last executing test programs: 35.514144472s ago: executing program 1 (id=2846): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15442, 0x30808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) 35.477652083s ago: executing program 1 (id=2848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 35.276191632s ago: executing program 1 (id=2851): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) 35.102034659s ago: executing program 1 (id=2852): socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0xa1}]}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xa4}}, 0x0) 34.813467999s ago: executing program 1 (id=2854): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xee00, 0x0) 23.993540915s ago: executing program 0 (id=2933): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/154, 0x9a}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 22.81070306s ago: executing program 0 (id=2942): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 21.9099787s ago: executing program 3 (id=2950): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000002c0)={0x1, 0xffff}, 0xc) 21.866622677s ago: executing program 3 (id=2951): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/154, 0x9a}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 21.774758881s ago: executing program 2 (id=2952): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) 21.768405916s ago: executing program 1 (id=2857): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x2) 20.881560237s ago: executing program 2 (id=2953): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 20.749328015s ago: executing program 3 (id=2955): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 20.677249956s ago: executing program 2 (id=2957): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 19.974312211s ago: executing program 3 (id=2964): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) 19.928673936s ago: executing program 0 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$ndb(0x0, 0x0, 0x4901) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x1c) 19.732326215s ago: executing program 2 (id=2967): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 19.534315334s ago: executing program 2 (id=2968): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x2}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) 19.193367904s ago: executing program 3 (id=2969): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) 19.111677014s ago: executing program 2 (id=2970): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) 19.064904918s ago: executing program 3 (id=2971): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(r2, 0x0, 0x0, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write(r3, &(0x7f0000000080), 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) getsockname$netlink(r4, &(0x7f00000001c0), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xa}, 0x4b) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x1, 0x2}, 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xff}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0xfffffc87) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x7, &(0x7f0000000000)) 19.022116939s ago: executing program 0 (id=2972): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 18.673247705s ago: executing program 0 (id=2973): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) listen(r2, 0x0) 18.408869865s ago: executing program 0 (id=2975): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 15.785764261s ago: executing program 4 (id=2985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffee4, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4010) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 15.700793349s ago: executing program 4 (id=2986): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000002c0)={0x1, 0xffff}, 0xc) 15.643328791s ago: executing program 4 (id=2987): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 15.534140698s ago: executing program 4 (id=2988): socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0xa1}]}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480080002400000001208000140"], 0xa4}}, 0x0) 15.224415017s ago: executing program 4 (id=2989): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0xfffffffe, 0x4) 15.167820318s ago: executing program 4 (id=2990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 4.098630099s ago: executing program 32 (id=2970): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_xfrm(0x10, 0x3, 0x6) 4.070188851s ago: executing program 33 (id=2971): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwrite64(r2, 0x0, 0x0, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) write(r3, &(0x7f0000000080), 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) getsockname$netlink(r4, &(0x7f00000001c0), 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xa}, 0x4b) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x1, 0x2}, 0x6) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xff}, 0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0xfffffc87) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x7, &(0x7f0000000000)) 3.10026162s ago: executing program 34 (id=2975): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 0s ago: executing program 35 (id=2990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) kernel console output (not intermixed with test programs): sive=1 [ 141.672531][ T30] audit: type=1400 audit(1763123385.170:286): avc: denied { read } for pid=7054 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.799680][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.918131][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 142.753695][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 142.765746][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 142.783737][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.803829][ T10] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.831846][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.851762][ T7070] netlink: 'syz.0.359': attribute type 2 has an invalid length. [ 142.860078][ T7070] netlink: 119 bytes leftover after parsing attributes in process `syz.0.359'. [ 142.870315][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.879633][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.903723][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 142.934869][ T30] audit: type=1400 audit(1763123386.430:287): avc: denied { setopt } for pid=7069 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.438333][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 143.568645][ T30] audit: type=1400 audit(1763123387.070:288): avc: denied { shutdown } for pid=7080 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.843246][ T7087] input: syz0 as /devices/virtual/input/input8 [ 144.098037][ T30] audit: type=1400 audit(1763123387.600:289): avc: denied { create } for pid=7096 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.123207][ T30] audit: type=1400 audit(1763123387.620:290): avc: denied { ioctl } for pid=7096 comm="syz.0.368" path="socket:[11668]" dev="sockfs" ino=11668 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.123427][ T7097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.368'. [ 144.170477][ T7097] netlink: 32 bytes leftover after parsing attributes in process `syz.0.368'. [ 144.207884][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 144.224466][ T7097] geneve2: entered promiscuous mode [ 144.230004][ T7097] geneve2: entered allmulticast mode [ 144.254477][ T1136] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 2048 - 0 [ 144.280835][ T1136] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 2048 - 0 [ 144.305535][ T1136] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 2048 - 0 [ 144.324764][ T1136] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 2048 - 0 [ 144.912655][ T7108] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.373'. [ 144.938743][ T5820] usb 5-1: USB disconnect, device number 6 [ 145.160811][ T7116] fuse: Unknown parameter '0x0000000000000003' [ 145.176865][ T7115] netlink: 'syz.4.374': attribute type 39 has an invalid length. [ 145.203137][ T30] audit: type=1400 audit(1763123388.700:291): avc: denied { ioctl } for pid=7117 comm="syz.0.376" path="socket:[12688]" dev="sockfs" ino=12688 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.228671][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 145.263911][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 145.275338][ T30] audit: type=1400 audit(1763123388.750:292): avc: denied { setopt } for pid=7111 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.369020][ T30] audit: type=1400 audit(1763123388.750:293): avc: denied { nlmsg_read } for pid=7111 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.396655][ T30] audit: type=1400 audit(1763123388.750:294): avc: denied { write } for pid=7111 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.461222][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.820459][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 146.832431][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 146.844102][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.854168][ T10] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.865559][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.880113][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.892030][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.996778][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 147.776146][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.394'. [ 148.032448][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 148.042345][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 148.287724][ T30] audit: type=1400 audit(1763123391.790:295): avc: denied { connect } for pid=7174 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.748487][ T7188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 149.170746][ T1582] usb 5-1: USB disconnect, device number 7 [ 149.252610][ T7204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.408'. [ 149.335136][ T30] audit: type=1400 audit(1763123392.840:296): avc: denied { create } for pid=7207 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.357644][ T30] audit: type=1400 audit(1763123392.840:297): avc: denied { connect } for pid=7207 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.378709][ T30] audit: type=1400 audit(1763123392.840:298): avc: denied { ioctl } for pid=7207 comm="syz.4.410" path="socket:[12846]" dev="sockfs" ino=12846 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.404647][ T30] audit: type=1400 audit(1763123392.840:299): avc: denied { write } for pid=7207 comm="syz.4.