last executing test programs: 14.95169785s ago: executing program 4 (id=3522): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f01000880000000008508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 13.962643084s ago: executing program 4 (id=3526): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x100000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 12.408619653s ago: executing program 0 (id=3534): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3b, {0x9, 0x5a64, 0x10001, 0x174, 0x10000, 0x5}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) timerfd_create(0x7, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002d2cfa00863110001badc010203010902240001050000000209b3050905950310000008aea8774f0fa25e6b8ddcdabccb13d83ae31a9fbb3cfdc30c3f7679cd82e332a0f148b56d77481c"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 10.718457999s ago: executing program 4 (id=3541): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x1da, &(0x7f0000000780)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x1a4, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1ff, 0x9, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfe}}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f00", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 9.621788323s ago: executing program 0 (id=3542): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$getown(0xffffffffffffffff, 0x9) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000) 9.601910776s ago: executing program 2 (id=3543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) 8.524669297s ago: executing program 0 (id=3548): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getpid() ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) getpid() socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000305fcffffff0380000000000000529f12a6abc76359f69715d27ae6123253539bd8f4d0b800000080c4109cc79046fa", @ANYRES32=0x0, @ANYBLOB="0000000010a001001c0012800b0001006d616373656300000c0002800500090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8090}, 0x44000) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002"], 0x50}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f902018000", 0x14}], 0x1}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x3, 0x30f}, &(0x7f0000000200), &(0x7f0000000400)) 7.3388742s ago: executing program 2 (id=3551): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x100000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 7.171306901s ago: executing program 4 (id=3552): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3b, {0x9, 0x5a64, 0x10001, 0x174, 0x10000, 0x5}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) timerfd_create(0x7, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002d2cfa00863110001badc010203010902240001050000000209b3050905950310000008aea8774f0fa25e6b8ddcdabccb13d83ae31a9fbb3cfdc30c3f7679cd82e332a0f148b56d77481c"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 7.093969348s ago: executing program 0 (id=3553): r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66801, 0x19d) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0xbffd, {0x7, './file0'}}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 6.889377988s ago: executing program 3 (id=3555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x36}, 0x94) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x20, 0x13, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x36e47, 0x880}}, 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000140)=@abs={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 4.977306371s ago: executing program 0 (id=3557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 4.923957382s ago: executing program 1 (id=3558): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 4.798788283s ago: executing program 0 (id=3559): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x1da, &(0x7f0000000780)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x1a4, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1ff, 0x9, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfe}}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f00", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 4.798109161s ago: executing program 1 (id=3560): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 3.910721662s ago: executing program 4 (id=3561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7", 0x18}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) 3.901385572s ago: executing program 3 (id=3562): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0xf, 0xa, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x9, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x2, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0x11, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x28, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d697, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.885380695s ago: executing program 1 (id=3563): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) io_uring_enter(r2, 0x47f6, 0x42, 0x2, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000300)) r6 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) 3.722057164s ago: executing program 3 (id=3564): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008030) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x80000) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffec77, @my=0x1}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(r4, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, 0x0, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) 3.70561499s ago: executing program 2 (id=3565): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) read$hidraw(r6, &(0x7f0000000180)=""/215, 0xd7) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 3.024265599s ago: executing program 2 (id=3566): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) 2.987641503s ago: executing program 1 (id=3567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="75c2fcd1a6f316227ac991515a8156b56af647ed1f5a4f3f157f264836c9ea38025207c2fcd9907fbe23a202da1972478f4386ad0474abec0ecab5af451e0b9c6347c21e192eccff6415542364eb742c7fc28fc3c7342b421fd66951ee4b6436", 0xfffffebb}, {&(0x7f0000000540)="832ce7f1c8e9fb438920c49fd04117ff512b8909542b3bb9467ad7deff0e8a1b2d351126f6bd9f179e23ea7442320ff3baad6d92526981ea2613541bcc785a8df228155230fa3c636288de4396c825267020861ac71cbf3875a4e3", 0x5b}, {&(0x7f0000000700)="2ff98a5b800bbbfdd7a5f216327f2b1842e4848389e0c8648da5c7a9c322cce35e7facaad5af227efbe40876544a2d538c91276421df14b615e509f3a5325a3fddd8720916446e3c79ee3a8653", 0x4d}, {&(0x7f0000000780)="6cda9d537f14e6bcc27e265e24808c503980c6ed0d864751dd512d149022670e18eadd3f707abe5052851fbf13", 0x2d}], 0x7}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.842289934s ago: executing program 3 (id=3568): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {0x0}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 1.821447695s ago: executing program 1 (id=3569): r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66801, 0x19d) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0xbffd, {0x7, './file0'}}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1.799502202s ago: executing program 2 (id=3570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.679802714s ago: executing program 3 (id=3571): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20048000) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="84b5240a646e0f5d", 0x8}], 0x1}, 0x0, 0x48000, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fchdir(r7) r11 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r11, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0x5, '\x00', 0x6}) 1.419868823s ago: executing program 2 (id=3572): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000001c0)={0x3b, {0x9, 0x5a64, 0x10001, 0x174, 0x10000, 0x5}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) timerfd_create(0x7, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax,always') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002d2cfa00863110001badc010203010902240001050000000209b3050905950310000008aea8774f0fa25e6b8ddcdabccb13d83ae31a9fbb3cfdc30c3f7679cd82e332a0f148b56d77481c"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 254.423333ms ago: executing program 1 (id=3573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r1, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x74) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 53.074928ms ago: executing program 4 (id=3574): write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x4}, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 3 (id=3575): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_ethernet(0x1da, &(0x7f0000000780)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "02000b", 0x1a4, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1ff, 0x9, 0x5], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9]}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfe}}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) timerfd_create(0x4, 0x80800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f00", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) kernel console output (not intermixed with test programs): 0 audit(1754036366.461:282): avc: denied { mount } for pid=16545 comm="syz.3.2415" name="/" dev="ramfs" ino=52317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1268.358046][ T5942] usb 1-1: USB disconnect, device number 82 [ 1268.364954][ T5942] option 1-1:1.76: device disconnected [ 1268.806687][T16554] netlink: 'syz.0.2416': attribute type 21 has an invalid length. [ 1268.815169][T16554] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2416'. [ 1269.176935][ T30] audit: type=1400 audit(1754036367.531:283): avc: denied { read write } for pid=16552 comm="syz.2.2417" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1269.201142][ T30] audit: type=1400 audit(1754036367.531:284): avc: denied { open } for pid=16552 comm="syz.2.2417" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1269.226413][ T30] audit: type=1400 audit(1754036367.581:285): avc: denied { ioctl } for pid=16552 comm="syz.2.2417" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1269.500989][ T5942] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1269.572582][T16557] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 1269.580437][T16557] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1269.589719][T16557] team0: Port device wlan1 added [ 1269.902342][ T5942] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1269.915507][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.930410][ T5942] usb 3-1: config 0 descriptor?? [ 1270.124160][T16569] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 1270.357391][ T5897] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1270.463981][ T5942] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1270.484130][ T5942] [drm:udl_init] *ERROR* Selecting channel failed [ 1270.515654][ T5942] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1270.525156][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 1270.533773][ T5897] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1270.539526][ T5942] [drm] Initialized udl on minor 2 [ 1270.550909][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.558915][ T5897] usb 1-1: Product: syz [ 1270.561558][ T5942] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1270.579442][ T5942] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1270.581031][ T5897] usb 1-1: Manufacturer: syz [ 1270.590575][ T5897] usb 1-1: SerialNumber: syz [ 1270.592308][ T5943] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1270.610087][ T5942] usb 3-1: USB disconnect, device number 89 [ 1270.612900][ T5897] usb 1-1: config 0 descriptor?? [ 1270.721517][ T5943] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1270.856022][T16573] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 1270.864451][ T5835] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1270.900729][T16575] overlayfs: failed to resolve './file1': -2 [ 1270.967477][T16577] syzkaller1: entered promiscuous mode [ 1270.975764][T16577] syzkaller1: entered allmulticast mode [ 1271.025847][ T5835] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1271.036537][ T5835] usb 4-1: config 0 has no interface number 0 [ 1271.053546][ T5835] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1271.077172][ T5835] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1271.101959][ T5835] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1271.160528][ T5835] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1271.190236][ T5897] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1271.193932][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.206934][ T5897] usb 1-1: USB disconnect, device number 83 [ 1271.808272][T16588] Bluetooth: MGMT ver 1.23 [ 1272.050161][ T5835] usb 4-1: Product: syz [ 1272.054406][ T5835] usb 4-1: Manufacturer: syz [ 1272.059005][ T5835] usb 4-1: SerialNumber: syz [ 1272.143414][ T30] audit: type=1400 audit(1754036370.161:286): avc: denied { bind } for pid=16582 comm="syz.4.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1272.232477][ T30] audit: type=1400 audit(1754036370.161:287): avc: denied { write } for pid=16582 comm="syz.4.2429" path="socket:[51994]" dev="sockfs" ino=51994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1272.264791][ T5835] usb 4-1: config 0 descriptor?? [ 1272.285798][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1272.454492][ T5835] usb 4-1: NFC: Unable to get FW version [ 1272.649634][T16598] netlink: 'syz.1.2431': attribute type 10 has an invalid length. [ 1273.769235][ T5835] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1273.911733][ T5835] usb 4-1: USB disconnect, device number 88 [ 1274.450601][T16362] udevd[16362]: setting mode of /dev/bus/usb/004/088 to 020664 failed: No such file or directory [ 1274.669070][T16362] udevd[16362]: setting owner of /dev/bus/usb/004/088 to uid=0, gid=0 failed: No such file or directory [ 1275.583661][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 1275.654694][T16616] overlayfs: failed to resolve './file1': -2 [ 1275.685007][T16612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.113322][ T5835] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1280.331098][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 1280.343611][ T5835] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1280.352889][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.381282][ T5835] usb 1-1: Product: syz [ 1280.385898][ T5835] usb 1-1: Manufacturer: syz [ 1280.423624][ T5835] usb 1-1: SerialNumber: syz [ 1281.412074][ T5835] usb 1-1: config 0 descriptor?? [ 1281.525153][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 1282.062766][ T5835] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1282.087401][ T5835] usb 1-1: USB disconnect, device number 84 [ 1282.171047][T14145] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1282.211705][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 1282.374591][T16669] netlink: 'syz.1.2450': attribute type 10 has an invalid length. [ 1282.571037][T15942] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1282.782941][T14145] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1282.800428][T14145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.824963][T14145] usb 3-1: config 0 descriptor?? [ 1282.882915][T15942] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1282.946121][T15942] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1283.097282][T15942] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1283.176032][T15942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1283.315898][T15942] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1283.427531][T14145] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1283.429734][T15942] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1283.435821][T14145] [drm:udl_init] *ERROR* Selecting