][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.606761][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.616371][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 401.624213][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.277718][ T7232] overlayfs: missing 'lowerdir' [ 402.346127][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.330548][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.337887][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.373910][ T7168] bridge_slave_0: entered allmulticast mode [ 403.401293][ T7168] bridge_slave_0: entered promiscuous mode [ 403.440922][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.458983][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.466470][ T7168] bridge_slave_1: entered allmulticast mode [ 403.517146][ T7168] bridge_slave_1: entered promiscuous mode [ 403.810299][ T5237] Bluetooth: hci4: command tx timeout [ 405.888645][ T5237] Bluetooth: hci4: command tx timeout [ 407.766935][ T7219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.154296][ T5237] Bluetooth: hci4: command tx timeout [ 408.355193][ T7248] VFS: could not find a valid V7 on nullb0. [ 408.896435][ T7245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.844838][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.248552][ T5237] Bluetooth: hci4: command tx timeout [ 410.505747][ T29] audit: type=1400 audit(1725141757.483:477): avc: denied { write } for pid=7253 comm="syz.0.322" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 411.162284][ T7219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.267094][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.297196][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.344674][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.360170][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.376280][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.395513][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.424659][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 411.432647][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.459327][ T7219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.497023][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.559019][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.664833][ T7219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.707142][ T7168] team0: Port device team_slave_0 added [ 411.780484][ T7168] team0: Port device team_slave_1 added [ 411.894726][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.902828][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.929821][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.052126][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.060643][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.088168][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.252222][ T7219] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.308276][ T7219] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.402534][ T35] bridge_slave_1: left allmulticast mode [ 412.408253][ T35] bridge_slave_1: left promiscuous mode [ 412.419645][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.434296][ T35] bridge_slave_0: left allmulticast mode [ 412.441193][ T35] bridge_slave_0: left promiscuous mode [ 412.447157][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.240256][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.262487][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.276039][ T35] bond0 (unregistering): Released all slaves [ 413.315390][ T7219] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.360687][ T7168] hsr_slave_0: entered promiscuous mode [ 413.379523][ T7168] hsr_slave_1: entered promiscuous mode [ 413.386640][ T7168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.395186][ T7168] Cannot create hsr debugfs directory [ 413.483074][ T7219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.491744][ T4613] Bluetooth: hci0: command tx timeout [ 413.540217][ T35] tipc: Left network mode [ 414.402126][ T7224] chnl_net:caif_netlink_parms(): no params data found [ 414.596566][ T35] hsr_slave_0: left promiscuous mode [ 414.613479][ T35] hsr_slave_1: left promiscuous mode [ 414.626480][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.634249][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.657220][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.669067][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.720624][ T35] veth1_macvtap: left promiscuous mode [ 414.726304][ T35] veth0_macvtap: left promiscuous mode [ 414.742256][ T35] veth1_vlan: left promiscuous mode [ 414.747754][ T35] veth0_vlan: left promiscuous mode [ 415.583936][ T4613] Bluetooth: hci0: command tx timeout [ 415.749740][ T35] team0 (unregistering): Port device team_slave_1 removed [ 415.826825][ T35] team0 (unregistering): Port device team_slave_0 removed [ 417.260148][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.267557][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.284479][ T7224] bridge_slave_0: entered allmulticast mode [ 417.293736][ T7224] bridge_slave_0: entered promiscuous mode [ 417.313872][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.331762][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.347190][ T7224] bridge_slave_1: entered allmulticast mode [ 417.361339][ T7224] bridge_slave_1: entered promiscuous mode [ 417.508182][ T7257] chnl_net:caif_netlink_parms(): no params data found [ 417.648997][ T4613] Bluetooth: hci0: command tx timeout [ 417.703687][ T7224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.744590][ T7224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.775216][ T35] IPVS: stop unused estimator thread 0... [ 417.984358][ T7224] team0: Port device team_slave_0 added [ 418.048405][ T7224] team0: Port device team_slave_1 added [ 418.065918][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.075627][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.085810][ T7257] bridge_slave_0: entered allmulticast mode [ 418.097847][ T7257] bridge_slave_0: entered promiscuous mode [ 418.122865][ T35] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.248803][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.256116][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.269865][ T7257] bridge_slave_1: entered allmulticast mode [ 418.277860][ T7257] bridge_slave_1: entered promiscuous mode [ 418.311392][ T35] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.369602][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.376601][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.403670][ T7224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.471093][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.478189][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.504761][ T7224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.522562][ T35] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.542852][ T7168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.564667][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.580734][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.629336][ T7168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.692178][ T35] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.732786][ T7168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.747357][ T7168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.777030][ T7257] team0: Port device team_slave_0 added [ 418.805103][ T7257] team0: Port device team_slave_1 added [ 418.821948][ T7224] hsr_slave_0: entered promiscuous mode [ 418.829236][ T7224] hsr_slave_1: entered promiscuous mode [ 418.835776][ T7224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.843775][ T7224] Cannot create hsr debugfs directory [ 419.017144][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.029250][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.056286][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.071456][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.078922][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.107119][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.317906][ T7257] hsr_slave_0: entered promiscuous mode [ 419.327610][ T7257] hsr_slave_1: entered promiscuous mode [ 419.334962][ T7257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.342697][ T7257] Cannot create hsr debugfs directory [ 419.555952][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.697858][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.728827][ T4613] Bluetooth: hci0: command tx timeout [ 419.839462][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.984579][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.131294][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.272767][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.336660][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.344004][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.381344][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.388843][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.435889][ T35] bridge_slave_1: left allmulticast mode [ 420.444194][ T35] bridge_slave_1: left promiscuous mode [ 420.459789][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.483719][ T35] bridge_slave_0: left allmulticast mode [ 420.498929][ T35] bridge_slave_0: left promiscuous mode [ 420.506149][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.541345][ T35] bridge_slave_1: left allmulticast mode [ 420.547093][ T35] bridge_slave_1: left promiscuous mode [ 420.557992][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.572584][ T35] bridge_slave_0: left allmulticast mode [ 420.578394][ T35] bridge_slave_0: left promiscuous mode [ 420.587442][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.189017][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.215985][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.232914][ T35] bond0 (unregistering): Released all slaves [ 422.493370][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.526928][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.553572][ T35] bond0 (unregistering): Released all slaves [ 423.098279][ T7168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.780245][ T7224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 423.836740][ T7224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.915627][ T35] hsr_slave_0: left promiscuous mode [ 423.923149][ T35] hsr_slave_1: left promiscuous mode [ 423.934650][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.942260][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.953097][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.961111][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.986541][ T35] hsr_slave_0: left promiscuous mode [ 424.006023][ T35] hsr_slave_1: left promiscuous mode [ 424.027046][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.035000][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.053938][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.061740][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.141533][ T35] veth1_macvtap: left promiscuous mode [ 424.148868][ T35] veth0_macvtap: left promiscuous mode [ 424.154763][ T35] veth1_vlan: left promiscuous mode [ 424.160584][ T35] veth0_vlan: left promiscuous mode [ 424.179545][ T35] veth1_macvtap: left promiscuous mode [ 424.185216][ T35] veth0_macvtap: left promiscuous mode [ 424.200298][ T35] veth1_vlan: left promiscuous mode [ 424.205842][ T35] veth0_vlan: left promiscuous mode [ 425.363241][ T35] team0 (unregistering): Port device team_slave_1 removed [ 425.445715][ T35] team0 (unregistering): Port device team_slave_0 removed [ 426.879486][ T35] team0 (unregistering): Port device team_slave_1 removed [ 426.977893][ T35] team0 (unregistering): Port device team_slave_0 removed [ 427.769365][ T7224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.797408][ T7224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.939697][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.995107][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.090522][ T7257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.142854][ T7257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.168368][ T7257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.205421][ T7257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.255164][ T7224] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.287071][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.294522][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.356860][ T2548] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.364223][ T2548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.416309][ T7168] veth0_vlan: entered promiscuous mode [ 429.505305][ T7168] veth1_vlan: entered promiscuous mode [ 429.743865][ T7168] veth0_macvtap: entered promiscuous mode [ 429.794233][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.815603][ T7168] veth1_macvtap: entered promiscuous mode [ 429.932105][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.996819][ T2548] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.004187][ T2548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.027944][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.035316][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.057293][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.076510][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.100779][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.112198][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.126313][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.154440][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.191162][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.211724][ T7168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.234590][ T7168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.264800][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.325503][ T7168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.348781][ T7168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.357577][ T7168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.367441][ T7168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.544456][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.862174][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.881085][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.023255][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.036401][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.062984][ T7224] veth0_vlan: entered promiscuous mode [ 431.124858][ T7224] veth1_vlan: entered promiscuous mode [ 431.417060][ T7224] veth0_macvtap: entered promiscuous mode [ 431.500460][ T7224] veth1_macvtap: entered promiscuous mode [ 431.632000][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.672157][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.683951][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.694609][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.707074][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.719450][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.732072][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 431.761024][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.773889][ T5274] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 