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.511651][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 149.521815][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 149.552823][ T30] audit: type=1400 audit(1763123393.050:300): avc: denied { listen } for pid=7212 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.397708][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 150.397723][ T30] audit: type=1400 audit(1763123393.900:302): avc: denied { getopt } for pid=7225 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.686187][ T7244] ecryptfs: Unknown parameter '³(' [ 151.314829][ T30] audit: type=1400 audit(1763123394.810:303): avc: denied { getopt } for pid=7260 comm="syz.3.429" lport=33919 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 151.565152][ T7266] fuse: Unknown parameter 'fd0x0000000000000003' [ 151.792931][ T7273] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 151.961208][ T30] audit: type=1400 audit(1763123395.460:304): avc: denied { read } for pid=7274 comm="syz.1.435" path="socket:[13003]" dev="sockfs" ino=13003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.011855][ T7280] raw_sendmsg: syz.1.435 forgot to set AF_INET. Fix it! [ 152.233553][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 152.317583][ T7281] ecryptfs: Unknown parameter '³(' [ 152.473676][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 152.865472][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 153.004256][ T7299] fuse: Unknown parameter 'fd0x0000000000000003' [ 153.049152][ T7294] hsr_slave_1 (unregistering): left promiscuous mode [ 153.166989][ T30] audit: type=1400 audit(1763123396.660:305): avc: denied { getopt } for pid=7291 comm="syz.3.442" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.515017][ T30] audit: type=1400 audit(1763123397.020:306): avc: denied { setopt } for pid=7311 comm="syz.0.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.574685][ T7313] syzkaller0: entered promiscuous mode [ 153.580187][ T7313] syzkaller0: entered allmulticast mode [ 153.821769][ T7317] ecryptfs: Unknown parameter '³(' [ 154.523675][ T1582] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.647396][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 154.775207][ T1582] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.795371][ T1582] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 154.807096][ T1582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.302006][ T1582] usb 3-1: Product: syz [ 155.317810][ T1582] usb 3-1: Manufacturer: syz [ 155.328653][ T1582] usb 3-1: SerialNumber: syz [ 155.339662][ T1582] usb 3-1: config 0 descriptor?? [ 155.602150][ T7335] hsr_slave_1 (unregistering): left promiscuous mode [ 155.818983][ T7347] syzkaller1: entered promiscuous mode [ 155.884613][ T7347] syzkaller1: entered allmulticast mode [ 157.425124][ T5926] usb 3-1: USB disconnect, device number 5 [ 157.791825][ T7374] ecryptfs: Unknown parameter '³(' [ 158.031161][ T30] audit: type=1400 audit(1763123401.530:307): avc: denied { write } for pid=7383 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.544711][ T7397] netlink: 212396 bytes leftover after parsing attributes in process `syz.1.483'. [ 158.554915][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'. [ 160.432122][ T7433] ecryptfs: Unknown parameter '³(' [ 160.726448][ T7436] Illegal XDP return value 98 on prog (id 64) dev syz_tun, expect packet loss! [ 161.703396][ T30] audit: type=1400 audit(1763123405.200:308): avc: denied { create } for pid=7450 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.849262][ T7453] veth3: entered promiscuous mode [ 161.910179][ T7459] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.502'. [ 162.146674][ T30] audit: type=1400 audit(1763123405.650:309): avc: denied { getopt } for pid=7468 comm="syz.0.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.175186][ T7471] netlink: 596 bytes leftover after parsing attributes in process `syz.2.507'. [ 164.050213][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 164.609518][ T7505] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.517'. [ 165.036458][ T7517] input: syz0 as /devices/virtual/input/input9 [ 165.625283][ T7521] syzkaller0: entered promiscuous mode [ 165.638440][ T7521] syzkaller0: entered allmulticast mode [ 165.727764][ T7529] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 166.017572][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.528'. [ 166.340357][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 166.498820][ T7554] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.535'. [ 166.714835][ T30] audit: type=1400 audit(1763123410.210:310): avc: denied { setopt } for pid=7559 comm="syz.2.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.297888][ T7569] svc: failed to register nfsdv3 RPC service (errno 111). [ 168.323770][ T7569] svc: failed to register nfsaclv3 RPC service (errno 111). [ 169.119673][ T7606] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.556'. [ 171.381333][ T30] audit: type=1400 audit(1763123414.880:311): avc: denied { create } for pid=7648 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.545181][ T30] audit: type=1400 audit(1763123414.890:312): avc: denied { bind } for pid=7648 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.830700][ T30] audit: type=1400 audit(1763123414.890:313): avc: denied { listen } for pid=7648 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 171.852537][ T30] audit: type=1400 audit(1763123415.250:314): avc: denied { getopt } for pid=7648 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.942570][ T30] audit: type=1400 audit(1763123415.250:315): avc: denied { setopt } for pid=7648 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.062658][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 173.459712][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 173.500355][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.588'. [ 176.621857][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 176.634916][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'. [ 177.038685][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 177.577870][ T30] audit: type=1400 audit(1763123421.080:316): avc: denied { create } for pid=7824 comm="syz.4.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.609587][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 177.643667][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 177.657709][ T30] audit: type=1400 audit(1763123421.080:317): avc: denied { ioctl } for pid=7824 comm="syz.4.637" path="socket:[13967]" dev="sockfs" ino=13967 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 177.859605][ T7836] binder: 7835:7836 ioctl 4018620d 0 returned -22 [ 178.680503][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 179.267682][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'. [ 179.661847][ T7875] binder: 7874:7875 ioctl 4018620d 0 returned -22 [ 179.688696][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'. [ 181.369826][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 181.547440][ T30] audit: type=1400 audit(1763123425.050:318): avc: denied { read } for pid=7902 comm="syz.3.665" path="socket:[14126]" dev="sockfs" ino=14126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.743762][ T30] audit: type=1400 audit(1763123425.240:319): avc: denied { ioctl } for pid=7904 comm="syz.1.666" path="uts:[4026532947]" dev="nsfs" ino=4026532947 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 181.896807][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'. [ 181.940279][ T7913] binder: 7912:7913 ioctl 4018620d 0 returned -22 [ 182.971910][ T7933] tipc: Started in network mode [ 182.987325][ T7933] tipc: Node identity b26c2aff624e, cluster identity 4711 [ 183.005055][ T7933] tipc: Enabled bearer , priority 0 [ 183.095319][ T7933] syzkaller0: entered promiscuous mode [ 183.101314][ T7933] syzkaller0: entered allmulticast mode [ 183.138112][ T7935] tipc: Resetting bearer [ 183.186438][ T7931] tipc: Resetting bearer [ 183.241189][ T30] audit: type=1400 audit(1763123426.740:320): avc: denied { bind } for pid=7936 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.293775][ T7931] tipc: Disabling bearer [ 183.341100][ T30] audit: type=1400 audit(1763123426.770:321): avc: denied { node_bind } for pid=7936 comm="syz.2.677" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 183.811447][ T7947] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 183.848994][ T7952] binder: BINDER_SET_CONTEXT_MGR already set [ 183.855613][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.681'. [ 183.889225][ T7952] binder: 7951:7952 ioctl 4018620d 200000000040 returned -16 [ 184.450390][ T30] audit: type=1400 audit(1763123427.950:322): avc: denied { getopt } for pid=7968 comm="syz.2.