channel failed [ 1283.489103][T14145] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1283.504648][T14145] [drm] Initialized udl on minor 2 [ 1283.565427][T14145] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1283.572044][T15942] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1283.583469][T15942] usb 4-1: Product: syz [ 1283.587775][T15942] usb 4-1: Manufacturer: syz [ 1283.606182][T15942] cdc_wdm 4-1:1.0: skipping garbage [ 1283.606420][T14145] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1283.615182][T15942] cdc_wdm 4-1:1.0: skipping garbage [ 1283.819891][T15942] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1283.828855][ T5835] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1283.840196][ T5835] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1283.842747][T15942] cdc_wdm 4-1:1.0: Unknown control protocol [ 1283.847520][T14145] usb 3-1: USB disconnect, device number 90 [ 1284.127468][T16685] netlink: 'syz.4.2458': attribute type 21 has an invalid length. [ 1284.135651][T16685] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2458'. [ 1284.146886][ T30] audit: type=1400 audit(1754036382.501:288): avc: denied { execute } for pid=16680 comm="syz.1.2457" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1284.188562][T15942] usb 4-1: USB disconnect, device number 89 [ 1284.776767][T16701] netlink: 'syz.1.2460': attribute type 21 has an invalid length. [ 1284.785016][T16701] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2460'. [ 1285.297814][ T30] audit: type=1400 audit(1754036383.651:289): avc: denied { append } for pid=16705 comm="syz.3.2463" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1285.326987][T16707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2464'. [ 1285.807060][ T30] audit: type=1400 audit(1754036383.981:290): avc: denied { read write } for pid=16710 comm="syz.1.2466" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1285.841788][ T30] audit: type=1400 audit(1754036383.991:291): avc: denied { open } for pid=16710 comm="syz.1.2466" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1285.867113][T14145] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1286.510980][T14145] usb 4-1: Using ep0 maxpacket: 8 [ 1286.636444][T16722] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1286.636444][T16722] program syz.2.2467 not setting count and/or reply_len properly [ 1286.935903][T14145] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1286.956724][T14145] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1286.966401][T14145] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1287.020502][T14145] usb 4-1: Product: syz [ 1287.165663][T14145] usb 4-1: Manufacturer: syz [ 1287.735640][T14145] usb 4-1: SerialNumber: syz [ 1287.754933][T16730] netlink: 'syz.2.2471': attribute type 21 has an invalid length. [ 1287.799068][T16730] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2471'. [ 1288.006207][T14145] usb 4-1: Invalid connection information received from device [ 1288.191592][ T5943] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1288.358918][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.672575][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.684150][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1288.697924][ T5943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.727108][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.753166][ T5943] usb 1-1: config 0 descriptor?? [ 1289.177571][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.188155][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.195916][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.203716][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.589397][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.597194][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.604932][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.613109][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.624664][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.647847][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.726166][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.937056][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 1289.950517][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1289.992074][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.029829][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.067756][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.105152][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.117897][T14145] usb 4-1: USB disconnect, device number 90 [ 1290.148376][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.156147][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.170979][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.179048][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.382797][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.408682][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.463338][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.902182][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1290.910073][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1291.085952][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1291.166624][T16773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.327796][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1292.381010][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1292.576361][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.171001][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.178438][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.186272][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.193916][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.201584][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.209029][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.217026][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.224655][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.233545][ T5943] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1293.261136][ T5943] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1293.285661][ T5943] usb 1-1: USB disconnect, device number 85 [ 1293.641332][T16795] fido_id[16795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1294.201070][T16800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1294.827097][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1295.664488][T16826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.131163][ T5890] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1296.683426][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.703884][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.828390][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1296.841922][ T5890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1296.851326][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.906078][ T5890] usb 1-1: config 0 descriptor?? [ 1297.610306][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1297.675539][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1297.953824][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.411876][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.425140][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.434596][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.451090][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.458910][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.467083][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.475237][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.484234][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.493544][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.503102][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.526877][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.539230][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1298.789841][T16871] netlink: 'syz.4.2514': attribute type 21 has an invalid length. [ 1298.798057][T16871] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2514'. [ 1299.140932][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.148590][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.156287][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.163933][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.171728][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.179369][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.187021][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.194634][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.237006][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.252872][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.266542][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.580497][T16878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1299.608408][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.653843][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.690279][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.707216][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.710970][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.731350][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.739620][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.747960][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.906555][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1299.918351][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1300.470823][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1300.478314][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1300.581473][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1300.588914][ T5890] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1300.639929][ T5890] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1301.347025][ T30] audit: type=1400 audit(1754036399.311:292): avc: denied { mount } for pid=16891 comm="syz.2.2521" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1301.377866][ T5890] usb 1-1: USB disconnect, device number 86 [ 1301.619688][T16894] fido_id[16894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1301.887223][T16888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.353230][T16913] netlink: 'syz.3.2525': attribute type 21 has an invalid length. [ 1303.361511][T16913] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1305.420936][T15942] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1305.666936][T15942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.798860][T15942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.876266][T15942] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1305.927341][T15942] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1305.968797][T15942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.013055][T15942] usb 4-1: config 0 descriptor?? [ 1306.194275][ T30] audit: type=1400 audit(1754036404.531:293): avc: denied { write } for pid=16935 comm="syz.1.2533" path="socket:[52966]" dev="sockfs" ino=52966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1306.985889][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.000973][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.017602][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.031115][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.046561][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.054296][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.061972][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.069469][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.077520][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.090933][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.118387][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.175232][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.315824][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.323549][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.331219][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.338689][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.346374][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.353984][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.361445][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.368822][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.376275][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1307.440311][T16954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2538'. [ 1308.139634][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.147131][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.155810][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.165789][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.173275][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.181090][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.190511][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.202596][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.210012][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.217520][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.224925][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.232312][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.239681][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.247064][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.254453][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.261839][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.269202][T15942] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1308.304048][T15942] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1309.207126][T15942] usb 4-1: USB disconnect, device number 91 [ 1309.339092][T16972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.680992][T10776] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1309.872765][T10776] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1309.881969][T10776] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.903991][T16982] netlink: 'syz.0.2545': attribute type 10 has an invalid length. [ 1309.922030][T10776] usb 3-1: config 0 descriptor?? [ 1309.932282][T16982] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1310.253250][T10776] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1311.297156][T10776] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1311.307301][T10776] [drm] Initialized udl on minor 2 [ 1311.330987][T10776] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1311.341186][T10776] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1311.512628][T16992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.607121][ T5890] usb 3-1: USB disconnect, device number 91 [ 1311.613895][T15942] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1311.637404][T15942] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1312.142002][T17003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1312.383123][T17006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1314.318334][ T30] audit: type=1400 audit(1754036412.641:294): avc: denied { mounton } for pid=17019 comm="syz.3.2554" path="/520/file0" dev="tmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1315.591915][T17037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2559'. [ 1315.602010][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'. [ 1315.906552][ T30] audit: type=1400 audit(1754036414.241:295): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1317.342117][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2564'. [ 1318.761593][T17076] netlink: 'syz.0.2568': attribute type 10 has an invalid length. [ 