431.794842][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.864460][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.893038][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.909912][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.926381][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.942176][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 431.976480][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.988793][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 431.999459][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.002285][ T5274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 432.014261][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.040589][ T9] usb 3-1: string descriptor 0 read error: -22 [ 432.047557][ T9] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 432.063760][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.076359][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.092672][ T5274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25701, setting to 1024 [ 432.098808][ T9] usb 3-1: config 0 descriptor?? [ 432.151155][ T5274] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.153468][ T7224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.217407][ T5274] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 432.221295][ T7224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.267615][ T7224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.285363][ T7224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.285390][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 432.286026][ T5274] usb 5-1: Product: syz [ 432.358296][ T5274] usb 5-1: Manufacturer: syz [ 432.364583][ T5274] usb 5-1: SerialNumber: syz [ 432.404131][ T7441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 432.519049][ T5274] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 432.564190][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 432.573754][ T29] audit: type=1400 audit(1725141779.633:478): avc: denied { read } for pid=4660 comm="acpid" name="mouse1" dev="devtmpfs" ino=2397 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.613431][ T7451] dlm: non-version read from control device 0 [ 432.624892][ T29] audit: type=1400 audit(1725141779.643:479): avc: denied { open } for pid=4660 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2397 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.734070][ T29] audit: type=1400 audit(1725141779.643:480): avc: denied { ioctl } for pid=4660 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2397 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.804693][ T29] audit: type=1400 audit(1725141779.783:481): avc: denied { bind } for pid=7437 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 432.834506][ T29] audit: type=1400 audit(1725141779.783:482): avc: denied { name_bind } for pid=7437 comm="syz.4.292" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 432.943205][ T29] audit: type=1400 audit(1725141779.783:483): avc: denied { node_bind } for pid=7437 comm="syz.4.292" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 433.067414][ T7257] veth0_vlan: entered promiscuous mode [ 433.092594][ T7257] veth1_vlan: entered promiscuous mode [ 433.156578][ T29] audit: type=1400 audit(1725141780.233:484): avc: denied { connect } for pid=7437 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 433.275673][ T29] audit: type=1400 audit(1725141780.263:485): avc: denied { name_connect } for pid=7437 comm="syz.4.292" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 433.301917][ T5274] usb 5-1: USB disconnect, device number 7 [ 433.331848][ T7389] udevd[7389]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 433.434965][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 433.457288][ T5274] appletouch 5-1:1.0: input: appletouch disconnected [ 433.536676][ T7257] veth0_macvtap: entered promiscuous mode [ 433.585214][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.593375][ T7257] veth1_macvtap: entered promiscuous mode [ 433.625456][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.676475][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 433.687266][ T9] dib0700: firmware download failed at 7 with -22 [ 433.719736][ T9] usb 3-1: USB disconnect, device number 4 [ 433.746591][ T2548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.756093][ T2548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.822058][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.858701][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.884603][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.895217][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.906296][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.917180][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.929038][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.939725][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.965713][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.026274][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.077389][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.379165][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.045328][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.066250][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.085555][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.102322][ T7257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.115048][ T7257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.154547][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.208270][ T7257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.247424][ T7257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.257671][ T29] audit: type=1400 audit(1725141783.323:486): avc: denied { ioctl } for pid=7461 comm="syz.1.309" path="socket:[19596]" dev="sockfs" ino=19596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 436.275386][ T7257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.307722][ T7257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.838868][ T7473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.030659][ T29] audit: type=1400 audit(1725141784.103:487): avc: denied { map } for pid=7470 comm="syz.1.327" path="socket:[18320]" dev="sockfs" ino=18320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 437.304359][ T2548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.662037][ T2548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.883399][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.930363][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 438.930387][ T29] audit: type=1400 audit(1725141786.003:489): avc: denied { write } for pid=7485 comm="syz.4.329" path="socket:[18422]" dev="sockfs" ino=18422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 438.968602][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.524391][ T29] audit: type=1400 audit(1725141786.003:490): avc: denied { nlmsg_read } for pid=7485 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 441.126293][ T7481] syz.0.337 (7481): drop_caches: 2 [ 443.188583][ T5280] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 443.438580][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 443.545832][ T5280] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 443.591012][ T5280] usb 4-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.837275][ T5280] usb 4-1: config 1 interface 0 has no altsetting 0 [ 444.285896][ T5280] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 444.312214][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.339482][ T5280] usb 4-1: Product: syz [ 444.345373][ T5280] usb 4-1: Manufacturer: syz [ 444.396109][ T5280] usb 4-1: SerialNumber: syz [ 444.489187][ T7517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 