last executing test programs: 18.562725819s ago: executing program 1 (id=2553): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) close_range(r0, r0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 18.25641834s ago: executing program 1 (id=2554): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') pread64(r0, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000003380)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x5}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r3}) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x0, &(0x7f00000007c0)="b847a6c2271871006c86237fd3eeef04700475945fa510704d86846e651eaa316c163b9c44b2fa7adba8ca06cb4b459c9b352f6981d9dddf984c262fce72", 0x3e, &(0x7f0000000480), &(0x7f0000000640), &(0x7f0000002240)="24f5e777c834ce95ed1fe8052979e96f32cdc72183024b8ac0b6936535e4ff463216e2cebeda93c73693cfd6e819454ebd6acc1af4d1354502c6a4958162d7334d75666222af267655cf419fada84ebb972282aa93fc088f010a453dff1d94d794487df59d0dcd017dbfeb4f53a39cf9f900375a535bec99ef7c3ff2b3c46b2bf301830ffa402a79059f6baa153df4eaeaae176ca53a893812bb1b9705a9d5cecb864297c30312b011c9e866d9e0cc8a2fea80163ee94d01b325b0968de6b51e16f9f268b79db0384e600f38ec59e2f84dae9e9ba9e54048edf1f56a68b64070d222fb2ae3e7bd6e36b1ac11d84b8cab5394786c6caf2562e34bb5e2b32e72ddf9f604d6e9322ac671b57e7fb8a0f3520fc8fd88a3187f8e9c6b2eda3e6b5d940a89f7b187376e38e02919dc38a14583a9345b9c667b0bd9e9051be18a7deb100ccab29a316e66e488f6e9518b86fd8e9ec9db58c421fa668897c3566849bf69efd845e63e8db9a91a353c796b477b61b7541c2838703e444b9ec0a3f7b0b0b506a55eed59f6f11e3b83431460558c9f1435f107d80e0e284ad86b5c61b2dac0aea87f02618c7813323309b19ca9243dbda5a778db5de9528ef4ba89dbd262afe79e70b8597ea324f06a879b84886af61a6984aaaf5e5fd851bf617bbf10d9b6e63cb20ea01f7aa0edfe6143f0ec24a68f7c5468411f840121312c88baa25158f7993013a29b19a73bc12b4e2fd95e404f09a69b1c85a359e856a0619417069514dc00d5d50231cf092f2059c10d78f87422ecb32309333431250b2f1ffe345e96d690481900a1f6b41f2f27f838b607bf69025086006ed22c0b2ca7c5166621848640a48c93b7e885709cedd052b9f137b7fac9e889177960ae9b715d6b8dad789a22da02cc3874d81a74a9bc3cfe6d20d3bf53be8e3bf3e4df18c5773888da147a9713b7ff8563f78c771905af6d71e3305313ff6a1b7a1d787008cf3081b9853b9a4486a95e671179440d2d77cc5bb01ef9c414461792a0305c3b5ff0b35df79d797febdad86577bc6a77b9b4fac364fea958482a578d5c099567ecc5bbef2cd113176b53d096cb09980569862c804277af6efdef9ccdcceb57b834e4f8753a42725e38cdbef1baf88e8dba770f5343b278aabb164b1ec1fe99880f017e4a1b704dcf9be17769e5de37e37aaba988f30e43fdf83e6285426a01e3556a15b0fdc340eb82b1c6df88aa8be447b86976e9810ee3bd0b225453b44bdb592de6c37a2e68810157c2f8a2798bd313a2ef36e1d43789560ea5217af3fbff26a84d0b38d36df1c22572c4eace31a44c74c627a3f0d25c35b1660dfbbbe3e062c4185c4a291792a0b91435af59f1dc504a92380da164d2b4c4edaa05d21d3bbddd2dd3010e0c52ba06645316e445bd90ec8fc892e9a5528ef902233de319cb299374a96ce3010ae4c13e8ac165ba311111027994d44aef7555a55e8b859373d8cb35141fb33009eda0148d375486db419edb12dfbeed22bc97a50fb11c744e9d932df68ff6c119c936b7391d23428a7533a80dc76fd88eef1fe2989b1166f285cb04a1212322e59811e69e466db831bdb3aa65baa35e5c71260aaf35290c1ffb4e4d7e53ea57e3e6eedb2b84740d0ce8d1265be666e28c8a348bf31eaea9aad24701850d721c508af8045a40a91af337ddaf0c743a23f4f130f89fcf1675f7bbb3964bade4955eefed9aec7e97a8b3331bb54f1344f3ff1cb83274e44bcb4e47ddf80bd22f7c669eed39c5c47a7bd978bc4b4da6c162cbe1f5f949332fa9bcf519c6a4422afd5c51135dfab0b5fc1e7a970457dac0f60175ff3c5b03316e8a6292ca88b52e18d098d4bcb6d7cf92c0eaa427e5321977454f0433b5bd948fe6ccf5fcd3b0583ed8fd95fd1dcc1b932d02985791f5394e0a4321c41342b28b2e503122d5dedb8744e1bfb6aea23317d078b24b4618d0921fd535deb38a9d26ed16b529e4a72c0297292f17c5a7c4b6c6960ba19130cb9413fa320d9c2a1dfc1d0e661c41cb33367d6d029e71d2559123567bcff493516f158fec7d47c5428d705d4d8eadd0b425a6a6b70f81495afabdaf242980cdbbc8526a1141eda0c97301e119df307e7cc5f457deb0d5ee6f1fdef13614dadf0ab9d375440eb3b9c079a282c5c7832114b224f054bae41764d3f530bc406a951486330eb72158b593965ee293f44e80f15297ba8935ebb5f40dbed5f5cbd7291901cd94857ec288f50b509e187729f43f6c314bb4584a9902521fd25cbd8fbc55aaccd2ffb93b00e5e7bdc07741c475f74432cc81ac8579fde49d4053abb7a928cafc99871d413336a6f09baec66bf949da7fc0e9c216071179678cf1c708a3954ebf2fcf3fc8e11c12535ac3023187f2e55d4ab16b2ac06ca87250b674e4b1a3c2269d509b3983394717ee5b1cf118b5360827758bc3b47e744a2408b348512f1197ccb16744aa5679f60bfda27d6a259faf41453dc662aed65bd30874c59760095029e3d2ce84971af126f2bc214dfb5a43cc7a9f4f5dd4b4b17f32d13cbd4408a354e9f389fa8d5b8ea8c708ed4f2a737620a8a3a0f05e47c97a98e3079273f16e50edfd19378143559bce009e07a680a0bace4b433c04ce840de9661eea570a4d2745fd8b7942bf48389800ffb9bab2fce030fa69f1fc036154c5ce1b846cf8b93108ddafb6e788472f0adb60e5c1f962d0563ef511c5f79194c394f984718e2984f49e80ab96f7455c88c47860e16e4b542cec0ce4744915ebb155f76ad6fc287e0ec5aedc4b9bf8a4738b52bf39e7a4e553fe3e6d9a09c0ca3aa135c2abd50c3d06291561da6b8aff4dec5b7553c63ac7e3760f09611c1001ac8fd349fe3899e14ee267e45fcbe5c2f04940f9cdde7752c854a42416ba716cf6e74f72bc11e93049c16492ea4412ff0edfa2f1e3ebae5b646a3de4f54a0bb3d247d5a9177cdd8862964469636029e259c961845868484d00c3ec88565f348cb0a8dfa8c17af5e5c8810403b5a65149d46c87329c7bfaa2e12915f04d38ef047903951440edc0b30188affd875be6f448134f0dd604b24266f393a4c4a55d3cfbe2057ae78e8ee84e18c7ea1d1695a90cec8938f0a2dadddd3e3883feb6c9a11a1881cd0aae404b0d67ecf1cb31098c2d75caeeae08c8aa2a933eabc1e8db4b4f2a357b8935812b03953174138ba56f91a59b7f9c2b95f6001c3026da42f77bc7558ff0c312f50906ac572b1bb577d303dd17c52e5c824b4d78a2d48cd11c9c36d4fbe4bcf37cc7ee02d7dd6b2ea9cc89e70005a9c5385fbb0d75e20634681ab25630d1027ab75fc2a915935eeb55095650b1fa48c7bd23c628f8f340bf3431571f60c28ea8922b1fce4783a347862748d2f5db0204466f8418ded9b86726831b112acb3a40d0e4956b23a24cdce1b70d6652bf87b70e6857a1790e4450d67fd850a6c3fe45549f40802b14e71a412b3d99e9abfb87495c339255cbb9a1237f0f2bd6e0423eca1fdb68b87b4246ee62a219d13b7f068e70457759e9f52c85ce5b48fa36e7683ad088da4a25330818e626b010f674ec06d76af9a6f76ba41f68038a2a0c0dc6af899581c8c61e209f80403fb5715e0f6622f51391cb7430a12928fb48edc257db9110fb55ee6f85768f28899334cb60d9cfc62c6f72e62cf8e36dbfaaabdab6033e88d16e504e9034b6070ecb83973c419bd5d2b277b06eec02992a99b033e2a90c052d0c57bf2681247a98192da005fb5b80c3f25d3e14b47c0f9845b2edec359030e9abc91dca663462bd020db6e99c344fd34f18ed5890b4fee2106a3c654070fe9c0bdc6e6d332f4839d5fe2c479254622c0981741ca7f1d41d41aa26f06d12dd38960b710aeaf8eb975d735b3de0ab48f15905b4324b6765382d122840ba90f9f574e045dc21cee2aa55d03a99aba1c41b7e0fcb914413c82b2bf78502d455ef31e3c30e014e2c548cc31bafe8a48dc8cd05c77ce7c2b998c10dc01f9f5b748ae2055cfd7ebdce9ff3eaf7f68b0206244fa716d64bd0c5ba5d041d694c8cdc65f8a082fd8c9b8989093e46d66fac035bb9f84993450cfb0b96fe8f958d4648482dfdce2c2842f0e0b0f0c70cb62ef685a8029929dbc2b7f9767cd5211dcce95d58a15e8be7e03d640f9def77254cf19da6ccb1fe86e5198b938e04886e495edd6467ae044362e604afdd5831fa880699f68f4c9ca39e8b4fa8fc63a7bf73b223aab0acc8fa44f0c3c9f844af6c60f12abc114e72978e0609166398b42c2176176c93a6e295e958ceb7f7b5ca36a812327304b9311b5bf91e896e54168e39eb21ef2f662a0dbc82acb1d7267fce5e08e744fc9d6531805e572b6d055979077ff58049470e6b4964d26afd8dc7ae10a1ece3ccfb89834d1817992ad160305b8ae06f75db1fee31f776ca5479097024f6d60bef0c271df49e14b3154c0c86f94285247f166a32c64c3ac1085d9ffcaf3c5cd9f972fece516aec299eb21ee7473ef2da96721e9f6bea418caa4836faed9315ccca888a84cb4efd0ebb77a57a63d4c20cf71a42323dec2757172641ca0a1f3090dc181df045fb109e60113bdb078e34a54e4e721dc7192368d69d68a21af3761607eec07d765388097ce531e4fc91dad5862f19d8ccf1c40b241a825060704a678580fe724ae83bde21341b0aa7a6af3d507327654ba433f3889b9ba9e39c182a71a383d1fe909fee5cfd17ece03c407d4f6da84f296cf5b59fc8433a2550704f86fd7a59d3ae9c007c26cd823e0a9660c311d7ab512fc36d6a646b0bd220a55f7e406c6402f923a1c2d97cddc51328bacffd0e764a492bd7cec434b013c10f8aebfcfe2cec5e0e488127fcfb71391e6135f6f0bc9cf05ed620943d20ee6c8e9af16dbdee65264845aa1494c3d7528bb64fc814250e54573b5492e7527ebe8dbb558a604e2e488326e7adb38713524c2e5e08405fe126ab00656cc769d18c37363f772a35d5c090a03ef8ba358b774b177592d6a0bbda6326f8f30b7dd59a38a78784b6fef257845210ac88cbaf3ed5b11589c360594f981937532fa410409d3e8aec16c6f09a4d2f572f5a0e5b0646c9d7399ec7c2c25a97320b6a78de0bf952ccc20536563282584d54f564b03cbd04f5689364b2a26694b6465d7595707d9b1af52c33a570b932c181f3a4f7f410d5c6a94d29e6afabfac742a7dbe5ac582457342f8fd4a17598dd283e3b30094259d2f9684890bfc80bd549d50d9c5d1cea5cbe7a3dd4b38a88a880c599abcedb0375105cefe6dbf09cbfb384b9baad5e7ac377e609c422076c886119e19404e20dd2bfbd269b69098b8386aa62c36f2b45a05cd691cacd4f4ab384540fa8c466cda85d17961f164d3ae875f2a7c8a14416a0ff16a1eeb8e81e9e9d6e6e5298a62fc1c9b7f3ea19ae9c78517792eae0ceb1c9327a095b6aedf82a732e363344e6ec8dfc09dde0140323ccc0d27402d21d4db897b7141b4bccd67d63ef6709b9e17f81e59bd2271a3ea672cfa455d5faa34285f4dbdd4cee8188c9d151041c44aecd0e415a78d8d86441cd5d2ad7400f1e8179497a4cba859d07f8") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.301334943s ago: executing program 1 (id=2557): bpf$PROG_LOAD(0x5, 0x0, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r0, 0x7, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs$pagemap(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000003c0)="240000001e005f0214ffffffffffff1400490000b8aa232baf000000080008000d000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000470000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xfff}, 0xffffffffffffff4e) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\x1b\x00m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x76, &(0x7f0000000280)={r8}, 0x8) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r11 = ioctl$UDMABUF_CREATE(r10, 0x40187542, &(0x7f0000000300)={r6, 0x0, 0x0, 0x4000}) fcntl$dupfd(r11, 0x0, r11) 14.683120811s ago: executing program 3 (id=2563): getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000640), 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) utimes(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000004900), 0x4) fcntl$dupfd(r3, 0x406, r2) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r2, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x0, @pix_mp={0x0, 0x0, 0xb5315258}}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x47, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000002000010000000000000000000a000000000000000000000005001600000000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="3f6946cfcadc2f7f7f51bc3f2838e862ac42243a9741c6ceac393e8c45cabf703d1bb2ff7467"], 0x30}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\xbd\x11\x03\x93\xa9\x00\x00\b\xe3r\v\xee\xa2\x01\xc1\x96I\xdf\xed\r\xccoW\xc3\x88\xc6\xe9\xc6\xab\xf9\xd9\xb9K:\xb5\xcdZ\xbc\xc3\x01\x1e\xdaD\xa4\xd2v \xd8Y\x94\xd8]mTar\xee\x85\xed\xfd\x1f\x1e[\xe7u>\x94\x16\x89\x8cv\xe4\x89\xf3\n\xb8\x1f\x89\xfc\"\x1a\xb2}\xa5;7\x17\x8d\xff\xc1o\xf0,\x90~<\x03S\xe2\x9f-\x11\x93\r?\xf4|\xe8_\xc5NK\xa6\xfa\x02\xc4W\x17\x96\xe7Z\x18\xb1\x93\xe8\x1c)%J\x98 \x9f[\xb6|\xf1s|x\xb9\f\xa3[\xe3\xb7\x9b5\x92\xeb\x93|d\xc7y\x80\xe2\xcf\xa53\x067\xecH#\xe3\xb1\xeaM+r\xb4\xb4V]\x93[~\xb0\xa9:\xf9M+\xa9\xdd}[\xda\xbd\xea\x86^\xd6\xd0\x8b\xb5q\x8e\x8bN\xcc\x01\x84\xab\xf3j\x1a\xad\xa2a\xd9\xf8\x9f\xe2va\xa4yG\xaa\x01\xeb\xf6\xe0)\xec') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001300010000000000000000000000000030e4d745cb19f056162b619644132e4b1d500f3d43fd", @ANYRESOCT=r1, @ANYBLOB="0000000000000000180016801400018010000600faffffff000000000000000014000300626f6e645f736c6176655f3100"], 0x4c}}, 0x800) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x26, 0x0, 0x0) 12.565373459s ago: executing program 3 (id=2572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 10.130249421s ago: executing program 1 (id=2580): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5d, 0x35, 0xb9, 0x40, 0x582, 0x8d, 0x7aac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x0, 0x0, 0x95, 0x9e, 0xc8}}]}}]}}, 0x0) 9.657728482s ago: executing program 4 (id=2582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 8.186978767s ago: executing program 1 (id=2583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/consoles\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r7, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000140)) 8.186591323s ago: executing program 2 (id=2584): creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) ftruncate(r0, 0x7fff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 8.18610087s ago: executing program 3 (id=2585): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x40) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000340)={0x28, 0x0, r8, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) r10 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r10, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getrlimit(0x7, &(0x7f00000003c0)) close(r7) 8.185830556s ago: executing program 4 (id=2586): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1b, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000180)={0x2, 0xa934}) unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x20, 0x10100, 0x7}, &(0x7f0000000140), &(0x7f0000000100)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) syz_open_procfs$namespace(0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb4") bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0x8}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) io_setup(0x6, &(0x7f0000003b80)=0x0) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000003bc0)="c6", 0x1}]) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, 0x0, 0x0) 8.174443843s ago: executing program 0 (id=2587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='9p_protocol_dump\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}]}}) 7.961560627s ago: executing program 2 (id=2588): r0 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 6.906533782s ago: executing program 3 (id=2589): mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x2040000) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20}, 0xfdef) r1 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x20942, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f000000a0c0)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x8, @mcast2, 0x9}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000d00)=[@rthdrdstopts={{0xe38, 0x29, 0x37, {0x32, 0x1c3, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @remote}, @generic={0xf6, 