1319.593536][T17091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1319.606988][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 1319.630911][ T5890] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1320.891660][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.925613][ T5890] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1320.934285][ T5890] usb 4-1: config 0 has no interface number 0 [ 1320.962411][ T5890] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1320.989914][ T5890] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1321.095472][ T5890] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1321.146446][ T5890] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1321.160105][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.173907][ T5890] usb 4-1: Product: syz [ 1321.188368][ T5890] usb 4-1: Manufacturer: syz [ 1321.195208][ T5890] usb 4-1: SerialNumber: syz [ 1321.203854][ T5890] usb 4-1: config 0 descriptor?? [ 1321.213861][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1321.220764][ T5890] usb 4-1: NFC: Unable to get FW version [ 1321.226546][T15942] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1321.244305][ T5890] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1321.383400][T15942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.424314][T17107] netlink: 'syz.4.2567': attribute type 10 has an invalid length. [ 1321.445068][T17107] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 1321.446700][T17108] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1321.446700][T17108] program syz.1.2577 not setting count and/or reply_len properly [ 1321.473283][T15942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.520430][T15942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1321.543510][ T5890] usb 4-1: USB disconnect, device number 92 [ 1321.724375][T17107] team0: Port device wlan1 added [ 1321.730173][T15942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1321.742734][T15942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.754471][T15942] usb 1-1: config 0 descriptor?? [ 1322.457573][T17123] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 1322.467381][T17123] team0: Device ipvlan1 is of different type [ 1323.031885][T17122] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 1323.074273][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.085900][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.093598][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.510999][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.519316][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.547131][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.554939][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.573799][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.595149][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.610954][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.649975][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.685491][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1323.731263][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.331244][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.346055][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.441397][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.448835][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.484517][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.502151][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.518157][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.537567][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.589674][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.599955][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.608255][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.706312][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1324.728619][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1325.124030][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1325.243776][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1325.252915][T17152] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 1325.270919][T17152] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1325.491026][T17158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2591'. [ 1325.503828][T17158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2591'. [ 1325.610970][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1325.633118][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1325.666661][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.236856][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.244593][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.252172][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.259711][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.267473][ T30] audit: type=1400 audit(1754036426.561:296): avc: denied { create } for pid=17161 comm="syz.3.2593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1328.300615][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.632059][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1328.679054][T15942] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1329.494161][T15942] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1329.547344][T15942] usb 1-1: USB disconnect, device number 87 [ 1329.641383][T17176] fido_id[17176]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1329.760193][T17175] bond0: (slave dummy0): Releasing backup interface [ 1330.408449][T17175] team0: Port device wlan1 removed [ 1332.757749][ T30] audit: type=1400 audit(1754036430.681:297): avc: denied { write } for pid=17211 comm="syz.0.2607" path="socket:[53892]" dev="sockfs" ino=53892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1335.348252][T17225] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 1335.678154][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2609'. [ 1335.688727][T17220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 1338.981002][T17244] netlink: 'syz.2.2614': attribute type 10 has an invalid length. [ 1339.010903][T17244] team0: Device ipvlan1 is of different type [ 1339.372654][T17248] netlink: 'syz.1.2616': attribute type 10 has an invalid length. [ 1340.854610][T17260] bond0: (slave bridge0): Releasing backup interface [ 1341.108216][T17260] team0: Port device wlan1 removed [ 1342.180076][T17276] netlink: 'syz.0.2626': attribute type 10 has an invalid length. [ 1342.704444][T17284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'. [ 1342.806852][ T30] audit: type=1400 audit(1754036441.161:298): avc: denied { connect } for pid=17280 comm="syz.0.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1342.833536][ T30] audit: type=1400 audit(1754036441.161:299): avc: denied { read } for pid=17280 comm="syz.0.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1343.600603][T17296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'. [ 1347.254299][T17332] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1347.254299][T17332] program syz.2.2645 not setting count and/or reply_len properly [ 1348.218162][ T30] audit: type=1400 audit(1754036446.201:300): avc: denied { create } for pid=17342 comm="syz.4.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1348.242420][ T30] audit: type=1400 audit(1754036446.211:301): avc: denied { bind } for pid=17342 comm="syz.4.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1348.715706][T17351] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 1348.731783][T17351] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1349.007127][T17356] overlayfs: missing 'lowerdir' [ 1349.990433][T14145] IPVS: starting estimator thread 0... [ 1350.081834][T17369] IPVS: using max 44 ests per chain, 105600 per kthread [ 1350.144767][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1350.159410][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1351.556347][T17382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2660'. [ 1351.677733][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1353.593940][T17426] wg2: entered allmulticast mode [ 1353.919332][T17434] netlink: 'syz.0.2674': attribute type 21 has an invalid length. [ 1353.927462][T17434] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2674'. [ 1354.053046][ T30] audit: type=1400 audit(1754036452.391:302): avc: denied { unmount } for pid=17431 comm="syz.4.2676" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1356.278530][T17469] netlink: 'syz.3.2685': attribute type 10 has an invalid length. [ 1356.288967][T17469] team0: Device ipvlan1 failed to register rx_handler [ 1358.324705][T17492] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1358.740939][ T5890] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1358.905888][ T5890] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1358.916671][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.928809][ T5890] usb 4-1: config 0 has no interface number 0 [ 1358.936245][ T5890] usb 4-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1358.968504][ T5890] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1359.008060][T17510] bond0: (slave syz_tun): Releasing backup interface [ 1359.066387][T17510] bond0: (slave bridge0): Releasing backup interface [ 1359.081680][T17511] netlink: 'syz.1.2699': attribute type 10 has an invalid length. [ 1359.089709][ T5890] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1359.100693][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.110249][ T5890] usb 4-1: Product: syz [ 1359.119845][ T5890] usb 4-1: Manufacturer: syz [ 1359.128278][ T5890] usb 4-1: SerialNumber: syz [ 1359.155596][ T5890] usb 4-1: config 0 descriptor?? [ 1359.169844][ T5890] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1359.244780][T17510] team0: Port device wlan1 removed [ 1359.470332][ T5890] usb 4-1: USB disconnect, device number 93 [ 1359.972467][T17511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.001378][T17511] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1360.748902][ T30] audit: type=1400 audit(1754036459.101:303): avc: denied { setopt } for pid=17540 comm="syz.2.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1360.923626][ T30] audit: type=1400 audit(1754036459.131:304): avc: denied { read } for pid=17540 comm="syz.2.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1361.261599][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.276431][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.360413][ T30] audit: type=1400 audit(1754036459.241:305): avc: denied { write } for pid=17540 comm="syz.2.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1361.701323][T17549] netlink: 'syz.4.2710': attribute type 21 has an invalid length. [ 1361.709376][T17549] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2710'. [ 1362.797599][T17566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2715'. [ 1362.946792][T17564] netlink: 'syz.4.2716': attribute type 10 has an invalid length. [ 1365.701985][T17580] wg2: entered allmulticast mode [ 1367.791346][T17615] netlink: 'syz.1.2724': attribute type 21 has an invalid length. [ 1367.800914][T17615] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1370.994705][T17633] wg2: entered allmulticast mode [ 1372.824657][ T30] audit: type=1400 audit(1754036471.171:306): avc: denied { create } for pid=17656 comm="syz.3.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1372.851698][ T30] audit: type=1400 audit(1754036471.171:307): avc: denied { write } for pid=17656 comm="syz.3.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1372.901673][T17659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2737'. [ 1372.910694][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 1373.330140][ T1135] Bluetooth: hci5: Frame reassembly failed (-84) [ 1373.420921][T14145] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1373.599595][T14145] usb 1-1: Using ep0 maxpacket: 8 [ 1373.750974][T14145] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1373.776364][T14145] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1374.270960][T14145] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1374.287313][T14145] usb 1-1: Product: syz [ 1374.303551][T14145] usb 1-1: Manufacturer: syz [ 1374.356463][T14145] usb 1-1: SerialNumber: syz [ 1375.340793][T14145] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 1375.349149][T14145] visor 1-1:1.0: probe with driver visor failed with error -110 [ 1375.381237][T10905] Bluetooth: hci5: command 0x1003 tx timeout [ 1375.388351][T15804] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1375.629172][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2743'. [ 1375.641289][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'. [ 1377.560296][T15942] usb 1-1: USB disconnect, device number 88 [ 1377.680116][T17706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.136876][T17731] 9pnet_virtio: no channels available for device syz [ 1380.726407][T17733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1381.982977][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1382.068486][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1382.376225][ T30] audit: type=1400 audit(1754036480.731:308): avc: denied { create } for pid=17757 comm="syz.2.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1384.209236][ T30] audit: type=1400 audit(1754036482.131:309): avc: denied { wake_alarm } for pid=17769 comm="syz.4.2762" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1385.025479][T17788] netlink: 'syz.2.2765': attribute type 10 has an invalid length. [ 1385.055718][T17788] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1385.331170][ T30] audit: type=1400 audit(1754036483.661:310): avc: denied { create } for pid=17795 comm="syz.3.