444.496602][ T7517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 444.588249][ T7475] syz.0.337 (7475): drop_caches: 2 [ 444.761490][ T7515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=7515 comm=syz.3.338 [ 444.857970][ T7515] netlink: 'syz.3.338': attribute type 4 has an invalid length. [ 445.214126][ T5280] usb 4-1: USB disconnect, device number 2 [ 445.892438][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.908534][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.275478][ T7525] random: crng reseeded on system resumption [ 446.285622][ T29] audit: type=1400 audit(1725141793.353:491): avc: denied { write } for pid=7523 comm="syz.2.352" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 446.436441][ T7532] overlayfs: missing 'lowerdir' [ 447.250403][ T29] audit: type=1400 audit(1725141794.323:492): avc: denied { unmount } for pid=6131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 447.250797][ T7525] netlink: 256 bytes leftover after parsing attributes in process `syz.2.352'. [ 448.498647][ T29] audit: type=1400 audit(1725141795.553:493): avc: denied { unmount } for pid=7168 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 448.660912][ T7544] autofs4:pid:7544:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 448.729159][ T7544] autofs4:pid:7544:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 451.404662][ T7571] UBIFS error (pid: 7571): cannot open "", error -22 [ 454.925644][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.953649][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.979099][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.017149][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.041928][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 455.050179][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.098610][ T29] audit: type=1400 audit(1725141802.103:494): avc: denied { ioctl } for pid=7647 comm="syz.3.358" path="socket:[19925]" dev="sockfs" ino=19925 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 456.188756][ T29] audit: type=1400 audit(1725141803.273:495): avc: denied { read } for pid=7651 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 457.090470][ T4613] Bluetooth: hci5: command tx timeout [ 457.648867][ T29] audit: type=1400 audit(1725141804.723:496): avc: denied { write } for pid=7719 comm="syz.3.360" path="socket:[20682]" dev="sockfs" ino=20682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.229226][ T5231] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 458.290872][ T7680] chnl_net:caif_netlink_parms(): no params data found [ 458.478685][ T5231] usb 1-1: Using ep0 maxpacket: 16 [ 458.495331][ T5231] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 458.543424][ T5231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.600146][ T5231] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.659833][ T5231] usb 1-1: config 1 has no interface number 1 [ 458.685839][ T5231] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 458.723124][ T5231] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.738946][ T5231] usb 1-1: config 1 interface 2 has no altsetting 0 [ 458.758560][ T5231] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.775946][ T5231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.793608][ T5231] usb 1-1: Product: syz [ 458.798005][ T5231] usb 1-1: Manufacturer: syz [ 458.803784][ T5231] usb 1-1: SerialNumber: syz [ 459.002543][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.051936][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.114003][ T7680] bridge_slave_0: entered allmulticast mode [ 459.169397][ T4613] Bluetooth: hci5: command tx timeout [ 459.188313][ T7680] bridge_slave_0: entered promiscuous mode [ 459.273592][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 459.327080][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.448805][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.510036][ T7680] bridge_slave_1: entered allmulticast mode [ 459.566887][ T7680] bridge_slave_1: entered promiscuous mode [ 460.268362][ T7680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.553120][ T7680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.809583][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 460.833425][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 460.844724][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 460.862852][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 460.871195][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 460.878952][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 461.252912][ T5237] Bluetooth: hci5: command tx timeout [ 462.325523][ T7680] team0: Port device team_slave_0 added [ 462.372609][ T5231] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 462.419004][ T5231] usb 1-1: 2:1 : format type 39 is not supported yet [ 462.441533][ T5231] usb 1-1: selecting invalid altsetting 0 [ 462.453282][ T7680] team0: Port device team_slave_1 added [ 463.105704][ T7756] autofs: Unknown parameter 'f' [ 463.117355][ T29] audit: type=1400 audit(1725141810.193:497): avc: denied { connect } for pid=7753 comm="syz.3.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 463.142910][ T5237] Bluetooth: hci6: command tx timeout [ 463.339931][ T5237] Bluetooth: hci5: command tx timeout [ 463.560322][ T5231] usb 1-1: USB disconnect, device number 8 [ 464.529733][ T29] audit: type=1400 audit(1725141810.843:498): avc: denied { mount } for pid=7762 comm="syz.0.368" name="/" dev="autofs" ino=20752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 464.638900][ T29] audit: type=1400 audit(1725141811.603:499): avc: denied { unmount } for pid=6131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 464.719599][ T7772] cannot load conntrack support for proto=3 [ 464.813618][ T29] audit: type=1400 audit(1725141811.833:500): avc: denied { ioctl } for pid=7766 comm="syz.3.369" path="socket:[20762]" dev="sockfs" ino=20762 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 464.938642][ T29] audit: type=1400 audit(1725141811.943:501): avc: denied { watch watch_reads } for pid=7763 comm="syz.2.370" path="/39" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 465.109215][ T29] audit: type=1400 audit(1725141812.103:502): avc: denied { bind } for pid=7773 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.168891][ T5237] Bluetooth: hci6: command tx timeout [ 465.188630][ T29] audit: type=1400 audit(1725141812.133:503): avc: denied { setopt } for pid=7773 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.222360][ T7389] udevd[7389]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.491493][ T5237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 465.500943][ T5237] Bluetooth: hci0: Injecting HCI hardware error event [ 465.511979][ T4613] Bluetooth: hci0: hardware error 0x00 [ 465.543168][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.577156][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.616578][ T29] audit: type=1400 audit(1725141812.693:504): avc: denied { create } for pid=7773 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 465.697584][ T7680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.772231][ T7779] netlink: 'syz.3.372': attribute type 3 has an invalid length. [ 465.807711][ T7779] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.372'. [ 465.818615][ T29] audit: type=1400 audit(1725141812.883:505): avc: denied { write } for pid=7773 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 465.830671][ T7680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.886290][ T7680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.947046][ T7680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.361973][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.498700][ T29] audit: type=1400 audit(1725141813.573:506): avc: denied { read } for pid=7781 comm="iou-wrk-7782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 466.843960][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.248675][ T5237] Bluetooth: hci6: command tx timeout [ 467.728755][ T4613] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 467.826923][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.945353][ T7680] hsr_slave_0: entered promiscuous mode [ 467.977965][ T7680] hsr_slave_1: entered promiscuous mode [ 468.007589][ T7680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.029293][ T7680] Cannot create hsr debugfs directory [ 468.085538][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.278167][ T7796] ipt_ECN: cannot use operation on non-tcp rule [ 469.330749][ T4613] Bluetooth: hci6: command tx timeout [ 473.748689][ T5274] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 475.033190][ T29] audit: type=1400 audit(1725141820.863:507): avc: denied { listen } for pid=7818 comm="syz.3.381" lport=50524 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.161559][ T29] audit: type=1400 audit(1725141820.863:508): avc: denied { accept } for pid=7818 comm="syz.3.381" lport=50524 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.178569][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 475.430044][ T5274] usb 1-1: device descriptor read/all, error -71 [ 476.150183][ T7836] NILFS (nullb0): couldn't find nilfs on the device [ 476.835063][ T7680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.281353][ T1121] bridge_slave_1: left allmulticast mode [ 477.287312][ T1121] bridge_slave_1: left promiscuous mode [ 477.301278][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.379315][ T1121] bridge_slave_0: left allmulticast mode [ 477.385299][ T1121] bridge_slave_0: left promiscuous mode [ 477.392530][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.880031][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.120915][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.167481][ T1121] bond0 (unregistering): Released all slaves [ 481.223903][ T7745] chnl_net:caif_netlink_parms(): no params data found [ 481.225746][ T7858] binder: 7857:7858 ioctl c018620c 20000040 returned -1 [ 481.455130][ T7680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.972171][ T7680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.278221][ T7680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.597049][ T7884] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 483.614555][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 484.061875][ T1121] hsr_slave_0: left promiscuous mode [ 484.086520][ T1121] hsr_slave_1: left promiscuous mode [ 484.157846][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.187598][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.233308][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.266553][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.446847][ T1121] veth1_macvtap: left promiscuous mode [ 484.478828][ T1121] veth0_macvtap: left promiscuous mode [ 484.551023][ T1121] veth1_vlan: left promiscuous mode [ 484.556626][ T1121] veth0_vlan: left promiscuous mode [ 486.868856][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 487.421316][ T29] audit: type=1400 audit(1725141833.583:509): avc: denied { getopt } for pid=7903 comm="syz.0.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 487.547545][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 487.579692][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.598319][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.640825][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 487.666254][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.677341][ T9] usb 1-1: Product: syz [ 487.684182][ T9] usb 1-1: Manufacturer: syz [ 487.698127][ T9] usb 1-1: SerialNumber: syz [ 487.739760][ T9] usb 1-1: config 0 descriptor?? [ 488.547535][ T7914] xt_limit: Overflow, try lower: 0/0 [ 488.972498][ T7915] trusted_key: encrypted_key: insufficient parameters specified [ 489.305856][ T5361] usb 1-1: USB disconnect, device number 11 [ 489.697765][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 489.778643][ T29] audit: type=1400 audit(1725141836.823:510): avc: denied { read } for pid=7916 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 490.179958][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 493.838852][ T7914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 494.206869][ T7745] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.265567][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.276353][ T7745] bridge_slave_0: entered allmulticast mode [ 494.476036][ T7745] bridge_slave_0: entered promiscuous mode [ 494.486848][ T7745] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.528638][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.920085][ T7745] bridge_slave_1: entered allmulticast mode [ 495.086772][ T7745] bridge_slave_1: entered promiscuous mode [ 496.712604][ T7953] sp0: Synchronizing with TNC [ 496.934366][ T7745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.006243][ T7745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.464922][ T7745] team0: Port device team_slave_0 added [ 497.583733][ T7680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.644927][ T7680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.687476][ T7745] team0: Port device team_slave_1 added [ 500.668072][ T7680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.821075][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.835940][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.966623][ T7745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.980349][ T29] audit: type=1400 audit(1725141848.053:511): avc: denied { read } for pid=7987 comm="syz.0.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.078507][ T7680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.197966][ T7745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.217961][ T7745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.254485][ T7745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.558781][ T1121] bridge_slave_1: left allmulticast mode [ 501.593083][ T1121] bridge_slave_1: left promiscuous mode [ 501.646373][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.688179][ T1121] bridge_slave_0: left allmulticast mode [ 501.694403][ T1121] bridge_slave_0: left promiscuous mode [ 501.709097][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.735065][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.776953][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.806422][ T1121] bond0 (unregistering): Released all slaves [ 503.053735][ T7745] hsr_slave_0: entered promiscuous mode [ 503.080114][ T7745] hsr_slave_1: entered promiscuous mode [ 503.087583][ T7745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.096158][ T7745] Cannot create hsr debugfs directory [ 503.662818][ T8006] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 503.669516][ T8006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 503.826170][ T8006] vhci_hcd vhci_hcd.0: Device attached [ 504.045247][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.419'. [ 504.129208][ T5210] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 504.176315][ T5274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 504.325107][ T29] audit: type=1400 audit(1725141851.403:512): avc: denied { setopt } for pid=8014 comm="syz.0.