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.068749][ T7981] input: syz0 as /devices/virtual/input/input11 [ 185.756763][ T7995] binder: BINDER_SET_CONTEXT_MGR already set [ 185.772960][ T7995] binder: 7993:7995 ioctl 4018620d 200000000040 returned -16 [ 186.195357][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 187.753635][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 187.909415][ T8021] binder: BINDER_SET_CONTEXT_MGR already set [ 187.947684][ T8021] binder: 8020:8021 ioctl 4018620d 200000000040 returned -16 [ 188.762084][ T30] audit: type=1400 audit(1763123432.260:323): avc: denied { bind } for pid=8044 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.789001][ T8045] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 188.837787][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.890872][ T8045] bond0: (slave team0): Enslaving as an active interface with an up link [ 191.041823][ T8079] svc: failed to register nfsdv3 RPC service (errno 111). [ 191.100591][ T8079] svc: failed to register nfsaclv3 RPC service (errno 111). [ 191.270184][ T8096] binder: 8092:8096 ioctl c0306201 0 returned -14 [ 193.152276][ T30] audit: type=1400 audit(1763123436.650:324): avc: denied { write } for pid=8129 comm="syz.0.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 193.356076][ T8137] binder: 8136:8137 ioctl c0306201 0 returned -14 [ 193.922449][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.929021][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.162222][ T30] audit: type=1400 audit(1763123437.660:325): avc: denied { bind } for pid=8155 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.446530][ T8157] Device name cannot be null; rc = [-22] [ 195.993776][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 195.993784][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 195.993846][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 195.999813][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 197.544588][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.776'. [ 197.697447][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 199.439612][ T8253] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 199.667693][ T8261] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 199.667693][ T8261] program syz.2.789 not setting count and/or reply_len properly [ 200.068844][ T8260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.076396][ T8260] IPv6: NLM_F_CREATE should be set when creating new route [ 200.083684][ T8260] IPv6: NLM_F_CREATE should be set when creating new route [ 200.170547][ T8253] bond1: entered promiscuous mode [ 200.260878][ T8253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.283323][ T8253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8253 comm=syz.4.790 [ 200.384938][ T8253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8253 comm=syz.4.790 [ 200.414398][ T30] audit: type=1400 audit(1763123443.900:326): avc: denied { audit_write } for pid=8252 comm="syz.4.790" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.440463][ T8259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.471404][ T8259] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 200.995570][ T8259] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 201.076684][ T8278] syzkaller0: entered promiscuous mode [ 201.092412][ T8278] syzkaller0: entered allmulticast mode [ 202.042899][ T5826] Bluetooth: hci4: link tx timeout [ 202.048339][ T5826] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.057887][ T5824] Bluetooth: hci4: link tx timeout [ 202.063069][ T5824] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.077498][ T5824] Bluetooth: hci4: link tx timeout [ 202.082642][ T5824] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.091518][ T5824] Bluetooth: hci4: link tx timeout [ 202.096729][ T5824] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.218289][ T5824] Bluetooth: hci4: link tx timeout [ 202.223479][ T5824] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.231515][ T5824] Bluetooth: hci4: link tx timeout [ 202.237368][ T5824] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 202.830229][ T8323] syzkaller0: entered promiscuous mode [ 202.849293][ T8323] syzkaller0: entered allmulticast mode [ 204.075350][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 204.784700][ T8361] syzkaller0: entered promiscuous mode [ 204.790233][ T8361] syzkaller0: entered allmulticast mode [ 205.007262][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.829'. [ 205.767886][ T8416] input: syz0 as /devices/virtual/input/input12 [ 206.131031][ T8418] netlink: 3 bytes leftover after parsing attributes in process `syz.4.835'. [ 206.227768][ T8420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8420 comm=syz.4.835 [ 206.272513][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.835'. [ 206.329375][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.835'. [ 207.629134][ T8418] 0ªX¹¦À: renamed from caif0 [ 207.650134][ T8418] 0ªX¹¦À: entered allmulticast mode [ 207.676439][ T8418] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 207.735336][ T8447] syzkaller1: entered promiscuous mode [ 207.747422][ T8447] syzkaller1: entered allmulticast mode [ 208.615656][ T8487] syzkaller0: entered promiscuous mode [ 208.621162][ T8487] syzkaller0: entered allmulticast mode [ 208.768187][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 209.451282][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 209.460343][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 209.634357][ T30] audit: type=1400 audit(1763123453.120:327): avc: denied { write } for pid=8526 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.664357][ T8539] netlink: zone id is out of range [ 209.686175][ T8539] netlink: zone id is out of range [ 209.697087][ T30] audit: type=1400 audit(1763123453.160:328): avc: denied { accept } for pid=8538 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.722329][ T8539] netlink: set zone limit has 8 unknown bytes [ 209.767246][ T30] audit: type=1400 audit(1763123453.270:329): avc: denied { bind } for pid=8538 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.836394][ T30] audit: type=1400 audit(1763123453.270:330): avc: denied { getopt } for pid=8538 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.877428][ T30] audit: type=1400 audit(1763123453.270:331): avc: denied { create } for pid=8538 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 209.928295][ T30] audit: type=1400 audit(1763123453.360:332): avc: denied { bind } for pid=8528 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.069178][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.876'. [ 210.646272][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 210.681231][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 211.103718][ T8617] syzkaller0: entered promiscuous mode [ 211.117456][ T8617] syzkaller0: entered allmulticast mode [ 211.411361][ T8638] netlink: 'syz.2.900': attribute type 3 has an invalid length. [ 212.368911][ T8665] tipc: Started in network mode [ 212.390775][ T8665] tipc: Node identity 720abac26bcc, cluster identity 4711 [ 212.496652][ T8665] tipc: Enabled bearer , priority 0 [ 212.517929][ T8668] vlan3: entered promiscuous mode [ 212.566923][ T8668] vlan3: entered allmulticast mode [ 212.600323][ T8668] hsr_slave_1: entered allmulticast mode [ 213.149107][ T8670] syzkaller0: entered promiscuous mode [ 213.183634][ T8670] syzkaller0: entered allmulticast mode [ 213.379933][ T8682] syzkaller0: entered promiscuous mode [ 213.404391][ T8682] syzkaller0: entered allmulticast mode [ 213.603089][ T8690] tipc: Resetting bearer [ 213.666041][ T8658] tipc: Resetting bearer [ 213.775546][ T8658] tipc: Disabling bearer [ 213.811987][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 214.332812][ T30] audit: type=1400 audit(1763123457.830:333): avc: denied { listen } for pid=8733 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.148386][ T5926] tipc: Node number set to 432454338 [ 215.177952][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.922'. [ 216.760135][ T8786] input: syz0 as /devices/virtual/input/input13 [ 217.557659][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 217.583630][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 217.892663][ T30] audit: type=1400 audit(1763123461.390:334): avc: denied { bind } for pid=8810 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.985743][ T30] audit: type=1400 audit(1763123461.460:335): avc: denied { write } for pid=8810 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 218.486251][ T8841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 219.040965][ T30] audit: type=1400 audit(1763123462.540:336): avc: denied { map } for pid=8810 comm="syz.3.941" path="socket:[17742]" dev="sockfs" ino=17742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.112558][ T30] audit: type=1400 audit(1763123462.540:337): avc: denied { read } for pid=8810 comm="syz.3.941" path="socket:[17742]" dev="sockfs" ino=17742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.345633][ T8865] syzkaller0: entered promiscuous mode [ 219.363524][ T8865] syzkaller0: entered allmulticast mode [ 220.120085][ T8883] netlink: 3 bytes leftover after parsing attributes in process `syz.2.959'. [ 220.143893][ T8883] 0ªX¹¦À: renamed from caif0 [ 220.184174][ T8889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8889 comm=syz.2.959 [ 220.228557][ T8883] 0ªX¹¦À: entered allmulticast mode [ 220.252344][ T8883] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 220.329489][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.959'. [ 220.414194][ T8891] syzkaller0: entered promiscuous mode [ 220.438285][ T8902] binder: 8901:8902 ioctl c0306201 0 returned -14 [ 220.438335][ T8891] syzkaller0: entered allmulticast mode [ 221.006213][ T8899] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 221.060941][ T8908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8908 comm=syz.2.966 [ 221.307187][ T8906] syzkaller0: entered promiscuous mode [ 221.312719][ T8906] syzkaller0: entered allmulticast mode [ 222.426685][ T8926] syzkaller0: entered promiscuous mode [ 222.432515][ T8926] syzkaller0: entered allmulticast mode [ 222.716341][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.978'. [ 222.890617][ T8963] syzkaller0: entered promiscuous mode [ 222.911008][ T8963] syzkaller0: entered allmulticast mode [ 222.949719][ T8971] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 222.999434][ T30] audit: type=1400 audit(1763123466.500:338): avc: denied { read } for pid=8970 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 223.264784][ T8984] syzkaller0: entered promiscuous mode [ 223.290307][ T8984] syzkaller0: entered allmulticast mode [ 223.296267][ T8986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.945003][ T9010] syzkaller0: entered promiscuous mode [ 223.968308][ T1582] IPVS: starting estimator thread 0... [ 223.994109][ T9010] syzkaller0: entered allmulticast mode [ 224.063785][ T9014] IPVS: using max 37 ests per chain, 88800 per kthread [ 224.228844][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 224.565168][ T9042] warning: `syz.4.1008' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 225.484512][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 225.684500][ T9087] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1023'. [ 225.827660][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1023'. [ 226.006710][ T9087] 1ªX¹¦À: renamed from 60ªX¹¦À [ 226.447522][ T9087] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 226.808973][ T9107] svc: failed to register nfsdv3 RPC service (errno 111). [ 226.977922][ T9107] svc: failed to register nfsaclv3 RPC service (errno 111). [ 230.001155][ T9177] binder: 9175:9177 ioctl c0306201 0 returned -14 [ 230.470046][ T30] audit: type=1400 audit(1763123473.970:339): avc: denied { bind } for pid=9194 comm="syz.3.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 230.724241][ T5824] Bluetooth: hci4: command 0x0405 tx timeout [ 230.901076][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 231.045355][ T30] audit: type=1400 audit(1763123474.540:340): avc: denied { firmware_load } for pid=9194 comm="syz.3.1062" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 231.242631][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1070'. [ 231.251776][ T9218] netlink: 'syz.2.1070': attribute type 3 has an invalid length. [ 231.341449][ T9195] syz.3.1062 (9195) used greatest stack depth: 19720 bytes left [ 232.447064][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1082'. [ 232.834856][ T5820] IPVS: starting estimator thread 0... [ 232.841116][ T9263] IPVS: fo: FWM 3 0x00000003 - no destination available [ 232.851027][ T9262] binder: BINDER_SET_CONTEXT_MGR already set [ 232.857256][ T9262] binder: 9261:9262 ioctl 4018620d 200000000040 returned -16 [ 232.865484][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 232.923680][ T9264] IPVS: using max 46 ests per chain, 110400 per kthread [ 233.243628][ T30] audit: type=1400 audit(1763123476.740:341): avc: denied { write } for pid=9280 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 233.293789][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 233.461678][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 234.386700][ T9306] tipc: Enabled bearer , priority 0 [ 234.455110][ T9306] syzkaller0: MTU too low for tipc bearer [ 234.490626][ T9306] tipc: Disabling bearer [ 234.640865][ T9314] IPVS: length: 141 != 8 [ 235.490252][ T9355] Bluetooth: MGMT ver 1.23 [ 235.671797][ T24] IPVS: starting estimator thread 0... [ 236.693035][ T9364] IPVS: using max 40 ests per chain, 96000 per kthread [ 237.065147][ T9392] tipc: Started in network mode [ 237.071495][ T9392] tipc: Node identity 8aa0bbe6f00c, cluster identity 4711 [ 237.078932][ T9392] tipc: Enabled bearer , priority 0 [ 237.086629][ T9392] syzkaller0: entered promiscuous mode [ 237.092218][ T9392] syzkaller0: entered allmulticast mode [ 237.181309][ T9392] tipc: Resetting bearer [ 237.204798][ T9390] tipc: Resetting bearer [ 237.249541][ T9390] tipc: Disabling bearer [ 237.353117][ T30] audit: type=1400 audit(1763123480.850:342): avc: denied { setopt } for pid=9402 comm="syz.0.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.007029][ T9408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.447324][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 239.458900][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 239.463350][ T9435] vlan2: entered allmulticast mode [ 239.482285][ T9435] bridge0: port 4(vlan2) entered blocking state [ 239.490307][ T9435] bridge0: port 4(vlan2) entered disabled state [ 239.500994][ T9435] vlan2: entered promiscuous mode [ 239.799818][ T9458] syzkaller0: entered promiscuous mode [ 239.805574][ T9458] syzkaller0: entered allmulticast mode [ 240.264975][ T9473] tipc: Started in network mode [ 240.270077][ T9473] tipc: Node identity 2aa60c937414, cluster identity 4711 [ 240.284702][ T9473] tipc: Enabled bearer , priority 0 [ 240.295234][ T9473] syzkaller0: entered promiscuous mode [ 240.300938][ T9473] syzkaller0: entered allmulticast mode [ 240.344042][ T9473] tipc: Resetting bearer [ 240.366538][ T9472] tipc: Resetting bearer [ 240.390199][ T9472] tipc: Disabling bearer [ 240.619252][ T30] audit: type=1400 audit(1763123484.110:343): avc: denied { setopt } for pid=9480 comm="syz.3.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.797107][ T9489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9489 comm=syz.3.1163 [ 240.843245][ T9489] ip6erspan0: entered allmulticast mode [ 240.857622][ T9493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1165'. [ 240.870124][ T9492] netlink: 'syz.0.1164': attribute type 1 has an invalid length. [ 240.887088][ T30] audit: type=1400 audit(1763123484.390:344): avc: denied { ioctl } for pid=9490 comm="syz.2.1165" path="socket:[20817]" dev="sockfs" ino=20817 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.902172][ T9493] macvtap0: entered promiscuous mode [ 240.941341][ T9493] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 241.037799][ T8846] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 241.445450][ T9530] svc: failed to register nfsdv3 RPC service (errno 111). [ 241.453383][ T9530] svc: failed to register nfsaclv3 RPC service (errno 111). [ 242.452835][ T9564] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 242.531426][ T9569] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.572288][ T9570] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 242.592707][ T9569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9569 comm=syz.4.1195 [ 242.625976][ T9569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9569 comm=syz.4.1195 [ 242.766583][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 242.813639][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 242.838152][ T9582] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 242.943467][ T9590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9590 comm=syz.1.1205 [ 242.966712][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1205'. [ 243.438287][ T30] audit: type=1400 audit(1763123486.930:345): avc: denied { ioctl } for pid=9612 comm="syz.1.1217" path="socket:[21094]" dev="sockfs" ino=21094 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.618491][ T9626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1220'. [ 243.989780][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 244.761729][ T9658] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 245.022888][ T9676] svc: failed to register nfsdv3 RPC service (errno 111). [ 245.052510][ T9676] svc: failed to register nfsaclv3 RPC service (errno 111). [ 245.118924][ T9686] tipc: Enabled bearer , priority 0 [ 245.127715][ T9686] syzkaller0: entered promiscuous mode [ 245.133338][ T9686] syzkaller0: entered allmulticast mode [ 245.164671][ T9686] tipc: Resetting bearer [ 245.172504][ T9685] tipc: Resetting bearer [ 245.194627][ T9685] tipc: Disabling bearer [ 245.919837][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1250'. [ 246.344706][ T9713] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1254'. [ 246.885908][ T9718] tipc: Enabled bearer , priority 0 [ 246.905890][ T9718] syzkaller0: entered promiscuous mode [ 246.920001][ T9718] syzkaller0: entered allmulticast mode [ 246.970707][ T9718] tipc: Resetting bearer [ 247.267042][ T9716] tipc: Resetting bearer [ 247.349327][ T9716] tipc: Disabling bearer [ 247.765950][ T30] audit: type=1400 audit(1763123491.270:346): avc: denied { write } for pid=9745 comm="syz.1.1268" path="socket:[21375]" dev="sockfs" ino=21375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.834508][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1269'. [ 248.821446][ T9777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1280'. [ 248.856523][ T9778] input: syz0 as /devices/virtual/input/input14 [ 248.915651][ T30] audit: type=1107 audit(1763123492.420:347): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='JKe-¦'cDÖeù!8äæ º|gI€/èYµ“*ÓÒ' [ 248.915833][ T9780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9780 comm=syz.0.1281 [ 248.971967][ T30] audit: type=1400 audit(1763123492.470:348): avc: denied { shutdown } for pid=9782 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.012384][ T9783] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 249.467510][ T9786] svc: failed to register nfsdv3 RPC service (errno 111). [ 249.556308][ T9786] svc: failed to register nfsaclv3 RPC service (errno 111). [ 249.679130][ T9804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1288'. [ 251.263634][ T9848] xt_hashlimit: size too large, truncated to 1048576 [ 251.524320][ T30] audit: type=1400 audit(1763123495.030:349): avc: denied { create } for pid=9859 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 251.568495][ T9854] syzkaller0: entered promiscuous mode [ 251.574534][ T9854] syzkaller0: entered allmulticast mode [ 251.617443][ T9860] netlink: 'syz.2.1311': attribute type 12 has an invalid length. [ 251.629387][ T9860] tipc: Started in network mode [ 251.634540][ T9860] tipc: Node identity ac1414aa, cluster identity 4711 [ 251.642808][ T9860] tipc: Enabled bearer , priority 10 [ 251.946567][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 252.046088][ T9881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9881 comm=syz.3.1322 [ 252.094533][ T9881] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1322'. [ 252.579232][ T9901] netlink: 'syz.2.1328': attribute type 8 has an invalid length. [ 252.637457][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 252.677186][ T9904] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1329'. [ 252.696614][ T9904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1329'. [ 252.753679][ T5885] tipc: Node number set to 2886997162 [ 252.914001][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 253.778647][ T9941] xt_hashlimit: size too large, truncated to 1048576 [ 254.163190][ T30] audit: type=1400 audit(1763123497.660:350): avc: denied { listen } for pid=9954 comm="syz.2.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.511376][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 254.520620][ T9969] syzkaller0: entered promiscuous mode [ 254.527472][ T9969] syzkaller0: entered allmulticast mode [ 255.051572][ T24] IPVS: starting estimator thread 0... [ 255.153648][ T9996] IPVS: using max 47 ests per chain, 112800 per kthread [ 255.306260][ T30] audit: type=1400 audit(1763123498.810:351): avc: denied { ioctl } for pid=10003 comm="syz.1.1361" path="socket:[22798]" dev="sockfs" ino=22798 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.374083][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.380408][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.486838][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 255.606951][T10013] input: syz0 as /devices/virtual/input/input15 [ 256.001148][ T30] audit: type=1400 audit(1763123499.500:352): avc: denied { connect } for pid=10036 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 256.366127][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 256.379074][T10052] tipc: Enabled bearer , priority 0 [ 256.386418][T10052] syzkaller0: entered promiscuous mode [ 256.391993][T10052] syzkaller0: entered allmulticast mode [ 256.514773][T10052] tipc: Resetting bearer [ 256.557792][T10051] tipc: Resetting bearer [ 256.674034][T10051] tipc: Disabling bearer [ 256.930441][T10076] input: syz0 as /devices/virtual/input/input16 [ 257.216592][T10079] svc: failed to register nfsdv3 RPC service (errno 111). [ 257.245940][T10079] svc: failed to register nfsaclv3 RPC service (errno 111). [ 257.748769][T10101] xt_hashlimit: size too large, truncated to 1048576 [ 258.314428][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 258.345986][T10127] svc: failed to register nfsdv3 RPC service (errno 111). [ 258.397970][T10127] svc: failed to register nfsaclv3 RPC service (errno 111). [ 258.710966][T10151] netlink: 'syz.3.1413': attribute type 4 has an invalid length. [ 258.746277][ T30] audit: type=1400 audit(1763123502.250:353): avc: denied { create } for pid=10148 comm="syz.3.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 259.069471][T10170] syzkaller0: entered promiscuous mode [ 259.097724][T10170] syzkaller0: entered allmulticast mode [ 260.164024][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'. [ 260.405503][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1452'. [ 261.170811][ T30] audit: type=1400 audit(1763123504.670:354): avc: denied { getopt } for pid=10290 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 261.313213][T10296] svc: failed to register nfsdv3 RPC service (errno 111). [ 261.322651][T10296] svc: failed to register nfsaclv3 RPC service (errno 111). [ 261.919807][ T30] audit: type=1400 audit(1763123505.420:355): avc: denied { create } for pid=10318 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 262.695951][T10365] tipc: Enabled bearer , priority 0 [ 262.717260][T10365] syzkaller0: entered promiscuous mode [ 262.722789][T10365] syzkaller0: entered allmulticast mode [ 262.746638][T10365] tipc: Resetting bearer [ 262.783744][T10364] tipc: Resetting bearer [ 262.843334][T10364] tipc: Disabling bearer [ 263.389103][T10393] syzkaller0: entered promiscuous mode [ 263.396414][T10393] syzkaller0: entered allmulticast mode [ 263.777092][T10415] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1506'. [ 263.873437][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 264.364523][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 264.915510][ T30] audit: type=1400 audit(1763123508.420:356): avc: denied { map } for pid=10428 comm="syz.4.1513" path="socket:[24039]" dev="sockfs" ino=24039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.394462][T10476] tipc: Enabled bearer , priority 0 [ 265.397097][ T30] audit: type=1400 audit(1763123508.420:357): avc: denied { read } for pid=10428 comm="syz.4.1513" path="socket:[24039]" dev="sockfs" ino=24039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.447107][T10476] syzkaller0: entered promiscuous mode [ 265.452618][T10476] syzkaller0: entered allmulticast mode [ 265.544232][T10476] tipc: Resetting bearer [ 265.693855][T10475] tipc: Resetting bearer [ 265.810156][T10475] tipc: Disabling bearer [ 265.916370][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 266.022603][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 266.052756][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1541'. [ 266.187735][T10508] svc: failed to register nfsdv3 RPC service (errno 111). [ 266.254343][ T30] audit: type=1400 audit(1763123509.730:358): avc: denied { listen } for pid=10517 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.265867][T10508] svc: failed to register nfsaclv3 RPC service (errno 111). [ 266.333130][ T30] audit: type=1400 audit(1763123509.730:359): avc: denied { accept } for pid=10517 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.359791][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1546'. [ 266.385677][ T30] audit: type=1400 audit(1763123509.780:360): avc: denied { create } for pid=10517 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.439275][ T30] audit: type=1400 audit(1763123509.780:361): avc: denied { connect } for pid=10517 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.484082][ T30] audit: type=1400 audit(1763123509.780:362): avc: denied { setopt } for pid=10517 comm="syz.0.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.505759][T10533] syzkaller0: entered promiscuous mode [ 266.511460][T10533] syzkaller0: entered allmulticast mode [ 266.810352][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1556'. [ 266.820163][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1556'. [ 266.940443][ T30] audit: type=1400 audit(1763123510.440:363): avc: denied { setopt } for pid=10552 comm="syz.1.