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1385.552519][T17797] 9pnet_virtio: no channels available for device syz [ 1385.642481][T17799] 9pnet_virtio: no channels available for device syz [ 1386.857130][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 1386.935404][T17809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2769'. [ 1386.964813][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2769'. [ 1387.117609][T17805] hsr_slave_1 (unregistering): left promiscuous mode [ 1388.362929][T17829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1389.810904][T17845] Bluetooth: hci5: Frame reassembly failed (-84) [ 1389.953552][ T7076] Bluetooth: hci5: Frame reassembly failed (-84) [ 1391.948057][T15804] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1393.524639][T17887] netlink: 'syz.1.2792': attribute type 10 has an invalid length. [ 1393.922553][T17887] bond0: (slave wlan1): Releasing backup interface [ 1393.931118][T17887] team0: Port device wlan1 added [ 1394.349441][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 1394.573396][T17896] hsr_slave_1 (unregistering): left promiscuous mode [ 1394.773501][T10905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1394.887705][T10905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1394.902903][T10905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1394.919089][T10905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1394.927150][T10905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1394.976301][ T30] audit: type=1400 audit(1754036493.331:311): avc: denied { mounton } for pid=17900 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1395.193965][T17911] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1395.714555][T10776] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1395.763558][T17900] chnl_net:caif_netlink_parms(): no params data found [ 1396.021174][T10776] usb 3-1: Using ep0 maxpacket: 8 [ 1396.037491][T10776] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1396.092069][T10776] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1396.110912][T10776] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1396.139443][T10776] usb 3-1: Product: syz [ 1396.149418][T10776] usb 3-1: Manufacturer: syz [ 1396.227126][T10776] usb 3-1: SerialNumber: syz [ 1396.256993][T17900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.281075][T17900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.307675][T17900] bridge_slave_0: entered allmulticast mode [ 1396.355765][T17900] bridge_slave_0: entered promiscuous mode [ 1396.425104][T17900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.440998][T17900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.448293][T17900] bridge_slave_1: entered allmulticast mode [ 1396.464875][T17900] bridge_slave_1: entered promiscuous mode [ 1396.490365][T10776] usb 3-1: Invalid connection information received from device [ 1396.712211][T17900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.733329][T17900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.994035][T10905] Bluetooth: hci0: command tx timeout [ 1397.203314][T17900] team0: Port device team_slave_0 added [ 1397.252062][T17900] team0: Port device team_slave_1 added [ 1397.308568][T17900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.315935][T17900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.394724][T17900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.475615][T17900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.483778][T17900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.603701][T17900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.678950][T17900] hsr_slave_0: entered promiscuous mode [ 1397.689044][T17900] hsr_slave_1: entered promiscuous mode [ 1397.697395][T17900] debugfs: 'hsr0' already exists in 'hsr' [ 1397.705216][T17900] Cannot create hsr debugfs directory [ 1398.024253][T17946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2806'. [ 1398.040971][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 1398.265838][T17900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.376586][T17900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.489573][T17900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.591965][T17900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.667422][T14145] usb 3-1: USB disconnect, device number 92 [ 1399.331213][T10905] Bluetooth: hci0: command tx timeout [ 1399.401680][T17900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1399.413519][T17900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1399.424563][T17900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1399.440626][T17900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1399.912070][T17900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.937845][T17900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.954953][T16810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.962163][T16810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.034514][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.041650][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1401.392475][T10905] Bluetooth: hci0: command tx timeout [ 1401.403238][T17900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1401.413783][T17900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.517309][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1402.550656][T17995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1402.563281][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1402.687198][T17900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.825952][T17900] veth0_vlan: entered promiscuous mode [ 1402.883053][T17900] veth1_vlan: entered promiscuous mode [ 1403.127453][T17900] veth0_macvtap: entered promiscuous mode [ 1403.152678][T17900] veth1_macvtap: entered promiscuous mode [ 1403.398737][T18008] netlink: 'syz.0.2817': attribute type 10 has an invalid length. [ 1403.487866][T15804] Bluetooth: hci0: command tx timeout [ 1403.808203][T17900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.944384][ T5943] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1403.984247][T17900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.591896][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 1404.604067][T18017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1404.631506][ T5943] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1404.643404][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'. [ 1404.655333][ T5943] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1404.668903][ T5943] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1404.727484][ T7076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.738680][ T5943] usb 4-1: Product: syz [ 1404.743584][ T5943] usb 4-1: Manufacturer: syz [ 1404.748672][ T7076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.761870][ T5943] usb 4-1: SerialNumber: syz [ 1404.931208][ T7076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.977988][ T7076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.200474][ T5943] usb 4-1: Invalid connection information received from device [ 1405.211745][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.223245][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.287771][T17978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.296142][T17978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.310322][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 1406.880968][T14145] usb 4-1: USB disconnect, device number 94 [ 1409.054206][T18068] netlink: 'syz.1.2834': attribute type 10 has an invalid length. [ 1409.170702][T18068] team0: Port device wlan1 added [ 1409.886183][T18078] netlink: 'syz.2.2835': attribute type 10 has an invalid length. [ 1410.332093][T18078] team0: Port device wlan1 added [ 1410.600007][T18089] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 1411.578129][T18109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1411.587948][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 1412.719501][ T30] audit: type=1400 audit(1754036511.071:312): avc: denied { create } for pid=18125 comm="syz.3.2848" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1413.187575][T18136] netlink: 'syz.2.2855': attribute type 21 has an invalid length. [ 1413.195930][T18136] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2855'. [ 1414.771351][ T30] audit: type=1400 audit(1754036512.261:313): avc: denied { block_suspend } for pid=18137 comm="syz.3.2856" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1416.080108][ T30] audit: type=1400 audit(1754036513.271:314): avc: denied { connect } for pid=18137 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1416.149065][ T30] audit: type=1400 audit(1754036513.331:315): avc: denied { read } for pid=18137 comm="syz.3.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1416.326977][ T30] audit: type=1400 audit(1754036513.391:316): avc: denied { write } for pid=18137 comm="syz.3.2856" path="socket:[57695]" dev="sockfs" ino=57695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1419.856625][T18190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.746272][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.870423][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.324967][T18223] 9pnet_fd: Insufficient options for proto=fd [ 1423.890235][ T30] audit: type=1400 audit(1754036521.671:317): avc: denied { mount } for pid=18220 comm="syz.0.2878" name="/" dev="hugetlbfs" ino=58586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1424.124919][T18224] ksmbd: Unknown IPC event: 3, ignore. [ 1424.184975][T18224] usb usb8: usbfs: process 18224 (syz.1.2877) did not claim interface 0 before use [ 1424.269160][ T30] audit: type=1400 audit(1754036522.621:318): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1428.735957][T18279] virtiofs: Unknown parameter 'always' [ 1428.888446][T18272] team0: Port device team_slave_0 removed [ 1430.598014][T18303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2897'. [ 1434.195154][T18329] ksmbd: Unknown IPC event: 3, ignore. [ 1434.249580][T18329] usb usb8: usbfs: process 18329 (syz.1.2902) did not claim interface 0 before use [ 1435.328662][ T30] audit: type=1400 audit(1754036533.681:319): avc: denied { map } for pid=18330 comm="syz.3.2907" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1435.709988][ T30] audit: type=1400 audit(1754036533.681:320): avc: denied { execute } for pid=18330 comm="syz.3.2907" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1437.647814][T18358] netlink: 'syz.4.2908': attribute type 10 has an invalid length. [ 1437.655970][T18358] team0: Device ipvlan1 is of different type [ 1440.925770][T18387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2920'. [ 1440.940796][ T5897] IPVS: starting estimator thread 0... [ 1441.030919][T18385] IPVS: using max 71 ests per chain, 170400 per kthread [ 1441.681874][ T5897] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1442.540979][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.591053][ T5897] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1442.600076][ T5897] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1442.630455][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.647661][ T5897] usb 4-1: config 0 descriptor?? [ 1442.657534][T15804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1442.666975][T15804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1442.675954][T15804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1442.696064][T15804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1442.706828][T15804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1442.892009][T18398] ksmbd: Unknown IPC event: 3, ignore. [ 1442.902889][T18398] usb usb8: usbfs: process 18398 (syz.0.2922) did not claim interface 0 before use [ 1442.961117][ T5833] bond0: (slave syz_tun): Releasing backup interface [ 1443.745259][T15986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.893595][T15986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.072046][T15986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.411496][T18420] netlink: 'syz.4.2928': attribute type 21 has an invalid length. [ 1444.768700][T15804] Bluetooth: hci5: command tx timeout [ 1444.806188][T15986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.847652][ T5890] usb 4-1: USB disconnect, device number 95 [ 1445.059615][T18420] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1446.881430][T15804] Bluetooth: hci5: command tx timeout [ 1447.466828][T15804] Bluetooth: hci0: Unknown advertising packet type: 0x14 [ 1447.484241][T15804] Bluetooth: hci3: adv larger than maximum supported [ 1447.492587][T15804] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1447.544489][ T30] audit: type=1326 audit(1754036545.901:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.570621][ T30] audit: type=1326 audit(1754036545.901:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.600232][ T30] audit: type=1326 audit(1754036545.901:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.623892][ T30] audit: type=1326 audit(1754036545.901:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.649151][ T30] audit: type=1326 audit(1754036545.901:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.675943][ T30] audit: type=1326 audit(1754036545.901:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.700202][ T30] audit: type=1326 audit(1754036545.901:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.730132][ T30] audit: type=1326 audit(1754036545.921:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.759462][ T30] audit: type=1326 audit(1754036545.921:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.789486][ T30] audit: type=1326 audit(1754036545.921:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18435 comm="syz.1.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1447.924976][T18460] 9pnet_fd: Insufficient options for proto=fd [ 1447.972856][T15986] bond0 (unregistering): Released all slaves [ 1449.146529][T15804] Bluetooth: hci5: command tx timeout [ 1449.355232][T18474] netlink: 'syz.3.2939': attribute type 21 has an invalid length. [ 1449.460777][T18474] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2939'. [ 1449.797232][T15986] team0: Port device wlan1 removed [ 1450.393682][T18492] ksmbd: Unknown IPC event: 3, ignore. [ 1450.410275][T18399] chnl_net:caif_netlink_parms(): no params data found [ 1450.460252][T18492] usb usb8: usbfs: process 18492 (syz.1.2945) did not claim interface 0 before use [ 1451.393650][T15804] Bluetooth: hci5: command tx timeout [ 1451.950681][T18399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.966297][T18399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.984911][T18399] bridge_slave_0: entered allmulticast mode [ 1452.004021][T18399] bridge_slave_0: entered promiscuous mode [ 1452.056561][T15986] hsr_slave_0: left promiscuous mode [ 1452.065293][T15986] hsr_slave_1: left promiscuous mode [ 1452.097737][T15986] veth1_macvtap: left promiscuous mode [ 1452.121463][T15986] veth0_macvtap: left promiscuous mode [ 1452.169554][T15986] veth1_vlan: left promiscuous mode [ 1452.235662][T15986] veth0_vlan: left promiscuous mode [ 1452.276750][T15804] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 1452.276780][T15804] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 1452.550924][ T30] kauditd_printk_skb: 1638 callbacks suppressed [ 1452.550952][ T30] audit: type=1326 audit(1754036550.871:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1452.640599][ T30] audit: type=1326 audit(1754036550.871:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1452.735367][ T30] audit: type=1326 audit(1754036550.871:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1452.901464][ T30] audit: type=1326 audit(1754036550.871:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1452.976607][ T30] audit: type=1326 audit(1754036550.871:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1453.322190][ T30] audit: type=1326 audit(1754036550.871:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1453.366661][ T30] audit: type=1326 audit(1754036550.951:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1453.450929][ T30] audit: type=1326 audit(1754036550.951:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1453.584469][ T30] audit: type=1326 audit(1754036550.951:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1453.670981][ T30] audit: type=1326 audit(1754036550.951:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18501 comm="syz.0.