0xe00, "961f01a0594a70248882e6c1b9b00f3760d3380d3ed53e04e32e01e77166a23666774ee938fe2015023c08b9a6c15b4f27ff4cc64f0a003066a6b2e4e0612086020c3d55c6d3ed004ef07cc513b018d65d21928b9aceeb9d0c0c87736fe755283d8bc32171ed8d21ee8de39cd480bc552104792184d4c7bf0263f00b19354d92053d8afc97d4a84c37007bada0e9427c254c59f5cb9e61327f2daef7a47dac9bd0c91580f011b086804f9a34f3abbf34f97eca61243447ed37482786d2d3280fe456af7d5dcc112eb1e805afc446498a7cc4fcd1d64792ae8a80f2b63f364d85aa8bd0fef4880cf01fafd26748a6c18b3a69604fb933cbddb24f5f589c6cfdcb4cf353835d087b28c317d18fe6e23d025603be946e49a1d4998713f003e7ab2b8b03d316bc53600c912c650aaa57f12c4569e7f5fd0332289c059cfa33989668f6f34b5548348f9534f6e8dc9566a4e83adf6e6fcfc0eb931232c229d81575d2d8611d1f67fa77cda5bc19e8456f4911f3b5c4b1c01030cf1f84bbc58346789fe32a1579b6b94ea2ceaa246a80d537a23a4e63333cc3ef75543caa0540e8d18f0222f0e6116b7f2221bd540ad5641d79ae96ce221975a35ef0786966a6a64bc0d0d565a1f57701057d351699b48c146ff01479b791527f402f49e555565bb0930fbfc8c1689e768ceee3bd2aab93257a930c314dfa5ef17ae0c06eb964c8362dbd35a3a527dc6fabfa5b7796f2be52e41c9b900227b596b81a1aa88b302ca2f0ae19cd826876bfe592cb0378bc04ae153ede2562e74480a4d2e8d35ef5f2f26900ba8dfbe92deb55482acbc811030d74770ad9c4856128b4632295ccaa7a7c3b083c80c8ba40e47415f8f37cd9e74dd6a6106f5cf5a5fe5afba7a38b4fe8a5b089419ffcafe125330b283d6186de95a09f30f16483b7eab448808f04cca05c39af78a329072ac33e66d001bdb558bf2eb194ad8bb4fc088c2ea830c4f12a8c5a0472b83f0fa69691ecd3153de762fc6dc44af6e976bc3603696d4030ce021f1aac7a10108c399fb641aaf6863f99d7d5df69b49460c9d1f6ba9cda62a7582ef643a88c215eabe571c97bf4616523fd30ac8797c7da6ecaa6f421e14a691acd373bcb18edce39e448a020c96cd179b71eb5abeaa4c9fa244a66858243af098a59a00edd19eaf334a053a44f1b05b67e2dd2600a472eb50a9da5a88268350fcf5968cb8d37cc018aebcc34b27baee87dd33fc6d1ee115b147dfc28e9f7638413d8da79272bb056b2908761b24de34015eb1970379c00e20ac238a82271fa1c478c94ea853a99134c1eab315c246a708897191de873e9f3bdd67129f9d9d32a2b9890ceb415862ccaad48489176333b3c7f0fc82379504076b615a79898835f02df98dac3ada3c45f04ae8dd7c10505a45a680fae4dd37baef3f2ecaf376f1029daf7d04fc6ffdfebf2b30ea7afc7c4d1dd8c12cba696020ad5ea33e19b08b1e3cd0611298c3edc7347db0bbb96d67e8abe4bb483a9404d7a1391867620c7810dc6de7d6d52434087122d24af2dd7d5841e66d15bd878dc6e1560c25eb3e43ce43b63760631239e6004f91c3e742688f3ebf5f8cdb4ed63b9a40574bfe2a851d92bec0c493964d141a749ffa1a5fc129a51b700db0e7030fa84785bc0a840d5aa15a6a76b20c9ec3753ec047134750791bf966eae0b9bc1c7b04141fd079fe7ab90d399e6a2b3ce67d2cf64a5d3c12001d1a8002baaba8486c555ecd4e05ed9ebc5c1afc5d25a757382de53091f771900a1108a3f47648d79a8843d92a361613f54d20c39b57797b915c4f4a964902e3fda6ea55c04c3076c1a9ae4d398da531ed64f4551da4d2c93f6a8ff70c8fe041ea818fcfaa04975dfdcb51c3b8999f69837395cc50fe3e004bbbd880cb5ba9f57ed2f9311cd1b143741af0786568506cbc7c7f2f2ba845d4e38905524c3d7e16d90c3fa3de09fed455525da66a88ff4bf2fb70ee69bedd1ab5ac5cfe1915c5f708ed7d6b11333891ba72ccb4250af866c3a5f9519c602a5d04e29c877c55ebe037d75b0ee9ad5d489dcfb6f6ca6434461f98a23a57b0d25ad94e5f3bcacf01cbaea57a488f8fec84c63fbb85c0858d5f9db4bd02bdb006d150e27083ab72173c50436f94cc6b56438ac2a01c5033cbfa5958b95c4d85ab1ac25d9e162fd14eaf85971bb8022a8356e2a3ebecd7d8fbcc6cfa923bae2308db5b5632c5a07d316d32e9f73bea11ac3e2a99e4198f32800e4b782dba99d65a8798e6a8ddd408f3e500147e7a9998b91d3f7a86cc07cc5e4794fbe7f5910ad0706ea5056b74d1a57e358d9929889bc8f33396b71f02d74baaf73a2ed867cbd12342160e1713d2619b30ae43ab826e968e43de03bf0a91369264e0b4529f453bb9b49cbdbf9192633a4d20cbb6e92a271ba3110887c5b0243f966f37ce1123836d882f93ae4932f372f57f258d892dec7cab308a4d565fdc948a7f7a1ddecc93f7095639c5e581bf226b0db26df9c0cfbf18e69e7b07a8dcc896baca21915b2edb725b09b353a0acd7e3c033aa1609a2261ed66d6e801e4c07accf2585e34f110073d8fe4918f9e908d6fcfd4cd7567b7530aa1370db9e1bfdc95dd654519178d45c1fda760100d29a1f441c2220e2bde50feccfc313fa2cf92230e809d213045a798eb52d150aa05bee8f41a831d181922a1cf23ee91a1392d339d2b6ce5b55086db39db3aee319363c76f9d8dcff19cefea3d9b6a0a33bf51ec66a94a9b06ed24a1c5edf0aa486b5656e21d1245098bfc4a5051317e1ff1fa6bc4ff75f2f0f1a94a86354b533d6fd4bd60315d80ff7d8bfe5d60e27388ee66e665d8f4c6638a219082ea3632c56d571f7da9b41175e5e79c61a5ed0ddf872d8646f5ede141dd491a57e0ad0f389049ff1b9b3cefe93bcab3941d42787e6cc70960a8b5af8648b646e02383d81d9fabd2707a505cfd3d7403f6ecedea64976cd940fbb0cde27cc57a13dbef2f2ca7c3128e292bfb7e503a6fc2c2aa9ccfb2be2c8a069a7dc0d7032adf2ef945299b2804de8ea345569f70e556b9cf600c71d5680caffcb4aacdcf86cd292bc2a87567cda65bcd86a898f9241dd1cf63ee164ae6a3193bf2776b2b59771bdcfa4884c198d41042d52ddae4cc0e8569b68ec2ba14d53c2ec04d0f764ca1079f4cd60349d4fd5d883181232a15bc7762c00eede276aae7ad1a93349eebdfce9d098d3bf94b211efedd2e47c702cb72934a9bebbc6364a69d08cc112eb2785bbf134083593941b4879053fb0e5aa3d33baf5232f63c7bfdad7425c2bec3ed78b071b0aec3b961383a947650fbbfebb68880a26546a2734e671a9c6dd3d79f544508dc8b4847001f98bcc8d40b2e62c3567cfbb61270b4a83fdde83575ea0bf7fdb56a4defc1662c6635a022c56900c830de05a4671b5c3cc394565edd00c9e8486df19ae1a53cd925636bfdd870bedbe30d81850b4532ec74e414ee5af7cc7ee1dc8c900b8ca8c62866d1c869f756a85b7ecadaa7cf187131731bd472cf1edfd614bb4dabaf2e585946da6fb14570909941850336e7ff6a433e8108ff63f1f665945472b5521437b69fb7821edc874ad9d1c8de2860f46bb905ca52e98defbc1ddcb5f2419e8077eca693c95c7f04a9dadf043bee1e39b7a67881fc46958fee27791f27f0576ed87eadf2b0c01c23cfec395f1794299156ff9e1e97e07ea922e94dedf985c44b2860ddff8309357d8d6124900a128e3ded01d99912ef620e0fd28f0c44b52e0bf1972919b2e90a084d707b2232574f6a1cdbec7d5669a68c84a14d7db076d896ac99c0d1ca61d3edb7d2ad055d7321a1eda707df3177eb4cad0a10b445979a6e5de7f2344f5e1cba771ab18f4abd96924343e83ed5f249264fed841af2df865ebbb787128cbac888ed3fe38690b6b85f2a0d0313a9f67f6f9c5242b6edd0dd42ccf0ebd77b2c1c35c15954aa9f58586b4f2a2e0ae2dc96f8634422558a76fc703741e7dfaf1ef7135972ac9f700616daae3839b60915fd87a4f6b0e34e10ec7bc1e8289bab12020cf2af3566019e9a3e1bf311e2919c9feac0d979755962b54790332ee5e699acf03d6c8439aa5cea6be9302dee2e3681903ca0a2a8ea445442c57d54d5a86d92354abf25c20381302cb966bcebd775d682b9be212ae5ecb988a5b0513d7816545d150443b3c453ea27fdc6362da5a1012832bfaf394da5744039a970dbeb60daaea22a05c6c7b64c42ae3acf28aa3a6914b72c85ff7f0c24c3f878e40a033ff311572ef328820d3bc2214f0de6ef8c84b0d15b317d6736f392848d7900ec1ab45a52a9d4c7c23203c9b7b105da3173f89a179ee6e5b62b011f93b5fbf674da323e53e20efdfc5a8f6ea2aa5cbb527f3dd6ea6e2efa4b1f356f33f512a9684e868d21e57cb41a350f56be006a309a0f03f8728603a71b53b2d1f4baaa94006d23eac491a2589db957210096fe80cf7489680e1921767b48dd615790c4f64bae3a2b6b1ca5de97087d0be93dff511b3dfd815dc3de4cb25aef09aa66586dacf399a66ff21e38be0e7e0f8743cfe91df6c0764663f23c38889e1388dac6b936da1e8e8a574fb94bdbe36141134383ca4d6fe98132374a7bf6c23ed9d7548112b442b785334eb856ce76409ee5f53b73a9cc77b3a5aba39f5ba3e85ce121d847c37a3b837f608ef188d7e03a8b6daa78d7676264625e1a5e5ca160b1aae654384e2d6fb5c82d30a24dbd44637cf3d0e9bd01822bd7fc01dc82b84a252abde9761a072b15cdf4bfb0037e607c3708bc9fe7be22e0639c6985f778dc47aad7e65db644c452c731a20074bf01fc23c58d709665872fe6e72ccf9a298f62e876ae9fc687e3dbbbb8917d92238c9a9046cd0b4836de221bfff4ee83843ff411d8ab631d49ef30922ae0ea4c980bfcbb48e90a4bde5a80e967789b74550e42b529b583cae7fde3ca9c9c9923f38843b5c9f5f0b86b5b2f2cff39fea01ea8df95e8ebf05d83b9a9a6f43acbab227ba496c32bf7e937fb76a65d34a40f571cf1f0226e51c806e17cf6586ff78a82"}, @ra={0x5, 0x2, 0x6}]}}}, @dstopts={{0x98, 0x29, 0x37, {0x16, 0xf, '\x00', [@ra, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x4}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x1, 0x6, 0x0, 0x3]}}]}}}], 0xed0}}, {{&(0x7f0000001f80)={0xa, 0x4e21, 0x0, @remote, 0x200}, 0x1c, &(0x7f00000033c0)=[{0x0}, {&(0x7f0000002200)="6f00c6ed258127ac03afa71078424cfaef8e2cfbd3eb6c758ee16ae6bcfa4a2b583b6512c3a51dbe2eef32454ad5156bfb76170eb3fc524242bbe368e5ce8996b8cb2633dc1702", 0x47}, {&(0x7f0000002280)="6e8c5e74c7bfd6b4ae2d63e36ee2b42cd9f4fbff17299440672dbabb141c989dac0aa9591f8c4e624aefad3bed6b1a05992f89be7a95dcc57d6b6c7ade5e360b9c010fa9d9254728a280107948d85b10497d6ad8056e3aae193071c39131371ef29c60083632d816f1021108e7a89a07e1ad505c07f6236a6749456915b5e4b57a21", 0x82}, {&(0x7f0000002340)="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", 0x3e0}], 0x4, &(0x7f00000004c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5362}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x6, 0x6, 0x0, 0x95, 0x0, [@loopback, @loopback, @loopback]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x0, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x38}, @loopback, @private2, @ipv4={'\x00', '\xff\xff', @loopback}]}}}], 0xf0}}, {{&(0x7f0000003500)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000004640)=[{&(0x7f0000003540)}, {&(0x7f0000004540)}, {&(0x7f0000004580)="c648add279a497fb166cead26da4d3b1958c270a81c88a3a0b729ee4e624ffc4120787e1a14be0ff0f75fe7bbf09d2f8c4a9207052eab30e3f33d4f01b71f813d10ef6783bfa5e9e9f5eab381d434f29d082cd99174d9c72d3531f174344204de0b7fd160b4f275f26a163ec0fe6e0618705baf3cf5828c4bc1f323251e9941d6b1c46dc80ebe735bb17dd87ceb933e34c69e302f6fa000b9bc63c14e5710f", 0x9f}], 0x3, &(0x7f0000004680)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008000)=[{0x0}, {&(0x7f0000007cc0)}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009940)=[@flowinfo={{0x14}}, @flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dstopts={{0x58, 0x29, 0x37, {0x2b, 0x7, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xf, 0x100, [0x7, 0x0]}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @loopback}]}}}], 0xa0}}, {{&(0x7f0000009a40)={0xa, 0x2, 0xd82, @local}, 0x1c, &(0x7f0000009f40)=[{0x0}, {&(0x7f0000009c00)="eb8fddc544198441f2f2479f0e9f8b141d6d78400c16581f60", 0x19}, {&(0x7f0000009cc0)}, {&(0x7f0000009dc0)="c6882dedb92f614b2067d95d438925d65643189073a7070643e70482ebe2c37d8ce57ffcb79ab8be2b9fc881a6f2da2b8df33f7a6e21c4dec43eba2c11d32884c4e8831aa38557b889718bc048caa6105f1c1310c4f27855ae7e46ece89f21e3efc25466abc0875c6a3712720302726cc0ae04a8dcbc2569bb5cdb41564297efc8a0c960875374abb8dee612fd3ba48383582a0bea080e7d435b58169e", 0x9d}, {&(0x7f0000009e80)}], 0x5, &(0x7f0000009fc0)=ANY=[@ANYBLOB], 0xc8}}], 0x7, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000550000007d7bf4e5ce0d212a0139a91fdac939ada39c06badfaf8a6949"], &(0x7f0000000340)=0x79) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x0, &(0x7f0000000240)='v\x88)\xe7\x04j\xa9\x92\xe1\xa2M\xefwMDW\xf7c\xa8\xbd\x81\x17t\x7f\xab\xd5H\x1b>MYF\xcf\x17\xed@\xd4(\xc4>\xac\xd2\x8dRY\x06z\xa2\a\nRml\x04\xdc\xe2\xd3\xba\xa9\x1dnL\xa0\x1e\x91\xf1o\x11/qf\x86E\xf9E9=\xd7\x01\xf0\x80\xaf') writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) 6.812198964s ago: executing program 2 (id=2590): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 6.669208234s ago: executing program 0 (id=2591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000a40), 0x4) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xc844) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = fsmount(r2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r6, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r6, &(0x7f0000000780)='./file1\x00') renameat2(r6, &(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file1\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) 5.629960137s ago: executing program 2 (id=2593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) 4.099132653s ago: executing program 3 (id=2594): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') pread64(r0, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000003380)=ANY=[], &(0x7f00002bf000)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="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", 0xd0b}], 0x5}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r3}) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x0, &(0x7f00000007c0)="b847a6c2271871006c86237fd3eeef04700475945fa510704d86846e651eaa316c163b9c44b2fa7adba8ca06cb4b459c9b352f6981d9dddf984c262fce72", 0x3e, &(0x7f0000000480), &(0x7f0000000640), &(0x7f0000002240)="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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.097373051s ago: executing program 0 (id=2604): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r9 = dup(r7) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000080)={0x28}, 0xfdef) listen(r6, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000240)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x7c, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1f, 0xe2, 0xcf, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @timestamp={0x3, 0xa}, @exp_fastopen={0xfe, 0x9, 0xf989, "7511e90002"}, @sack={0x5, 0x6, [0xa1be]}, @eol, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0xb, 0xf989, "d463e2c4e2da7a"}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x7, 0xf989, "0296be"}, @fastopen={0x22, 0x2}, @sack={0x5, 0x22, [0x4, 0x8, 0x3, 0xfc00, 0x28f, 0xa6e, 0x0, 0x2]}]}}}}}}}}, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910480000000000630a00ff0000000095dbcc427fb93c69291373c92f56e2d26a14be757e6d3bcec850f52f73"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r10 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x40640) readv(r10, &(0x7f0000001700)=[{&(0x7f0000000340)=""/223, 0xdf}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xe0028008}) 4.096739375s ago: executing program 4 (id=2605): prctl$PR_MCE_KILL(0x41, 0x2, 0x0) 2.880345564s ago: executing program 0 (id=2595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r1, 0xb702, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xfffffda9, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="43e6b4da4c60", 0x6, 0x4080, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0xf7, 0x6, @broadcast}, 0x14) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r7) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.879714016s ago: executing program 4 (id=2596): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000f80)={0x2020}, 0x2020) 2.744069897s ago: executing program 4 (id=2597): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/198, 0xc6}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.63491771s ago: executing program 2 (id=2598): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) 1.140301488s ago: executing program 0 (id=2599): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000001a80)) 864.340831ms ago: executing program 2 (id=2600): r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 833.503843ms ago: executing program 0 (id=2601): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000100), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xc0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x84, 0x8, 0x10, 0x92, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8000, 0x7ff, 0x2}}) 2.233049ms ago: executing program 1 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x40) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000340)={0x28, 0x0, r8, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) r10 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r10, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getrlimit(0x7, &(0x7f00000003c0)) close(r7) 627.055µs ago: executing program 3 (id=2603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x401}, 0x48) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x6e3754f8c93de59f, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) eventfd2(0x8000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0x80026101, &(0x7f0000000080)={"a0453822", 0x0, 0x0, 0x0, 0x0, 0x0, "33793e77c734c4df2a87ba315ab8da", "000100", "00007f10", "8606ba80", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000001340)={{&(0x7f000040f000/0x2000)=nil, 0x2000}}) 0s ago: executing program 4 (id=2606): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): netdevsim3: renamed from eth3 [ 1292.709734][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.718137][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.868878][T14417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.067663][ T8634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.113069][ T8634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.490950][ T11] bridge_slave_1: left allmulticast mode [ 1293.510653][ T29] audit: type=1400 audit(2000001171.751:1367): avc: denied { read } for pid=14519 comm="syz.4.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1293.570405][ T11] bridge_slave_1: left promiscuous mode [ 1293.576350][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.645488][ T11] bridge_slave_0: left allmulticast mode [ 1293.651207][ T11] bridge_slave_0: left promiscuous mode [ 1293.681129][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.898177][T14523] binder: 14516:14523 ioctl 4018620d 0 returned -22 [ 1294.616383][ T29] audit: type=1400 audit(2000001172.102:1368): avc: denied { read } for pid=14516 comm="syz.0.2170" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1294.686155][ T29] audit: type=1400 audit(2000001172.111:1369): avc: denied { open } for pid=14516 comm="syz.0.2170" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1294.725876][ T29] audit: type=1400 audit(2000001172.111:1370): avc: denied { ioctl } for pid=14516 comm="syz.0.2170" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1294.764909][ T29] audit: type=1400 audit(2000001172.120:1371): avc: denied { map } for pid=14516 comm="syz.0.2170" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1295.402834][ T29] audit: type=1326 audit(2000001173.386:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b15799f9 code=0x7ffc0000 [ 1295.573316][ T29] audit: type=1326 audit(2000001173.386:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b15799f9 code=0x7ffc0000 [ 1295.907771][ T29] audit: type=1326 audit(2000001173.395:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fc5b15799f9 code=0x7ffc0000 [ 1295.986417][ T29] audit: type=1326 audit(2000001173.395:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b15799f9 code=0x7ffc0000 [ 1296.053941][ T29] audit: type=1326 audit(2000001173.395:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14527 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5b15799f9 code=0x7ffc0000 [ 1296.160669][ T941] IPVS: starting estimator thread 0... [ 1296.286366][T14532] IPVS: using max 34 ests per chain, 81600 per kthread [ 1296.629659][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.661922][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.686027][ T11] bond0 (unregistering): Released all slaves [ 1296.961084][T14469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.016029][ T11] hsr_slave_0: left promiscuous mode [ 1297.045347][ T11] hsr_slave_1: left promiscuous mode [ 1297.089573][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.104606][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.176289][ T11] veth1_macvtap: left promiscuous mode [ 1297.181878][ T11] veth0_macvtap: left promiscuous mode [ 1297.196889][ T11] veth1_vlan: left promiscuous mode [ 1297.202631][ T11] veth0_vlan: left promiscuous mode [ 