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 504.382151][ T5274] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 504.412153][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.488166][ T5274] usb 4-1: config 0 descriptor?? [ 504.531168][ T5274] cp210x 4-1:0.0: cp210x converter detected [ 504.548674][ T1121] hsr_slave_0: left promiscuous mode [ 504.607809][ T1121] hsr_slave_1: left promiscuous mode [ 504.654209][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.672274][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.695046][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.714292][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.933209][ T1121] veth1_macvtap: left promiscuous mode [ 504.942131][ T5274] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 504.960958][ T8007] vhci_hcd: connection reset by peer [ 504.987928][ T5274] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 504.991241][ T1121] veth0_macvtap: left promiscuous mode [ 505.016949][ T29] audit: type=1400 audit(1725141852.093:513): avc: denied { associate } for pid=8019 comm="syz.2.421" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lib_t:s0" [ 505.043959][ T7707] vhci_hcd: stop threads [ 505.048288][ T7707] vhci_hcd: release socket [ 505.071006][ T5274] usb 4-1: cp210x converter now attached to ttyUSB0 [ 505.071121][ T1121] veth1_vlan: left promiscuous mode [ 505.093837][ T7707] vhci_hcd: disconnect device [ 505.127218][ T5274] usb 4-1: USB disconnect, device number 3 [ 505.172992][ T5274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 505.209344][ T5274] cp210x 4-1:0.0: device disconnected [ 505.286797][ T1121] veth0_vlan: left promiscuous mode [ 505.512319][ T29] audit: type=1400 audit(1725141852.593:514): avc: denied { associate } for pid=8019 comm="syz.2.421" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:modules_object_t:s0" [ 507.335434][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.347636][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.724342][ T29] audit: type=1400 audit(1725141854.803:515): avc: denied { ioctl } for pid=8040 comm="syz.3.425" path="socket:[21387]" dev="sockfs" ino=21387 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.297528][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 508.535479][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 509.254610][ T5210] vhci_hcd: vhci_device speed not set [ 511.109655][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.134944][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.158981][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.181666][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.200745][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 511.397982][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.238610][ T8053] tipc: Enabling of bearer rejected, failed to enable media [ 513.568731][ T5239] Bluetooth: hci3: command tx timeout [ 515.654727][ T5239] Bluetooth: hci3: command tx timeout [ 517.225786][ T8065] chnl_net:caif_netlink_parms(): no params data found [ 517.389252][ T7745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.484821][ T7745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.729011][ T5239] Bluetooth: hci3: command tx timeout [ 517.738341][ T7745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 519.695431][ T7745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 519.812474][ T5239] Bluetooth: hci3: command tx timeout [ 521.264939][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.283776][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.304606][ T8065] bridge_slave_0: entered allmulticast mode [ 521.334882][ T8065] bridge_slave_0: entered promiscuous mode [ 521.648014][ T8065] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.694080][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.127473][ T8065] bridge_slave_1: entered allmulticast mode [ 522.170668][ T8065] bridge_slave_1: entered promiscuous mode [ 522.852274][ T8065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.907912][ T4613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.938878][ T1121] bridge_slave_1: left allmulticast mode [ 522.944623][ T1121] bridge_slave_1: left promiscuous mode [ 522.988812][ T4613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.989044][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.003460][ T4613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.039278][ T4613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.059166][ T4613] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 523.066979][ T4613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.146076][ T29] audit: type=1326 audit(1725141870.223:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.180580][ T1121] bridge_slave_0: left allmulticast mode [ 523.186322][ T1121] bridge_slave_0: left promiscuous mode [ 523.239077][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.288871][ T29] audit: type=1326 audit(1725141870.263:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.402873][ T29] audit: type=1326 audit(1725141870.263:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.475692][ T29] audit: type=1326 audit(1725141870.263:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.558716][ T29] audit: type=1326 audit(1725141870.283:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.632167][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 523.671928][ T29] audit: type=1326 audit(1725141870.293:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.751325][ T29] audit: type=1326 audit(1725141870.293:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8143 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b01979eb9 code=0x7ffc0000 [ 523.817714][ C1] ------------[ cut here ]------------ [ 523.824513][ C1] WARNING: CPU: 1 PID: 8154 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 523.835872][ C1] Modules linked in: [ 523.839955][ C1] CPU: 1 UID: 0 PID: 8154 Comm: syz.2.444 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 523.850737][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 523.860937][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 523.868158][ C1] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 3a 5c 94 f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 2c 5c 94 f6 90 0f 0b 90 e9 df f0 ff ff [ 523.888039][ C1] RSP: 0018:ffffc90000a18408 EFLAGS: 00010246 [ 523.894261][ C1] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8af75652 [ 523.902374][ C1] RDX: ffff888027bbda00 RSI: ffffffff8af763b6 RDI: 0000000000000004 [ 523.910543][ C1] RBP: ffffc90000a18528 R08: 0000000000000004 R09: 00000000000081e5 [ 523.918785][ C1] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff88807af1be28 [ 523.926977][ C1] R13: 0000000000000000 R14: ffff88807af1bd40 R15: dffffc0000000000 [ 523.935124][ C1] FS: 00007f2421f8d6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 523.944275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.951010][ C1] CR2: 0000000020100000 CR3: 0000000031bc4000 CR4: 00000000003506f0 [ 523.959163][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.967332][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.975428][ C1] Call Trace: [ 523.978821][ C1] [ 523.981759][ C1] ? show_regs+0x8c/0xa0 [ 523.986247][ C1] ? __warn+0xe5/0x3c0 [ 523.990494][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 523.997121][ C1] ? report_bug+0x3c0/0x580 [ 524.001786][ C1] ? handle_bug+0x3d/0x70 [ 524.006268][ C1] ? exc_invalid_op+0x17/0x50 [ 524.011137][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 524.016302][ C1] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 524.022854][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 524.029495][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 524.036246][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 524.043205][ C1] mptcp_data_ready+0x30e/0x8e0 [ 