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febbcf8eb69 code=0x7fc00000 [ 1453.675098][T18520] virtiofs: Unknown parameter 'always' [ 1455.209161][T18534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2955'. [ 1455.525382][T18399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.532577][T18399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.539895][T18399] bridge_slave_1: entered allmulticast mode [ 1455.550729][T18399] bridge_slave_1: entered promiscuous mode [ 1455.721996][T18399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.464437][T18399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1457.616221][T18399] team0: Port device team_slave_0 added [ 1457.674054][T18399] team0: Port device team_slave_1 added [ 1457.716065][T18564] ksmbd: Unknown IPC event: 3, ignore. [ 1457.915565][T15986] IPVS: stop unused estimator thread 0... [ 1457.934403][T18399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.971072][T18399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1458.460223][T18399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.478703][T18399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.485733][T18399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1458.525290][T18399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.853234][T18580] netlink: 'syz.3.2966': attribute type 21 has an invalid length. [ 1459.234335][T18580] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1459.338931][T18399] hsr_slave_0: entered promiscuous mode [ 1459.356641][T18399] hsr_slave_1: entered promiscuous mode [ 1459.452144][T18399] debugfs: 'hsr0' already exists in 'hsr' [ 1459.500148][T18399] Cannot create hsr debugfs directory [ 1460.528445][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2972'. [ 1460.587676][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 1462.322624][T18633] netlink: 'syz.3.2977': attribute type 10 has an invalid length. [ 1462.712442][T18633] team0: Port device wlan1 added [ 1463.192440][ T30] kauditd_printk_skb: 964 callbacks suppressed [ 1463.192552][ T30] audit: type=1326 audit(1754036561.521:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1463.505905][ T30] audit: type=1326 audit(1754036561.521:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1463.721118][ T30] audit: type=1326 audit(1754036561.521:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1463.747518][ T30] audit: type=1326 audit(1754036561.521:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1463.850397][ T30] audit: type=1326 audit(1754036561.521:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1463.905655][T18658] ksmbd: Unknown IPC event: 3, ignore. [ 1463.966966][ T30] audit: type=1326 audit(1754036561.521:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1463.990937][ T30] audit: type=1326 audit(1754036561.521:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1464.014717][ T30] audit: type=1326 audit(1754036561.521:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1464.038475][ T30] audit: type=1326 audit(1754036561.521:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1464.077857][ T30] audit: type=1326 audit(1754036561.521:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18630 comm="syz.1.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377f58eb69 code=0x7fc00000 [ 1464.623291][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'. [ 1464.717586][T18670] virtiofs: Unknown parameter 'always' [ 1464.852812][T18399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1464.883196][T18399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1464.976774][T18399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1465.018910][T18399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1465.618858][T18399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.797947][T18399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.328787][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.335980][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.359996][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.367225][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.608806][T18399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1468.614678][T18399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.857576][T18399] veth0_vlan: entered promiscuous mode [ 1468.899259][T18399] veth1_vlan: entered promiscuous mode [ 1468.929247][T18735] netlink: 'syz.3.2997': attribute type 21 has an invalid length. [ 1469.085019][T18735] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1469.647687][T18399] veth0_macvtap: entered promiscuous mode [ 1469.675338][T18399] veth1_macvtap: entered promiscuous mode [ 1469.734283][T18399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.755304][T18399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.845621][T17978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.918684][T17978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.937588][T17978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.010666][T17978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.477131][T17978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.550906][T17978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.923734][T17978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.941013][T17978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.618747][T18785] ksmbd: Unknown IPC event: 3, ignore. [ 1474.646292][T18819] netlink: 'syz.1.3016': attribute type 10 has an invalid length. [ 1475.743352][T18828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1475.753014][T18828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1475.775161][T18828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1475.785090][T18828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1475.797732][T18828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1476.449638][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1476.449659][ T30] audit: type=1400 audit(1754036574.791:3010): avc: denied { bind } for pid=18840 comm="syz.0.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1476.846605][T17978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.326177][T17978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.843066][T17978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.028269][T10905] Bluetooth: hci1: command tx timeout [ 1478.394505][T17978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.936035][T18884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3028'. [ 1480.131743][T10905] Bluetooth: hci1: command tx timeout [ 1481.442125][T17978] bond0 (unregistering): Released all slaves [ 1481.480519][T18826] chnl_net:caif_netlink_parms(): no params data found [ 1481.677157][T17978] tipc: Left network mode [ 1482.136303][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3040'. [ 1482.278399][T10905] Bluetooth: hci1: command tx timeout [ 1482.669722][T18941] netlink: 'syz.1.3038': attribute type 21 has an invalid length. [ 1482.890049][T18941] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3038'. [ 1483.107381][T18826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.150653][T18826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.159004][T18826] bridge_slave_0: entered allmulticast mode [ 1483.169976][T18826] bridge_slave_0: entered promiscuous mode [ 1483.239548][T17978] team0: Port device wlan1 removed [ 1483.294393][T18826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.327283][T18826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.383902][T18826] bridge_slave_1: entered allmulticast mode [ 1483.422680][T18826] bridge_slave_1: entered promiscuous mode [ 1483.559570][T18826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.606383][T18826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.042960][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.049408][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.341844][T10905] Bluetooth: hci1: command tx timeout [ 1484.415604][T18826] team0: Port device team_slave_0 added [ 1484.473656][T18826] team0: Port device team_slave_1 added [ 1486.294008][T18826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.301230][T18826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.327585][T18826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.341431][T18826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.348471][T18826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.522844][T18826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.707114][T17978] hsr_slave_0: left promiscuous mode [ 1486.823229][T17978] veth1_macvtap: left promiscuous mode [ 1486.835475][ T30] audit: type=1400 audit(1754036585.181:3011): avc: denied { write } for pid=19001 comm="syz.1.3054" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1487.426863][T17978] veth0_macvtap: left promiscuous mode [ 1487.680923][T17978] veth1_vlan: left promiscuous mode [ 1487.711146][T17978] veth0_vlan: left promiscuous mode [ 1490.960127][ T30] audit: type=1400 audit(1754036589.311:3012): avc: denied { create } for pid=19041 comm="syz.0.3067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1491.078128][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1491.100059][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1491.288425][ T30] audit: type=1400 audit(1754036589.641:3013): avc: denied { getopt } for pid=19057 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1491.337901][ T30] audit: type=1400 audit(1754036589.671:3014): avc: denied { watch watch_reads } for pid=19057 comm="syz.0.3071" path="/585" dev="tmpfs" ino=3267 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1491.822119][T18826] hsr_slave_0: entered promiscuous mode [ 1491.829552][T18826] hsr_slave_1: entered promiscuous mode [ 1491.854346][T18826] debugfs: 'hsr0' already exists in 'hsr' [ 1491.862447][T18826] Cannot create hsr debugfs directory [ 1492.333800][T19083] virtiofs: Unknown parameter 'always' [ 1492.412553][ T30] audit: type=1400 audit(1754036590.731:3015): avc: denied { connect } for pid=19084 comm="syz.0.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1492.482690][T19091] Bluetooth: hci4: Frame reassembly failed (-84) [ 1492.514075][T11257] Bluetooth: hci4: Frame reassembly failed (-84) [ 1494.500969][T18828] Bluetooth: hci4: command 0x1003 tx timeout [ 1494.507831][T10905] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1494.601918][T19125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1494.611099][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1494.964857][T15942] IPVS: starting estimator thread 0... [ 1494.986531][T19129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3092'. [ 1494.998608][T18826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1495.047949][T18826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1495.061056][T19130] IPVS: using max 73 ests per chain, 175200 per kthread [ 1495.671215][T18826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1495.690105][T18826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1496.042247][T18826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.072102][T18826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.101156][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.108283][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.341494][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.348626][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.569280][T18826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.641274][T18826] veth0_vlan: entered promiscuous mode [ 1497.666317][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3098'. [ 1497.680043][T18826] veth1_vlan: entered promiscuous mode [ 1497.686351][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3098'. [ 1497.924024][T18826] veth0_macvtap: entered promiscuous mode [ 1497.946895][T18826] veth1_macvtap: entered promiscuous mode [ 1499.223450][T18826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.336386][T18826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.364576][T17978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.540558][T17978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.736843][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3101'. [ 1500.184319][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 1500.292830][T17978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.342587][ T1135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.846581][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.857640][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.886128][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.912551][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.225611][ T5942] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1502.446719][ T5942] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1502.502152][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.543456][ T5942] usb 2-1: config 0 descriptor?? [ 1504.112954][ T5942] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1504.126026][ T5942] [drm:udl_init] *ERROR* Selecting channel failed [ 1504.363831][ T5942] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1504.370550][ T5942] [drm] Initialized udl on minor 2 [ 1504.396110][T19253] netlink: 'syz.3.3116': attribute type 8 has an invalid length. [ 1504.413673][ T5942] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1504.432353][T19253] netlink: 'syz.3.3116': attribute type 2 has an invalid length. [ 1504.443476][ T5942] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1504.452650][ T5835] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1504.492587][ T5835] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1504.505050][ T5835] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1504.536025][ T30] audit: type=1400 audit(1754036602.881:3016): avc: denied { lock } for pid=19247 comm="syz.3.3116" path="socket:[63170]" dev="sockfs" ino=63170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1504.561453][ T5942] usb 2-1: USB disconnect, device number 92 [ 1504.612290][T18623] bond0: (slave syz_tun): Releasing backup interface [ 1504.620882][T18623] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1504.674507][ T30] audit: type=1400 audit(1754036602.881:3017): avc: denied { read } for pid=19247 comm="syz.3.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1505.067183][T18828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1505.076377][T18828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1506.602492][T18828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1506.973963][T18828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1507.002467][T18828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1507.297677][T19284] virtiofs: Unknown parameter 'always' [ 1507.751156][ T5835] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1508.117304][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 1508.133032][ T5835] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1508.148544][ T5835] usb 2-1: config 5 has an invalid descriptor of length 179, skipping remainder of the config [ 1508.169672][ T5835] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1508.184064][ T5835] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 1508.398453][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.167020][ T5835] usb 2-1: Product: syz [ 1509.171274][ T5835] usb 2-1: Manufacturer: syz [ 1509.175861][ T5835] usb 2-1: SerialNumber: syz [ 1509.371122][T10905] Bluetooth: hci3: command tx timeout [ 1509.527271][T15942] usb 2-1: USB disconnect, device number 93 [ 1509.670983][ T5835] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1509.694959][T19270] chnl_net:caif_netlink_parms(): no params data found [ 1511.367189][T19270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.388401][T10905] Bluetooth: hci3: command tx timeout [ 1511.402473][T19270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.425468][ T5835] usb 4-1: device not accepting address 96, error -71 [ 1511.441756][T19270] bridge_slave_0: entered allmulticast mode [ 1511.469903][T19270] bridge_slave_0: entered promiscuous mode [ 1511.508628][T19270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.528724][T19270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.536502][T19270] bridge_slave_1: entered allmulticast mode [ 1511.549855][T19270] bridge_slave_1: entered promiscuous mode [ 1511.896460][T19270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.913978][T19270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.978219][T19270] team0: Port device team_slave_0 added [ 1511.995566][T19270] team0: Port device team_slave_1 added [ 1512.356584][T19270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.405037][T19348] netlink: 'syz.2.3145': attribute type 10 has an invalid length. [ 1512.842664][T19270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.888591][T19270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.909340][T19348] team0: Device ipvlan1 failed to register rx_handler [ 1513.018695][T19270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.030992][T19270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.090842][T19270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.228896][T19270] hsr_slave_0: entered promiscuous mode [ 1513.246440][T19270] hsr_slave_1: entered promiscuous mode [ 1513.256392][T19270] debugfs: 'hsr0' already exists in 'hsr' [ 1513.262327][T19270] Cannot create hsr debugfs directory [ 1513.461230][T10905] Bluetooth: hci3: command tx timeout [ 1513.827164][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 1513.837332][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 1513.883544][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 1513.981059][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 1514.036200][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.058175][ T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.113707][ T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.122770][ T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1514.443302][T19270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.487960][T19364] virtiofs: Unknown parameter 'always' [ 1514.648381][T19270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.383284][T19270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.549523][T10905] Bluetooth: hci3: command tx timeout [ 1515.706696][T19381] bond1: entered promiscuous mode [ 1515.713000][T19381] bond1: entered allmulticast mode [ 1515.718565][T19381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1515.950316][T19381] bond1 (unregistering): Released all slaves [ 1515.998477][T19270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.045095][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 1516.054850][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 1516.072435][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'. [ 1516.095832][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 1516.345457][T19270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1516.371999][T19270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1516.386378][T19270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1516.866824][T19406] input: syz1 as /devices/virtual/input/input9 [ 1516.943247][T19270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1517.937925][T19270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.980760][T19270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.055518][T17978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.062692][T17978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.127816][T15986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.135002][T15986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.063074][T19270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.000689][T19455] bond1: entered promiscuous mode [ 1520.010607][T19455] bond1: entered allmulticast mode [ 1520.028989][T19455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1520.552538][T19455] bond1 (unregistering): Released all slaves [ 1520.862427][ T30] audit: type=1400 audit(1754036619.221:3018): avc: denied { create } for pid=19476 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1521.047886][T19270] veth0_vlan: entered promiscuous mode [ 1521.072889][T19270] veth1_vlan: entered promiscuous mode [ 1521.206065][T19270] veth0_macvtap: entered promiscuous mode [ 1521.373776][T19270] veth1_macvtap: entered promiscuous mode [ 1521.502323][T19270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.524924][T19270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.547167][T15986] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.558129][T15986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.567507][T16810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.587780][T16810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.879043][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.895825][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.940959][T18828] Bluetooth: hci0: command 0x0405 tx timeout [ 1522.116081][T15986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1522.127603][T15986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1522.220985][T14145] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1522.845086][T14145] usb 2-1: Using ep0 maxpacket: 16 [ 1522.857630][T14145] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.932214][T19509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3114'. [ 1523.053116][T14145] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1523.083880][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 1523.532006][T14145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.540047][T14145] usb 2-1: Product: syz [ 1523.546440][T14145] usb 2-1: Manufacturer: syz [ 1523.551193][T14145] usb 2-1: SerialNumber: syz [ 1523.563284][T14145] usb 2-1: config 0 descriptor?? [ 1523.604810][T14145] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 1523.856846][ T5890] usb 2-1: USB disconnect, device number 94 [ 1524.152655][T18828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1524.162215][T18828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1524.170107][T18828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1524.180665][T18828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1524.188271][T18828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1525.732551][ T5822] bond0: (slave syz_tun): Releasing backup interface [ 1525.751564][T19544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3205'. [ 1525.784863][T19544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 1526.227831][T11257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.262758][T18828] Bluetooth: hci4: command tx timeout [ 1526.400713][ T30] audit: type=1400 audit(1754036624.751:3019): avc: denied { write } for pid=19556 comm="syz.4.3210" name="file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1526.480441][ T30] audit: type=1400 audit(1754036624.761:3020): avc: denied { open } for pid=19556 comm="syz.4.3210" path="/5/file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1526.631455][ T30] audit: type=1400 audit(1754036624.761:3021): avc: denied { ioctl } for pid=19556 comm="syz.4.3210" path="/5/file0" dev="tmpfs" ino=43 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1526.672707][T11257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.846945][T11257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.670902][ T30] audit: type=1400 audit(1754036626.021:3022): avc: denied { read write } for pid=19568 comm="syz.1.3212" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1527.726406][T11257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.765911][ T30] audit: type=1400 audit(1754036626.021:3023): avc: denied { open } for pid=19568 comm="syz.1.3212" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1527.823903][T19523] chnl_net:caif_netlink_parms(): no params data found [ 1527.834115][T19577] virtiofs: Unknown parameter 'always' [ 1527.936837][T19579] bridge_slave_0: left allmulticast mode [ 1527.944660][T19579] bridge_slave_0: left promiscuous mode [ 1527.957249][T19579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.017778][T19584] netlink: 'syz.3.3217': attribute type 10 has an invalid length. [ 1528.029983][T19579] bridge_slave_1: left allmulticast mode [ 1528.036062][T19579] bridge_slave_1: left promiscuous mode [ 1528.042902][T19579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.052884][T19579] bond0: (slave bond_slave_0): Releasing backup interface [ 1528.066940][T19579] bond0: (slave bond_slave_1): Releasing backup interface [ 1528.362040][T18828] Bluetooth: hci4: command tx timeout [ 1528.521222][T19569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1528.526354][T19579] team0: Port device team_slave_0 removed [ 1528.528200][T19569] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1528.546777][T19579] team0: Port device team_slave_1 removed [ 1528.554924][T19579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.562739][T19579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.563479][T19569] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1528.579315][T19569] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1528.579477][T19579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.594114][T19579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.604121][T19569] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1528.620048][T19569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1528.631320][T19569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1528.652423][T19569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1528.665116][T19569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1528.676806][T19569] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1528.687452][T19569] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1528.696206][T19569] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1528.701101][T19584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1528.702620][T19569] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1528.729157][T19569] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1529.151353][T19523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.603072][T19523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.610348][T19523] bridge_slave_0: entered allmulticast mode [ 1529.617843][T19523] bridge_slave_0: entered promiscuous mode [ 1529.627595][T19523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.648884][T19523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.657807][T19523] bridge_slave_1: entered allmulticast mode [ 1529.665799][T19523] bridge_slave_1: entered promiscuous mode [ 1529.743855][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1530.021328][T18828] Bluetooth: hci0: command 0x0405 tx timeout [ 1530.195842][T19615] netlink: 'syz.2.3226': attribute type 10 has an invalid length. [ 1530.594557][T18828] Bluetooth: hci5: command 0x0405 tx timeout [ 1530.661103][T18828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1530.741606][T18828] Bluetooth: hci4: command 0x0419 tx timeout [ 1530.747646][T10905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1532.100967][T18828] Bluetooth: hci0: command 0x0405 tx timeout [ 1532.319078][T11257] bond0 (unregistering): Released all slaves [ 1532.363004][T19523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1532.380236][T19601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1532.406395][T19615] team0: Port device wlan1 added [ 1532.591266][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.605321][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.645405][T19523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.662914][T18828] Bluetooth: hci5: command 0x0405 tx timeout [ 1532.718585][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.747141][T18828] Bluetooth: hci1: command 0x0c1a tx timeout [ 1532.821203][T18828] Bluetooth: hci4: command 0x0419 tx timeout [ 1532.827349][T10905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1533.042487][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.686371][T19523] team0: Port device team_slave_0 added [ 1533.710157][T19523] team0: Port device team_slave_1 added [ 1534.449899][T19523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.473854][T19523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.529835][ T30] audit: type=1400 audit(1754036632.801:3024): avc: denied { create } for pid=19668 comm="syz.3.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1534.532137][T19676] netlink: 'syz.3.3238': attribute type 10 has an invalid length. [ 1534.568660][T19523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.682473][ T30] audit: type=1400 audit(1754036632.801:3025): avc: denied { ioctl } for pid=19668 comm="syz.3.3238" path="socket:[64105]" dev="sockfs" ino=64105 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1534.733986][T11257] team0: Port device wlan1 removed [ 1534.760954][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 1534.798642][T19523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.805697][T19523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1534.833930][T19523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.844745][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout [ 1534.901050][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 1534.907169][ T5826] Bluetooth: hci4: command 0x0419 tx timeout [ 1534.929024][T19676] syz_tun: entered promiscuous mode [ 1534.953380][T19676] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1535.072288][T19686] netlink: 'syz.4.3241': attribute type 10 has an invalid length. [ 1535.602001][T19686] team0: Port device wlan1 added [ 1535.747388][T19523] hsr_slave_0: entered promiscuous mode [ 1535.776452][T19523] hsr_slave_1: entered promiscuous mode [ 1535.856027][T19523] debugfs: 'hsr0' already exists in 'hsr' [ 1535.879565][T19698] netlink: 'syz.3.3243': attribute type 10 has an invalid length. [ 1535.883757][T19523] Cannot create hsr debugfs directory [ 1535.931009][T19696] bond0: (slave syz_tun): Releasing backup interface [ 1536.015329][T19696] bond0: (slave wlan1): Releasing backup interface [ 1536.067404][T19697] wg2: entered allmulticast mode [ 1536.078139][T19698] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1536.243090][T11257] hsr_slave_0: left promiscuous mode [ 1536.268370][T11257] veth1_macvtap: left promiscuous mode [ 1536.274146][T11257] veth0_macvtap: left promiscuous mode [ 1536.280466][T11257] veth1_vlan: left promiscuous mode [ 1536.289704][T11257] veth0_vlan: left promiscuous mode [ 1536.411664][T19710] netlink: 'syz.4.3246': attribute type 10 has an invalid length. [ 1536.834864][T19718] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3248'. [ 1536.982488][T10905] Bluetooth: hci4: command 0x0419 tx timeout [ 1537.833803][T15986] smc: removing ib device syz! [ 1538.409765][T19708] bridge_slave_0: left allmulticast mode [ 1538.416198][T19708] bridge_slave_0: left promiscuous mode [ 1538.422159][T19708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.432450][T19708] bridge_slave_1: left allmulticast mode [ 1538.438131][T19708] bridge_slave_1: left promiscuous mode [ 1538.444909][T19708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.457003][T19708] bond0: (slave bond_slave_0): Releasing backup interface [ 1538.466837][T19708] bond0: (slave bond_slave_1): Releasing backup interface [ 1538.478771][T19708] team0: Port device team_slave_0 removed [ 1538.490522][T19708] team0: Port device team_slave_1 removed [ 1538.496965][T19708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.504770][T19708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1538.513425][T19708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1538.521194][T19708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1538.538109][T19708] team0: Port device wlan1 removed [ 1538.546458][T19710] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1539.445179][T19748] netlink: 'syz.4.3259': attribute type 10 has an invalid length. [ 1539.520024][T19747] bond0: (slave wlan1): Releasing backup interface [ 1539.728172][T19753] virtiofs: Unknown parameter 'always' [ 1539.783640][T19748] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1542.355361][T11257] IPVS: stop unused estimator thread 0... [ 1545.464826][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.477849][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.036814][T19523] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1546.068635][T19523] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1546.189212][T19523] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1546.250546][T19523] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1547.287304][T19839] netlink: 