1297.341932][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1298.536633][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1298.621866][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1299.601426][T14417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.668938][T14469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.797563][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.804928][ T8635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.904563][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.911702][ T8635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.481764][T14417] veth0_vlan: entered promiscuous mode [ 1301.197461][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1301.197493][ T29] audit: type=1400 audit(2000001178.262:1405): avc: denied { name_bind } for pid=14544 comm="syz.4.2218" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1304.541570][T14417] veth1_vlan: entered promiscuous mode [ 1304.853181][T14560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2221'. [ 1304.875633][T14560] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2221'. [ 1304.887315][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2221'. [ 1304.897987][T14560] vlan0: entered allmulticast mode [ 1304.909712][T14560] veth0_vlan: entered allmulticast mode [ 1305.017154][T14417] veth0_macvtap: entered promiscuous mode [ 1305.101224][T14417] veth1_macvtap: entered promiscuous mode [ 1305.165696][T14494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1305.196169][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.209436][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.234216][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.283675][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.298178][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.315382][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.329912][T14417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1305.359203][T14494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1306.274058][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.313236][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.323387][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.367254][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.382055][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.420648][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.458371][T14417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.498607][T14494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1306.539747][T14494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1306.604525][T14469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.740450][T14417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.808775][T14417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.843380][T14417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.889201][T14417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.608150][ T3991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.638331][ T3991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.656093][T14469] veth0_vlan: entered promiscuous mode [ 1307.750698][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.770114][ T8634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.793202][ T8634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.796366][T14469] veth1_vlan: entered promiscuous mode [ 1307.869489][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.010480][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.017780][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.554715][ T29] audit: type=1400 audit(2000001185.447:1406): avc: denied { open } for pid=14576 comm="syz.2.2046" path="/dev/ptyq8" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1308.978584][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.985815][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.997862][ T29] audit: type=1400 audit(2000001185.456:1407): avc: denied { ioctl } for pid=14576 comm="syz.2.2046" path="/dev/ptyq8" dev="devtmpfs" ino=129 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1309.160336][T14469] veth0_macvtap: entered promiscuous mode [ 1310.141169][T14469] veth1_macvtap: entered promiscuous mode [ 1310.224888][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.240588][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.272748][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.286926][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.299600][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.311760][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.322449][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.344653][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.389929][T14469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.430910][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.442967][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.454216][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.465296][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.478081][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.489147][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.505655][T14469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.525120][T14469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.559318][T14469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.654883][T14469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.740860][T14469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.794389][T14469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.804756][T14469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.936282][T14592] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2227'. [ 1310.946104][T14592] 0: renamed from hsr_slave_1 (while UP) [ 1311.007938][T14592] 0: entered allmulticast mode [ 1311.014113][T14592] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1316.999886][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'. [ 1317.110744][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2228'. [ 1317.749475][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.976684][T14614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14614 comm=syz.4.2231 [ 1318.673116][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.710183][T14602] misc userio: The device must be registered before sending interrupts [ 1318.903968][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.941640][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.972412][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.295128][T14494] veth0_vlan: entered promiscuous mode [ 1320.409518][T14494] veth1_vlan: entered promiscuous mode [ 1320.525288][ T29] audit: type=1400 audit(2000001196.704:1408): avc: denied { create } for pid=14625 comm="syz.3.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1320.594946][ T29] audit: type=1400 audit(2000001196.732:1409): avc: denied { write } for pid=14625 comm="syz.3.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1320.598826][T14494] veth0_macvtap: entered promiscuous mode [ 1320.882570][T14494] veth1_macvtap: entered promiscuous mode [ 1321.810340][ T29] audit: type=1400 audit(2000001197.203:1410): avc: denied { read } for pid=14627 comm="syz.4.2236" path="socket:[54951]" dev="sockfs" ino=54951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1321.914152][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.986821][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.031468][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.096061][ T29] audit: type=1400 audit(2000001198.154:1411): avc: denied { bind } for pid=14638 comm="syz.4.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1322.120403][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.179429][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.251577][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.314557][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.365692][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.397614][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.435213][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.481621][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.527774][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.558495][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.596744][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.631645][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.650798][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.458784][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.465251][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.477000][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1323.505263][ T29] audit: type=1400 audit(2000001198.754:1412): avc: denied { write } for pid=14648 comm="syz.0.2239" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1323.550473][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.590368][ T29] audit: type=1400 audit(2000001198.754:1413): avc: denied { map } for pid=14648 comm="syz.0.2239" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1323.597223][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.636018][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.646769][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.680300][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.868574][ T29] audit: type=1400 audit(2000001198.754:1414): avc: denied { execute } for pid=14648 comm="syz.0.2239" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1323.891945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1323.930060][T14494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.999871][T14494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.070677][T14494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.786431][ T29] audit: type=1400 audit(2000001198.810:1415): avc: denied { create } for pid=14648 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1324.806148][T14494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.892706][ T29] audit: type=1400 audit(2000001198.828:1416): avc: denied { setopt } for pid=14648 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1325.163614][ T8634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.266695][ T8634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.572862][ T29] audit: type=1400 audit(2000001202.633:1417): avc: denied { setopt } for pid=14664 comm="syz.0.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1328.914574][ T29] audit: type=1400 audit(2000001204.231:1418): avc: denied { create } for pid=14667 comm="syz.2.2244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1328.995823][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.010197][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.065646][ T29] audit: type=1400 audit(2000001204.397:1419): avc: denied { ioctl } for pid=14667 comm="syz.2.2244" path="socket:[56390]" dev="sockfs" ino=56390 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1329.398174][T14685] sctp: [Deprecated]: syz.3.2250 (pid 14685) Use of int in maxseg socket option. [ 1329.398174][T14685] Use struct sctp_assoc_value instead [ 1329.835373][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2251'. [ 1333.080883][ T5223] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1333.369790][ T5223] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1333.395817][ T5223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.432280][ T5223] usb 5-1: config 0 descriptor?? [ 1333.461876][ T5223] cp210x 5-1:0.0: cp210x converter detected [ 1333.907805][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.941725][ T5223] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1333.947288][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.974060][ T5223] cp210x 5-1:0.0: querying part number failed [ 1334.006522][ T5223] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1334.052320][ T29] audit: type=1400 audit(2000001209.190:1420): avc: denied { getopt } for pid=14712 comm="syz.2.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1334.070648][T14713] 9pnet_fd: Insufficient options for proto=fd [ 1334.098273][ T29] audit: type=1400 audit(2000001209.236:1421): avc: denied { bind } for pid=14712 comm="syz.2.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1334.153248][ T29] audit: type=1400 audit(2000001209.236:1422): avc: denied { getopt } for pid=14712 comm="syz.2.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1334.449828][ T29] audit: type=1400 audit(2000001209.485:1423): avc: denied { set_context_mgr } for pid=14715 comm="syz.2.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1334.522869][ T1294] Bluetooth: (null): Invalid header checksum [ 1334.528946][ T1294] Bluetooth: (null): Invalid header checksum [ 1334.589932][T14716] binder: BINDER_SET_CONTEXT_MGR already set [ 1334.617940][T14716] binder: 14715:14716 ioctl 4018620d 20000200 returned -16 [ 1334.642647][T14723] binder: 14715:14723 ioctl c018620c 20000000 returned -1 [ 1334.651081][ T1294] Bluetooth: (null): Invalid header checksum [ 1334.706644][ T1294] Bluetooth: (null): Invalid header checksum [ 1334.803050][ T29] audit: type=1400 audit(2000001209.882:1424): avc: denied { setopt } for pid=14714 comm="syz.0.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1335.063309][ T29] audit: type=1400 audit(2000001210.132:1425): avc: denied { write } for pid=14696 comm="syz.4.2253" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1335.224868][ T5223] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1335.261121][ T29] audit: type=1400 audit(2000001210.279:1426): avc: denied { watch } for pid=14721 comm="syz.1.2263" path="/4/net_prio.prioidx" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1335.412226][ T29] audit: type=1400 audit(2000001210.279:1427): avc: denied { watch_sb } for pid=14721 comm="syz.1.2263" path="/4/net_prio.prioidx" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1335.465090][T14740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2265'. [ 1335.495660][ T5223] usb 4-1: Using ep0 maxpacket: 8 [ 1335.555072][ T5223] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1335.585563][ T5223] usb 4-1: config 0 has no interface number 0 [ 1335.601756][ T5223] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1335.657313][ T5223] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1335.731600][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.774258][ T5223] usb 4-1: config 0 descriptor?? [ 1335.834867][ T5223] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1335.900416][ T29] audit: type=1400 audit(2000001210.907:1428): avc: denied { mount } for pid=14742 comm="syz.2.2266" name="/" dev="autofs" ino=55198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1336.047861][ T29] audit: type=1400 audit(2000001211.037:1429): avc: denied { unmount } for pid=14417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1336.360059][T14748] netlink: 'syz.1.2268': attribute type 4 has an invalid length. [ 1336.402113][T14748] netlink: 126052 bytes leftover after parsing attributes in process `syz.1.2268'. [ 1337.299624][ T5334] usb 4-1: USB disconnect, device number 36 [ 1337.347307][ T5334] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 1337.436907][T14760] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1337.436907][T14760] program syz.1.2272 not setting count and/or reply_len properly [ 1339.214577][ T5334] usb 5-1: USB disconnect, device number 17 [ 1339.307218][ T5334] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1339.315835][ T5334] cp210x 5-1:0.0: device disconnected [ 1340.532727][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1340.532750][ T29] audit: type=1400 audit(2000001214.491:1434): avc: denied { name_bind } for pid=14774 comm="syz.0.2277" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1340.915523][ T29] audit: type=1400 audit(2000001214.491:1435): avc: denied { node_bind } for pid=14774 comm="syz.0.2277" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1341.080208][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1341.105011][ T29] audit: type=1400 audit(2000001214.500:1436): avc: denied { listen } for pid=14774 comm="syz.0.2277" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1341.194265][ T29] audit: type=1400 audit(2000001214.528:1437): avc: denied { accept } for pid=14774 comm="syz.0.2277" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1341.335265][T14781] overlay: Unknown parameter 'mask' [ 1341.337851][T14796] usb usb8: usbfs: process 14796 (syz.2.2282) did not claim interface 0 before use [ 1341.362687][ T29] audit: type=1400 