524.048303][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 524.053948][ C1] subflow_data_ready+0x51d/0x7d0 [ 524.059154][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 524.064847][ C1] ? __pfx_tcp_grow_window+0x10/0x10 [ 524.070302][ C1] tcp_data_ready+0x146/0x5b0 [ 524.075090][ C1] ? tcp_event_data_recv+0xb6e/0x1410 [ 524.080935][ C1] ? __pfx_tcp_data_ready+0x10/0x10 [ 524.086295][ C1] tcp_data_queue+0x1a6f/0x5280 [ 524.091361][ C1] ? tcp_urg+0x110/0xb80 [ 524.095854][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 524.101783][ C1] ? tcp_send_dupack+0x780/0x810 [ 524.106867][ C1] ? ktime_get+0xfb/0x1a0 [ 524.111435][ C1] tcp_rcv_established+0x8b1/0x21c0 [ 524.116812][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 524.122055][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 524.127934][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 524.133766][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 524.138951][ C1] ? __pfx_ipv4_dst_check+0x10/0x10 [ 524.144443][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 524.149226][ C1] tcp_v4_rcv+0x33a8/0x4390 [ 524.153905][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 524.158937][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 524.164547][ C1] ? read_tsc+0x9/0x20 [ 524.168796][ C1] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 524.174666][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 524.179705][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 524.185377][ C1] ip_local_deliver_finish+0x316/0x570 [ 524.191140][ C1] ip_local_deliver+0x18e/0x1f0 [ 524.196138][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 524.201734][ C1] ip_rcv+0x2c5/0x5d0 [ 524.205916][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 524.210575][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 524.216716][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 524.223344][ C1] ? process_backlog+0x3f1/0x15f0 [ 524.228542][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.233706][ C1] ? mark_held_locks+0x9f/0xe0 [ 524.238789][ C1] ? process_backlog+0x3f1/0x15f0 [ 524.243956][ C1] __netif_receive_skb+0x1d/0x160 [ 524.249167][ C1] process_backlog+0x443/0x15f0 [ 524.254152][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 524.259687][ C1] net_rx_action+0xa92/0x1010 [ 524.264505][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 524.269871][ C1] ? __pfx_mark_lock+0x10/0x10 [ 524.274796][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 524.280200][ C1] ? sched_clock+0x38/0x60 [ 524.284825][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 524.289929][ C1] ? mark_held_locks+0x9f/0xe0 [ 524.294857][ C1] handle_softirqs+0x216/0x8f0 [ 524.299804][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 524.305236][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 524.310818][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 524.316324][ C1] do_softirq+0xb2/0xf0 [ 524.320835][ C1] [ 524.323923][ C1] [ 524.326921][ C1] __local_bh_enable_ip+0x100/0x120 [ 524.332263][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 524.337577][ C1] __dev_queue_xmit+0x882/0x4300 [ 524.342745][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 524.347915][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 524.353447][ C1] ? call_rcu_zapped+0x20/0xb0 [ 524.358331][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 524.363763][ C1] ? selinux_ip_postroute+0x6fb/0xda0 [ 524.369299][ C1] ? __pfx_mark_lock+0x10/0x10 [ 524.374186][ C1] ? find_held_lock+0x2d/0x110 [ 524.379111][ C1] ? __ip_finish_output+0x49e/0x950 [ 524.384435][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.389638][ C1] ? mark_held_locks+0x9f/0xe0 [ 524.394533][ C1] ip_finish_output2+0x16fe/0x25e0 [ 524.399920][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 524.405580][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 524.410696][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 524.416145][ C1] __ip_finish_output+0x49e/0x950 [ 524.421475][ C1] ip_finish_output+0x31/0x310 [ 524.426438][ C1] ip_output+0x13b/0x2a0 [ 524.430903][ C1] ? __pfx_ip_output+0x10/0x10 [ 524.435848][ C1] ip_local_out+0x33e/0x4a0 [ 524.440533][ C1] __ip_queue_xmit+0x747/0x1940 [ 524.445527][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 524.450827][ C1] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 524.456210][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 524.462110][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 524.467653][ C1] tcp_write_xmit+0x809d/0x8490 [ 524.472713][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 524.478426][ C1] tcp_rcv_established+0x93a/0x21c0 [ 524.483793][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 524.489630][ C1] ? __pfx_lock_release+0x10/0x10 [ 524.494898][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 524.499762][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 524.505117][ C1] __release_sock+0x31b/0x400 [ 524.510191][ C1] ? tcp_push+0x221/0x6f0 [ 524.515102][ C1] release_sock+0x5a/0x220 [ 524.519741][ C1] __mptcp_push_pending+0x400/0x560 [ 524.525179][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 524.531099][ C1] ? __virt_addr_valid+0x5e/0x590 [ 524.536296][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 524.542542][ C1] ? __phys_addr_symbol+0x30/0x80 [ 524.547805][ C1] ? __check_object_size+0x497/0x720 [ 524.553390][ C1] mptcp_sendmsg+0x1960/0x1f20 [ 524.558315][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 524.563716][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 524.569221][ C1] inet_sendmsg+0x119/0x140 [ 524.573857][ C1] __sys_sendto+0x42c/0x4e0 [ 524.578555][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 524.583731][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 524.589478][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 524.594997][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 524.599945][ C1] ? do_syscall_64+0x91/0x250 [ 524.604751][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.610112][ C1] do_syscall_64+0xcd/0x250 [ 524.614772][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.620862][ C1] RIP: 0033:0x7f2421179eb9 [ 524.625406][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.645363][ C1] RSP: 002b:00007f2421f8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.654078][ C1] RAX: ffffffffffffffda RBX: 00007f2421316130 RCX: 00007f2421179eb9 [ 524.662240][ C1] RDX: 0000000000100b20 RSI: 0000000020000040 RDI: 0000000000000006 [ 524.670351][ C1] RBP: 00007f24211e793e R08: 0000000000000000 R09: 0000000000000000 [ 524.678470][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.686612][ C1] R13: 0000000000000001 R14: 00007f2421316130 R15: 00007ffed0933778 [ 524.694922][ C1] [ 524.698028][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 524.705390][ C1] CPU: 1 UID: 0 PID: 8154 Comm: syz.2.444 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 524.716101][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 524.726322][ C1] Call Trace: [ 524.729634][ C1] [ 524.732500][ C1] dump_stack_lvl+0x3d/0x1f0 [ 524.737137][ C1] panic+0x6dc/0x7c0 [ 524.741095][ C1] ? __pfx_panic+0x10/0x10 [ 524.745579][ C1] ? show_trace_log_lvl+0x363/0x500 [ 524.750850][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 524.756030][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 524.762613][ C1] check_panic_on_warn+0xab/0xb0 [ 524.767627][ C1] __warn+0xf1/0x3c0 [ 524.771580][ C1] ? __mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 524.778070][ C1] report_bug+0x3c0/0x580 [ 524.782445][ C1] handle_bug+0x3d/0x70 [ 524.786644][ C1] exc_invalid_op+0x17/0x50 [ 524.791197][ C1] asm_exc_invalid_op+0x1a/0x20 [ 524.796191][ C1] RIP: 