'syz.4.3279': attribute type 10 has an invalid length. [ 1547.337960][T19836] bond0: (slave wlan1): Releasing backup interface [ 1547.405924][T19834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1547.433133][T19839] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1547.440957][T19834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1547.871444][T11257] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.896298][T11257] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.960056][T11257] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.095877][T11257] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1548.176998][T19523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.283449][T19523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.721199][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.728354][T11257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.980627][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.987835][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.078941][T19906] bond1: entered promiscuous mode [ 1552.130309][T19906] bond1: entered allmulticast mode [ 1552.146159][T19906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1552.342301][T19906] bond1 (unregistering): Released all slaves [ 1552.564722][T19924] bridge_slave_0: left allmulticast mode [ 1552.570403][T19924] bridge_slave_0: left promiscuous mode [ 1552.578350][T19924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.597491][T19924] bridge_slave_1: left allmulticast mode [ 1552.613049][T19924] bridge_slave_1: left promiscuous mode [ 1552.618806][T19924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.618814][T19927] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 1552.655086][T19924] bond0: (slave bond_slave_0): Releasing backup interface [ 1552.676760][T19924] bond0: (slave bond_slave_1): Releasing backup interface [ 1552.695779][T19924] team0: Port device team_slave_1 removed [ 1552.705027][T19924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1552.733298][T19924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.753713][T19924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1552.772132][T19924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.856029][T19924] team0: Port device wlan1 removed [ 1552.879498][T19523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.938347][T19927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.988846][T19927] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1553.214393][T19523] veth0_vlan: entered promiscuous mode [ 1553.260107][T19523] veth1_vlan: entered promiscuous mode [ 1553.469589][T19949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1553.499557][T19523] veth0_macvtap: entered promiscuous mode [ 1553.517609][T19523] veth1_macvtap: entered promiscuous mode [ 1553.561285][T19954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19954 comm=syz.1.3295 [ 1553.671440][T19954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3295'. [ 1553.755931][T19523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.783953][T19523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.945947][T15986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.003540][ T1135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.132794][ T1135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.174015][ T1135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.593767][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.622031][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.817632][T19049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.021857][T19049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.274483][T19975] Bluetooth: hci2: Frame reassembly failed (-84) [ 1555.310877][T15986] Bluetooth: hci2: Frame reassembly failed (-84) [ 1555.987172][T19980] netlink: 'syz.3.3299': attribute type 10 has an invalid length. [ 1556.084175][T19980] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1557.055912][T19990] netlink: 'syz.0.3302': attribute type 25 has an invalid length. [ 1557.364088][T10905] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1562.113650][ T30] audit: type=1400 audit(1754036660.461:3026): avc: denied { name_bind } for pid=20026 comm="syz.3.3314" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1562.444630][ T30] audit: type=1400 audit(1754036660.771:3027): avc: denied { module_load } for pid=20033 comm="syz.4.3317" path="/31/bus" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1562.513763][T20041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3320'. [ 1562.564177][T20040] Invalid ELF header magic: != ELF [ 1562.570825][ T30] audit: type=1800 audit(1754036660.911:3028): pid=20034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.3317" name="/newroot/31/bus" dev="tmpfs" ino=180 res=0 errno=0 [ 1562.579780][T20041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3320'. [ 1563.736740][T20059] netlink: 'syz.3.3326': attribute type 4 has an invalid length. [ 1564.692984][T20064] netlink: 'syz.3.3326': attribute type 4 has an invalid length. [ 1566.243282][T20087] 9pnet_virtio: no channels available for device syz [ 1568.462706][T20100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1568.569304][ T5898] IPVS: starting estimator thread 0... [ 1568.625313][T20104] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1568.661000][T20101] IPVS: using max 47 ests per chain, 112800 per kthread [ 1572.171389][T20143] netlink: 'syz.3.3349': attribute type 10 has an invalid length. [ 1572.811632][T20143] bond0: (slave wlan1): Releasing backup interface [ 1573.352913][T20143] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1573.384056][T20143] team0: Port device wlan1 added [ 1573.948923][T20161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1573.964918][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 1577.622801][T20196] wg2: entered allmulticast mode [ 1579.164327][T20219] netlink: 'syz.3.3372': attribute type 21 has an invalid length. [ 1579.180843][T20219] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3372'. [ 1580.002293][T20224] netlink: 'syz.0.3370': attribute type 10 has an invalid length. [ 1581.044956][T20220] bridge_slave_0: left allmulticast mode [ 1581.053977][T20220] bridge_slave_0: left promiscuous mode [ 1581.065188][T20220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.230358][T20220] bridge_slave_1: left allmulticast mode [ 1581.239583][T20220] bridge_slave_1: left promiscuous mode [ 1582.571346][T20220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.940001][T20220] bond0: (slave bond_slave_0): Releasing backup interface [ 1582.969604][T20220] bond0: (slave bond_slave_1): Releasing backup interface [ 1583.100121][T20220] team0: Port device team_slave_0 removed [ 1583.117246][T20220] team0: Port device team_slave_1 removed [ 1583.126930][T20220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1583.135687][T20220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1583.591231][T20220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1583.607987][T20220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1583.648194][T20224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1583.661246][T20236] wg2: entered allmulticast mode [ 1583.930000][T20258] netlink: 'syz.2.3382': attribute type 4 has an invalid length. [ 1583.991248][T20258] netlink: 'syz.2.3382': attribute type 4 has an invalid length. [ 1584.024136][T20257] bond0: (slave wlan1): Releasing backup interface [ 1584.036696][T20260] netlink: 'syz.0.3381': attribute type 10 has an invalid length. [ 1584.076350][T20260] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1585.597730][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'. [ 1586.404604][T20292] wg2: entered allmulticast mode [ 1586.900538][T20294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1587.383790][T20297] 9pnet_virtio: no channels available for device syz [ 1593.360391][T20335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1593.403395][T20328] bond1: entered promiscuous mode [ 1593.408448][T20328] bond1: entered allmulticast mode [ 1593.470181][T20328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1593.765918][T20328] bond1 (unregistering): Released all slaves [ 1594.553241][T20350] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1596.023952][T20368] netlink: 'syz.1.3414': attribute type 4 has an invalid length. [ 1596.408850][T20380] bond0: (slave wlan1): Releasing backup interface [ 1597.178798][T20389] netlink: 'syz.4.3419': attribute type 10 has an invalid length. [ 1597.788544][T20394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 1597.825712][T20389] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1598.053190][T20399] netlink: 'syz.1.3421': attribute type 24 has an invalid length. [ 1599.007234][T20429] virtiofs: Unknown parameter 'always' [ 1599.307846][T20443] netlink: 'syz.4.3427': attribute type 4 has an invalid length. [ 1601.143352][T20466] 9pnet_virtio: no channels available for device syz [ 1603.112284][T20473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3436'. [ 1606.902989][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.909347][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.922961][T20500] netlink: 'syz.3.3445': attribute type 10 has an invalid length. [ 1607.716173][T20500] team0: Port device wlan1 removed [ 1607.734862][T20500] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1608.643050][T20521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1609.566584][T20534] 9pnet_virtio: no channels available for device syz [ 1610.076554][T20536] batman_adv: batadv0: Adding interface: dummy0 [ 1610.104187][T20536] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.199642][ T30] audit: type=1400 audit(1754036708.551:3029): avc: denied { ioctl } for pid=20535 comm="syz.0.3456" path="socket:[68289]" dev="sockfs" ino=68289 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1610.231421][T20536] batman_adv: batadv0: Interface activated: dummy0 [ 1610.469515][T20540] batadv0: mtu less than device minimum [ 1611.114820][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.126563][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.137976][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.149395][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.160814][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.172220][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.183582][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.194976][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1611.206508][T20540] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1615.561923][ T30] audit: type=1400 audit(1754036713.911:3030): avc: denied { kexec_image_load } for pid=20594 comm="syz.2.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1615.749254][T20600] netlink: 'syz.4.3476': attribute type 4 has an invalid length. [ 1615.764901][T14145] IPVS: starting estimator thread 0... [ 1615.829771][T20602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1615.839942][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1616.040874][T20604] IPVS: using max 44 ests per chain, 105600 per kthread [ 1619.228413][T20640] batman_adv: batadv0: Adding interface: dummy0 [ 1619.274179][T20640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.328938][T20640] batman_adv: batadv0: Interface activated: dummy0 [ 1619.371342][T20643] net_ratelimit: 10 callbacks suppressed [ 1619.371363][T20643] batadv0: mtu less than device minimum [ 1619.395093][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.406570][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.417972][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.429159][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.440335][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.451724][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.463129][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.474533][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.485936][T20643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1619.562762][T20645] netlink: 'syz.2.3488': attribute type 21 has an invalid length. [ 1619.781104][T20645] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1621.786881][T20670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1621.796965][T20670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3498'. [ 1623.241760][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1623.284204][T20691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1623.297447][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1623.955100][T20705] batman_adv: batadv0: Adding interface: dummy0 [ 1623.984694][T20705] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.061087][T20705] batman_adv: batadv0: Interface activated: dummy0 [ 1624.089105][T20708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1625.079388][T20716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1625.103690][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1625.490625][T20723] netlink: 'syz.1.3514': attribute type 4 has an invalid length. [ 1626.356513][T20729] netlink: 'syz.1.3516': attribute type 4 has an invalid length. [ 1626.440277][T20730] netlink: 'syz.1.3516': attribute type 4 has an invalid length. [ 1626.481581][T20738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3518'. [ 1626.646552][T20740] virtiofs: Unknown parameter 'always' [ 1626.818687][T20744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3521'. [ 1626.872950][T20747] batman_adv: batadv0: Adding interface: dummy0 [ 1626.931014][T20747] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.971035][T20747] batman_adv: batadv0: Interface activated: dummy0 [ 1627.004921][T20748] net_ratelimit: 30 callbacks suppressed [ 1627.004944][T20748] batadv0: mtu less than device minimum [ 1627.020170][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.031635][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.043030][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.053873][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.064705][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.075572][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.086823][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.097657][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1627.108580][T20748] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1628.583835][T20764] netlink: 'syz.1.3528': attribute type 25 has an invalid length. [ 1628.806761][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1628.964115][T20769] netlink: 'syz.2.3530': attribute type 4 has an invalid length. [ 1629.121196][T20775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3533'. [ 1629.265009][T20777] netlink: 'syz.4.3526': attribute type 21 has an invalid length. [ 1629.275477][T20777] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3526'. [ 1629.412784][T20780] virtiofs: Unknown parameter 'always' [ 1629.775044][T20785] 9pnet_virtio: no channels available for device syz [ 1632.396359][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3544'. [ 1632.537326][T20808] netlink: 'syz.3.3544': attribute type 1 has an invalid length. [ 1633.254760][T20820] netlink: 'syz.3.3546': attribute type 10 has an invalid length. [ 1633.291225][T20820] bond0: (slave wlan1): Releasing backup interface [ 1633.297740][T20820] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1633.317834][T20820] team0: Port device wlan1 added [ 1633.475705][T20824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3548'. [ 1633.635881][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3548'. [ 1634.659207][T20837] virtiofs: Unknown parameter 'always' [ 1634.924286][T20843] 9pnet_virtio: no channels available for device syz [ 1636.966281][T20855] netlink: 'syz.2.3551': attribute type 21 has an invalid length. [ 1637.029212][T20855] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3551'. [ 1637.875418][ T30] audit: type=1400 audit(1754036736.231:3031): avc: denied { bind } for pid=20863 comm="syz.3.