audit(2000001214.537:1438): avc: denied { write } for pid=14774 comm="syz.0.2277" laddr=::1 lport=20000 faddr=::1 fport=33670 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1341.496075][ T29] audit: type=1400 audit(2000001215.737:1439): avc: denied { mount } for pid=14789 comm="syz.0.2284" name="/" dev="hugetlbfs" ino=56647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1341.583794][ T29] audit: type=1400 audit(2000001215.784:1440): avc: denied { create } for pid=14789 comm="syz.0.2284" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 1341.762741][ T29] audit: type=1400 audit(2000001216.033:1441): avc: denied { unmount } for pid=14349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1342.090268][ T29] audit: type=1400 audit(2000001216.605:1442): avc: denied { write } for pid=14798 comm="syz.1.2287" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1342.196438][ T29] audit: type=1400 audit(2000001216.698:1443): avc: denied { read } for pid=14798 comm="syz.1.2287" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1346.024519][T14825] TCP: TCP_TX_DELAY enabled [ 1350.204197][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1350.204216][ T29] audit: type=1326 audit(2000001224.113:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1350.289360][ T52] IPVS: starting estimator thread 0... [ 1350.492845][ T29] audit: type=1326 audit(2000001224.113:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1350.493022][T14842] IPVS: using max 19 ests per chain, 45600 per kthread [ 1350.584961][T14845] sp0: Synchronizing with TNC [ 1350.706522][ T29] audit: type=1326 audit(2000001224.141:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1350.774595][ T52] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1350.915199][ T29] audit: type=1326 audit(2000001224.141:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1350.991679][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 1351.020228][ T52] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1351.066891][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.099569][ T52] usb 4-1: Product: syz [ 1351.103756][ T52] usb 4-1: Manufacturer: syz [ 1351.113291][ T29] audit: type=1326 audit(2000001224.141:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1351.120170][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2300'. [ 1351.164339][ T52] usb 4-1: SerialNumber: syz [ 1351.208186][ T52] usb 4-1: config 0 descriptor?? [ 1351.368080][ T29] audit: type=1326 audit(2000001224.141:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1351.529979][ T29] audit: type=1326 audit(2000001224.141:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1351.686859][ T29] audit: type=1326 audit(2000001224.141:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14832 comm="syz.2.2296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7ffc0000 [ 1351.821618][ T52] airspy 4-1:0.0: Board ID: 00 [ 1351.866295][ T52] airspy 4-1:0.0: Firmware version: [ 1351.888237][ T29] audit: type=1400 audit(2000001225.102:1456): avc: denied { execute } for pid=14850 comm="syz.0.2301" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=56781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1351.934229][T13730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1351.963213][T13730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1351.975222][T13730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1351.998267][ T29] audit: type=1400 audit(2000001225.222:1457): avc: denied { read } for pid=14848 comm="syz.2.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1352.030323][T13730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1352.069280][T13730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1352.084376][T13730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1352.554322][T14857] chnl_net:caif_netlink_parms(): no params data found [ 1352.640590][ T52] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 1352.686237][ T52] airspy 4-1:0.0: Registered as swradio16 [ 1352.712740][ T52] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1352.732794][ T52] usb 4-1: USB disconnect, device number 37 [ 1352.801171][T14857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.808446][T14857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.815919][T14857] bridge_slave_0: entered allmulticast mode [ 1352.825735][T14857] bridge_slave_0: entered promiscuous mode [ 1352.840990][T14857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.849098][T14857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.856599][T14857] bridge_slave_1: entered allmulticast mode [ 1352.873447][T14857] bridge_slave_1: entered promiscuous mode [ 1353.023521][T14857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.065350][T14857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.313591][T14857] team0: Port device team_slave_0 added [ 1353.346768][T14878] Bluetooth: MGMT ver 1.23 [ 1353.442197][T14857] team0: Port device team_slave_1 added [ 1353.580124][T14857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.591291][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.688089][T14857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.743676][T14857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.781084][T14857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.881454][T14857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.353028][ T5228] Bluetooth: hci0: command tx timeout [ 1354.508903][T14857] hsr_slave_0: entered promiscuous mode [ 1354.867729][T14857] hsr_slave_1: entered promiscuous mode [ 1354.932853][T14857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1355.002461][T14857] Cannot create hsr debugfs directory [ 1356.274266][T14899] 9p: Unknown uid 00000000004294967295 [ 1356.440906][T14857] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.568536][ T5228] Bluetooth: hci0: command tx timeout [ 1356.642807][T14857] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.589477][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1360.589501][ T29] audit: type=1326 audit(2000001231.972:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1360.623048][ T5228] Bluetooth: hci0: command tx timeout [ 1360.738485][ T5273] IPVS: starting estimator thread 0... [ 1360.763914][ T29] audit: type=1326 audit(2000001231.972:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1360.891148][T14913] IPVS: using max 34 ests per chain, 81600 per kthread [ 1360.953385][ T29] audit: type=1326 audit(2000001232.166:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1360.984322][ T29] audit: type=1326 audit(2000001232.166:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.031785][ T29] audit: type=1326 audit(2000001232.166:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.102938][ T29] audit: type=1326 audit(2000001232.342:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.136744][T14857] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.158440][ T29] audit: type=1326 audit(2000001232.342:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.192314][ T29] audit: type=1326 audit(2000001232.342:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.220056][ T29] audit: type=1326 audit(2000001232.453:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.250948][ T29] audit: type=1326 audit(2000001232.453:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14907 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898a5799f9 code=0x7ffc0000 [ 1361.346547][T14857] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.539195][ T52] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1361.713372][T14857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1361.735150][T14857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1361.743563][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 1361.777099][ T52] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1361.789988][T14857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1361.797865][ T52] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1361.814889][ T52] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1361.830729][ T52] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1361.859859][ T52] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1361.882268][T14857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1361.906631][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1361.951598][ T52] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1361.971937][ T52] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1361.998007][ T52] usb 4-1: Product: syz [ 1362.014449][ T52] usb 4-1: Manufacturer: syz [ 1362.049887][ T52] usb 4-1: SerialNumber: syz [ 1362.080395][ T52] usb 4-1: config 0 descriptor?? [ 1362.108364][ T52] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1362.136936][ T52] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1362.246976][T14857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.320030][T14857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.352635][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.359784][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.405758][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.412986][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.805541][T13730] Bluetooth: hci0: command tx timeout [ 1362.878745][T14857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.036214][T14942] binder: 14931:14942 ioctl c0306201 200001c0 returned -14 [ 1363.134615][ T52] usb 4-1: USB disconnect, device number 38 [ 1363.157982][ T52] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1363.380594][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1363.408288][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1363.433171][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1363.445705][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1363.453607][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1363.462913][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1363.664271][T14944] syz.0.2326: attempt to access beyond end of device [ 1363.664271][T14944] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1363.679826][T14944] SQUASHFS error: Failed to read block 0x0: -5 [ 1363.777123][T14947] chnl_net:caif_netlink_parms(): no params data found [ 1363.798628][T14944] unable to read squashfs_super_block [ 1364.116546][T14857] veth0_vlan: entered promiscuous mode [ 1364.142045][T14857] veth1_vlan: entered promiscuous mode [ 1364.297600][T14947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.314738][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.325909][T14947] bridge_slave_0: entered allmulticast mode [ 1364.339091][T14947] bridge_slave_0: entered promiscuous mode [ 1364.349364][T14947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.365095][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.381243][T14947] bridge_slave_1: entered allmulticast mode [ 1364.390678][T14947] bridge_slave_1: entered promiscuous mode [ 1364.456041][T14947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.471004][T14947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.484856][T14857] veth0_macvtap: entered promiscuous mode [ 1364.595782][T14947] team0: Port device team_slave_0 added [ 1364.629973][T14947] team0: Port device team_slave_1 added [ 1364.724416][T14857] veth1_macvtap: entered promiscuous mode [ 1364.741576][T14947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.748783][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.778913][T14947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.831105][T14947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.842035][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1364.868519][T14947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.915013][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.936899][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.954969][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.965651][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.981304][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.997676][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.007844][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.025767][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.036401][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.048246][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.058367][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.069035][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.090422][T14857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.194173][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.204926][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.215272][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.230858][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.245888][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.258020][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.270184][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.280976][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.292103][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.302773][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.312764][T14857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1365.324022][T14857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.344165][T14857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.372846][T14947] hsr_slave_0: entered promiscuous mode [ 1365.384759][T14947] hsr_slave_1: entered promiscuous mode [ 1365.391256][T14947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.400233][T14947] Cannot create hsr debugfs directory [ 1365.462116][T14857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.473594][T14857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.482712][T14857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.492701][T14857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.663909][ T5228] Bluetooth: hci2: command tx timeout [ 1365.994913][T14947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.049511][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.065368][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.133655][T14947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.211174][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.220598][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.388191][T14947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.525031][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1366.525049][ T29] audit: type=1400 audit(2000001239.185:1496): avc: denied { setopt } for pid=14964 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1367.566034][T14970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1367.628209][ T29] audit: type=1400 audit(2000001240.173:1497): avc: denied { map } for pid=14963 comm="syz.4.2299" path="socket:[57654]" dev="sockfs" ino=57654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1367.931064][ T5228] Bluetooth: hci2: command tx timeout [ 1368.130457][T14947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.723915][T14947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1368.761070][T14947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1368.805638][T14947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1368.855635][T14947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1369.211055][T14947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.312503][T14947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1369.328957][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.336116][ T8634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.398265][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.405458][ T8634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.885025][T14947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1370.014355][T14947] veth0_vlan: entered promiscuous mode [ 1370.048297][T14947] veth1_vlan: entered promiscuous mode [ 1370.152819][T14947] veth0_macvtap: entered promiscuous mode [ 1370.184973][T14947] veth1_macvtap: entered promiscuous mode [ 1370.239969][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.251758][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.261994][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.272754][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.284533][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.295102][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.305407][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.316089][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.326054][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.336766][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.347353][ T5228] Bluetooth: hci2: command tx timeout [ 1370.355342][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.366120][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.376271][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1370.386867][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.412391][T14947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1370.450112][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.471030][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.484045][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.494790][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.505100][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.519000][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.529138][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.539683][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.550492][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.561106][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.572041][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.583042][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.593039][T14947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1370.604988][T14947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.626588][T14947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.664947][T14947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.674648][T14947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.686193][T14947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.695677][T14947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.931116][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.960207][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.021413][T11648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.029495][T11648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.324336][T14985] mkiss: ax0: crc mode is auto. [ 1372.429992][T14991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.593997][ T5228] Bluetooth: hci2: command tx timeout [ 1374.132502][ T29] audit: type=1326 audit(2000001246.176:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1374.166114][ T29] audit: type=1326 audit(2000001246.176:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1374.237541][T12374] IPVS: starting estimator thread 0... [ 1374.326749][ T29] audit: type=1326 audit(2000001246.176:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1374.359020][T15007] IPVS: using max 34 ests per chain, 81600 per kthread [ 1374.439057][ T29] audit: type=1326 audit(2000001246.176:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1374.467662][T15013] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.2331'. [ 1374.545381][ T29] audit: type=1326 audit(2000001246.176:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1374.571944][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 1374.651078][ T29] audit: type=1326 audit(2000001246.176:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1374.976629][ T29] audit: type=1326 audit(2000001246.176:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1375.276081][ T29] audit: type=1326 audit(2000001246.176:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1375.344463][ T5269] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1375.546208][T13730] Bluetooth: hci5: command 0x0406 tx timeout [ 1375.686792][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.689293][ T29] audit: type=1326 audit(2000001246.176:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1375.727930][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.819544][ T5269] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1375.835481][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.846038][ T5269] usb 3-1: config 0 descriptor?? [ 1375.922656][ T29] audit: type=1326 audit(2000001246.176:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14995 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x7ffc0000 [ 1376.636424][ T5269] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1377.047511][ T8598] usb 3-1: USB disconnect, device number 10 [ 1378.750710][T15054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1379.921377][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1379.921403][ T29] audit: type=1400 audit(2000001251.551:1532): avc: denied { write } for pid=15057 comm="syz.2.2354" path="socket:[58050]" dev="sockfs" ino=58050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1380.047854][ T29] audit: type=1400 audit(2000001251.634:1533): avc: denied { bind } for pid=15053 comm="syz.4.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1380.093279][ T5334] IPVS: starting estimator thread 0... [ 1380.227795][T15066] IPVS: using max 34 ests per chain, 81600 per kthread [ 1380.300299][T15072] nbd: must specify a size in bytes for the device [ 1381.292548][ T29] audit: type=1400 audit(2000001252.169:1534): avc: denied { bind } for pid=15067 comm="syz.3.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1381.474181][ T29] audit: type=1400 audit(2000001252.197:1535): avc: denied { create } for pid=15067 comm="syz.3.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1382.470438][ T29] audit: type=1400 audit(2000001252.206:1536): avc: denied { read } for pid=15067 comm="syz.3.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1382.590884][T15054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1382.795139][ T29] audit: type=1326 audit(2000001254.210:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.1.2362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x0 [ 1382.940761][ T29] audit: type=1400 audit(2000001254.340:1538): avc: denied { watch watch_reads } for pid=15087 comm="syz.2.2363" path="/38/file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1383.159346][ T29] audit: type=1326 audit(2000001254.534:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15091 comm="syz.4.2364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b20b799f9 code=0x0 [ 1383.813705][ T29] audit: type=1400 audit(2000001255.152:1540): avc: denied { write } for pid=15102 comm="syz.1.2366" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1383.869328][ T29] audit: type=1400 audit(2000001255.152:1541): avc: denied { open } for pid=15102 comm="syz.1.2366" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1384.357601][T15106] jfs: Unrecognized mount option "v)jMwMDWctH>MYF@(>ҍRYz [ 1384.357601][T15106] RmlӺnLo/qfEE9=" or missing value [ 1385.170810][T15114] mkiss: ax0: crc mode is auto. [ 1385.183969][T15116] xt_socket: unknown flags 0x2 [ 1387.650138][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1387.650156][ T29] audit: type=1400 audit(2000001258.689:1545): avc: denied { map } for pid=15125 comm="syz.1.2374" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1387.875083][ T29] audit: type=1400 audit(2000001258.735:1546): avc: denied { execute } for pid=15125 comm="syz.1.2374" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1387.950722][ T29] audit: type=1400 audit(2000001258.837:1547): avc: denied { create } for pid=15129 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1387.987293][ T29] audit: type=1400 audit(2000001258.948:1548): avc: denied { append } for pid=15129 comm="syz.3.2376" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1389.439430][ T29] audit: type=1400 audit(2000001260.305:1549): avc: denied { write } for pid=15129 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1389.749840][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1389.781967][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1389.830931][T15147] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2377'. [ 1389.842089][T15147] 0: renamed from hsr_slave_1 (while UP) [ 1390.149140][T15147] 0: entered allmulticast mode [ 1390.212201][T15147] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1391.913320][ T5228] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1391.923578][ T5228] Bluetooth: hci2: Injecting HCI hardware error event [ 1391.940536][ T5228] Bluetooth: hci2: hardware error 0x00 [ 1392.947085][ T4608] Bluetooth: hci1: command 0x0406 tx timeout [ 1396.769365][T15163] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 1396.777594][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 1396.843176][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 1396.879773][T15164] nbd: socks must be embedded in a SOCK_ITEM attr [ 1398.203968][ T4608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1398.218107][ T4608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1398.227453][ T4608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1398.238944][ T4608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1398.248775][ T4608] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1398.256310][ T4608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1398.526621][ T5228] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1399.559189][T13730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1399.573498][T13730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1399.584263][T13730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1399.613773][T13730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1399.629086][T13730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1399.637408][T13730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1400.509148][T13730] Bluetooth: hci7: command tx timeout [ 1400.886353][T11648] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.942816][ T29] audit: type=1400 audit(2000001270.963:1550): avc: denied { connect } for pid=15194 comm="syz.0.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1401.109124][T15189] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1401.139669][T15189] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1401.652321][T11648] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.873837][ T5228] Bluetooth: hci0: command tx timeout [ 1402.157230][T15178] chnl_net:caif_netlink_parms(): no params data found [ 1402.306902][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'. [ 1402.594773][T11648] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.750561][ T5228] Bluetooth: hci7: command tx timeout [ 1402.851009][T11648] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.096601][T13730] Bluetooth: hci4: command 0x0406 tx timeout [ 1403.491031][T15231] netlink: 'syz.1.2402': attribute type 8 has an invalid length. [ 1403.540534][T15231] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2402'. [ 1403.575636][T15178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.590625][T15178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.609422][T15178] bridge_slave_0: entered allmulticast mode [ 1403.644889][T15178] bridge_slave_0: entered promiscuous mode [ 1403.832826][T15178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.894465][T15178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.108222][T15178] bridge_slave_1: entered allmulticast mode [ 1404.126701][T13730] Bluetooth: hci0: command tx timeout [ 1404.994534][T13730] Bluetooth: hci7: command tx timeout [ 1405.058865][T15178] bridge_slave_1: entered promiscuous mode [ 1405.365181][T11648] bridge_slave_1: left allmulticast mode [ 1405.394623][T11648] bridge_slave_1: left promiscuous mode [ 1405.400541][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.466541][T11648] bridge_slave_0: left allmulticast mode [ 1405.487099][T11648] bridge_slave_0: left promiscuous mode [ 1405.523336][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.449773][T13730] Bluetooth: hci0: command tx timeout [ 1407.247515][T13730] Bluetooth: hci7: command tx timeout [ 1407.641113][T11648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.662185][T11648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.687813][T11648] bond0 (unregistering): Released all slaves [ 1407.703286][T11648] bond1 (unregistering): Released all slaves [ 1407.757022][T15178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.862299][T15248] mac80211_hwsim hwsim71 wlan0: entered promiscuous mode [ 1407.869415][T15248] mac80211_hwsim hwsim71 wlan0: entered allmulticast mode [ 1407.922448][T15178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.105362][T15178] team0: Port device team_slave_0 added [ 1408.142561][T15190] chnl_net:caif_netlink_parms(): no params data found [ 1408.180559][T15178] team0: Port device team_slave_1 added [ 1408.398165][T15178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.409385][T15178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.445013][T15178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.491113][T11648] hsr_slave_0: left promiscuous mode [ 1408.519438][T11648] hsr_slave_1: left promiscuous mode [ 1408.553499][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1408.565909][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.577269][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.584952][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1408.630855][T13730] Bluetooth: hci0: command tx timeout [ 1408.654984][T11648] veth1_macvtap: left promiscuous mode [ 1408.660559][T11648] veth0_macvtap: left promiscuous mode [ 1408.666582][T11648] veth1_vlan: left promiscuous mode [ 1408.672177][T11648] veth0_vlan: left promiscuous mode [ 1410.029619][T11648] team0 (unregistering): Port device team_slave_1 removed [ 1410.132486][T11648] team0 (unregistering): Port device team_slave_0 removed [ 1411.442151][T15178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.449628][T15178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.501074][T15178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.728055][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.735486][T15190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.760374][T15190] bridge_slave_0: entered allmulticast mode [ 1411.771777][T15190] bridge_slave_0: entered promiscuous mode [ 1411.798952][T15190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.809574][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.818718][T15190] bridge_slave_1: entered allmulticast mode [ 1411.857796][T15190] bridge_slave_1: entered promiscuous mode [ 1412.033338][T15190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.086160][T15178] hsr_slave_0: entered promiscuous mode [ 1412.095138][T15178] hsr_slave_1: entered promiscuous mode [ 1412.108334][T15178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1412.116224][T15178] Cannot create hsr debugfs directory [ 1412.150123][T15190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.311477][T15190] team0: Port device team_slave_0 added [ 1412.332708][T11648] IPVS: stop unused estimator thread 0... [ 1412.380456][T15190] team0: Port device team_slave_1 added [ 1412.568947][T15190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.576836][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.605054][T15190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.734058][T11648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.840730][T15190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.848343][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.874497][T15190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.025498][T11648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.146119][T11648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.284074][T11648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.379148][T15190] hsr_slave_0: entered promiscuous mode [ 1413.388145][T15190] hsr_slave_1: entered promiscuous mode [ 1413.404089][T15190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1413.411971][T15190] Cannot create hsr debugfs directory [ 1413.944509][T11648] bridge_slave_1: left allmulticast mode [ 1413.950534][T11648] bridge_slave_1: left promiscuous mode [ 1413.957393][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.973914][T11648] bridge_slave_0: left allmulticast mode [ 1413.979975][T11648] bridge_slave_0: left promiscuous mode [ 1413.986948][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.174664][T13730] Bluetooth: hci6: command 0x0406 tx timeout [ 1415.058540][T11648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.090517][T11648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.121416][T11648] bond0 (unregistering): Released all slaves [ 