last executing test programs: 5.444140551s ago: executing program 2 (id=7200): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x5452, &(0x7f0000000280)={0x8, 'wlan1\x00', {'veth1_virt_wifi\x00'}}) 5.327092196s ago: executing program 2 (id=7203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000340), 0xffffff46) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) rt_sigreturn() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x81, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6, 0xb, 0x0, &(0x7f0000000040)) shutdown(r1, 0x0) 5.093685746s ago: executing program 2 (id=7207): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.23645036s ago: executing program 4 (id=7221): r0 = socket$inet_udp(0x2, 0x2, 0x0) gettid() timer_create(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 3.120350907s ago: executing program 3 (id=7223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000cc0)='.\x00', r0, &(0x7f0000000140)='./file0\x00') openat2(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) r2 = socket(0x10, 0x400000000080803, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="39ca1999", @ANYRES16, @ANYBLOB="080025bd7000fbdbdf25000000000800020000000000060006000100000008000700", @ANYRES32=r3, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x4, 0x4}, 0x48) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) socket$packet(0x11, 0x2, 0x300) 3.120231379s ago: executing program 1 (id=7224): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.984675966s ago: executing program 1 (id=7225): r0 = openat$tun(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xfffffffffffffff5}, 0x78) write$cgroup_devices(r3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x8) close(r3) rt_sigreturn() socket(0x1, 0x3, 0x0) poll(0x0, 0x0, 0x6c) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$SIOCGSKNS(r0, 0x400454ca, 0x0) 2.974805278s ago: executing program 4 (id=7226): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) memfd_create(&(0x7f0000000480)='W\xa7p\xd9\xcf>+\x81\xe2\x11\xd8\x8c\x00NI\xc5j\x9appp\xf0\b\xa4\xa2m\x00\v\x18\x004&>\xd2+\x90\xbb\x05\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\x11\xc0:\x9cc\x10d\xee\xa9\x8b\xffc\xad\x89\x9ck\xde\xc5\xe9r\xfe\xd4=\x00\x00\x00\x00\x00\x00\xcc\x97\xb4\v\xa9=\x04\x8b\xa7\xbe\x83x\xf0u\xec\xcdJx\xaa\xff\xff\xff\xff\x00\x00\x00\x00K\x98\x93=\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xc9\fG\x13E\xe3\x1en\xcc\xab\xc8\bo\x9b\x1a\xf6\xd2\x1a\x91!\n\x11\x19\x17\r\xed\xd4\xafo\x9f\xfb}\xd4\x9eJp\x177\xf9~\x10\xd95\xa1\xa2\xf9\xf6\xa6\xb4T\t\xa6\xeb\x0e\x1f@\xc7\xe8\xa2\xfcS\x11\xe9,\xda\x97\xd7\x1b\xa44~=}V\x87\xae\xd1\xff\xe5P\xe0\xfc\xe2\xb4x]\x7f~\xe5\x1f(\x01X\xfd\x7f\xe0\"\xe8\x02\xe2\\m\xaa\xa4\x8fIvf,5\xf7>\xabj\xafB\x1e\x96g\x18+\xa6N\x06\xdf>\x91\xbb\xdbA|\r\xa5\x81\xc7p\xebZ?\x87\x8b\xdf)\x92\x11\xec\xbb.\xf9\xb0\xeb\xa7+\xf7A!G\xadK\xde\x01G\xb9t\xff\x14\xa1\xfa*\xabl\xdf3\x11\xf0\xd9W\xc7\x16\xd7\x02\x12\xbe\xbc\xfd>\x89K\xfd\x93\x98\x8a\'\xf0\xc5&\r\xb3\xb0\xd4\x9e\xfc\xe4X3\xdea\x97\a\v\x0e\xdc\x14\xc0\xf1\xbai;}n\x9b\b\x0f\'\x82! j\xc0\xc9\x10XP\xa8\xf4\x8a\x13#\xbd\xa1!\xb0\'\x84\xef\x86D3l\xa0\x82(\xfdV\x00r\xd0\xbb\xe6\xd0)\xa0\x9d\x93e\xf8\xf1\x11\xb8\xcb\xbd\x91\xf7\\\n\x17\x10\xe1\xea\x9a\x86\x96Y\xda(\x83\f\xa3B\xd3A\xff\xbbD(\xe3T\x8bq\x8b\x9d\x04\x15\xcc.\b\x83X\xc51\xcb\xc7Wf\xbaWMZM\x89l\xa6\xaf.\x9a\xc6N\xfd\xc1~\xa4\r\r\x80\t\x8cY\xfey\x95i\xbd\x8cw\xbci\x8f\x9aWO\x88+\xc4\x13\x7f\x05Z6\xfa\xa5\x19\xeaxR9\xa9o\xfc\xedj\x9fFt\xabE8\xe7\xc7\xe5\x84y\xc2\xe1\xd3R\xb4\xbe\xaf\f+kS?\xe2\xd2\xb8\x14\xc0L\x01E\xb5\x96\x9aW\x84V\xb3\xc8e\xf9\xc0:\xf3l\xe8\xc6\xd9\xaf\xb0\x01\xac\x93\xe3\x807\xc8k\xa2\xbcF[E\xca\xb6\xd9\x97\xc0\xd9\xc5r\xb9q\xd2\t\xf2\x8dKcD<\x04z\x9a\x00d\xfbUx\x95\x01T\xc0w\x01\xbb%\x14\xcf5J\xdd\xfb6\x13\x9eq\x14\x95\xa2e\x92\xc3g]G\xfcB\xd4~g\xba\xa4\xee\xc7\b\xaf)\xf0dt\xc4\x8b\xdf\xfb\xe3/\x89\xd5\x12^\xb0Y4\x00\x00\x00', 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0x5451, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x541b, 0x0) 2.915174928s ago: executing program 3 (id=7228): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x30, r2, 0x1, 0x0, 0x4000, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf9}]}, 0x30}}, 0x0) 2.760237922s ago: executing program 3 (id=7229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) ioprio_get$pid(0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x140, 0x280, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private1, @local, [0xff000000, 0x0, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xff000000], 'gre0\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x68, 0x56, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xf9ce}}}}, {{@ipv6={@empty, @empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], [], 'syz_tun\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x0, "c704de2fbf0e43749dc7cd137238ccb2e41d536e4b1b5b26a42e5adbc968"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) listen(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)}], 0x1, &(0x7f0000000040)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000001300)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 2.760066437s ago: executing program 4 (id=7230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) 2.699665631s ago: executing program 1 (id=7231): socket$igmp(0x2, 0x3, 0x2) socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000001400078008001140000000000500150000000000050001"], 0x5c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32, @ANYBLOB="14005500f2a061aa1180009b0e07efaadd67505c0a0006000802110000010000050020013f00000008001f0116000000"], 0x4c}}, 0x0) 2.580383243s ago: executing program 4 (id=7233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000000000ff000000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.603094318s ago: executing program 3 (id=7234): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r3 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r0, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 1.506750016s ago: executing program 4 (id=7236): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38}}, 0x38) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.460424865s ago: executing program 1 (id=7237): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900ff0307000000100000004000000019030000f0b23f8ca28489ce256c231adfa27d7f3dc3c13b9ff46f12ea424a3384903809c23ff3d320d304113559c77f720ed620c7684a3ad2fb3560cf7b4dd2c8e0b1656380a870246da649437c1aa05cbf25669eb10dc3e327d65f99c1b62dc9dcb2c3b7949681d052b3b702adb7b3f60e1ac4bc3b101730870e76a26598b100c8b361b83285d643c81bdf489b4f94e39b1e95a173df6e03451b4283"], 0x1b1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.11555921s ago: executing program 3 (id=7239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='gretap0\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) 1.102819531s ago: executing program 4 (id=7240): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r0}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900ff0307000000100000004000000019030000f0b23f8ca28489ce256c231adfa27d7f3dc3c13b9ff46f12ea424a3384903809c23ff3d320d304113559c77f720ed620c7684a3ad2fb3560cf7b4dd2c8e0b1656380a870246da649437c1aa05cbf25669eb10dc3e327d65f99c1b62dc9dcb2c3b7949681d052b3b702adb7b3f60e1ac4bc3b101730870e76a26598b100c8b361b83285d643c81bdf489b4f94e39b1e95a173df6e03451b4283"], 0x1b1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.040229408s ago: executing program 0 (id=7241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000100)='./bus\x00', 0x10, 0x0) 943.988324ms ago: executing program 3 (id=7242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0100008000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f0100000000000000000004240200090581034000000000090582020002000000090503024002"], 0x0) 824.236935ms ago: executing program 0 (id=7243): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000740)=""/147, &(0x7f0000000600)=0x93) 668.210325ms ago: executing program 2 (id=7244): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @void}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x30, 0x0, 0x1, 0x0, 0x4000, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf9}]}, 0x30}}, 0x0) 646.470731ms ago: executing program 0 (id=7245): syz_emit_ethernet(0x7c, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x46, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x6]}, {}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0) 584.448749ms ago: executing program 2 (id=7246): r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0xfff) 531.92103ms ago: executing program 0 (id=7247): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@timestamp, @mss={0x2, 0x3}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) 436.31105ms ago: executing program 1 (id=7248): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 407.866618ms ago: executing program 0 (id=7249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000340)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0071c786b80200"}, 0x10}}, 0x0) 370.631826ms ago: executing program 2 (id=7250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4) sendmsg$netlink(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="23011420ff05670600000800ad0001140000002f2600ac14141fe001e502808a8904bd0500001000000000061fe4fdfe4b449430ebb52997e36ec55d17c6c52353029b1e598825532ac5063ef399fd06000102c8a9202fbdcb19fe1b4d1083a3c06376"], 0xdd12}], 0x1}, 0x0) 308.425698ms ago: executing program 1 (id=7251): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000180)) 0s ago: executing program 0 (id=7252): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r0, 0x0, &(0x7f00000003c0)=@udp6}, 0x20) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000f80)={@mcast2}, &(0x7f0000000fc0)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) userfaultfd(0x80801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r6, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) kernel console output (not intermixed with test programs): -1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 799.752498][T10894] usb 5-1: Manufacturer: syz [ 799.771039][T10894] usb 5-1: config 0 descriptor?? [ 800.274778][T10894] rc_core: IR keymap rc-hauppauge not found [ 800.280767][T10894] Registered IR keymap rc-empty [ 800.322261][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.384512][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.415731][T10894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 800.446285][T10894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input64 [ 800.480924][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.524336][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.574849][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.605366][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.663165][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.724127][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.757571][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.818169][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.866295][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.917428][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 800.985969][T10894] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 800.998752][T10894] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 801.049898][T10894] usb 5-1: USB disconnect, device number 30 [ 802.177021][T17677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17677 comm=syz.3.4572 [ 802.768528][ T29] audit: type=1400 audit(1721254180.653:499): avc: denied { lock } for pid=17698 comm="syz.2.4580" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.933074][ T29] audit: type=1400 audit(1721254185.813:500): avc: denied { ioctl } for pid=17790 comm="syz.4.4623" path="socket:[55106]" dev="sockfs" ino=55106 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 813.636649][T17904] serio: Serial port pts0 [ 814.443367][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.450301][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.660875][T17920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=17920 comm=syz.0.4671 [ 815.446419][ T29] audit: type=1400 audit(1721254193.333:501): avc: denied { lock } for pid=17940 comm="syz.4.4681" path="socket:[55291]" dev="sockfs" ino=55291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 815.754564][T17953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17953 comm=syz.0.4686 [ 816.312819][T17970] serio: Serial port pts0 [ 817.529289][T18020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18020 comm=syz.0.4714 [ 818.088070][T18036] serio: Serial port pts0 [ 818.532912][ T29] audit: type=1400 audit(1721254196.413:502): avc: denied { ioctl } for pid=18048 comm="syz.4.4728" path="socket:[56472]" dev="sockfs" ino=56472 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 818.597846][T18052] serio: Serial port pts1 [ 819.440091][T18076] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18076 comm=syz.2.4738 [ 823.531882][ T29] audit: type=1400 audit(1721254201.413:503): avc: denied { read } for pid=18190 comm="syz.2.4791" path="socket:[57767]" dev="sockfs" ino=57767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 824.182722][T18216] serio: Serial port pts1 [ 824.308512][T18223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18223 comm=syz.2.4805 [ 825.032251][T18245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18245 comm=syz.0.4814 [ 825.388654][T18258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18258 comm=syz.4.4820 [ 825.563724][ T29] audit: type=1400 audit(1721254203.423:504): avc: denied { setattr } for pid=18264 comm="syz.2.4825" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 825.689193][T18270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18270 comm=syz.3.4827 [ 827.588146][ T29] audit: type=1400 audit(1721254205.463:505): avc: denied { unmount } for pid=6177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 827.975557][ T29] audit: type=1400 audit(1721254205.843:506): avc: denied { nlmsg_read } for pid=18332 comm="syz.1.