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 267.121100][T10563] syzkaller0: entered promiscuous mode [ 267.126910][T10563] syzkaller0: entered allmulticast mode [ 267.308518][T10568] syzkaller0: entered promiscuous mode [ 267.323696][T10568] syzkaller0: entered allmulticast mode [ 267.405997][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1565'. [ 267.946389][T10588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.949748][ T30] audit: type=1400 audit(1763123511.450:364): avc: denied { map } for pid=10587 comm="syz.4.1576" path="socket:[24781]" dev="sockfs" ino=24781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.984319][T10595] input: syz0 as /devices/virtual/input/input17 [ 268.483118][T10613] syzkaller0: entered promiscuous mode [ 268.493564][T10613] syzkaller0: entered allmulticast mode [ 269.321180][T10644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 270.126460][T10641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.132557][T10641] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 270.281166][T10641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.298107][T10641] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 270.336258][T10641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.342200][T10641] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 270.476911][T10641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.484420][T10641] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 270.754426][T10672] syzkaller0: entered promiscuous mode [ 270.768896][T10672] syzkaller0: entered allmulticast mode [ 271.821440][T10704] tipc: Enabled bearer , priority 0 [ 271.857889][T10704] tipc: Resetting bearer [ 271.917369][T10703] tipc: Disabling bearer [ 272.258468][T10721] tipc: Enabled bearer , priority 0 [ 272.265617][T10721] syzkaller0: entered promiscuous mode [ 272.271077][T10721] syzkaller0: entered allmulticast mode [ 272.312504][T10721] tipc: Resetting bearer [ 272.320366][T10720] tipc: Resetting bearer [ 272.390032][T10720] tipc: Disabling bearer [ 272.426746][T10727] wg1: entered promiscuous mode [ 272.441865][T10727] wg1: entered allmulticast mode [ 272.492956][ T30] audit: type=1400 audit(1763123515.990:365): avc: denied { connect } for pid=10726 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.647409][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1622'. [ 273.928306][T10753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'. [ 274.193511][T10774] tipc: Enabled bearer , priority 0 [ 274.230088][T10774] syzkaller0: entered promiscuous mode [ 274.247452][T10774] syzkaller0: entered allmulticast mode [ 274.277026][T10774] tipc: Resetting bearer [ 274.302197][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 274.330787][T10773] tipc: Resetting bearer [ 274.387472][T10773] tipc: Disabling bearer [ 274.495223][T10787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1635'. [ 275.863512][T10830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1649'. [ 276.054430][T10839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1651'. [ 276.194552][T10848] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 277.031699][T10893] tipc: Enabled bearer , priority 0 [ 277.052165][T10893] syzkaller0: entered promiscuous mode [ 277.059845][T10893] syzkaller0: entered allmulticast mode [ 277.079264][T10893] tipc: Resetting bearer [ 277.093787][T10892] tipc: Resetting bearer [ 277.165919][T10892] tipc: Disabling bearer [ 277.398157][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1675'. [ 277.467397][ T30] audit: type=1804 audit(1763123520.970:366): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1676" name="cgroup.controllers" dev="tmpfs" ino=1806 res=1 errno=0 [ 277.495356][ T30] audit: type=1800 audit(1763123520.970:367): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1676" name="cgroup.controllers" dev="tmpfs" ino=1806 res=0 errno=0 [ 277.527755][ T30] audit: type=1400 audit(1763123521.030:368): avc: denied { getopt } for pid=10909 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.608482][ T30] audit: type=1400 audit(1763123521.030:369): avc: denied { getopt } for pid=10909 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.649278][ T30] audit: type=1400 audit(1763123521.090:370): avc: denied { setopt } for pid=10909 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.787386][ T30] audit: type=1400 audit(1763123521.280:371): avc: denied { ioctl } for pid=10927 comm="syz.1.1680" path="socket:[26145]" dev="sockfs" ino=26145 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 277.932233][T10935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1682'. [ 277.963200][T10937] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1683'. [ 278.378409][T10966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1693'. [ 278.532586][T10976] tipc: Enabled bearer , priority 0 [ 278.541891][T10976] syzkaller0: entered promiscuous mode [ 278.548390][T10976] syzkaller0: entered allmulticast mode [ 278.574724][T10976] tipc: Resetting bearer [ 278.588849][T10973] tipc: Resetting bearer [ 278.614769][T10973] tipc: Disabling bearer [ 278.658479][T10986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1698'. [ 278.750773][T10991] syzkaller0: entered promiscuous mode [ 278.757114][T10991] syzkaller0: entered allmulticast mode [ 279.103860][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1701'. [ 279.505429][T11005] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1703'. [ 279.814423][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 280.005935][T11040] xt_hashlimit: size too large, truncated to 1048576 [ 280.174060][T11042] svc: failed to register nfsdv3 RPC service (errno 111). [ 280.234172][T11042] svc: failed to register nfsaclv3 RPC service (errno 111). [ 280.380929][T11060] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1716'. [ 280.404059][ T30] audit: type=1400 audit(1763123523.910:372): avc: denied { ioctl } for pid=11059 comm="syz.2.1716" path="socket:[26670]" dev="sockfs" ino=26670 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.552318][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1719'. [ 280.961752][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 281.566433][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 282.091974][T11126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1737'. [ 282.403298][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 282.488596][T11138] tipc: Enabled bearer , priority 0 [ 282.512669][T11138] syzkaller0: entered promiscuous mode [ 282.531133][T11138] syzkaller0: entered allmulticast mode [ 282.569340][T11138] tipc: Resetting bearer [ 282.609943][T11137] tipc: Resetting bearer [ 282.657102][T11137] tipc: Disabling bearer [ 282.805193][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 282.832666][ T30] audit: type=1400 audit(1763123526.320:373): avc: denied { getopt } for pid=11154 comm="syz.4.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.228436][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1755'. [ 283.432532][T11196] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 283.452543][T11198] syzkaller0: entered promiscuous mode [ 283.467391][T11198] syzkaller0: entered allmulticast mode [ 284.740871][T11243] __nla_validate_parse: 8 callbacks suppressed [ 284.740888][T11243] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1778'. [ 284.762819][T11245] netlink: 'syz.2.1779': attribute type 12 has an invalid length. [ 284.833730][T11250] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 285.297742][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 285.496638][T11273] IPVS: fo: FWM 3 0x00000003 - no destination available [ 285.518296][T11245] IPVS: fo: FWM 3 0x00000003 - no destination available [ 285.601150][T11280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1792'. [ 285.702371][T11284] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 285.703164][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 285.869481][T11295] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1798'. [ 286.118119][T11306] tipc: Enabled bearer , priority 0 [ 286.210112][T11311] syzkaller0: entered promiscuous mode [ 286.221456][T11311] syzkaller0: entered allmulticast mode [ 286.250944][T11292] tipc: Resetting bearer [ 286.332691][T11292] tipc: Disabling bearer [ 286.390766][T11321] syz_tun: entered promiscuous mode [ 286.399864][T11321] vlan3: entered promiscuous mode [ 286.552362][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1807'. [ 286.609305][T11337] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 286.952994][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1810'. [ 287.111456][T11327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1805'. [ 287.171173][T11359] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 287.536234][T11367] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1817'. [ 287.765415][T11371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.956709][T11371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.107614][T11371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.146504][ T13] IPVS: stopping backup sync thread 11359 ... [ 288.202346][T11371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.409378][T11391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11391 comm=syz.3.1826 [ 288.431739][T11391] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1826'. [ 288.687340][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.717130][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.832494][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.893187][ T8846] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.173327][T11421] tipc: Enabled bearer , priority 0 [ 289.200669][T11421] syzkaller0: entered promiscuous mode [ 289.210086][T11421] syzkaller0: entered allmulticast mode [ 289.234485][T11421] tipc: Resetting bearer [ 289.264156][T11420] tipc: Resetting bearer [ 289.290659][T11420] tipc: Disabling bearer [ 290.368634][T11458] tipc: Enabled bearer , priority 0 [ 290.376242][T11458] syzkaller0: entered promiscuous mode [ 290.381719][T11458] syzkaller0: entered allmulticast mode [ 290.399033][T11457] tipc: Resetting bearer [ 290.507864][T11457] tipc: Disabling bearer [ 290.752397][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 290.786190][T11469] No such timeout policy "syz1" [ 290.965932][T11472] geneve2: entered promiscuous mode [ 291.254389][T11487] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1864'. [ 291.278748][T11490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1865'. [ 291.942647][T11502] tipc: Enabling of bearer rejected, failed to enable media [ 292.123455][T11515] sctp: [Deprecated]: syz.0.1870 (pid 11515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.123455][T11515] Use struct sctp_sack_info instead [ 292.302656][T11523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1874'. [ 292.967004][T11548] geneve1: entered promiscuous mode [ 293.353232][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 293.608442][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1892'. [ 293.770275][T11581] vxcan1: entered allmulticast mode [ 294.500853][T11586] Cannot find set identified by id 0 to match [ 295.065253][T11617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11617 comm=syz.4.1907 [ 295.078480][T11617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1907'. [ 295.109280][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1907'. [ 295.208096][T11621] syzkaller0: entered promiscuous mode [ 295.235830][T11621] syzkaller0: entered allmulticast mode [ 295.492500][T11629] vlan3: entered promiscuous mode [ 295.529628][T11629] vlan3: entered allmulticast mode [ 295.535334][T11629] hsr_slave_1: entered allmulticast mode [ 296.244910][T11643] tipc: Enabled bearer , priority 0 [ 296.298151][T11643] tipc: Resetting bearer [ 296.371570][T11642] tipc: Disabling bearer [ 296.603806][ T30] audit: type=1400 audit(1763123540.100:374): avc: denied { setopt } for pid=11660 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.677196][ T30] audit: type=1400 audit(1763123540.130:375): avc: denied { write } for pid=11660 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.691516][T11669] syzkaller0: entered promiscuous mode [ 296.720340][T11669] syzkaller0: entered allmulticast mode [ 296.851993][T11676] tipc: Enabled bearer , priority 0 [ 296.878923][T11676] syzkaller0: entered promiscuous mode [ 296.913835][T11676] syzkaller0: entered allmulticast mode [ 296.948179][T11676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 297.032811][T11676] tipc: Resetting bearer [ 297.063577][T11674] tipc: Resetting bearer [ 297.104117][T11674] tipc: Disabling bearer [ 297.587682][T11720] tipc: Enabling not permitted [ 297.606458][T11720] tipc: Enabling of bearer rejected, failed to enable media [ 297.654613][T11726] syzkaller0: entered promiscuous mode [ 297.660293][T11726] syzkaller0: entered allmulticast mode [ 297.804388][T11728] syzkaller0: entered promiscuous mode [ 297.838819][T11736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1953'. [ 297.852142][T11728] syzkaller0: entered allmulticast mode [ 297.871475][ T30] audit: type=1400 audit(1763123541.370:376): avc: denied { name_bind } for pid=11737 comm="syz.0.1954" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 298.419340][ T30] audit: type=1400 audit(1763123541.920:377): avc: denied { connect } for pid=11769 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 298.593769][ T30] audit: type=1400 audit(1763123542.090:378): avc: denied { read } for pid=11776 comm="syz.0.1968" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.658719][ T30] audit: type=1400 audit(1763123542.090:379): avc: denied { open } for pid=11776 comm="syz.0.1968" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.736232][ T30] audit: type=1400 audit(1763123542.090:380): avc: denied { ioctl } for pid=11776 comm="syz.0.1968" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.769778][T11775] syzkaller0: entered promiscuous mode [ 298.793040][T11775] syzkaller0: entered allmulticast mode [ 298.809624][ T30] audit: type=1400 audit(1763123542.310:381): avc: denied { relabelfrom } for pid=11774 comm="syz.2.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 298.883804][ T30] audit: type=1400 audit(1763123542.310:382): avc: denied { relabelto } for pid=11774 comm="syz.2.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 299.208395][ T30] audit: type=1400 audit(1763123542.690:383): avc: denied { read } for pid=11795 comm="syz.3.1976" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 299.372251][T11803] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.416770][T11803] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.614580][T11808] netlink: 'syz.3.1980': attribute type 12 has an invalid length. [ 300.712215][T11843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11843 comm=syz.4.1989 [ 300.748739][T11843] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1989'. [ 300.760705][T11845] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1990'. [ 300.782850][T11845] 0ªX¹¦À: renamed from caif0 [ 300.837788][T11845] 0ªX¹¦À: entered allmulticast mode [ 300.843033][T11845] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 301.529430][T11889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2001'. [ 301.957418][T11913] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2012'. [ 302.234228][T11932] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 302.285290][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 302.285308][ T30] audit: type=1400 audit(1763123545.790:386): avc: denied { write } for pid=11924 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 302.362100][ T30] audit: type=1400 audit(1763123545.790:387): avc: denied { read } for pid=11924 comm="syz.2.2018" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 302.677076][ T30] audit: type=1400 audit(1763123546.180:388): avc: denied { connect } for pid=11958 comm="syz.4.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 302.768352][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.798965][T11960] bond0: (slave rose0): Enslaving as an active interface with an up link [ 302.872766][T11962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2031'. [ 302.911130][T11969] netlink: 'syz.1.2032': attribute type 12 has an invalid length. [ 303.092579][T11974] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2033'. [ 303.845297][T12012] syzkaller0: entered promiscuous mode [ 303.853308][T12012] syzkaller0: entered allmulticast mode [ 303.861936][T12012] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 304.644457][ T30] audit: type=1400 audit(1763123548.140:389): avc: denied { write } for pid=12055 comm="syz.4.2054" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.707630][T12064] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2056'. [ 304.990310][T12075] syzkaller0: entered promiscuous mode [ 305.008539][T12075] syzkaller0: entered allmulticast mode [ 305.040957][T12075] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 305.308651][T12092] tipc: Enabled bearer , priority 0 [ 305.340650][T12092] syzkaller0: entered promiscuous mode [ 305.373635][T12092] syzkaller0: entered allmulticast mode [ 305.416886][T12092] tipc: Resetting bearer [ 305.457120][T12091] tipc: Resetting bearer [ 305.518779][T12091] tipc: Disabling bearer [ 305.554317][T12105] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2071'. [ 305.577664][T12107] tipc: Enabling not permitted [ 305.583255][T12107] tipc: Enabling of bearer rejected, failed to enable media [ 305.763283][T12114] syzkaller0: entered promiscuous mode [ 305.794956][T12114] syzkaller0: entered allmulticast mode [ 305.818069][T12114] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 305.888844][T12122] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 306.072639][T12133] tipc: Enabled bearer , priority 0 [ 306.104590][T12135] vxcan1: entered allmulticast mode [ 306.147837][T12133] tipc: Resetting bearer [ 306.157340][T12138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12138 comm=syz.3.2084 [ 306.181031][T12138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2084'. [ 306.209725][T12132] tipc: Disabling bearer [ 306.309918][T12143] tipc: Enabling not permitted [ 306.316162][T12143] tipc: Enabling of bearer rejected, failed to enable media [ 306.430528][ T30] audit: type=1400 audit(1763123549.930:390): avc: denied { bind } for pid=12146 comm="syz.3.