1415.488437][T15178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1415.577033][T15178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1415.597225][T15178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1415.696684][T15178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1415.768632][T11648] hsr_slave_0: left promiscuous mode [ 1415.776156][T11648] hsr_slave_1: left promiscuous mode [ 1415.801882][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.809871][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.829098][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.837363][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.894121][T11648] veth1_macvtap: left promiscuous mode [ 1415.899908][T11648] veth0_macvtap: left promiscuous mode [ 1415.905639][T11648] veth1_vlan: left promiscuous mode [ 1415.915290][T11648] veth0_vlan: left promiscuous mode [ 1416.995906][T11648] team0 (unregistering): Port device team_slave_1 removed [ 1417.079784][T11648] team0 (unregistering): Port device team_slave_0 removed [ 1418.893973][T15178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.968815][T11648] IPVS: stop unused estimator thread 0... [ 1419.035564][T15178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.086006][T15190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1419.130205][T15190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1419.160342][T15190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1419.185882][T15190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1419.244192][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.251433][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.320322][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.327469][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.707458][T15190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.845152][T15190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.921747][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.929284][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1419.969651][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.976932][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.167982][T15178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.776143][T15190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.798653][T15178] veth0_vlan: entered promiscuous mode [ 1420.871800][T15178] veth1_vlan: entered promiscuous mode [ 1421.012087][T15178] veth0_macvtap: entered promiscuous mode [ 1421.039543][T15178] veth1_macvtap: entered promiscuous mode [ 1421.143544][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.154343][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.166928][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.189563][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.207733][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.227137][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.237784][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.250162][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.265069][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.279133][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.295055][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.306741][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.334039][T15178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.374235][T15190] veth0_vlan: entered promiscuous mode [ 1421.405465][T15190] veth1_vlan: entered promiscuous mode [ 1421.425464][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.440867][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.450834][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.461590][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.473363][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.485251][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.496956][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.507597][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.517746][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.529133][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.539482][T15178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1421.550288][T15178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.571600][T15178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.611072][T15178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.620685][T15178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.630937][T15178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.639933][T15178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.876458][T15190] veth0_macvtap: entered promiscuous mode [ 1421.956323][T15190] veth1_macvtap: entered promiscuous mode [ 1421.956365][ T8634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.003875][ T8634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.052789][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.061341][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.146658][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.159795][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.170183][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.181130][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.191579][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.202665][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.213081][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.224664][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.236180][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.249270][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.260230][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.271359][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.281422][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.291987][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.313699][T15190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.429491][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.469029][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.515390][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.555009][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.569621][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.641840][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.662975][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.728335][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.748889][ T5228] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1422.767564][ T29] audit: type=1326 audit(2000001291.123:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15274 comm="syz.2.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x0 [ 1422.845016][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.902412][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.025919][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.071148][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.118421][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.160456][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.203999][T15190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.401838][T15190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.436614][T15190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.479833][T15190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.505329][T15190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.241723][ T8634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.099151][ T8634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.332471][T15303] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2409'. [ 1425.341818][T15303] 0: renamed from hsr_slave_1 (while UP) [ 1425.409645][ T29] audit: type=1804 audit(2000001293.561:1552): pid=15309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2412" name="/newroot/27/bus/bus" dev="overlay" ino=169 res=1 errno=0 [ 1425.441749][T15303] 0: entered allmulticast mode [ 1425.461292][T15303] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1427.168973][T13730] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1427.211904][T13730] Bluetooth: hci1: Injecting HCI hardware error event [ 1427.255308][T13730] Bluetooth: hci1: hardware error 0x00 [ 1431.030774][T11648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.033766][T13730] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1433.326009][T11648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.000357][ T29] audit: type=1400 audit(2000001301.494:1553): avc: denied { read } for pid=15328 comm="syz.4.2420" lport=48434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1434.179532][ T29] audit: type=1400 audit(2000001301.660:1554): avc: denied { append } for pid=15335 comm="syz.0.2423" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1434.289310][T15339] dccp_v6_rcv: dropped packet with invalid checksum [ 1434.462523][T15348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2386'. [ 1434.584011][T15352] netlink: 'syz.4.2426': attribute type 5 has an invalid length. [ 1434.798086][T15344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2423'. [ 1435.003610][T15347] netlink: 'syz.0.2423': attribute type 7 has an invalid length. [ 1435.012533][T15347] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2423'. [ 1440.696460][T15388] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.2436'. [ 1440.739722][T15396] bridge0: port 3(team0) entered blocking state [ 1440.775025][T15388] unsupported nla_type 312 [ 1440.786094][T15396] bridge0: port 3(team0) entered disabled state [ 1440.853064][T15398] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1440.917968][T15396] team0: entered allmulticast mode [ 1440.995294][T15396] team_slave_0: entered allmulticast mode [ 1441.023030][T15396] team_slave_1: entered allmulticast mode [ 1441.161333][ T29] audit: type=1400 audit(2000001308.115:1555): avc: denied { ioctl } for pid=15401 comm="syz.4.2441" path="pid:[4026533081]" dev="nsfs" ino=4026533081 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1442.595021][T15396] team0: entered promiscuous mode [ 1442.602006][T15396] team_slave_0: entered promiscuous mode [ 1442.611330][T15396] team_slave_1: entered promiscuous mode [ 1443.172319][T15396] bridge0: port 3(team0) entered blocking state [ 1443.178789][T15396] bridge0: port 3(team0) entered forwarding state [ 1443.519412][T15415] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2443'. [ 1443.519539][ T5269] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1443.595334][T15415] NCSI netlink: No device for ifindex 0 [ 1443.818716][ T5269] usb 5-1: Using ep0 maxpacket: 32 [ 1443.846991][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1443.890979][T15417] binder: 15416:15417 ioctl 4018620d 0 returned -22 [ 1443.913453][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1443.919102][ T29] audit: type=1400 audit(2000001310.627:1556): avc: denied { write } for pid=15416 comm="syz.1.2444" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1443.923196][ T5269] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1444.029364][ T5269] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1444.047122][ T29] audit: type=1400 audit(2000001310.627:1557): avc: denied { map } for pid=15416 comm="syz.1.2444" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1444.068991][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.099354][ T5269] usb 5-1: Product: syz [ 1444.103557][ T5269] usb 5-1: Manufacturer: syz [ 1444.121489][ T5269] usb 5-1: SerialNumber: syz [ 1444.145104][ T5269] usb 5-1: config 0 descriptor?? [ 1444.171101][ T5269] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 1444.189555][ T5269] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 1444.245499][ T29] audit: type=1400 audit(2000001310.867:1558): avc: denied { view } for pid=15420 comm="syz.0.2446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1445.325430][ T5269] usb 5-1: USB disconnect, device number 18 [ 1446.572693][T15435] syz.2.2449: attempt to access beyond end of device [ 1446.572693][T15435] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1446.593864][T15435] SQUASHFS error: Failed to read block 0x0: -5 [ 1446.600318][T15435] unable to read squashfs_super_block [ 1446.794262][T15442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2451'. [ 1449.280217][ T8598] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1449.507551][ T8598] usb 5-1: Using ep0 maxpacket: 8 [ 1449.517982][ T8598] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1449.605157][ T8598] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1449.628923][ T8598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.661585][ T8598] usb 5-1: Product: syz [ 1449.669651][ T8598] usb 5-1: Manufacturer: syz [ 1449.689543][ T8598] usb 5-1: SerialNumber: syz [ 1449.769568][ T8598] usb 5-1: config 0 descriptor?? [ 1449.785151][ T8598] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1450.723556][T15444] fuse: Bad value for 'user_id' [ 1450.728464][T15444] fuse: Bad value for 'user_id' [ 1450.839811][ T8598] gspca_zc3xx: reg_w_i err -110 [ 1450.848919][ T29] audit: type=1400 audit(2000001317.055:1559): avc: denied { watch } for pid=15443 comm="syz.4.2453" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1450.871284][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.928362][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.942627][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.965463][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.978873][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.989848][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1450.999780][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1451.002040][ T29] audit: type=1400 audit(2000001317.165:1560): avc: denied { accept } for pid=15443 comm="syz.4.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1451.493919][ T29] audit: type=1400 audit(2000001317.535:1561): avc: denied { read } for pid=15473 comm="syz.1.2466" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1451.528855][ T8598] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1451.539025][ T8598] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1452.151283][ T29] audit: type=1400 audit(2000001317.535:1562): avc: denied { open } for pid=15473 comm="syz.1.2466" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1452.174848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.289538][ T29] audit: type=1400 audit(2000001317.544:1563): avc: denied { ioctl } for pid=15473 comm="syz.1.2466" path="/dev/nvram" dev="devtmpfs" ino=625 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1452.449467][ T52] usb 5-1: USB disconnect, device number 19 [ 1452.973977][ T29] audit: type=1326 audit(2000001319.022:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15479 comm="syz.0.2465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5b15799f9 code=0x0 [ 1453.113468][ T52] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1453.321734][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.333495][ T5228] Bluetooth: hci4: command tx timeout [ 1453.368033][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.409460][ T52] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 1453.440720][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.464501][ T52] usb 5-1: config 0 descriptor?? [ 1453.660564][T11648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.823909][T15465] chnl_net:caif_netlink_parms(): no params data found [ 1454.005122][ T52] elecom 0003:056E:011C.001B: unknown main item tag 0x0 [ 1454.086368][ T52] elecom 0003:056E:011C.001B: unknown main item tag 0xe [ 1454.096927][ T52] elecom 0003:056E:011C.001B: unknown main item tag 0x5 [ 1454.126724][ T52] elecom 0003:056E:011C.001B: unknown main item tag 0x4 [ 1454.128279][T11648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.152900][ T52] elecom 0003:056E:011C.001B: ignoring exceeding usage max [ 1454.209693][ T52] elecom 0003:056E:011C.001B: usage index exceeded [ 1454.216269][ T52] elecom 0003:056E:011C.001B: item 0 0 2 0 parsing failed [ 1454.253180][T15497] syz.1.2470: attempt to access beyond end of device [ 1454.253180][T15497] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1454.271404][T15497] SQUASHFS error: Failed to read block 0x0: -5 [ 1454.297800][ T52] elecom 0003:056E:011C.001B: probe with driver elecom failed with error -22 [ 1454.308779][T15497] unable to read squashfs_super_block [ 1454.344386][ T52] usb 5-1: USB disconnect, device number 20 [ 1455.682831][ T5228] Bluetooth: hci4: command tx timeout [ 