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1638.161063][T20876] netlink: 'syz.3.3564': attribute type 10 has an invalid length. [ 1638.646951][ T30] audit: type=1400 audit(1754036736.991:3032): avc: denied { create } for pid=20873 comm="syz.2.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1638.934326][ T30] audit: type=1400 audit(1754036737.001:3033): avc: denied { write } for pid=20873 comm="syz.2.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1640.294728][T20900] 9pnet_virtio: no channels available for device syz [ 1641.817750][T20903] virtiofs: Unknown parameter 'always' [ 1641.908911][T20910] batman_adv: batadv0: Interface deactivated: dummy0 [ 1641.916120][T20910] batman_adv: batadv0: Removing interface: dummy0 [ 1642.239077][T20910] bond0: (slave wlan1): Releasing backup interface [ 1642.248869][T20910] ------------[ cut here ]------------ [ 1642.254534][T20910] WARNING: CPU: 0 PID: 20910 at kernel/kcov.c:872 kcov_remote_start+0xf7/0x6d0 [ 1642.263483][T20910] Modules linked in: [ 1642.267573][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.1.3573 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1642.279292][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1642.289328][T20910] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 1642.294943][T20910] Code: 65 4c 8b 3d a3 a7 16 12 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 a9 a7 16 12 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 81 33 d3 09 44 8b 1d da 17 26 19 89 c0 48 03 1c c5 60 [ 1642.314535][T20910] RSP: 0018:ffffc90002ff66d0 EFLAGS: 00010002 [ 1642.320588][T20910] RAX: 0000000080000200 RBX: ffffffff93d2a948 RCX: 0000000000000001 [ 1642.328537][T20910] RDX: 0000000000000002 RSI: ffffffff8ddf7d35 RDI: ffffffff8c15fb80 [ 1642.336489][T20910] RBP: ffff88806d772440 R08: b77ecf174698f8e7 R09: 0000000000000048 [ 1642.344443][T20910] R10: ffffc90002ff6590 R11: 0000000000000001 R12: ffff8880b8428948 [ 1642.352388][T20910] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88806d772440 [ 1642.360339][T20910] FS: 00007f377d3f66c0(0000) GS:ffff8881246fe000(0000) knlGS:0000000000000000 [ 1642.369239][T20910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1642.375795][T20910] CR2: 00002000001f8000 CR3: 0000000078859000 CR4: 00000000003526f0 [ 1642.383748][T20910] Call Trace: [ 1642.387000][T20910] [ 1642.389907][T20910] ieee80211_rx_list+0x45f/0x2980 [ 1642.394920][T20910] ? __lock_acquire+0x622/0x1c90 [ 1642.399838][T20910] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1642.405268][T20910] ? __lock_acquire+0xb8a/0x1c90 [ 1642.410183][T20910] ? lock_acquire+0x179/0x350 [ 1642.414851][T20910] ieee80211_rx_napi+0xdc/0x410 [ 1642.419673][T20910] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1642.425103][T20910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.430284][T20910] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1642.436063][T20910] ieee80211_handle_queued_frames+0xd5/0x130 [ 1642.442020][T20910] ? ieee80211_stop_device+0x14/0x110 [ 1642.447386][T20910] ieee80211_stop_device+0x32/0x110 [ 1642.452563][T20910] ieee80211_do_stop+0x1ac8/0x2520 [ 1642.457662][T20910] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1642.463103][T20910] ? do_raw_spin_lock+0x12c/0x2b0 [ 1642.468104][T20910] ? mark_held_locks+0x49/0x80 [ 1642.472844][T20910] ? __pfx_ieee80211_stop+0x10/0x10 [ 1642.478015][T20910] ieee80211_stop+0x165/0x300 [ 1642.482664][T20910] ? __pfx_ieee80211_stop+0x10/0x10 [ 1642.487832][T20910] __dev_close_many+0x29b/0x770 [ 1642.492654][T20910] ? __pfx___dev_close_many+0x10/0x10 [ 1642.498007][T20910] netif_close_many+0x233/0x630 [ 1642.502836][T20910] ? do_raw_spin_lock+0x12c/0x2b0 [ 1642.507832][T20910] ? __pfx_netif_close_many+0x10/0x10 [ 1642.513184][T20910] netif_close+0x17f/0x230 [ 1642.517569][T20910] ? __pfx_netif_close+0x10/0x10 [ 1642.522475][T20910] ? __local_bh_enable_ip+0xa4/0x120 [ 1642.527741][T20910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.532927][T20910] dev_close+0xaa/0x240 [ 1642.537059][T20910] __bond_release_one+0xb08/0x1a00 [ 1642.542152][T20910] ? __pfx___bond_release_one+0x10/0x10 [ 1642.547671][T20910] ? rtmsg_ifinfo_build_skb+0x151/0x280 [ 1642.553212][T20910] ? validate_linkmsg+0x57c/0xb60 [ 1642.558250][T20910] ? __pfx_bond_release+0x10/0x10 [ 1642.563276][T20910] do_set_master+0x172/0x730 [ 1642.567851][T20910] do_setlink.constprop.0+0xbd8/0x4380 [ 1642.573298][T20910] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1642.579168][T20910] ? stack_trace_save+0x8e/0xc0 [ 1642.583995][T20910] ? __lock_acquire+0xb8a/0x1c90 [ 1642.588922][T20910] ? find_held_lock+0x2b/0x80 [ 1642.593602][T20910] ? __mutex_trylock_common+0xe9/0x250 [ 1642.599059][T20910] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1642.604942][T20910] ? __pfx___might_resched+0x10/0x10 [ 1642.610208][T20910] ? rcu_is_watching+0x12/0xc0 [ 1642.614948][T20910] ? trace_contention_end+0xdd/0x130 [ 1642.620212][T20910] ? __mutex_lock+0x1c2/0x1070 [ 1642.624964][T20910] ? __pfx___mutex_lock+0x10/0x10 [ 1642.629979][T20910] ? cap_capable+0xb3/0x250 [ 1642.634485][T20910] rtnl_newlink+0x18e0/0x2000 [ 1642.639155][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.644166][T20910] ? find_held_lock+0x2b/0x80 [ 1642.648840][T20910] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1642.654216][T20910] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1642.659600][T20910] ? __lock_acquire+0x622/0x1c90 [ 1642.664545][T20910] ? find_held_lock+0x2b/0x80 [ 1642.669211][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.674219][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.679224][T20910] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1642.684324][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1642.689343][T20910] rtnetlink_rcv_msg+0x95b/0xe90 [ 1642.694269][T20910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1642.699718][T20910] ? ref_tracker_free+0x37c/0x830 [ 1642.704729][T20910] netlink_rcv_skb+0x158/0x420 [ 1642.709609][T20910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1642.715066][T20910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1642.720343][T20910] ? netlink_deliver_tap+0x1ae/0xd30 [ 1642.725608][T20910] netlink_unicast+0x5a7/0x870 [ 1642.730352][T20910] ? __pfx_netlink_unicast+0x10/0x10 [ 1642.735612][T20910] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1642.741578][T20910] netlink_sendmsg+0x8d1/0xdd0 [ 1642.746321][T20910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1642.751586][T20910] ____sys_sendmsg+0xa95/0xc70 [ 1642.756336][T20910] ? copy_msghdr_from_user+0x10a/0x160 [ 1642.761774][T20910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1642.767032][T20910] ? __pfx_futex_wake_mark+0x10/0x10 [ 1642.772310][T20910] ___sys_sendmsg+0x134/0x1d0 [ 1642.776965][T20910] ? futex_private_hash_put+0x176/0x300 [ 1642.782493][T20910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1642.787663][T20910] ? __lock_acquire+0x622/0x1c90 [ 1642.792593][T20910] __sys_sendmsg+0x16d/0x220 [ 1642.797167][T20910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1642.802251][T20910] ? __x64_sys_futex+0x1e0/0x4c0 [ 1642.807176][T20910] do_syscall_64+0xcd/0x4c0 [ 1642.811658][T20910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.817522][T20910] RIP: 0033:0x7f377f58eb69 [ 1642.821908][T20910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1642.841487][T20910] RSP: 002b:00007f377d3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1642.849868][T20910] RAX: ffffffffffffffda RBX: 00007f377f7b5fa0 RCX: 00007f377f58eb69 [ 1642.857820][T20910] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1642.865772][T20910] RBP: 00007f377f611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1642.873714][T20910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1642.881663][T20910] R13: 0000000000000000 R14: 00007f377f7b5fa0 R15: 00007ffd1f09dd88 [ 1642.889613][T20910] [ 1642.892611][T20910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1642.899860][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.1.3573 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(full) [ 1642.911544][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1642.921575][T20910] Call Trace: [ 1642.924826][T20910] [ 1642.927736][T20910] dump_stack_lvl+0x3d/0x1f0 [ 1642.932308][T20910] vpanic+0x6a3/0x780 [ 1642.936268][T20910] ? __pfx_vpanic+0x10/0x10 [ 1642.940755][T20910] ? kcov_remote_start+0xf7/0x6d0 [ 1642.945754][T20910] panic+0xca/0xd0 [ 1642.949462][T20910] ? __pfx_panic+0x10/0x10 [ 1642.953860][T20910] check_panic_on_warn+0xab/0xb0 [ 1642.958780][T20910] __warn+0xf6/0x3c0 [ 1642.962648][T20910] ? kcov_remote_start+0xf7/0x6d0 [ 1642.967653][T20910] report_bug+0x3c3/0x580 [ 1642.971968][T20910] ? kcov_remote_start+0xf7/0x6d0 [ 1642.976962][T20910] handle_bug+0x184/0x210 [ 1642.981271][T20910] exc_invalid_op+0x17/0x50 [ 1642.985750][T20910] asm_exc_invalid_op+0x1a/0x20 [ 1642.990570][T20910] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 1642.996179][T20910] Code: 65 4c 8b 3d a3 a7 16 12 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 a9 a7 16 12 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 81 33 d3 09 44 8b 1d da 17 26 19 89 c0 48 03 1c c5 60 [ 1643.015758][T20910] RSP: 0018:ffffc90002ff66d0 EFLAGS: 00010002 [ 1643.021805][T20910] RAX: 0000000080000200 RBX: ffffffff93d2a948 RCX: 0000000000000001 [ 1643.029748][T20910] RDX: 0000000000000002 RSI: ffffffff8ddf7d35 RDI: ffffffff8c15fb80 [ 1643.037688][T20910] RBP: ffff88806d772440 R08: b77ecf174698f8e7 R09: 0000000000000048 [ 1643.045639][T20910] R10: ffffc90002ff6590 R11: 0000000000000001 R12: ffff8880b8428948 [ 1643.053591][T20910] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88806d772440 [ 1643.061545][T20910] ieee80211_rx_list+0x45f/0x2980 [ 1643.066555][T20910] ? __lock_acquire+0x622/0x1c90 [ 1643.071470][T20910] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1643.076899][T20910] ? __lock_acquire+0xb8a/0x1c90 [ 1643.081822][T20910] ? lock_acquire+0x179/0x350 [ 1643.086480][T20910] ieee80211_rx_napi+0xdc/0x410 [ 1643.091306][T20910] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1643.096742][T20910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1643.101922][T20910] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1643.107713][T20910] ieee80211_handle_queued_frames+0xd5/0x130 [ 1643.113672][T20910] ? ieee80211_stop_device+0x14/0x110 [ 1643.119035][T20910] ieee80211_stop_device+0x32/0x110 [ 1643.124242][T20910] ieee80211_do_stop+0x1ac8/0x2520 [ 1643.129333][T20910] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1643.134766][T20910] ? do_raw_spin_lock+0x12c/0x2b0 [ 1643.139768][T20910] ? mark_held_locks+0x49/0x80 [ 1643.144508][T20910] ? __pfx_ieee80211_stop+0x10/0x10 [ 1643.149682][T20910] ieee80211_stop+0x165/0x300 [ 1643.154335][T20910] ? __pfx_ieee80211_stop+0x10/0x10 [ 1643.159505][T20910] __dev_close_many+0x29b/0x770 [ 1643.164328][T20910] ? __pfx___dev_close_many+0x10/0x10 [ 1643.169683][T20910] netif_close_many+0x233/0x630 [ 1643.174503][T20910] ? do_raw_spin_lock+0x12c/0x2b0 [ 1643.179500][T20910] ? __pfx_netif_close_many+0x10/0x10 [ 1643.184851][T20910] netif_close+0x17f/0x230 [ 1643.189235][T20910] ? __pfx_netif_close+0x10/0x10 [ 1643.194143][T20910] ? __local_bh_enable_ip+0xa4/0x120 [ 1643.199402][T20910] ? lockdep_hardirqs_on+0x7c/0x110 [ 1643.204577][T20910] dev_close+0xaa/0x240 [ 1643.208711][T20910] __bond_release_one+0xb08/0x1a00 [ 1643.213823][T20910] ? __pfx___bond_release_one+0x10/0x10 [ 1643.219345][T20910] ? rtmsg_ifinfo_build_skb+0x151/0x280 [ 1643.224876][T20910] ? validate_linkmsg+0x57c/0xb60 [ 1643.229879][T20910] ? __pfx_bond_release+0x10/0x10 [ 1643.234886][T20910] do_set_master+0x172/0x730 [ 1643.239454][T20910] do_setlink.constprop.0+0xbd8/0x4380 [ 1643.244893][T20910] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 1643.250766][T20910] ? stack_trace_save+0x8e/0xc0 [ 1643.255607][T20910] ? __lock_acquire+0xb8a/0x1c90 [ 1643.260534][T20910] ? find_held_lock+0x2b/0x80 [ 1643.265187][T20910] ? __mutex_trylock_common+0xe9/0x250 [ 1643.270626][T20910] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1643.276496][T20910] ? __pfx___might_resched+0x10/0x10 [ 1643.281759][T20910] ? rcu_is_watching+0x12/0xc0 [ 1643.286501][T20910] ? trace_contention_end+0xdd/0x130 [ 1643.291761][T20910] ? __mutex_lock+0x1c2/0x1070 [ 1643.296504][T20910] ? __pfx___mutex_lock+0x10/0x10 [ 1643.301502][T20910] ? cap_capable+0xb3/0x250 [ 1643.306001][T20910] rtnl_newlink+0x18e0/0x2000 [ 1643.310659][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1643.315657][T20910] ? find_held_lock+0x2b/0x80 [ 1643.320315][T20910] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1643.325665][T20910] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1643.331016][T20910] ? __lock_acquire+0x622/0x1c90 [ 1643.335941][T20910] ? find_held_lock+0x2b/0x80 [ 1643.340598][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1643.345596][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1643.350600][T20910] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1643.355703][T20910] ? __pfx_rtnl_newlink+0x10/0x10 [ 1643.360711][T20910] rtnetlink_rcv_msg+0x95b/0xe90 [ 1643.365647][T20910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1643.371099][T20910] ? ref_tracker_free+0x37c/0x830 [ 1643.376112][T20910] netlink_rcv_skb+0x158/0x420 [ 1643.380860][T20910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1643.386298][T20910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1643.391569][T20910] ? netlink_deliver_tap+0x1ae/0xd30 [ 1643.396838][T20910] netlink_unicast+0x5a7/0x870 [ 1643.401581][T20910] ? __pfx_netlink_unicast+0x10/0x10 [ 1643.406842][T20910] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1643.412806][T20910] netlink_sendmsg+0x8d1/0xdd0 [ 1643.417556][T20910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.422821][T20910] ____sys_sendmsg+0xa95/0xc70 [ 1643.427555][T20910] ? copy_msghdr_from_user+0x10a/0x160 [ 1643.432987][T20910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1643.438253][T20910] ? __pfx_futex_wake_mark+0x10/0x10 [ 1643.443517][T20910] ___sys_sendmsg+0x134/0x1d0 [ 1643.448167][T20910] ? futex_private_hash_put+0x176/0x300 [ 1643.453688][T20910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.458862][T20910] ? __lock_acquire+0x622/0x1c90 [ 1643.463795][T20910] __sys_sendmsg+0x16d/0x220 [ 1643.468359][T20910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1643.473445][T20910] ? __x64_sys_futex+0x1e0/0x4c0 [ 1643.478372][T20910] do_syscall_64+0xcd/0x4c0 [ 1643.482863][T20910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.488728][T20910] RIP: 0033:0x7f377f58eb69 [ 1643.493115][T20910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1643.512694][T20910] RSP: 002b:00007f377d3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.521086][T20910] RAX: ffffffffffffffda RBX: 00007f377f7b5fa0 RCX: 00007f377f58eb69 [ 1643.529027][T20910] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1643.536975][T20910] RBP: 00007f377f611df1 R08: 0000000000000000 R09: 0000000000000000 [ 1643.545100][T20910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.553087][T20910] R13: 0000000000000000 R14: 00007f377f7b5fa0 R15: 00007ffd1f09dd88 [ 1643.561051][T20910] [ 1643.564266][T20910] Kernel Offset: disabled [ 1643.568566][T20910] Rebooting in 86400 seconds..