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 829.894479][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 830.109547][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 830.154985][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.192363][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.259704][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 830.293854][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 830.303603][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.366318][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 830.404410][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 830.412500][ T9] usb 4-1: Manufacturer: syz [ 830.466106][ T9] usb 4-1: config 0 descriptor?? [ 830.510080][T18405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18405 comm=syz.1.4888 [ 830.884506][ T9] rc_core: IR keymap rc-hauppauge not found [ 830.905498][ T9] Registered IR keymap rc-empty [ 830.910654][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 830.984146][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.045729][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 831.110286][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 831.182924][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.254080][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.294198][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.334517][T10894] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 831.334701][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.384147][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.416629][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.464698][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.514550][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.544820][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.584036][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 831.603091][T10894] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 831.627997][T10894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 831.658099][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 831.661815][T10894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 831.668799][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 831.690368][T10894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 831.708675][T10894] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.725249][T10894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.743995][ T9] usb 4-1: USB disconnect, device number 23 [ 831.759351][T10894] usb 1-1: config 0 descriptor?? [ 832.197146][T10894] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 832.224273][T10894] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 832.250263][T10894] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 832.297111][T10894] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 832.405784][T18449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18449 comm=syz.1.4904 [ 832.427506][ T5144] usb 1-1: USB disconnect, device number 23 [ 832.868852][T18461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=18461 comm=syz.1.4909 [ 833.644492][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 833.819122][ T29] audit: type=1400 audit(1721254211.703:507): avc: denied { nlmsg_tty_audit } for pid=18486 comm="syz.2.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 833.833880][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 833.857511][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.894391][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 833.924635][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 833.954930][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 833.983536][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.019887][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 834.040826][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 834.060550][ T9] usb 4-1: Manufacturer: syz [ 834.079026][ T9] usb 4-1: config 0 descriptor?? [ 834.217746][ T29] audit: type=1400 audit(1721254212.103:508): avc: denied { setattr } for pid=18500 comm="syz.1.4924" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 834.484577][ T9] rc_core: IR keymap rc-hauppauge not found [ 834.507570][ T9] Registered IR keymap rc-empty [ 834.534242][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.573323][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.632549][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 834.694583][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input68 [ 834.744484][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.804103][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.841399][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.884736][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 834.974801][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.156000][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.253509][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.315211][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.395945][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.482178][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 835.607230][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 835.633569][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 835.688104][ T9] usb 4-1: USB disconnect, device number 24 [ 835.935272][T18530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=18530 comm=syz.2.4934 [ 839.236653][T18603] serio: Serial port pts0 [ 840.251624][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 840.443942][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 840.467170][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.488597][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.526649][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 840.543173][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 840.561353][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.624115][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 840.640397][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 840.649738][ T9] usb 5-1: Manufacturer: syz [ 840.666102][ T9] usb 5-1: config 0 descriptor?? [ 841.026350][ T9] rc_core: IR keymap rc-hauppauge not found [ 841.032511][ T9] Registered IR keymap rc-empty [ 841.039605][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.098280][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.152893][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 841.185602][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70 [ 841.221849][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.255556][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.285702][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.314783][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.344989][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.374836][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.414065][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.450534][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.485794][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.526261][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 841.569166][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 841.579842][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 841.598425][ T9] usb 5-1: USB disconnect, device number 31 [ 843.282237][T18668] fuse: Bad value for 'fd' [ 843.297037][T18668] ======================================================= [ 843.297037][T18668] WARNING: The mand mount option has been deprecated and [ 843.297037][T18668] and is ignored by this kernel. Remove the mand [ 843.297037][T18668] option from the mount to silence this warning. [ 843.297037][T18668] ======================================================= [ 843.332877][ T29] audit: type=1400 audit(1721254221.173:509): avc: denied { remount } for pid=18666 comm="syz.3.4983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 844.284340][ T29] audit: type=1400 audit(1721254222.163:510): avc: denied { setattr } for pid=18681 comm="syz.1.4991" name="vhost-net" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 844.332060][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4993'. [ 844.439998][T18692] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4993'. [ 848.631723][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5008'. [ 848.673972][T18726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5008'. [ 850.579222][T11766] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 850.784107][T11766] usb 5-1: Using ep0 maxpacket: 32 [ 850.800334][T11766] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 850.848303][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 850.862561][T11766] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 850.880931][T11766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.900040][T11766] usb 5-1: Product: syz [ 850.906442][T11766] usb 5-1: Manufacturer: syz [ 850.911254][T11766] usb 5-1: SerialNumber: syz [ 850.969372][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5026'. [ 851.403633][T11429] usb 5-1: USB disconnect, device number 32 [ 853.899968][T18809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18809 comm=syz.4.5039 [ 854.184031][ T29] audit: type=1400 audit(1721254232.053:511): avc: denied { map } for pid=18816 comm="syz.1.5043" path="socket:[58796]" dev="sockfs" ino=58796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 856.311276][ T29] audit: type=1400 audit(1721254234.193:512): avc: denied { write } for pid=18837 comm="syz.4.5050" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 856.364205][ T29] audit: type=1400 audit(1721254234.213:513): avc: denied { open } for pid=18837 comm="syz.4.5050" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 857.138464][T18846] syz.1.5054(18846): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 857.499785][T18854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=18854 comm=syz.2.5058 [ 858.491537][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5066'. [ 858.604838][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'. [ 859.700916][T18899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18899 comm=syz.1.5073 [ 860.219951][T18910] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=18910 comm=syz.3.5078 [ 862.167984][T18941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18941 comm=syz.1.5090 [ 862.601094][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 863.686797][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5080'. [ 863.712874][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 864.157508][T18959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18959 comm=syz.3.5099 [ 864.345452][ T29] audit: type=1400 audit(1721254242.233:514): avc: denied { getopt } for pid=18964 comm="syz.0.5101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 865.816257][ T29] audit: type=1400 audit(1721254243.693:515): avc: denied { getopt } for pid=19001 comm="syz.4.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 868.670014][T19031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19031 comm=syz.4.5127 [ 870.001387][ T29] audit: type=1400 audit(1721254247.883:516): avc: denied { ioctl } for pid=19036 comm="syz.2.5130" path="socket:[60014]" dev="sockfs" ino=60014 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 871.953898][T10894] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 872.198991][T10894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.221078][T10894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 872.274130][T10894] usb 5-1: config 1 has no interface number 0 [ 872.305672][T10894] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 872.358112][T10894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.375027][T10894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.405961][T10894] usb 5-1: Product: syz [ 872.433181][T10894] usb 5-1: Manufacturer: syz [ 872.444725][T10894] usb 5-1: SerialNumber: syz [ 872.488565][T10894] usb 5-1: selecting invalid altsetting 1 [ 872.921982][T10894] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 872.943732][T10894] cdc_ncm 5-1:1.1: bind() failure [ 872.975370][T10894] usb 5-1: USB disconnect, device number 33 [ 875.299657][T19152] "syz.4.5177" (19152) uses obsolete ecb(arc4) skcipher [ 875.884147][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.892656][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.224729][ T29] audit: type=1400 audit(1721254256.113:517): avc: denied { getopt } for pid=19197 comm="syz.4.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 878.727562][T19208] serio: Serial port pts0 [ 879.953231][T19221] sctp: [Deprecated]: syz.4.5204 (pid 19221) Use of int in max_burst socket option. [ 879.953231][T19221] Use struct sctp_assoc_value instead [ 882.659129][T19263] mmap: syz.0.5208 (19263) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 885.429818][ T29] audit: type=1400 audit(1721254263.313:518): avc: denied { ioctl } for pid=19305 comm="syz.4.5238" path="socket:[61548]" dev="sockfs" ino=61548 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 887.967207][T19357] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5124 sclass=netlink_audit_socket pid=19357 comm=syz.3.5258 [ 892.471633][ T29] audit: type=1400 audit(1721254270.353:519): avc: denied { mount } for pid=19412 comm="syz.0.5279" name="/" dev="ramfs" ino=60788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 894.192495][T19323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5245'. [ 894.228578][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5245'. [ 894.255609][T19416] bridge0: port 3(erspan0) entered blocking state [ 894.262309][T19416] bridge0: port 3(erspan0) entered disabled state [ 894.286405][T19416] erspan0: entered allmulticast mode [ 894.332730][T19416] erspan0: entered promiscuous mode [ 894.366340][T19416] bridge0: port 3(erspan0) entered blocking state [ 894.373069][T19416] bridge0: port 3(erspan0) entered forwarding state [ 895.779814][T19455] serio: Serial port pts0 [ 895.944438][T19461] serio: Serial port pts1 [ 898.865841][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 899.086558][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 899.100856][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.118428][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.131356][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 899.142023][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 899.152966][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.215619][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.225166][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.233696][ T9] usb 4-1: Manufacturer: syz [ 899.244671][ T9] usb 4-1: config 0 descriptor?? [ 899.644537][ T9] rc_core: IR keymap rc-hauppauge not found [ 899.665721][ T9] Registered IR keymap rc-empty [ 899.670913][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 899.729875][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 899.777928][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 899.827224][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input71 [ 899.839208][T19549] bridge0: port 3(erspan0) entered blocking state [ 899.882297][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 899.889786][T19549] bridge0: port 3(erspan0) entered disabled state [ 899.890099][T19549] erspan0: entered allmulticast mode [ 899.893426][T19549] erspan0: entered promiscuous mode [ 899.958446][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 899.964983][T19549] bridge0: port 3(erspan0) entered blocking state [ 899.972478][T19549] bridge0: port 3(erspan0) entered forwarding state [ 900.005423][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.064120][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.114898][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.165584][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.194921][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.269015][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.325260][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.367847][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.434535][ T9] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 900.442757][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 