1455.870294][T11648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.144648][T11648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.297498][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1456.303803][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1458.357353][ T5228] Bluetooth: hci4: command tx timeout [ 1458.712952][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.734098][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.741379][T15465] bridge_slave_0: entered allmulticast mode [ 1458.796372][T15465] bridge_slave_0: entered promiscuous mode [ 1458.809340][ T52] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1458.817779][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.842305][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.853967][ T29] audit: type=1400 audit(2000001324.452:1565): avc: denied { listen } for pid=15525 comm="syz.1.2478" lport=35748 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1458.887406][T15465] bridge_slave_1: entered allmulticast mode [ 1458.907114][T15465] bridge_slave_1: entered promiscuous mode [ 1458.939057][ T29] audit: type=1400 audit(2000001324.470:1566): avc: denied { accept } for pid=15525 comm="syz.1.2478" lport=35748 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1459.036528][ T52] usb 5-1: Using ep0 maxpacket: 32 [ 1459.053227][ T29] audit: type=1400 audit(2000001324.470:1567): avc: denied { write } for pid=15525 comm="syz.1.2478" lport=35748 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1459.122528][ T52] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=ee.24 [ 1459.153882][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.201977][ T52] usb 5-1: Product: syz [ 1459.208688][ T29] audit: type=1400 audit(2000001324.470:1568): avc: denied { setopt } for pid=15525 comm="syz.1.2478" lport=35748 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1459.238454][ T52] usb 5-1: Manufacturer: syz [ 1459.263321][ T52] usb 5-1: SerialNumber: syz [ 1459.300327][ T52] usb 5-1: config 0 descriptor?? [ 1459.315589][ T52] ttusbir 5-1:0.0: cannot find expected altsetting [ 1460.545207][ T46] usb 5-1: USB disconnect, device number 21 [ 1460.606688][ T5228] Bluetooth: hci4: command tx timeout [ 1460.634271][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.894610][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.328162][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 1461.423562][T15549] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1461.475279][T15465] team0: Port device team_slave_0 added [ 1462.483819][T15546] batman_adv: batadv1: Adding interface: netdevsim0 [ 1462.514563][T15546] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1462.561881][T15546] batman_adv: batadv1: Interface activated: netdevsim0 [ 1462.580079][T11648] team0: left allmulticast mode [ 1462.584998][T11648] team_slave_0: left allmulticast mode [ 1462.599573][T11648] team_slave_1: left allmulticast mode [ 1462.620692][T11648] team0: left promiscuous mode [ 1462.628847][T11648] team_slave_0: left promiscuous mode [ 1462.766480][T11648] team_slave_1: left promiscuous mode [ 1463.577476][T11648] bridge0: port 3(team0) entered disabled state [ 1464.016851][ T29] audit: type=1400 audit(2000001328.949:1569): avc: denied { setopt } for pid=15562 comm="syz.1.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1465.373176][T11648] bridge_slave_1: left allmulticast mode [ 1466.248135][T11648] bridge_slave_1: left promiscuous mode [ 1466.253915][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.380037][T11648] bridge_slave_0: left allmulticast mode [ 1466.406376][T11648] bridge_slave_0: left promiscuous mode [ 1466.432969][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.539355][T15569] syz.4.2492[15569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1466.539576][T15569] syz.4.2492[15569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1466.696110][ T29] audit: type=1326 audit(2000001331.692:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.4.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94519799f9 code=0x7fc00000 [ 1467.399380][ T29] audit: type=1326 audit(2000001332.348:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.4.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94519709a7 code=0x7fc00000 [ 1469.662852][T11648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.683964][T11648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.707030][T11648] bond0 (unregistering): Released all slaves [ 1469.754472][T15465] team0: Port device team_slave_1 added [ 1471.173497][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.250812][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.400900][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.593883][T15600] bond0: entered promiscuous mode [ 1471.612695][T15600] bond_slave_0: entered promiscuous mode [ 1471.618688][T15600] bond_slave_1: entered promiscuous mode [ 1471.690053][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.727271][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.753358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.979305][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.388443][ T5271] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1472.436981][T11648] hsr_slave_0: left promiscuous mode [ 1472.751314][T15608] jfs: Unrecognized mount option "v)jMwMDWctH>MYF@(>ҍRYz [ 1472.751314][T15608] RmlӺnLo/qfEE9=" or missing value [ 1472.921601][T11648] hsr_slave_1: left promiscuous mode [ 1472.928115][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.946834][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.006631][ T5271] usb 2-1: Using ep0 maxpacket: 32 [ 1473.030196][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.044004][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.062158][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1473.072257][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1473.140879][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1473.179310][ T5271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1473.186222][T11648] veth1_macvtap: left promiscuous mode [ 1473.213656][ T5271] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 1473.247070][T11648] veth0_macvtap: left promiscuous mode [ 1473.255099][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.288694][ T5271] usb 2-1: Product: syz [ 1473.288816][T11648] veth1_vlan: left promiscuous mode [ 1473.299997][ T5271] usb 2-1: Manufacturer: syz [ 1473.304656][ T5271] usb 2-1: SerialNumber: syz [ 1473.331099][T11648] veth0_vlan: left promiscuous mode [ 1473.354260][ T5271] usb 2-1: config 0 descriptor?? [ 1473.388742][ T5271] rndis_host 2-1:0.0: skipping garbage [ 1473.394242][ T5271] usb 2-1: bad CDC descriptors [ 1473.408309][ T5271] cdc_acm 2-1:0.0: skipping garbage [ 1474.732416][ T46] usb 2-1: USB disconnect, device number 34 [ 1475.646903][T15628] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 1477.376190][T11648] team0 (unregistering): Port device team_slave_1 removed [ 1477.506255][T11648] team0 (unregistering): Port device team_slave_0 removed [ 1477.617898][ T5334] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1477.877770][ T5334] usb 2-1: Using ep0 maxpacket: 16 [ 1477.972340][ T5334] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1477.990960][ T5334] usb 2-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1478.001828][ T5334] usb 2-1: config 0 has no interface number 0 [ 1478.040292][ T5334] usb 2-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1478.057132][ T5334] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1478.066996][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1478.091063][ T5334] usb 2-1: Product: syz [ 1478.125070][ T5334] usb 2-1: SerialNumber: syz [ 1478.160380][ T5334] usb 2-1: config 0 descriptor?? [ 1478.172109][ T5334] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1478.479324][ T5334] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 1478.507556][ T29] audit: type=1326 audit(2000001342.599:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15639 comm="syz.1.2513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1345799f9 code=0x0 [ 1479.173584][T15620] bridge0: port 3(team0) entered blocking state [ 1479.185906][T15620] bridge0: port 3(team0) entered disabled state [ 1479.197632][T15620] team0: entered allmulticast mode [ 1479.215742][T15620] team_slave_0: entered allmulticast mode [ 1479.239757][T15620] team_slave_1: entered allmulticast mode [ 1479.260713][T15620] team0: entered promiscuous mode [ 1479.271653][T15620] team_slave_0: entered promiscuous mode [ 1479.277980][T15620] team_slave_1: entered promiscuous mode [ 1479.296564][T15620] bridge0: port 3(team0) entered blocking state [ 1479.302933][T15620] bridge0: port 3(team0) entered forwarding state [ 1479.378265][T15465] hsr_slave_0: entered promiscuous mode [ 1479.422993][T15465] hsr_slave_1: entered promiscuous mode [ 1479.444986][T15465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.465250][T15465] Cannot create hsr debugfs directory [ 1480.500966][ T29] audit: type=1326 audit(2000001344.446:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f363b1799f9 code=0x7fc00000 [ 1480.637835][ T5271] usb 2-1: USB disconnect, device number 35 [ 1482.323725][T15663] 9pnet_fd: Insufficient options for proto=fd [ 1492.657949][T13730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1492.693188][T13730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1492.702766][T13730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1492.710619][T13730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1492.720189][T13730] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1492.729987][T13730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1492.761767][T11648] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.818048][T15465] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1492.879612][T15465] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1492.980005][T11648] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.052816][T15465] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1493.161151][T11648] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.204215][T15465] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1493.370560][T11648] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.908485][T11648] bridge_slave_1: left allmulticast mode [ 1493.965763][T11648] bridge_slave_1: left promiscuous mode [ 1493.977102][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.021600][T11648] bridge_slave_0: left allmulticast mode [ 1494.027428][T11648] bridge_slave_0: left promiscuous mode [ 1494.034945][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.997840][T13730] Bluetooth: hci0: command tx timeout [ 1495.059871][T11648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.101209][T11648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.131031][T11648] bond0 (unregistering): Released all slaves [ 1495.227853][T15465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.295618][T15678] chnl_net:caif_netlink_parms(): no params data found [ 1495.652733][T15465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.727534][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.734723][T15154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.771894][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.782311][T15678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.794348][T15678] bridge_slave_0: entered allmulticast mode [ 1495.807458][T15678] bridge_slave_0: entered promiscuous mode [ 1495.838619][T11648] hsr_slave_0: left promiscuous mode [ 1495.850486][T11648] hsr_slave_1: left promiscuous mode [ 1495.861595][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.872873][T11648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.888960][T11648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.906392][T11648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.948985][T11648] veth1_macvtap: left promiscuous mode [ 1495.954940][T11648] veth0_macvtap: left promiscuous mode [ 1495.960826][T11648] veth1_vlan: left promiscuous mode [ 1495.966906][T11648] veth0_vlan: left promiscuous mode [ 1497.249796][T13730] Bluetooth: hci0: command tx timeout [ 1497.521841][T11648] team0 (unregistering): Port device team_slave_1 removed [ 1497.670247][T11648] team0 (unregistering): Port device team_slave_0 removed [ 1498.907219][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.914345][T15154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.954380][T15678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.971585][T15678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.981146][T15678] bridge_slave_1: entered allmulticast mode [ 1498.995657][T15678] bridge_slave_1: entered promiscuous mode [ 1499.145516][T15678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.187221][T15678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1499.386816][T15678] team0: Port device team_slave_0 added [ 1499.451633][T15678] team0: Port device team_slave_1 added [ 1499.502946][T13730] Bluetooth: hci0: command tx timeout [ 1499.569117][T15678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.569467][T11648] IPVS: stop unused estimator thread 0... [ 1499.576076][T15678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.662968][T15678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.701125][T15678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.708571][T15678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1499.741327][T15678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.868709][T15678] hsr_slave_0: entered promiscuous mode [ 1499.906600][T15678] hsr_slave_1: entered promiscuous mode [ 1499.918024][T15678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1499.927758][T15678] Cannot create hsr debugfs directory [ 1500.060212][T15465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.428394][T15465] veth0_vlan: entered promiscuous mode [ 1500.462981][T15465] veth1_vlan: entered promiscuous mode [ 1500.603941][T15465] veth0_macvtap: entered promiscuous mode [ 1500.648117][T15465] veth1_macvtap: entered promiscuous mode [ 1500.709674][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.722888][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.733396][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.744018][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.755568][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.766798][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.776858][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.787555][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.797473][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.808463][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.818654][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1500.829260][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.851215][T15465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.864187][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.877446][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.887454][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.898169][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.914008][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.924866][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.935218][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.945813][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.956225][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.966850][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.980510][T15465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.991238][T15465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1501.011954][T15465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.116543][T15465] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.125305][T15465] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.141075][T15465] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.150594][T15465] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.342250][T15678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1501.384635][T15678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1501.423500][T15678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1501.484730][T15678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1501.514026][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.527470][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.622759][T15154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.637107][T15154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.755085][T13730] Bluetooth: hci0: command tx timeout [ 1501.855643][T15678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.982553][T15678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.010509][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.017692][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.069648][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.076808][ T8634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.206295][T15678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1502.224277][T15678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1502.722773][T15703] atomic_op ffff888064a51198 conn xmit_atomic 0000000000000000 [ 1502.836657][T15678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.046678][T15678] veth0_vlan: entered promiscuous mode [ 1503.106728][T15678] veth1_vlan: entered promiscuous mode [ 1503.274973][T15678] veth0_macvtap: entered promiscuous mode [ 1503.394274][T15678] veth1_macvtap: entered promiscuous mode [ 1503.596752][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1503.634579][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1503.710536][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1503.721210][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1503.769460][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1503.785315][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.258789][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.565412][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.613834][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.676276][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.707293][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.724857][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.746493][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1504.760297][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.779716][T15678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.820074][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.839479][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.872779][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.895223][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.905543][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.916254][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1504.953445][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1504.981149][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.021083][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1505.034917][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.045213][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1505.075124][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.089441][T15678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1505.102163][T15678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1505.163455][T15678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1505.277194][T15678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.349913][T15678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.394684][T15678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.428436][T15678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.556039][T15722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1506.969269][ T8634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.054964][ T8634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.277057][ T8634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.287722][ T8634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.273530][T15750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2537'. [ 1509.008982][T15751] bridge0: port 3(team0) entered blocking state [ 1509.069366][T15751] bridge0: port 3(team0) entered disabled state [ 1509.076569][T15751] team0: entered allmulticast mode [ 1509.125226][T15751] team_slave_0: entered allmulticast mode [ 1509.136338][T15751] team_slave_1: entered allmulticast mode [ 1509.369485][T13730] Bluetooth: hci7: link tx timeout [ 1509.375703][T13730] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1509.559664][T15751] team0: entered promiscuous mode [ 1509.647607][T15751] team_slave_0: entered promiscuous mode [ 1509.735695][T15751] team_slave_1: entered promiscuous mode [ 1509.803192][T15751] bridge0: port 3(team0) entered blocking state [ 1509.809688][T15751] bridge0: port 3(team0) entered forwarding state [ 1510.319611][ T46] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1510.544257][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.558157][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1510.581011][ T46] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1510.590257][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1510.612090][ T46] usb 4-1: SerialNumber: syz [ 1510.919221][ T46] usb 4-1: 0:2 : does not exist [ 1510.944137][ T46] usb 4-1: USB disconnect, device number 39 [ 1511.630399][ T5228] Bluetooth: hci7: command 0x0406 tx timeout [ 1517.591791][ T29] audit: type=1400 audit(2000001378.052:1574): avc: denied { create } for pid=15807 comm="syz.0.2566" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1517.678076][ T29] audit: type=1400 audit(2000001378.061:1575): avc: denied { write } for pid=15807 comm="syz.0.2566" name="file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1517.768459][T15802] syz.4.2550: attempt to access beyond end of device [ 1517.768459][T15802] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1517.806471][ T29] audit: type=1400 audit(2000001378.061:1576): avc: denied { open } for pid=15807 comm="syz.0.2566" path="/4/file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1517.887820][ T29] audit: type=1400 audit(2000001378.070:1577): avc: denied { ioctl } for pid=15807 comm="syz.0.2566" path="/4/file0" dev="tmpfs" ino=40 ioctlcmd=0x1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1517.927989][T15802] SQUASHFS error: Failed to read block 0x0: -5 [ 1517.941125][ T29] audit: type=1400 audit(2000001378.892:1578): avc: denied { unlink } for pid=15678 comm="syz-executor" name="file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1517.968049][T15802] unable to read squashfs_super_block [ 1518.604680][T15819] bridge0: port 3(team0) entered blocking state [ 1518.654104][T15819] bridge0: port 3(team0) entered disabled state [ 1518.686876][T15819] team0: entered allmulticast mode [ 1518.720883][T15819] team_slave_0: entered allmulticast mode [ 1518.726868][T15819] team_slave_1: entered allmulticast mode [ 1518.768157][T15819] team0: entered promiscuous mode [ 1518.794476][T15819] team_slave_0: entered promiscuous mode [ 1518.806041][T15819] team_slave_1: entered promiscuous mode [ 1518.855110][T15819] bridge0: port 3(team0) entered blocking state [ 1518.861478][T15819] bridge0: port 3(team0) entered forwarding state [ 1519.178674][T15829] jfs: Unrecognized mount option "v)jMwMDWctH>MYF@(>ҍRYz [ 1519.178674][T15829] RmlӺnLo/qfEE9=" or missing value [ 1519.600580][T13730] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1519.610606][T13730] Bluetooth: hci0: Injecting HCI hardware error event [ 1519.626022][ T5228] Bluetooth: hci0: hardware error 0x00 [ 1519.669318][ T29] audit: type=1400 audit(2000001380.610:1579): avc: denied { append } for pid=15831 comm="syz.4.2558" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1519.758219][ T5273] kernel write not supported for file /input/event0 (pid: 5273 comm: kworker/1:5) [ 1520.057176][T15840] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2559'. [ 1521.166776][ T29] audit: type=1400 audit(2000001381.986:1580): avc: denied { read } for pid=15855 comm="syz.4.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1521.908977][ T5228] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1522.093852][T15862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2570'. [ 1522.811560][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1522.865219][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1524.386258][T15880] jfs: Unrecognized mount option "v)jMwMDWctH>MYF@(>ҍRYz [ 1524.386258][T15880] RmlӺnLo/qfEE9=" or missing value [ 1524.773140][T15888] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2578'. [ 1525.318112][ T5273] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1525.583131][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2592'. [ 1525.620134][ T5273] usb 2-1: config 0 has an invalid interface number: 59 but max is 0 [ 1525.644602][ T5273] usb 2-1: config 0 has no interface number 0 [ 1525.681139][ T29] audit: type=1400 audit(2000001386.160:1581): avc: denied { map } for pid=15901 comm="syz.2.2592" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1525.684579][ T5273] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 1525.738556][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.769344][ T5273] usb 2-1: Product: syz [ 1525.794866][ T5273] usb 2-1: Manufacturer: syz [ 1525.805666][ T5273] usb 2-1: SerialNumber: syz [ 1525.856877][ T5273] usb 2-1: config 0 descriptor?? [ 1526.124013][ T8] usb 2-1: USB disconnect, device number 36 [ 1527.079768][T15916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1529.454588][T15923] bridge0: port 3(team0) entered blocking state [ 1530.509368][T15923] bridge0: port 3(team0) entered disabled state [ 1530.556812][T15923] team0: entered allmulticast mode [ 1530.580267][T15923] team_slave_0: entered allmulticast mode [ 1530.608940][ T5228] Bluetooth: hci7: command 0x0406 tx timeout [ 1530.642308][T15923] team_slave_1: entered allmulticast mode [ 1530.804748][T15923] team0: entered promiscuous mode [ 1530.850179][T15923] team_slave_0: entered promiscuous mode [ 1530.874823][T15923] team_slave_1: entered promiscuous mode [ 1531.084490][T15947] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1532.104428][T15923] bridge0: port 3(team0) entered blocking state [ 1532.113026][T15923] bridge0: port 3(team0) entered forwarding state [ 1533.847878][T15962] netlink: 'syz.2.2598': attribute type 8 has an invalid length. [ 1535.300074][T15982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1535.362258][ T30] INFO: task syz.1.2302:14855 blocked for more than 152 seconds. [ 1535.371989][ T30] Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 1536.033883][T15979] caif:caif_disconnect_client(): nothing to disconnect [ 1536.048251][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1536.104400][ T30] task:syz.1.2302 state:D stack:26688 pid:14855 tgid:14855 ppid:14494 flags:0x00000004 [ 1536.137033][ T30] Call Trace: [ 1536.165454][ T30] [ 1536.168871][ T30] __schedule+0xe37/0x5490 [ 1536.188307][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1536.205928][ T30] ? __pfx___schedule+0x10/0x10 [ 1536.217573][ T30] ? schedule+0x298/0x350 [ 1536.226658][ T30] ? __pfx_lock_release+0x10/0x10 [ 1536.238634][ T30] ? hlock_class+0x4e/0x130 [ 1536.243574][ T30] ? __lock_acquire+0x1620/0x3cb0 [ 1536.259904][ T30] schedule+0xe7/0x350 [ 1536.292955][ T30] schedule_timeout+0x258/0x2a0 [ 1536.305177][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1536.320875][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1536.329328][ T30] __wait_for_common+0x3de/0x5f0 [ 1536.346616][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1536.359824][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1536.378872][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 1536.393941][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 1536.400859][ T30] __vhost_worker_flush+0x1aa/0x1e0 [ 1536.408107][ T30] ? __pfx___vhost_worker_flush+0x10/0x10 [ 1536.416716][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1536.423865][ T30] ? __pfx_vhost_flush_work+0x10/0x10 [ 1536.441283][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1536.456902][ T30] vhost_dev_flush+0xad/0x120 [ 1536.470072][ T30] ? __pfx_vhost_dev_flush+0x10/0x10 [ 1536.483626][ T30] vhost_net_flush+0x1d/0x1b0 [ 1536.498348][ T30] vhost_net_release+0xa9/0x260 [ 1536.507093][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 1536.521072][ T30] ? __pfx_locks_remove_file+0x10/0x10 [ 1536.528400][ T30] ? __pfx___might_resched+0x10/0x10 [ 1536.534979][ T30] ? evm_file_release+0xd6/0x1d0 [ 1536.540806][ T30] __fput+0x408/0xbb0 [ 1536.567208][ T30] task_work_run+0x14e/0x250 [ 1536.583122][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1536.602305][ T30] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1536.641100][ T30] do_syscall_64+0xda/0x250 [ 1536.662844][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.682580][ T30] RIP: 0033:0x7f4125d799f9 [ 1536.688520][ T30] RSP: 002b:00007ffce46ce5f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1536.700304][ T30] RAX: 0000000000000000 RBX: 00007f4125f17a80 RCX: 00007f4125d799f9 [ 1536.710905][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1536.721968][ T30] RBP: 00007f4125f17a80 R08: 0000000000000006 R09: 00007ffce46ce8df [ 1536.740858][ T30] R10: 00000000003ffccc R11: 0000000000000246 R12: 0000000000135368 [ 1536.762233][ T30] R13: 00007ffce46ce6f0 R14: 00007ffce46ce710 R15: ffffffffffffffff [ 1536.773679][ T30] [ 1536.829686][ T30] [ 1536.829686][ T30] Showing all locks held in the system: [ 1536.855085][ T30] 1 lock held by khungtaskd/30: [ 1536.866815][ T30] #0: ffffffff8ddb5ce0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1536.901846][ T30] 2 locks held by getty/4971: [ 1536.915434][ T30] #0: ffff88802feb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1536.927482][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1536.943637][ T30] 3 locks held by syz.3.2603/15973: [ 1536.959026][ T30] #0: ffff888060bc3808 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 1536.975267][ T30] #1: ffff88806046f258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x200/0x8e0 [ 1536.985233][ T30] #2: ffffffff8ddc1478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 1536.997860][ T30] 1 lock held by syz.3.2603/15974: [ 1537.033599][ T30] [ 1537.035977][ T30] ============================================= [ 1537.035977][ T30] [ 1537.045456][ T30] NMI backtrace for cpu 1 [ 1537.049820][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 1537.060336][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1537.070382][ T30] Call Trace: [ 1537.073651][ T30] [ 1537.076573][ T30] dump_stack_lvl+0x116/0x1f0 [ 1537.081251][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1537.086179][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1537.092155][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1537.098138][ T30] watchdog+0xf4e/0x1280 [ 1537.102387][ T30] ? __pfx_watchdog+0x10/0x10 [ 1537.107057][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1537.112246][ T30] ? __kthread_parkme+0x148/0x220 [ 1537.117280][ T30] ? __pfx_watchdog+0x10/0x10 [ 1537.121974][ T30] kthread+0x2c1/0x3a0 [ 1537.126034][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1537.131222][ T30] ? __pfx_kthread+0x10/0x10 [ 1537.135796][ T30] ret_from_fork+0x45/0x80 [ 1537.140207][ T30] ? __pfx_kthread+0x10/0x10 [ 1537.144786][ T30] ret_from_fork_asm+0x1a/0x30 [ 1537.149546][ T30] [ 1537.153635][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1537.158873][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1537.184892][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1537.191774][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 1537.202728][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1537.212786][ T30] Call Trace: [ 1537.216061][ T30] [ 1537.218992][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1537.223606][ T30] panic+0x6f5/0x7a0 [ 1537.227509][ T30] ? __pfx_panic+0x10/0x10 [ 1537.231940][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1537.237316][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1537.243313][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1537.248692][ T30] ? watchdog+0xd8a/0x1280 [ 1537.253120][ T30] ? watchdog+0xd7d/0x1280 [ 1537.257548][ T30] watchdog+0xd9b/0x1280 [ 1537.261798][ T30] ? __pfx_watchdog+0x10/0x10 [ 1537.266482][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1537.271687][ T30] ? __kthread_parkme+0x148/0x220 [ 1537.276723][ T30] ? __pfx_watchdog+0x10/0x10 [ 1537.281406][ T30] kthread+0x2c1/0x3a0 [ 1537.285474][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1537.290681][ T30] ? __pfx_kthread+0x10/0x10 [ 1537.295272][ T30] ret_from_fork+0x45/0x80 [ 1537.299697][ T30] ? __pfx_kthread+0x10/0x10 [ 1537.304287][ T30] ret_from_fork_asm+0x1a/0x30 [ 1537.309064][ T30] [ 1537.312294][ T30] Kernel Offset: disabled [ 1537.316609][ T30] Rebooting in 86400 seconds..