0010:__mptcp_move_skbs_from_subflow+0x1627/0x24d0 [ 524.803275][ C1] Code: 02 48 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 86 0d 00 00 c6 43 7f 00 e9 22 f0 ff ff 48 8b ac 24 a0 00 00 00 e8 3a 5c 94 f6 90 <0f> 0b 90 e9 49 f3 ff ff e8 2c 5c 94 f6 90 0f 0b 90 e9 df f0 ff ff [ 524.823090][ C1] RSP: 0018:ffffc90000a18408 EFLAGS: 00010246 [ 524.829318][ C1] RAX: 0000000000000000 RBX: 00000000000081e5 RCX: ffffffff8af75652 [ 524.837365][ C1] RDX: ffff888027bbda00 RSI: ffffffff8af763b6 RDI: 0000000000000004 [ 524.845619][ C1] RBP: ffffc90000a18528 R08: 0000000000000004 R09: 00000000000081e5 [ 524.853619][ C1] R10: 00000000000055f0 R11: 0000000000000000 R12: ffff88807af1be28 [ 524.861640][ C1] R13: 0000000000000000 R14: ffff88807af1bd40 R15: dffffc0000000000 [ 524.869751][ C1] ? __mptcp_move_skbs_from_subflow+0x8c2/0x24d0 [ 524.876221][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 524.882820][ C1] ? __mptcp_move_skbs_from_subflow+0x1626/0x24d0 [ 524.889353][ C1] mptcp_data_ready+0x30e/0x8e0 [ 524.894281][ C1] ? __pfx_mptcp_data_ready+0x10/0x10 [ 524.899796][ C1] subflow_data_ready+0x51d/0x7d0 [ 524.904970][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 524.910748][ C1] ? __pfx_tcp_grow_window+0x10/0x10 [ 524.916135][ C1] tcp_data_ready+0x146/0x5b0 [ 524.920854][ C1] ? tcp_event_data_recv+0xb6e/0x1410 [ 524.926290][ C1] ? __pfx_tcp_data_ready+0x10/0x10 [ 524.931697][ C1] tcp_data_queue+0x1a6f/0x5280 [ 524.936627][ C1] ? tcp_urg+0x110/0xb80 [ 524.940909][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 524.946218][ C1] ? tcp_send_dupack+0x780/0x810 [ 524.951199][ C1] ? ktime_get+0xfb/0x1a0 [ 524.955594][ C1] tcp_rcv_established+0x8b1/0x21c0 [ 524.960906][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 524.966064][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 524.971508][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 524.977176][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 524.982251][ C1] ? __pfx_ipv4_dst_check+0x10/0x10 [ 524.987572][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 524.992215][ C1] tcp_v4_rcv+0x33a8/0x4390 [ 524.996885][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 525.001807][ C1] ? __pfx_raw_local_deliver+0x10/0x10 [ 525.007399][ C1] ? read_tsc+0x9/0x20 [ 525.011525][ C1] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 525.017312][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 525.022207][ C1] ip_protocol_deliver_rcu+0xba/0x4c0 [ 525.027654][ C1] ip_local_deliver_finish+0x316/0x570 [ 525.033171][ C1] ip_local_deliver+0x18e/0x1f0 [ 525.038076][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 525.043766][ C1] ip_rcv+0x2c5/0x5d0 [ 525.048011][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 525.052589][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 525.058541][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 525.064995][ C1] ? process_backlog+0x3f1/0x15f0 [ 525.070142][ C1] ? __pfx_lock_release+0x10/0x10 [ 525.075213][ C1] ? mark_held_locks+0x9f/0xe0 [ 525.080049][ C1] ? process_backlog+0x3f1/0x15f0 [ 525.085212][ C1] __netif_receive_skb+0x1d/0x160 [ 525.090292][ C1] process_backlog+0x443/0x15f0 [ 525.095188][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 525.100621][ C1] net_rx_action+0xa92/0x1010 [ 525.105368][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 525.110514][ C1] ? __pfx_mark_lock+0x10/0x10 [ 525.115848][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 525.121108][ C1] ? sched_clock+0x38/0x60 [ 525.125835][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 525.130918][ C1] ? mark_held_locks+0x9f/0xe0 [ 525.135899][ C1] handle_softirqs+0x216/0x8f0 [ 525.140716][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 525.146088][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 525.151420][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 525.156570][ C1] do_softirq+0xb2/0xf0 [ 525.160775][ C1] [ 525.163907][ C1] [ 525.166963][ C1] __local_bh_enable_ip+0x100/0x120 [ 525.172207][ C1] ? __dev_queue_xmit+0x86d/0x4300 [ 525.177363][ C1] __dev_queue_xmit+0x882/0x4300 [ 525.182349][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 525.187471][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 525.192937][ C1] ? call_rcu_zapped+0x20/0xb0 [ 525.197872][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 525.203132][ C1] ? selinux_ip_postroute+0x6fb/0xda0 [ 525.208581][ C1] ? __pfx_mark_lock+0x10/0x10 [ 525.213488][ C1] ? find_held_lock+0x2d/0x110 [ 525.218297][ C1] ? __ip_finish_output+0x49e/0x950 [ 525.223553][ C1] ? __pfx_lock_release+0x10/0x10 [ 525.228623][ C1] ? mark_held_locks+0x9f/0xe0 [ 525.233443][ C1] ip_finish_output2+0x16fe/0x25e0 [ 525.238628][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 525.244157][ C1] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 525.249087][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 525.254334][ C1] __ip_finish_output+0x49e/0x950 [ 525.259544][ C1] ip_finish_output+0x31/0x310 [ 525.264449][ C1] ip_output+0x13b/0x2a0 [ 525.268747][ C1] ? __pfx_ip_output+0x10/0x10 [ 525.273558][ C1] ip_local_out+0x33e/0x4a0 [ 525.278113][ C1] __ip_queue_xmit+0x747/0x1940 [ 525.282995][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 525.288155][ C1] __tcp_transmit_skb+0x2a4c/0x3dc0 [ 525.293399][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 525.298996][ C1] ? kasan_quarantine_put+0x10a/0x240 [ 525.304432][ C1] tcp_write_xmit+0x809d/0x8490 [ 525.309420][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 525.315495][ C1] tcp_rcv_established+0x93a/0x21c0 [ 525.320866][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 525.326553][ C1] ? __pfx_lock_release+0x10/0x10 [ 525.331732][ C1] tcp_v4_do_rcv+0x5ca/0xa90 [ 525.336393][ C1] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 525.341723][ C1] __release_sock+0x31b/0x400 [ 525.346592][ C1] ? tcp_push+0x221/0x6f0 [ 525.351001][ C1] release_sock+0x5a/0x220 [ 525.355752][ C1] __mptcp_push_pending+0x400/0x560 [ 525.361087][ C1] ? __pfx___mptcp_push_pending+0x10/0x10 [ 525.366840][ C1] ? __virt_addr_valid+0x5e/0x590 [ 525.371894][ C1] ? const_folio_flags.constprop.0+0x56/0x150 [ 525.378083][ C1] ? __phys_addr_symbol+0x30/0x80 [ 525.383147][ C1] ? __check_object_size+0x497/0x720 [ 525.388598][ C1] mptcp_sendmsg+0x1960/0x1f20 [ 525.393408][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 525.398759][ C1] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 525.403911][ C1] inet_sendmsg+0x119/0x140 [ 525.408563][ C1] __sys_sendto+0x42c/0x4e0 [ 525.413238][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 525.418328][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 525.424133][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 525.429508][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 525.434458][ C1] ? do_syscall_64+0x91/0x250 [ 525.439287][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 525.444550][ C1] do_syscall_64+0xcd/0x250 [ 525.449116][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.455062][ C1] RIP: 0033:0x7f2421179eb9 [ 525.459582][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.479341][ C1] RSP: 002b:00007f2421f8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.487882][ C1] RAX: ffffffffffffffda RBX: 00007f2421316130 RCX: 00007f2421179eb9 [ 525.495888][ C1] RDX: 0000000000100b20 RSI: 0000000020000040 RDI: 0000000000000006 [ 525.503992][ C1] RBP: 00007f24211e793e R08: 0000000000000000 R09: 0000000000000000 [ 525.512079][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.520072][ C1] R13: 0000000000000001 R14: 00007f2421316130 R15: 00007ffed0933778 [ 525.528295][ C1] [ 525.531932][ C1] Kernel Offset: disabled [ 525.536514][ C1] Rebooting in 86400 seconds..