900.479542][ T9] usb 4-1: USB disconnect, device number 25 [ 902.813168][T19663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19663 comm=syz.4.5376 [ 903.077405][T19673] bridge0: port 3(erspan0) entered blocking state [ 903.100000][T19673] bridge0: port 3(erspan0) entered disabled state [ 903.127443][T19673] erspan0: entered allmulticast mode [ 903.149418][T19673] erspan0: entered promiscuous mode [ 903.195060][T19673] bridge0: port 3(erspan0) entered blocking state [ 903.195291][T19673] bridge0: port 3(erspan0) entered forwarding state [ 905.914189][T11766] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 906.133907][T11766] usb 1-1: Using ep0 maxpacket: 16 [ 906.167788][T11766] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.208922][T11766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 906.228514][T11766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 906.242283][T11766] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 906.279466][T11766] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.325803][T11766] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.353869][T11766] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.380816][T11766] usb 1-1: Manufacturer: syz [ 906.410264][T11766] usb 1-1: config 0 descriptor?? [ 907.173944][T11766] rc_core: IR keymap rc-hauppauge not found [ 907.190308][T11766] Registered IR keymap rc-empty [ 907.210698][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.245972][T19782] bridge0: port 3(erspan0) entered blocking state [ 907.271880][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.273461][T19782] bridge0: port 3(erspan0) entered disabled state [ 907.298056][T19782] erspan0: entered allmulticast mode [ 907.321107][T19782] erspan0: entered promiscuous mode [ 907.336434][T11766] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 907.345149][T19782] bridge0: port 3(erspan0) entered blocking state [ 907.355823][T19782] bridge0: port 3(erspan0) entered forwarding state [ 907.371320][T11766] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input72 [ 907.456880][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.503739][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.554620][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.604697][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.664559][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.705106][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.754012][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.813972][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.874430][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 907.927280][T11766] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 908.387807][T11766] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 908.401062][T11766] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 908.421278][T11766] usb 1-1: USB disconnect, device number 24 [ 909.184530][T19822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19822 comm=syz.1.5444 [ 911.837979][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 911.851822][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 911.872974][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 911.900223][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 911.909784][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 911.924973][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.384386][T11005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.690451][T11005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.931538][T11005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.151804][T11005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.061297][ T5106] Bluetooth: hci0: command tx timeout [ 914.317805][T19844] chnl_net:caif_netlink_parms(): no params data found [ 914.697893][ T29] audit: type=1400 audit(1721254292.583:520): avc: denied { create } for pid=19876 comm="syz.2.5466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 914.728207][T19877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19877 comm=syz.2.5466 [ 914.786581][T11005] erspan0: left allmulticast mode [ 914.791708][T11005] erspan0: left promiscuous mode [ 914.850897][ T29] audit: type=1400 audit(1721254292.613:521): avc: denied { write } for pid=19876 comm="syz.2.5466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 914.872731][T11005] bridge0: port 3(erspan0) entered disabled state [ 914.966975][T11005] bridge_slave_1: left allmulticast mode [ 914.972727][T11005] bridge_slave_1: left promiscuous mode [ 915.034152][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.099128][T11005] bridge_slave_0: left allmulticast mode [ 915.124004][T11005] bridge_slave_0: left promiscuous mode [ 915.130043][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.114590][ T5106] Bluetooth: hci0: command tx timeout [ 916.463477][T19914] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19914 comm=syz.3.5477 [ 918.107980][T11005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.167180][T11005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.232642][T11005] bond0 (unregistering): Released all slaves [ 918.237840][ T5106] Bluetooth: hci0: command tx timeout [ 918.785792][T19844] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.808257][T19844] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.824111][T19844] bridge_slave_0: entered allmulticast mode [ 918.843156][T19844] bridge_slave_0: entered promiscuous mode [ 918.882305][T19844] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.914725][T19844] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.934189][T19844] bridge_slave_1: entered allmulticast mode [ 918.970173][T19844] bridge_slave_1: entered promiscuous mode [ 918.978602][T19965] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19965 comm=syz.0.5496 [ 919.589599][T19989] input: syz0 as /devices/virtual/input/input73 [ 919.625455][T19844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.842057][T19844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.185830][T19844] team0: Port device team_slave_0 added [ 920.277930][ T5106] Bluetooth: hci0: command tx timeout [ 920.377185][T19844] team0: Port device team_slave_1 added [ 920.665020][T19844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.672048][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.773425][T19844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.826699][T20029] input: syz0 as /devices/virtual/input/input74 [ 920.990664][T19844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.021324][T20034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4 sclass=netlink_audit_socket pid=20034 comm=syz.4.5521 [ 921.035993][T19844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.097622][T19844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.404112][T20043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20043 comm=syz.0.5525 [ 921.636041][T19844] hsr_slave_0: entered promiscuous mode [ 921.664744][T19844] hsr_slave_1: entered promiscuous mode [ 921.681159][T19844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.691484][T19844] Cannot create hsr debugfs directory [ 921.740897][T20054] input: syz0 as /devices/virtual/input/input75 [ 921.857250][T11005] hsr_slave_0: left promiscuous mode [ 921.889111][T11005] hsr_slave_1: left promiscuous mode [ 921.899424][T11005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.915709][T11005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.935912][T11005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.943400][T11005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.056851][T11005] veth1_macvtap: left promiscuous mode [ 922.057169][T11005] veth0_macvtap: left promiscuous mode [ 922.057604][T11005] veth1_vlan: left promiscuous mode [ 922.057832][T11005] veth0_vlan: left promiscuous mode [ 923.121613][T20091] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20091 comm=syz.2.5547 [ 924.191928][T11005] team0 (unregistering): Port device team_slave_1 removed [ 924.409412][T11005] team0 (unregistering): Port device team_slave_0 removed [ 925.346516][T20061] bridge0: port 3(erspan0) entered blocking state [ 925.353209][T20061] bridge0: port 3(erspan0) entered disabled state [ 925.372141][T20061] erspan0: entered allmulticast mode [ 925.380862][T20061] erspan0: entered promiscuous mode [ 925.398767][T20061] bridge0: port 3(erspan0) entered blocking state [ 925.405539][T20061] bridge0: port 3(erspan0) entered forwarding state [ 925.458684][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5561'. [ 925.518864][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5561'. [ 926.648740][T20165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5574'. [ 926.779017][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5574'. [ 927.113711][ T29] audit: type=1400 audit(1721254304.993:522): avc: denied { read } for pid=20185 comm="syz.3.5581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 927.734718][T20203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20203 comm=syz.0.5588 [ 927.775326][T20202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5589'. [ 927.917045][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5589'. [ 928.303965][T19844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 928.350467][T19844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.454801][T19844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 928.513740][T19844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.106338][T19844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.149998][T19844] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.227407][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.234749][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.259293][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.266642][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.379104][ T5106] Bluetooth: unknown link type 32 [ 930.384921][ T5106] Bluetooth: hci3: connection err: -111 [ 930.769687][T19844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.063200][T19844] veth0_vlan: entered promiscuous mode [ 931.127783][T19844] veth1_vlan: entered promiscuous mode [ 931.288603][T19844] veth0_macvtap: entered promiscuous mode [ 931.348265][T19844] veth1_macvtap: entered promiscuous mode [ 931.430918][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.484826][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.508461][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.529784][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.551975][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.585278][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.595956][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.623797][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.646992][T19844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.692056][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.714971][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.738937][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.762459][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.783031][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.808371][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.830148][T19844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 931.852162][T19844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.879786][T19844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.916628][T19844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.938104][T19844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.961178][T19844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.980337][T19844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.562656][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.593815][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.092729][T19912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.237730][T19912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.564042][ T46] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 934.796698][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.814460][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.876168][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.888208][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.908404][ T46] usb 3-1: Product: syz [ 934.912739][ T46] usb 3-1: Manufacturer: syz [ 934.935806][ T46] usb 3-1: SerialNumber: syz [ 934.987058][ T46] usb 3-1: selecting invalid altsetting 1 [ 935.001601][T16532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 935.017684][T16532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 935.026972][T16532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 935.041886][T16532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 935.057211][T16532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 935.070714][T16532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 935.223463][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.311669][T16532] Bluetooth: unknown link type 32 [ 935.318949][T16532] Bluetooth: hci3: connection err: -111 [ 935.432503][ T46] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 935.458186][ T46] cdc_ncm 3-1:1.0: bind() failure [ 935.570691][ T46] usb 3-1: USB disconnect, device number 25 [ 936.189545][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.453057][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.693284][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.239554][T16532] Bluetooth: hci0: command tx timeout [ 937.327143][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.333557][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.395656][ T1005] bridge_slave_1: left allmulticast mode [ 937.462421][ T1005] bridge_slave_1: left promiscuous mode [ 937.518138][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.660344][ T1005] bridge_slave_0: left allmulticast mode [ 937.673592][ T1005] bridge_slave_0: left promiscuous mode [ 937.684430][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.027612][ T5144] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 939.234794][ T5144] usb 4-1: Using ep0 maxpacket: 16 [ 939.251631][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.302677][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.314731][T16532] Bluetooth: hci0: command tx timeout [ 939.335436][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 939.349314][ T5144] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 939.359752][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.383450][ T5144] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 939.396667][ T5144] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 939.406272][ T5144] usb 4-1: Manufacturer: syz [ 939.424991][ T5144] usb 4-1: config 0 descriptor?? [ 940.286505][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.305200][ T5144] rc_core: IR keymap rc-hauppauge not found [ 940.332495][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.345449][ T1005] bond0 (unregistering): Released all slaves [ 940.361186][ T5144] Registered IR keymap rc-empty [ 940.372054][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.444090][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.505325][ T5144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 940.523618][T20371] chnl_net:caif_netlink_parms(): no params data found [ 940.588355][ T5144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input76 [ 940.698030][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.775315][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.823975][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.854025][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.892702][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.924718][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.954218][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 940.984009][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.018336][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.063983][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.101593][ T5144] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 941.118783][ T5144] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 941.131246][T20371] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.142068][T20371] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.161032][ T5144] usb 4-1: USB disconnect, device number 26 [ 941.170940][T20371] bridge_slave_0: entered allmulticast mode [ 941.193293][T20371] bridge_slave_0: entered promiscuous mode [ 941.352788][T20495] serio: Serial port pts0 [ 941.394638][T16532] Bluetooth: hci0: command tx timeout [ 941.404846][T20371] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.412193][T20371] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.439089][T20371] bridge_slave_1: entered allmulticast mode [ 941.449059][T20371] bridge_slave_1: entered promiscuous mode [ 941.743381][ T1005] hsr_slave_0: left promiscuous mode [ 941.773536][ T1005] hsr_slave_1: left promiscuous mode [ 941.790928][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.813404][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.832387][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.852622][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.950597][ T1005] veth1_macvtap: left promiscuous mode [ 941.962095][ T1005] veth0_macvtap: left promiscuous mode [ 941.981039][ T1005] veth1_vlan: left promiscuous mode [ 941.992178][ T1005] veth0_vlan: left promiscuous mode [ 943.110338][ T5144] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 943.334574][ T5144] usb 4-1: Using ep0 maxpacket: 16 [ 943.372653][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.413970][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.451753][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.462512][ T5144] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 943.478218][T16532] Bluetooth: hci0: command tx timeout [ 943.496904][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.525149][ T5144] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 943.553326][ T5144] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 943.561716][ T5144] usb 4-1: Manufacturer: syz [ 943.572757][ T5144] usb 4-1: config 0 descriptor?? [ 943.703298][ T5106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 943.736680][ T5106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 943.761192][ T5106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 943.778013][ T5106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 943.788109][ T5106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 943.798000][ T5106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.873688][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 943.939065][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 943.950590][ T5144] rc_core: IR keymap rc-hauppauge not found [ 943.959000][ T5144] Registered IR keymap rc-empty [ 943.968246][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.009113][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.051959][ T5144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 944.078780][ T5144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input77 [ 944.103637][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.149226][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.194069][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.227160][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.264089][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.294456][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.351951][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.399005][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.455568][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.485111][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 944.533390][ T5144] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 944.542787][ T5144] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.560478][ T5144] usb 4-1: USB disconnect, device number 27 [ 944.854698][T20371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.065445][T20371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.211894][T20371] team0: Port device team_slave_0 added [ 945.279187][T20371] team0: Port device team_slave_1 added [ 945.547760][T20371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.567896][T20561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20561 comm=syz.3.5692 [ 945.593811][T20371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.657982][T20371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.704859][T20371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.727263][T20371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.766272][T20371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.884972][T16532] Bluetooth: hci5: command tx timeout [ 945.985574][T20371] hsr_slave_0: entered promiscuous mode [ 945.994941][T20371] hsr_slave_1: entered promiscuous mode [ 946.008118][T20371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 946.023800][T20371] Cannot create hsr debugfs directory [ 946.528397][ T1005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.559945][T20581] syz.0.5694 (20581): drop_caches: 0 [ 946.837969][ T1005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.963395][T20543] chnl_net:caif_netlink_parms(): no params data found [ 947.091798][ T1005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.248172][ T1005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.964865][T16532] Bluetooth: hci5: command tx timeout [ 948.615488][T20543] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.638170][T20543] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.654666][T20543] bridge_slave_0: entered allmulticast mode [ 948.665051][T20543] bridge_slave_0: entered promiscuous mode [ 948.695703][T20543] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.703227][T20543] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.727809][T20543] bridge_slave_1: entered allmulticast mode [ 948.757728][T20543] bridge_slave_1: entered promiscuous mode [ 949.018282][T20543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.112802][T20543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.204601][ T1005] erspan0: left allmulticast mode [ 949.228101][ T1005] erspan0: left promiscuous mode [ 949.240471][ T1005] bridge0: port 3(erspan0) entered disabled state [ 949.264921][ T1005] bridge_slave_1: left allmulticast mode [ 949.286947][ T1005] bridge_slave_1: left promiscuous mode [ 949.313816][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.347837][ T1005] bridge_slave_0: left allmulticast mode [ 949.354666][ T1005] bridge_slave_0: left promiscuous mode [ 949.361488][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.034706][T16532] Bluetooth: hci5: command tx timeout [ 950.654547][ T1005] dvmrp2 (unregistering): left allmulticast mode [ 951.704989][ T1005] bond0 (unregistering): left allmulticast mode [ 951.711786][ T1005] bond_slave_0: left allmulticast mode [ 951.724857][ T1005] bond_slave_1: left allmulticast mode [ 951.730637][ T1005] bond0 (unregistering): left promiscuous mode [ 951.737590][ T1005] bond_slave_0: left promiscuous mode [ 951.743333][ T1005] bond_slave_1: left promiscuous mode [ 951.780693][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.794117][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.811988][ T1005] bond0 (unregistering): Released all slaves [ 952.048533][T20543] team0: Port device team_slave_0 added [ 952.115080][T16532] Bluetooth: hci5: command tx timeout [ 952.183403][T20543] team0: Port device team_slave_1 added [ 952.486958][T20543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.524633][T20543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.653969][T20543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.933923][T20371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 953.037466][T20371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 953.074575][T20543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.101593][T20543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.151404][T20543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.224883][T20371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 953.260924][T20371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 953.541177][T20543] hsr_slave_0: entered promiscuous mode [ 953.571543][T20543] hsr_slave_1: entered promiscuous mode [ 953.612275][T20543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.635820][T20543] Cannot create hsr debugfs directory [ 955.302143][ T1005] hsr_slave_0: left promiscuous mode [ 955.329102][ T1005] hsr_slave_1: left promiscuous mode [ 955.344263][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.359900][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.384805][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.404042][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.436646][ T1005] batman_adv: batadv0: Interface deactivated: macsec2 [ 955.443544][ T1005] batman_adv: batadv0: Removing interface: macsec2 [ 955.521658][ T1005] veth0: left promiscuous mode [ 955.528725][ T1005] dummy0: left promiscuous mode [ 955.541193][ T1005] veth1_macvtap: left promiscuous mode [ 955.551005][ T1005] veth0_macvtap: left promiscuous mode [ 955.565186][ T1005] veth1_vlan: left promiscuous mode [ 955.570727][ T1005] veth0_vlan: left promiscuous mode [ 955.812073][ T1005] team0 (unregistering): Port device vlan2 removed [ 956.754350][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 956.930534][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 957.080374][ T29] audit: type=1400 audit(1721254334.963:523): avc: denied { read } for pid=20753 comm="syz.0.5747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 958.182460][T20371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.329332][T20371] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.561583][T10894] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.568952][T10894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.650250][T20364] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.657616][T20364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.000425][T20371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 959.284754][T20543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 959.342229][T20543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 959.498332][T20543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 959.540433][T20543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 960.027601][T20543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.035833][T11766] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 960.094552][T20371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.155354][T20543] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.221469][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.228860][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.244012][T11766] usb 3-1: Using ep0 maxpacket: 16 [ 960.254865][T11766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.280152][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.287664][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.313923][T11766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.337503][T11766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.376005][T11766] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 960.435998][T11766] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 960.506507][T11766] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 960.519801][T11766] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 960.563848][T11766] usb 3-1: Manufacturer: syz [ 960.607221][T11766] usb 3-1: config 0 descriptor?? [ 960.701245][T20371] veth0_vlan: entered promiscuous mode [ 960.856305][T20371] veth1_vlan: entered promiscuous mode [ 961.038810][T20371] veth0_macvtap: entered promiscuous mode [ 961.102395][T20371] veth1_macvtap: entered promiscuous mode [ 961.108791][T11766] rc_core: IR keymap rc-hauppauge not found [ 961.138150][T11766] Registered IR keymap rc-empty [ 961.143372][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.214174][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.254397][T20371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.271768][T11766] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 961.293823][T20371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.313812][T20371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.337989][T20371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.355235][T11766] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input78 [ 961.358857][T20371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.408876][T20371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.426041][T20371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.451963][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.478140][T20371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.524219][T20371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.534886][T20371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.546754][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.556344][T20371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.567111][T20371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.577932][T20371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.588341][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.610864][T20371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.644483][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.672555][T20371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.693398][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.701036][T20371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.710294][T20371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.720883][T20371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.743966][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.775613][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.824602][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.864342][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.899231][T11766] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 961.915562][T20543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.948600][T11766] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 962.006742][T11766] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 962.115285][T11766] usb 3-1: USB disconnect, device number 26 [ 962.364227][ T2449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.372129][ T2449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.611138][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.635718][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.286779][T20543] veth0_vlan: entered promiscuous mode [ 963.361932][T20543] veth1_vlan: entered promiscuous mode [ 963.521681][T20543] veth0_macvtap: entered promiscuous mode [ 963.538354][T20895] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20895 comm=syz.1.5785 [ 963.570530][T20543] veth1_macvtap: entered promiscuous mode [ 963.652178][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.704010][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.747705][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.801097][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.832013][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.849988][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.860997][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 963.872335][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 963.897348][T20543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.955494][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.007075][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.045671][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.088057][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.099405][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.111014][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.124975][T20543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 964.153700][T20543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 964.198141][T20543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.230146][T20543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.244735][T20543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.289485][T20543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.322990][T20543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.670012][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.695732][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.834847][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.842835][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.250402][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 966.475665][T20985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20985 comm=syz.4.5819 [ 966.670445][T20994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=20994 comm=syz.4.5824 [ 967.506394][T21028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21028 comm=syz.1.5840 [ 968.987774][T21095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65381 sclass=netlink_tcpdiag_socket pid=21095 comm=syz.3.5870 [ 969.245311][T21105] input: syz0 as /devices/virtual/input/input81 [ 969.507456][ T5144] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 969.508341][T21115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21115 comm=syz.4.5879 [ 969.714754][ T5144] usb 4-1: Using ep0 maxpacket: 16 [ 969.722785][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.756202][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 969.792567][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 969.817441][ T5144] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 969.837795][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.882010][ T5144] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 969.901569][ T5144] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 969.914135][ T5144] usb 4-1: Manufacturer: syz [ 969.942051][ T5144] usb 4-1: config 0 descriptor?? [ 970.098213][T21136] input: syz0 as /devices/virtual/input/input82 [ 970.364053][ T5144] rc_core: IR keymap rc-hauppauge not found [ 970.383849][ T5144] Registered IR keymap rc-empty [ 970.389016][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.465041][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.515833][ T5144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 970.569119][ T5144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input83 [ 970.635931][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.684189][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.728328][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.796899][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.845868][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.894053][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.934033][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 970.975596][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 971.013978][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 971.044049][ T5144] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 971.090213][ T5144] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 971.121590][ T5144] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 971.141494][ T5144] usb 4-1: USB disconnect, device number 28 [ 971.162486][ T29] audit: type=1400 audit(1721254349.043:524): avc: denied { create } for pid=21177 comm="syz.4.5907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 971.315913][T21182] serio: Serial port pts0 [ 971.689141][ T29] audit: type=1400 audit(1721254349.573:525): avc: denied { nlmsg_read } for pid=21189 comm="syz.3.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 972.778792][ T29] audit: type=1400 audit(1721254350.663:526): avc: denied { create } for pid=21224 comm="syz.3.5925" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 972.812655][T21228] syz.3.5925: attempt to access beyond end of device [ 972.812655][T21228] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 972.858904][T21228] FAT-fs (loop7): unable to read boot sector [ 972.885355][ T29] audit: type=1400 audit(1721254350.683:527): avc: denied { mounton } for pid=21224 comm="syz.3.5925" path="/953/file0" dev="tmpfs" ino=4979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 973.004543][T21232] serio: Serial port pts1 [ 973.031143][ T29] audit: type=1400 audit(1721254350.903:528): avc: denied { unlink } for pid=8893 comm="syz-executor" name="file0" dev="tmpfs" ino=4979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 973.180842][ T29] audit: type=1400 audit(1721254351.063:529): avc: denied { lock } for pid=21241 comm="syz.4.5932" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 973.357453][T21248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21248 comm=syz.1.5935 [ 973.950939][ T29] audit: type=1400 audit(1721254351.833:530): avc: denied { setattr } for pid=21270 comm="syz.1.5946" name="renderD128" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 974.511495][ T29] audit: type=1400 audit(1721254352.393:531): avc: denied { setattr } for pid=21295 comm="syz.1.5958" name="ptyq6" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 975.268249][T21310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=21310 comm=syz.1.5964 [ 976.520128][T21342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21342 comm=syz.3.5978 [ 978.253845][ T29] audit: type=1400 audit(1721254356.123:532): avc: denied { bind } for pid=21371 comm="syz.3.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 978.764777][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 980.609095][ T29] audit: type=1400 audit(1721254358.493:533): avc: denied { map } for pid=21430 comm="syz.2.6015" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 980.638696][T10894] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 980.759140][T21436] serio: Serial port pts0 [ 980.844518][T10894] usb 5-1: Using ep0 maxpacket: 16 [ 980.864146][T10894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.903643][T10894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.926164][T10894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 980.936673][T10894] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 980.950606][T10894] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.973222][T10894] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 980.983667][T10894] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 981.019865][T10894] usb 5-1: Manufacturer: syz [ 981.036555][T10894] usb 5-1: config 0 descriptor?? [ 981.403870][T10894] rc_core: IR keymap rc-hauppauge not found [ 981.409871][T10894] Registered IR keymap rc-empty [ 981.425795][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 981.467143][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 981.516209][T10894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 981.555547][T10894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input84 [ 981.868429][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 982.993986][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.023976][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.062678][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.123951][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.154040][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.201580][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.254477][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.304092][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.338177][T10894] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 983.387460][T10894] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 983.416137][T10894] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 983.464963][T10894] usb 5-1: USB disconnect, device number 34 [ 995.397627][T21744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2052 sclass=netlink_audit_socket pid=21744 comm=syz.0.6137 [ 996.618875][ T29] audit: type=1400 audit(1721254374.503:534): avc: denied { connect } for pid=21798 comm="syz.0.6159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 998.112884][T21865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=21865 comm=syz.0.6189 [ 998.258909][T21871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=21871 comm=syz.0.6192 [ 998.763415][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.770018][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.296998][ T29] audit: type=1400 audit(1721254377.183:535): avc: denied { lock } for pid=21912 comm="syz.4.6210" path="socket:[72707]" dev="sockfs" ino=72707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 999.742476][T21928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21928 comm=syz.4.6217 [ 1000.504222][ T46] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1000.714601][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1000.738273][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.765524][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.803887][ T46] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1000.833509][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.872082][ T46] usb 3-1: config 0 descriptor?? [ 1001.309335][ T46] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 1001.333560][ T46] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1001.349662][ T46] microsoft 0003:045E:07DA.0010: no inputs found [ 1001.356919][ T46] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 1001.517860][T21945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.534729][T21945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.604292][ T930] usb 3-1: USB disconnect, device number 27 [ 1002.174018][T21994] serio: Serial port pts0 [ 1005.163869][T11766] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1005.384165][T11766] usb 5-1: Using ep0 maxpacket: 16 [ 1005.397279][T11766] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.414206][T11766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.457174][T11766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1005.487419][T11766] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1005.525852][T11766] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.567803][T11766] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1005.589494][T11766] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1005.627549][T11766] usb 5-1: Manufacturer: syz [ 1005.658009][T11766] usb 5-1: config 0 descriptor?? [ 1006.043903][T11766] rc_core: IR keymap rc-hauppauge not found [ 1006.049939][T11766] Registered IR keymap rc-empty [ 1006.074324][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.133161][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.186195][T11766] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1006.219884][T11766] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input86 [ 1006.276544][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.338155][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.413985][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.498881][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.586197][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.644078][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.694038][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.766865][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.826939][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.847285][T22119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22119 comm=syz.2.6298 [ 1006.878413][T11766] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1006.936486][T11766] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1006.973505][T11766] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1007.027815][T11766] usb 5-1: USB disconnect, device number 35 [ 1008.525612][ T29] audit: type=1400 audit(1721254386.413:536): avc: denied { append } for pid=22165 comm="syz.2.6320" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1009.852111][ T29] audit: type=1400 audit(1721254387.733:537): avc: denied { read } for pid=22192 comm="syz.2.6332" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1010.040004][ T29] audit: type=1400 audit(1721254387.923:538): avc: denied { setattr } for pid=22198 comm="syz.0.6335" name="tun" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1010.944218][T22231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22231 comm=syz.1.6349 [ 1012.417677][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1012.436815][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1012.449304][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1012.486225][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1012.506204][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1012.513970][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1012.831827][ T2477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.909851][T22274] bridge0: port 3(erspan0) entered blocking state [ 1012.944315][T22274] bridge0: port 3(erspan0) entered disabled state [ 1012.963042][T22274] erspan0: entered allmulticast mode [ 1012.984170][T22274] erspan0: entered promiscuous mode [ 1013.000310][T22274] bridge0: port 3(erspan0) entered blocking state [ 1013.007110][T22274] bridge0: port 3(erspan0) entered forwarding state [ 1013.151179][ T2477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.178995][T22284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22284 comm=syz.2.6370 [ 1013.497698][ T2477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.730062][ T2477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.604170][ T5106] Bluetooth: hci3: command tx timeout [ 1014.812540][ T2477] erspan0: left allmulticast mode [ 1014.840639][ T2477] erspan0: left promiscuous mode [ 1014.864086][ T2477] bridge0: port 3(erspan0) entered disabled state [ 1014.958343][ T2477] bridge_slave_1: left allmulticast mode [ 1014.984320][ T2477] bridge_slave_1: left promiscuous mode [ 1014.990254][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.084684][ T2477] bridge_slave_0: left allmulticast mode [ 1015.124290][ T2477] bridge_slave_0: left promiscuous mode [ 1015.132322][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.675844][ T5106] Bluetooth: hci3: command tx timeout [ 1017.522039][ T2477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.561768][ T2477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.579661][ T2477] bond0 (unregistering): Released all slaves [ 1017.751083][T22262] chnl_net:caif_netlink_parms(): no params data found [ 1018.209637][T22393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22393 comm=syz.4.6415 [ 1018.764443][T16532] Bluetooth: hci3: command tx timeout [ 1019.179828][T22262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.206788][T22262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.239470][T22262] bridge_slave_0: entered allmulticast mode [ 1019.259925][T22262] bridge_slave_0: entered promiscuous mode [ 1019.293344][ T2477] hsr_slave_0: left promiscuous mode [ 1019.328174][ T2477] hsr_slave_1: left promiscuous mode [ 1019.381645][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.433957][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.506116][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.556433][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.790213][ T2477] veth1_macvtap: left promiscuous mode [ 1019.810219][ T2477] veth0_macvtap: left promiscuous mode [ 1019.834384][ T2477] veth1_vlan: left promiscuous mode [ 1019.840027][ T2477] veth0_vlan: left promiscuous mode [ 1019.875098][T20364] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1020.093905][T20364] usb 3-1: Using ep0 maxpacket: 16 [ 1020.102449][T20364] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.139873][T20364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1020.189408][T20364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1020.218478][T20364] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1020.252038][T20364] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.301628][T20364] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1020.322215][T20364] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1020.345589][T20364] usb 3-1: Manufacturer: syz [ 1020.370221][T20364] usb 3-1: config 0 descriptor?? [ 1020.386682][T22440] serio: Serial port pts0 [ 1020.773385][T20364] rc_core: IR keymap rc-hauppauge not found [ 1020.781636][T20364] Registered IR keymap rc-empty [ 1020.791739][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.841726][T16532] Bluetooth: hci3: command tx timeout [ 1020.850435][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.887231][T20364] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1020.905947][T20364] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input87 [ 1020.938268][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1020.996916][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.064476][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.098629][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.158424][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.214770][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.259980][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.295831][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.332041][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.395796][T20364] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1021.427304][T20364] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1021.436275][T20364] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1021.476172][T20364] usb 3-1: USB disconnect, device number 28 [ 1021.713589][ T2477] team0 (unregistering): Port device team_slave_1 removed [ 1021.842152][ T2477] team0 (unregistering): Port device team_slave_0 removed [ 1023.114242][T22262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.134101][T22262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.151989][T22262] bridge_slave_1: entered allmulticast mode [ 1023.174996][T22262] bridge_slave_1: entered promiscuous mode [ 1023.491801][T22262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.535837][T22262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.716672][T22473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22473 comm=syz.2.6436 [ 1023.815805][T22262] team0: Port device team_slave_0 added [ 1023.859201][T22262] team0: Port device team_slave_1 added [ 1024.221991][T22262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.289575][T22262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.358343][T22262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.542711][T22262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.567881][T22262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.673334][T22262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.992964][T22262] hsr_slave_0: entered promiscuous mode [ 1025.064518][T22262] hsr_slave_1: entered promiscuous mode [ 1025.425144][T22527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22527 comm=syz.3.6457 [ 1026.788072][T22561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1010 sclass=netlink_tcpdiag_socket pid=22561 comm=syz.3.6470 [ 1027.698293][T22262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1027.772145][T22262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1027.821551][T22262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1027.867325][T22262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1027.911882][T22599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22599 comm=syz.3.6484 [ 1028.215874][T22606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=22606 comm=syz.2.6487 [ 1028.460483][T22262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.580983][T22262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.651190][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.658631][T11429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.727010][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.734361][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.035770][T22262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1029.870915][T22262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.060397][T22658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22658 comm=syz.2.6505 [ 1030.160058][T22262] veth0_vlan: entered promiscuous mode [ 1030.260331][T22262] veth1_vlan: entered promiscuous mode [ 1030.479469][T22262] veth0_macvtap: entered promiscuous mode [ 1030.537238][T22262] veth1_macvtap: entered promiscuous mode [ 1030.693241][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.739931][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.773865][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.796596][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.821240][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.867787][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.914415][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.953942][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.981827][T22262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.076368][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.118027][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.161521][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.208593][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.233983][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.260466][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.289377][T22262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.312661][T22262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.336056][T22262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.373459][T22262] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.423280][T22262] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.474156][T22262] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.485597][T22262] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.630247][ T29] audit: type=1400 audit(1721254409.513:539): avc: denied { setattr } for pid=22704 comm="syz.3.6525" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1032.035754][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.084869][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.267703][T19912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.305720][T19912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.935274][T22811] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=114 sclass=netlink_audit_socket pid=22811 comm=syz.2.6561 [ 1038.730859][T22930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22930 comm=syz.2.6610 [ 1039.300622][ T29] audit: type=1400 audit(1721254417.183:540): avc: denied { read } for pid=22948 comm="syz.1.6618" path="socket:[75750]" dev="sockfs" ino=75750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1040.541948][T22973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22973 comm=syz.4.6627 [ 1042.604394][T23050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=769 sclass=netlink_audit_socket pid=23050 comm=syz.4.6660 [ 1042.677814][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1045.537340][T23142] bridge0: port 3(erspan0) entered blocking state [ 1045.574061][T23142] bridge0: port 3(erspan0) entered disabled state [ 1045.601339][T23142] erspan0: entered allmulticast mode [ 1045.649109][T23142] erspan0: entered promiscuous mode [ 1045.674065][T23142] bridge0: port 3(erspan0) entered blocking state [ 1045.674265][T23142] bridge0: port 3(erspan0) entered forwarding state [ 1046.728034][T23172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23172 comm=syz.4.6709 [ 1048.712807][ T29] audit: type=1400 audit(1721254426.593:541): avc: denied { accept } for pid=23242 comm="syz.3.6741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1049.218879][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.236348][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.248518][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.285593][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.318923][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1049.328809][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1049.452753][ T2477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.702083][ T2477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.933093][ T2477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.236437][ T2477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.564333][T23264] chnl_net:caif_netlink_parms(): no params data found [ 1050.827912][ T2477] erspan0: left allmulticast mode [ 1050.833114][ T2477] erspan0: left promiscuous mode [ 1050.847588][ T2477] bridge0: port 3(erspan0) entered disabled state [ 1050.900512][ T2477] bridge_slave_1: left allmulticast mode [ 1050.927403][ T2477] bridge_slave_1: left promiscuous mode [ 1050.950897][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.003666][ T2477] bridge_slave_0: left allmulticast mode [ 1051.024529][ T2477] bridge_slave_0: left promiscuous mode [ 1051.030460][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.125355][T23334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23334 comm=syz.2.6775 [ 1051.398384][ T5106] Bluetooth: hci3: command tx timeout [ 1051.784084][ T29] audit: type=1400 audit(1721254429.663:542): avc: denied { name_connect } for pid=23352 comm="syz.4.6785" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1052.385370][ T2477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.410190][ T2477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.433271][ T2477] bond0 (unregistering): Released all slaves [ 1052.552966][T23362] bridge0: port 3(erspan0) entered blocking state [ 1052.589928][T23362] bridge0: port 3(erspan0) entered disabled state [ 1052.629576][T23362] erspan0: entered allmulticast mode [ 1052.634525][T23371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23371 comm=syz.1.6791 [ 1052.639132][T23362] erspan0: entered promiscuous mode [ 1052.658131][T23362] bridge0: port 3(erspan0) entered blocking state [ 1052.664882][T23362] bridge0: port 3(erspan0) entered forwarding state [ 1053.243164][T23264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.271687][T23264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.288439][T23264] bridge_slave_0: entered allmulticast mode [ 1053.297102][T23264] bridge_slave_0: entered promiscuous mode [ 1053.325010][T23264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.365647][T23264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.374979][T23264] bridge_slave_1: entered allmulticast mode [ 1053.409321][T23264] bridge_slave_1: entered promiscuous mode [ 1053.474194][ T5106] Bluetooth: hci3: command tx timeout [ 1053.974501][ T2477] hsr_slave_0: left promiscuous mode [ 1054.010957][ T2477] hsr_slave_1: left promiscuous mode [ 1054.126013][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.133529][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.216182][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.264026][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.480392][ T2477] veth1_macvtap: left promiscuous mode [ 1054.512367][ T2477] veth0_macvtap: left promiscuous mode [ 1054.534479][ T2477] veth1_vlan: left promiscuous mode [ 1054.574423][ T2477] veth0_vlan: left promiscuous mode [ 1055.554706][ T5106] Bluetooth: hci3: command tx timeout [ 1056.691475][T23499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23499 comm=syz.3.6836 [ 1056.882305][ T2477] team0 (unregistering): Port device team_slave_1 removed [ 1057.039230][ T2477] team0 (unregistering): Port device team_slave_0 removed [ 1057.218695][T23514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1057.635206][ T5106] Bluetooth: hci3: command tx timeout [ 1058.372427][T23542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1058.468307][T23264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1058.509217][ T46] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1058.576093][T23264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.744202][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 1058.769318][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.806599][T23264] team0: Port device team_slave_0 added [ 1058.814420][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1058.838328][T23264] team0: Port device team_slave_1 added [ 1058.844106][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1058.889616][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1058.941501][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.987553][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1059.014723][ T46] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1059.043376][ T46] usb 5-1: Manufacturer: syz [ 1059.056393][T23264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.077518][ T46] usb 5-1: config 0 descriptor?? [ 1059.082769][T23264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.129410][T23264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.192852][T23264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.206578][T23264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.242137][T23264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.549129][T23264] hsr_slave_0: entered promiscuous mode [ 1059.555519][ T46] rc_core: IR keymap rc-hauppauge not found [ 1059.561476][ T46] Registered IR keymap rc-empty [ 1059.590304][T23264] hsr_slave_1: entered promiscuous mode [ 1059.597494][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1059.639971][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1059.700487][T23573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23573 comm=syz.2.6864 [ 1059.731954][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1059.778674][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input88 [ 1059.875924][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1059.964004][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.002755][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.053615][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.124128][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.180940][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.200636][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.208172][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.254995][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.304614][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.362328][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.432167][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1060.479776][ T46] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1060.509603][ T46] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1060.549559][ T46] usb 5-1: USB disconnect, device number 36 [ 1061.809052][T23264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1061.849338][T23264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1061.891456][T23264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1061.919583][T23646] serio: Serial port pts0 [ 1061.947798][T23264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1062.024117][T19843] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1062.234063][T19843] usb 4-1: Using ep0 maxpacket: 16 [ 1062.253967][T19843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.279468][T16532] Bluetooth: hci0: command 0x0406 tx timeout [ 1062.287510][T19843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1062.305308][T19843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1062.315692][T19843] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1062.332066][T19843] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1062.360808][T19843] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1062.376517][T19843] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1062.386146][T19843] usb 4-1: Manufacturer: syz [ 1062.397199][T19843] usb 4-1: config 0 descriptor?? [ 1062.500123][T23264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.591103][T23264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.667638][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.674986][T11766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.722568][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.729882][T11766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.814571][T19843] rc_core: IR keymap rc-hauppauge not found [ 1062.844226][T19843] Registered IR keymap rc-empty [ 1062.849461][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1062.924382][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1062.978253][T19843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1063.002804][T19843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input89 [ 1063.047894][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.114468][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.154269][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.224272][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.263896][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.314944][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.356705][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.423901][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.479436][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.544030][T19843] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1063.587259][T19843] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1063.596182][T23264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.606255][T19843] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1063.651988][T19843] usb 4-1: USB disconnect, device number 29 [ 1063.876214][T23264] veth0_vlan: entered promiscuous mode [ 1063.929798][T23264] veth1_vlan: entered promiscuous mode [ 1064.106014][T23264] veth0_macvtap: entered promiscuous mode [ 1064.159069][T23264] veth1_macvtap: entered promiscuous mode [ 1064.274773][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.313766][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.335531][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.356491][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.380543][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.406703][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.450590][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1064.479360][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.498723][T23264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.568375][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.588144][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.629308][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.660434][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.675881][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.693561][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.714123][T23264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1064.731266][T23264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.772378][T23264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.831925][T23264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.865585][T23264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.905435][T23264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.944367][T23264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.383413][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.440028][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.595553][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.629475][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.408965][T16532] Bluetooth: hci5: command 0x0406 tx timeout [ 1067.617084][ T29] audit: type=1400 audit(1721254445.503:543): avc: denied { write } for pid=23797 comm="syz.2.6934" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1068.976388][T23853] sctp: [Deprecated]: syz.3.6955 (pid 23853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1068.976388][T23853] Use struct sctp_sack_info instead [ 1070.323160][T23897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23897 comm=syz.4.6973 [ 1074.514564][T24017] pim6reg: entered allmulticast mode [ 1074.581209][T24013] macvlan1: entered allmulticast mode [ 1074.614220][T24013] veth1_vlan: entered allmulticast mode [ 1075.346832][T24032] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=24032 comm=syz.0.7031 [ 1075.775370][T19843] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1076.003931][T19843] usb 2-1: Using ep0 maxpacket: 16 [ 1076.012207][T19843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.036809][T19843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1076.074556][T19843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1076.116705][T19843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1076.159101][T19843] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.217772][T19843] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1076.237409][T19843] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1076.263857][T19843] usb 2-1: Manufacturer: syz [ 1076.281047][T19843] usb 2-1: config 0 descriptor?? [ 1076.694030][T19843] rc_core: IR keymap rc-hauppauge not found [ 1076.710944][T19843] Registered IR keymap rc-empty [ 1076.731213][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1076.798421][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1076.849228][T19843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1076.901950][T19843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input91 [ 1076.959014][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.034172][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.094193][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.145769][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.187268][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.254043][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.304991][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.383964][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.443424][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.494090][T19843] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1077.531902][T19843] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1077.571155][T19843] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1077.632420][T19843] usb 2-1: USB disconnect, device number 25 [ 1078.354955][ T29] audit: type=1400 audit(1721254456.243:544): avc: denied { bind } for pid=24100 comm="syz.1.7061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1079.634628][T19843] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1079.883898][T19843] usb 5-1: Using ep0 maxpacket: 16 [ 1079.904660][T19843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.940103][T19843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1079.978974][T19843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1080.025709][T19843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1080.073903][T19843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.224317][T19843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1080.233459][T19843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1080.283229][T19843] usb 5-1: Manufacturer: syz [ 1080.312569][T19843] usb 5-1: config 0 descriptor?? [ 1080.779727][T19843] rc_core: IR keymap rc-hauppauge not found [ 1080.841317][T19843] Registered IR keymap rc-empty [ 1080.864029][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1080.903898][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1080.975314][T19843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1081.032554][T19843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input92 [ 1081.105870][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.194873][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.247580][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.293959][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.364279][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.432831][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.485661][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.526118][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.598783][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.647446][T19843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1081.732501][T19843] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1081.774074][T19843] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1081.833169][T19843] usb 5-1: USB disconnect, device number 37 [ 1085.305100][T24199] bridge0: port 3(erspan0) entered blocking state [ 1085.311864][T24199] bridge0: port 3(erspan0) entered disabled state [ 1085.344360][T24199] erspan0: entered allmulticast mode [ 1085.352317][T24199] erspan0: entered promiscuous mode [ 1085.380124][T24199] bridge0: port 3(erspan0) entered blocking state [ 1085.386925][T24199] bridge0: port 3(erspan0) entered forwarding state [ 1088.743006][T24343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7148'. [ 1088.856085][T24347] team0: entered promiscuous mode [ 1088.861298][T24347] team_slave_0: entered promiscuous mode [ 1088.904677][T24347] team_slave_1: entered promiscuous mode [ 1088.936619][T24347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.109240][T24353] netlink: 'syz.3.7151': attribute type 49 has an invalid length. [ 1089.503600][T24368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7156'. [ 1089.598001][T24374] netlink: 'syz.4.7159': attribute type 12 has an invalid length. [ 1089.625817][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7156'. [ 1089.695834][T24368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7156'. [ 1090.408064][ T29] audit: type=1400 audit(1721254468.293:545): avc: denied { connect } for pid=24395 comm="syz.3.7170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1090.475284][T24401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7171'. [ 1090.613293][T24401] bond1: entered promiscuous mode [ 1090.633651][T24406] tunl0: entered promiscuous mode [ 1090.646092][T24408] netlink: 'syz.2.7174': attribute type 3 has an invalid length. [ 1090.682218][T24408] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1090.703464][T24406] bond1: (slave tunl0): The slave device specified does not support setting the MAC address [ 1090.734368][T24406] bond1: (slave tunl0): Error -95 calling set_mac_address [ 1090.961817][T24413] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7175'. [ 1091.427809][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1091.674259][T24443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7188'. [ 1091.787814][T24451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7191'. [ 1091.799338][T24443] bond1: entered promiscuous mode [ 1091.819451][T24449] tunl0: entered promiscuous mode [ 1091.861748][T24449] bond1: (slave tunl0): The slave device specified does not support setting the MAC address [ 1091.880186][T24449] bond1: (slave tunl0): Error -95 calling set_mac_address [ 1092.542677][T24482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1092.659401][T24483] bond1: entered promiscuous mode [ 1092.670306][T24487] tunl0: entered promiscuous mode [ 1092.699379][T24487] bond1: (slave tunl0): The slave device specified does not support setting the MAC address [ 1092.726013][T24487] bond1: (slave tunl0): Error -95 calling set_mac_address [ 1094.346868][T24516] __nla_validate_parse: 1 callbacks suppressed [ 1094.346897][T24516] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7218'. [ 1094.375810][T24518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7219'. [ 1094.467495][T24518] bond1: entered promiscuous mode [ 1096.042135][T24552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7231'. [ 1096.404793][ T29] audit: type=1400 audit(1721254474.293:546): avc: denied { watch watch_reads } for pid=24557 comm="syz.3.7234" path="/1187/control" dev="tmpfs" ino=6180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1096.541493][ T29] audit: type=1400 audit(1721254474.413:547): avc: denied { audit_write } for pid=24567 comm="syz.0.7238" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1096.644025][ T29] audit: type=1107 audit(1721254474.423:548): pid=24567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1097.135230][ T46] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1097.343900][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 1097.355401][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.377981][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1097.404368][ T46] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1097.451076][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.473289][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1097.508836][ T46] usb 4-1: SerialNumber: syz [ 1097.515562][T24594] skb len=1639 headroom=168 headlen=1639 tailroom=1969 [ 1097.515562][T24594] mac=(168,0) mac_len=0 net=(168,20) trans=188 [ 1097.515562][T24594] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 1097.515562][T24594] csum(0x70f start=1807 offset=0 ip_summed=3 complete_sw=0 valid=0 level=0) [ 1097.515562][T24594] hash(0x55746ead sw=1 l4=1) proto=0x0800 pkttype=0 iif=0 [ 1097.515562][T24594] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 1097.515562][T24594] encapsulation=1 inner(proto=0x0008, mac=192, net=192, trans=244) [ 1097.527881][T24576] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1097.565592][T24594] dev name=veth0_to_team feat=0x000061164fdd19e9 [ 1097.579122][T24594] skb linear: 00000000: 45 01 06 67 a7 12 00 00 00 2f 88 1d ac 14 14 1f [ 1097.587718][T24594] skb linear: 00000010: e0 01 e5 02 00 00 08 00 bd 05 06 4f 10 00 00 00 [ 1097.596312][T24594] skb linear: 00000020: 00 06 79 a3 fd fe 4b 44 94 30 eb b5 29 97 e3 6e [ 1097.604927][T24594] skb linear: 00000030: c5 5d 17 c6 c5 23 53 02 9b 1e 59 88 25 53 2a c5 [ 1097.613494][T24594] skb linear: 00000040: 06 3e f3 99 fd 06 00 01 02 c8 a9 20 2f bd cb 19 [ 1097.622146][T24594] skb linear: 00000050: fe 1b 4d 10 83 a3 c0 63 76 00 00 00 29 5e 00 00 [ 1097.623235][ T46] cdc_acm 4-1:1.0: skipping garbage [ 1097.630731][T24594] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.630762][T24594] skb linear: 00000070: 00 00 00 00 00 00 11 00 00 00 03 00 00 00 01 00 [ 1097.630788][T24594] skb linear: 00000080: 00 06 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 [ 1097.630814][T24594] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.630840][T24594] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.630867][T24594] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.630893][T24594] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.630920][T24594] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.630946][T24594] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.713495][T24594] skb linear: 000000f0: 00 00 00 00 00 00 11 00 00 00 05 00 00 00 00 00 [ 1097.722116][T24594] skb linear: 00000100: 00 20 00 00 00 00 00 01 00 20 00 00 00 00 00 00 [ 1097.730697][T24594] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.739295][T24594] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1097.747972][T24594] ------------[ cut here ]------------ [ 1097.753463][T24594] offset (1639) >= skb_headlen() (1639) [ 1097.760425][T24594] WARNING: CPU: 0 PID: 24594 at net/core/dev.c:3326 skb_checksum_help+0x536/0x750 [ 1097.769764][T24594] Modules linked in: [ 1097.773756][T24594] CPU: 0 PID: 24594 Comm: syz.2.7250 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 1097.783712][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1097.793879][T24594] RIP: 0010:skb_checksum_help+0x536/0x750 [ 1097.799673][T24594] Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 00 02 00 00 44 89 e2 2b 53 74 44 89 ee 48 c7 c7 40 0f 52 8c e8 ab 0d 8a f8 90 <0f> 0b 90 90 e9 42 ff ff ff e8 7c c7 c7 f8 44 0f b6 25 a0 7b 08 07 [ 1097.819425][T24594] RSP: 0018:ffffc9000303ef28 EFLAGS: 00010286 [ 1097.825614][T24594] RAX: 0000000000000000 RBX: ffff8880787488c0 RCX: ffffc90009b1d000 [ 1097.833655][T24594] RDX: 0000000000040000 RSI: ffffffff81504576 RDI: 0000000000000001 [ 1097.841732][T24594] RBP: ffff888078748934 R08: 0000000000000001 R09: 0000000000000000 [ 1097.847196][ T46] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 1097.849770][T24594] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000667 [ 1097.863772][T24594] R13: 0000000000000667 R14: ffff888078748930 R15: 000000000000070f [ 1097.871787][T24594] FS: 00007f81bbdcd6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1097.880827][T24594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1097.887502][T24594] CR2: 000000002000d000 CR3: 000000001f290000 CR4: 00000000003506f0 [ 1097.895581][T24594] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1097.903606][T24594] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1097.911701][T24594] Call Trace: [ 1097.912801][ T46] usb 4-1: USB disconnect, device number 30 [ 1097.915033][T24594] [ 1097.915048][T24594] ? show_regs+0x8c/0xa0 [ 1097.915104][T24594] ? __warn+0xe5/0x3c0 [ 1097.915136][T24594] ? skb_checksum_help+0x536/0x750 [ 1097.937623][T24594] ? report_bug+0x3c0/0x580 [ 1097.942205][T24594] ? handle_bug+0x3d/0x70 [ 1097.946640][T24594] ? exc_invalid_op+0x17/0x50 [ 1097.951385][T24594] ? asm_exc_invalid_op+0x1a/0x20 [ 1097.956536][T24594] ? __warn_printk+0x1a6/0x350 [ 1097.961395][T24594] ? skb_checksum_help+0x536/0x750 [ 1097.966693][T24594] ? skb_checksum_help+0x535/0x750 [ 1097.971879][T24594] ip_do_fragment+0xa1e/0x18b0 [ 1097.976786][T24594] ? __pfx_ip_finish_output2+0x10/0x10 [ 1097.982344][T24594] ? __pfx_ip_do_fragment+0x10/0x10 [ 1097.987664][T24594] ? lockdep_hardirqs_on+0x7c/0x110 [ 1097.992930][T24594] ? kmem_cache_free+0x12f/0x3a0 [ 1097.997989][T24594] ? skb_release_data+0x761/0x980 [ 1098.003091][T24594] ? kfree_skbmem+0x10e/0x200 [ 1098.007889][T24594] ip_fragment.constprop.0+0x161/0x230 [ 1098.013422][T24594] __ip_finish_output+0x5af/0x950 [ 1098.018585][T24594] ip_finish_output+0x31/0x310 [ 1098.023438][T24594] ip_output+0x13b/0x2a0 [ 1098.027806][T24594] ? __pfx_ip_output+0x10/0x10 [ 1098.032644][T24594] ip_local_out+0x33e/0x4a0 [ 1098.037276][T24594] iptunnel_xmit+0x5b4/0x9b0 [ 1098.041948][T24594] ip_tunnel_xmit+0x1e82/0x33f0 [ 1098.047035][T24594] ? tcp_gso_segment+0x10/0x1850 [ 1098.052057][T24594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1098.058027][T24594] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1098.063317][T24594] ? skb_mac_gso_segment+0x2e5/0x650 [ 1098.068730][T24594] ? __pfx_lock_release+0x10/0x10 [ 1098.073848][T24594] __gre_xmit+0x89d/0xbd0 [ 1098.078246][T24594] ? __pfx___gre_xmit+0x10/0x10 [ 1098.083147][T24594] ? __pfx_inet_gso_segment+0x10/0x10 [ 1098.088633][T24594] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 1098.094373][T24594] ? lock_acquire+0x1b1/0x560 [ 1098.099124][T24594] ipgre_xmit+0x578/0xb30 [ 1098.103490][T24594] dev_hard_start_xmit+0x143/0x790 [ 1098.108715][T24594] __dev_queue_xmit+0x7c7/0x4300 [ 1098.113756][T24594] ? __might_fault+0xe3/0x190 [ 1098.118496][T24594] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1098.123981][T24594] ? _copy_from_iter+0x15e/0x1140 [ 1098.129079][T24594] ? __pfx__copy_from_iter+0x10/0x10 [ 1098.134496][T24594] ? skb_partial_csum_set+0x202/0x3a0 [ 1098.139925][T24594] ? __pfx_virtio_net_hdr_to_skb.constprop.0+0x10/0x10 [ 1098.146873][T24594] packet_xmit+0x23e/0x360 [ 1098.151360][T24594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1098.157385][T24594] packet_sendmsg+0x268f/0x53a0 [ 1098.162312][T24594] ? lockdep_register_key+0x170/0x210 [ 1098.167823][T24594] ? sock_has_perm+0x25a/0x2f0 [ 1098.172655][T24594] ? __pfx_sock_has_perm+0x10/0x10 [ 1098.177871][T24594] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1098.184755][T24594] ? __might_fault+0x13b/0x190 [ 1098.189594][T24594] ? __pfx_packet_sendmsg+0x10/0x10 [ 1098.195367][T24594] ? __import_iovec+0x1fd/0x6e0 [ 1098.200291][T24594] ? plist_check_prev_next+0x70/0x1a0 [ 1098.205782][T24594] ____sys_sendmsg+0xab5/0xc90 [ 1098.210646][T24594] ? copy_msghdr_from_user+0x10b/0x160 [ 1098.216236][T24594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.221587][T24594] ? __pfx___futex_wait+0x10/0x10 [ 1098.226734][T24594] ? __pfx___lock_acquire+0x10/0x10 [ 1098.231994][T24594] ___sys_sendmsg+0x135/0x1e0 [ 1098.236802][T24594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.242178][T24594] ? __fget_light+0x173/0x210 [ 1098.246990][T24594] __sys_sendmsg+0x117/0x1f0 [ 1098.251664][T24594] ? __pfx___sys_sendmsg+0x10/0x10 [ 1098.256921][T24594] ? __x64_sys_futex+0x1e1/0x4c0 [ 1098.261948][T24594] do_syscall_64+0xcd/0x250 [ 1098.266573][T24594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.272548][T24594] RIP: 0033:0x7f81baf75a99 [ 1098.277082][T24594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.297714][T24594] RSP: 002b:00007f81bbdcd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.306263][T24594] RAX: ffffffffffffffda RBX: 00007f81bb103f60 RCX: 00007f81baf75a99 [ 1098.314416][T24594] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 1098.322443][T24594] RBP: 00007f81bafe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 1098.330543][T24594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.338704][T24594] R13: 000000000000000b R14: 00007f81bb103f60 R15: 00007ffcaa353c08 [ 1098.346799][T24594] [ 1098.349869][T24594] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1098.357277][T24594] CPU: 0 PID: 24594 Comm: syz.2.7250 Not tainted 6.10.0-syzkaller-04472-g51835949dda3 #0 [ 1098.367133][T24594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1098.377224][T24594] Call Trace: [ 1098.380512][T24594] [ 1098.383457][T24594] dump_stack_lvl+0x3d/0x1f0 [ 1098.388100][T24594] panic+0x6f5/0x7a0 [ 1098.392051][T24594] ? __pfx_panic+0x10/0x10 [ 1098.396531][T24594] ? show_trace_log_lvl+0x363/0x500 [ 1098.401822][T24594] ? skb_checksum_help+0x536/0x750 [ 1098.406992][T24594] check_panic_on_warn+0xab/0xb0 [ 1098.411986][T24594] __warn+0xf1/0x3c0 [ 1098.415938][T24594] ? skb_checksum_help+0x536/0x750 [ 1098.421116][T24594] report_bug+0x3c0/0x580 [ 1098.425514][T24594] handle_bug+0x3d/0x70 [ 1098.429726][T24594] exc_invalid_op+0x17/0x50 [ 1098.434282][T24594] asm_exc_invalid_op+0x1a/0x20 [ 1098.439207][T24594] RIP: 0010:skb_checksum_help+0x536/0x750 [ 1098.444987][T24594] Code: 89 e8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 00 02 00 00 44 89 e2 2b 53 74 44 89 ee 48 c7 c7 40 0f 52 8c e8 ab 0d 8a f8 90 <0f> 0b 90 90 e9 42 ff ff ff e8 7c c7 c7 f8 44 0f b6 25 a0 7b 08 07 [ 1098.464657][T24594] RSP: 0018:ffffc9000303ef28 EFLAGS: 00010286 [ 1098.470780][T24594] RAX: 0000000000000000 RBX: ffff8880787488c0 RCX: ffffc90009b1d000 [ 1098.478801][T24594] RDX: 0000000000040000 RSI: ffffffff81504576 RDI: 0000000000000001 [ 1098.486906][T24594] RBP: ffff888078748934 R08: 0000000000000001 R09: 0000000000000000 [ 1098.494925][T24594] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000667 [ 1098.502959][T24594] R13: 0000000000000667 R14: ffff888078748930 R15: 000000000000070f [ 1098.510983][T24594] ? __warn_printk+0x1a6/0x350 [ 1098.515848][T24594] ? skb_checksum_help+0x535/0x750 [ 1098.521119][T24594] ip_do_fragment+0xa1e/0x18b0 [ 1098.525962][T24594] ? __pfx_ip_finish_output2+0x10/0x10 [ 1098.531523][T24594] ? __pfx_ip_do_fragment+0x10/0x10 [ 1098.536821][T24594] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.542111][T24594] ? kmem_cache_free+0x12f/0x3a0 [ 1098.547113][T24594] ? skb_release_data+0x761/0x980 [ 1098.552216][T24594] ? kfree_skbmem+0x10e/0x200 [ 1098.557023][T24594] ip_fragment.constprop.0+0x161/0x230 [ 1098.562559][T24594] __ip_finish_output+0x5af/0x950 [ 1098.567667][T24594] ip_finish_output+0x31/0x310 [ 1098.572504][T24594] ip_output+0x13b/0x2a0 [ 1098.576872][T24594] ? __pfx_ip_output+0x10/0x10 [ 1098.581890][T24594] ip_local_out+0x33e/0x4a0 [ 1098.586471][T24594] iptunnel_xmit+0x5b4/0x9b0 [ 1098.591140][T24594] ip_tunnel_xmit+0x1e82/0x33f0 [ 1098.596067][T24594] ? tcp_gso_segment+0x10/0x1850 [ 1098.601078][T24594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1098.607053][T24594] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1098.612320][T24594] ? skb_mac_gso_segment+0x2e5/0x650 [ 1098.617670][T24594] ? __pfx_lock_release+0x10/0x10 [ 1098.622746][T24594] __gre_xmit+0x89d/0xbd0 [ 1098.627136][T24594] ? __pfx___gre_xmit+0x10/0x10 [ 1098.632043][T24594] ? __pfx_inet_gso_segment+0x10/0x10 [ 1098.637533][T24594] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 1098.643229][T24594] ? lock_acquire+0x1b1/0x560 [ 1098.648030][T24594] ipgre_xmit+0x578/0xb30 [ 1098.652433][T24594] dev_hard_start_xmit+0x143/0x790 [ 1098.657610][T24594] __dev_queue_xmit+0x7c7/0x4300 [ 1098.662612][T24594] ? __might_fault+0xe3/0x190 [ 1098.667451][T24594] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1098.672886][T24594] ? _copy_from_iter+0x15e/0x1140 [ 1098.677988][T24594] ? __pfx__copy_from_iter+0x10/0x10 [ 1098.683340][T24594] ? skb_partial_csum_set+0x202/0x3a0 [ 1098.688778][T24594] ? __pfx_virtio_net_hdr_to_skb.constprop.0+0x10/0x10 [ 1098.695700][T24594] packet_xmit+0x23e/0x360 [ 1098.700200][T24594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1098.706164][T24594] packet_sendmsg+0x268f/0x53a0 [ 1098.711079][T24594] ? lockdep_register_key+0x170/0x210 [ 1098.716519][T24594] ? sock_has_perm+0x25a/0x2f0 [ 1098.721385][T24594] ? __pfx_sock_has_perm+0x10/0x10 [ 1098.726562][T24594] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1098.733403][T24594] ? __might_fault+0x13b/0x190 [ 1098.738240][T24594] ? __pfx_packet_sendmsg+0x10/0x10 [ 1098.743502][T24594] ? __import_iovec+0x1fd/0x6e0 [ 1098.748448][T24594] ? plist_check_prev_next+0x70/0x1a0 [ 1098.753924][T24594] ____sys_sendmsg+0xab5/0xc90 [ 1098.758752][T24594] ? copy_msghdr_from_user+0x10b/0x160 [ 1098.764285][T24594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1098.769650][T24594] ? __pfx___futex_wait+0x10/0x10 [ 1098.774752][T24594] ? __pfx___lock_acquire+0x10/0x10 [ 1098.780016][T24594] ___sys_sendmsg+0x135/0x1e0 [ 1098.784774][T24594] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.790074][T24594] ? __fget_light+0x173/0x210 [ 1098.794814][T24594] __sys_sendmsg+0x117/0x1f0 [ 1098.799474][T24594] ? __pfx___sys_sendmsg+0x10/0x10 [ 1098.804653][T24594] ? __x64_sys_futex+0x1e1/0x4c0 [ 1098.809671][T24594] do_syscall_64+0xcd/0x250 [ 1098.814229][T24594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.820199][T24594] RIP: 0033:0x7f81baf75a99 [ 1098.824649][T24594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.844412][T24594] RSP: 002b:00007f81bbdcd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.852892][T24594] RAX: ffffffffffffffda RBX: 00007f81bb103f60 RCX: 00007f81baf75a99 [ 1098.860919][T24594] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 1098.869061][T24594] RBP: 00007f81bafe4e5d R08: 0000000000000000 R09: 0000000000000000 [ 1098.877079][T24594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.885096][T24594] R13: 000000000000000b R14: 00007f81bb103f60 R15: 00007ffcaa353c08 [ 1098.893123][T24594] [ 1098.896470][T24594] Kernel Offset: disabled [ 1098.900895][T24594] Rebooting in 86400 seconds..