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.655215][T12135] Cannot find set identified by id 1 to match [ 306.797340][T12159] syzkaller0: entered promiscuous mode [ 306.802845][T12159] syzkaller0: entered allmulticast mode [ 306.858951][T12159] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 307.007088][T12167] syzkaller0: entered promiscuous mode [ 307.033839][T12167] syzkaller0: entered allmulticast mode [ 307.109680][T12176] netlink: 'syz.2.2099': attribute type 12 has an invalid length. [ 307.661828][T12176] IPVS: fo: FWM 3 0x00000003 - no destination available [ 307.669372][T12176] IPVS: fo: FWM 3 0x00000003 - no destination available [ 307.826490][T12208] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2109'. [ 307.840050][T12209] ======================================================= [ 307.840050][T12209] WARNING: The mand mount option has been deprecated and [ 307.840050][T12209] and is ignored by this kernel. Remove the mand [ 307.840050][T12209] option from the mount to silence this warning. [ 307.840050][T12209] ======================================================= [ 307.842973][ T30] audit: type=1400 audit(1763123551.340:391): avc: denied { remount } for pid=12207 comm="syz.0.2108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 307.885600][T12209] binder: Unknown parameter 'co' [ 307.912801][T12211] syzkaller0: entered promiscuous mode [ 307.954131][T12211] syzkaller0: entered allmulticast mode [ 307.966576][T12211] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 308.131202][T12220] tipc: Enabling of bearer rejected, failed to enable media [ 308.179505][T12226] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2117'. [ 308.391552][T12244] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2121'. [ 308.423217][T12244] 0ªX¹¦À: renamed from caif0 [ 308.465387][T12244] 0ªX¹¦À: entered allmulticast mode [ 308.470621][T12244] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.519201][T12252] netlink: 'syz.4.2122': attribute type 12 has an invalid length. [ 308.657167][T12257] tipc: Enabling of bearer rejected, failed to enable media [ 309.049695][T12277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2128'. [ 309.073299][ T5870] IPVS: starting estimator thread 0... [ 309.081253][T12252] IPVS: nq: FWM 3 0x00000003 - no destination available [ 309.184733][T12279] IPVS: using max 37 ests per chain, 88800 per kthread [ 309.318597][T12288] syzkaller0: entered promiscuous mode [ 309.343586][ T30] audit: type=1400 audit(1763123552.840:392): avc: denied { map } for pid=12289 comm="syz.3.2133" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 309.344999][T12288] syzkaller0: entered allmulticast mode [ 309.421512][T12287] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2132'. [ 309.466496][T12285] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 309.469246][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 309.662711][T12303] vxcan1: entered allmulticast mode [ 310.106672][ T30] audit: type=1400 audit(1763123553.500:393): avc: denied { create } for pid=12309 comm="syz.2.2142" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.354674][ T30] audit: type=1400 audit(1763123553.510:394): avc: denied { write } for pid=12309 comm="syz.2.2142" name="file0" dev="tmpfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.383724][ T30] audit: type=1400 audit(1763123553.510:395): avc: denied { open } for pid=12309 comm="syz.2.2142" path="/429/file0" dev="tmpfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.407407][ T30] audit: type=1400 audit(1763123553.520:396): avc: denied { ioctl } for pid=12309 comm="syz.2.2142" path="/429/file0" dev="tmpfs" ino=2220 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.503921][T12308] Cannot find set identified by id 0 to match [ 310.653805][ T30] audit: type=1400 audit(1763123554.140:397): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=2220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 310.724768][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'. [ 310.880726][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2153'. [ 310.999675][T12347] tipc: Enabled bearer , priority 0 [ 311.030842][T12347] syzkaller0: entered promiscuous mode [ 311.036435][T12347] syzkaller0: entered allmulticast mode [ 311.065839][T12347] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 311.113776][T12347] tipc: Resetting bearer [ 311.137750][T12346] tipc: Resetting bearer [ 311.165111][T12346] tipc: Disabling bearer [ 311.187365][ T30] audit: type=1400 audit(1763123554.690:398): avc: denied { mount } for pid=12358 comm="syz.2.2160" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 311.231485][ T30] audit: type=1400 audit(1763123554.710:399): avc: denied { search } for pid=12358 comm="syz.2.2160" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.276880][ T30] audit: type=1400 audit(1763123554.710:400): avc: denied { search } for pid=12358 comm="syz.2.2160" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.306678][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2163'. [ 311.396782][T12372] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2166'. [ 311.416415][T12372] 1ªX¹¦À: renamed from 60ªX¹¦À [ 311.423301][T12372] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 311.565073][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 312.868297][T12390] tipc: Enabled bearer , priority 0 [ 312.886800][T12399] vlan3: entered promiscuous mode [ 312.892397][T12399] vlan3: entered allmulticast mode [ 312.897738][T12399] hsr_slave_1: entered allmulticast mode [ 312.929127][T12412] netlink: 'syz.4.2178': attribute type 6 has an invalid length. [ 312.930323][T12408] tipc: Resetting bearer [ 312.974375][T12386] tipc: Disabling bearer [ 313.028740][T12414] tipc: Enabled bearer , priority 0 [ 313.041845][T12414] syzkaller0: entered promiscuous mode [ 313.073643][T12414] syzkaller0: entered allmulticast mode [ 313.086107][T12414] tipc: Resetting bearer [ 313.096720][T12413] tipc: Resetting bearer [ 313.171093][T12413] tipc: Disabling bearer [ 313.292864][T12430] __nla_validate_parse: 1 callbacks suppressed [ 313.292880][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2187'. [ 313.903633][ T1582] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 314.084208][ T1582] usb 5-1: Using ep0 maxpacket: 16 [ 314.095751][ T1582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.109159][ T1582] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 314.118978][ T1582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.127238][ T1582] usb 5-1: Product: syz [ 314.131486][ T1582] usb 5-1: Manufacturer: syz [ 314.136391][ T1582] usb 5-1: SerialNumber: syz [ 314.146057][ T1582] usb 5-1: config 0 descriptor?? [ 314.153325][ T1582] hub 5-1:0.0: bad descriptor, ignoring hub [ 314.172284][ T1582] hub 5-1:0.0: probe with driver hub failed with error -5 [ 314.190526][ T1582] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 314.431694][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 314.431709][ T30] audit: type=1400 audit(1763123557.930:403): avc: denied { read } for pid=12443 comm="syz.4.2193" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 314.523780][ T30] audit: type=1400 audit(1763123557.930:404): avc: denied { open } for pid=12443 comm="syz.4.2193" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 314.615510][ T1582] usb 5-1: USB disconnect, device number 8 [ 315.696972][T12462] tipc: Enabling of bearer rejected, failed to enable media [ 315.724766][T12469] syzkaller0: entered promiscuous mode [ 315.730367][T12469] syzkaller0: entered allmulticast mode [ 315.809503][T12479] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2203'. [ 315.934014][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 316.072852][T12491] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2205'. [ 316.556066][T12515] vxcan1: entered allmulticast mode [ 316.767852][T12515] Cannot find set identified by id 1 to match [ 316.802618][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.809099][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.391326][ T30] audit: type=1400 audit(1763123561.890:405): avc: denied { mount } for pid=12567 comm="syz.4.2232" name="/" dev="ramfs" ino=32497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 318.638765][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 318.674784][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'. [ 318.996946][T12587] tipc: Enabled bearer , priority 0 [ 319.025020][T12587] syzkaller0: entered promiscuous mode [ 319.040746][T12587] syzkaller0: entered allmulticast mode [ 319.062724][T12587] tipc: Resetting bearer [ 319.080704][T12586] tipc: Resetting bearer [ 319.242454][T12586] tipc: Disabling bearer [ 319.696156][ T1582] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 319.786918][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 319.886232][T12608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2249'. [ 319.903787][ T1582] usb 5-1: Using ep0 maxpacket: 32 [ 319.917828][ T1582] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 319.926619][ T1582] usb 5-1: config 0 has no interface number 0 [ 319.932726][ T1582] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.993823][ T1582] usb 5-1: config 0 interface 85 has no altsetting 0 [ 320.005292][ T1582] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 320.033758][ T1582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.041786][ T1582] usb 5-1: Product: syz [ 320.063724][ T1582] usb 5-1: Manufacturer: syz [ 320.068355][ T1582] usb 5-1: SerialNumber: syz [ 320.104818][ T1582] usb 5-1: config 0 descriptor?? [ 320.298516][T12621] vxcan1: entered allmulticast mode [ 320.476996][T12625] tipc: Enabling of bearer rejected, failed to enable media [ 320.726395][ T1582] appletouch 5-1:0.85: Geyser mode initialized. [ 320.735236][ T1582] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input19 [ 321.029775][ T1582] usb 5-1: USB disconnect, device number 9 [ 321.035760][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 321.106681][T12644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2255'. [ 321.566198][T12621] Cannot find set identified by id 0 to match [ 321.689065][ T1582] appletouch 5-1:0.85: input: appletouch disconnected [ 321.756506][T12648] tipc: Enabled bearer , priority 0 [ 321.808937][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'. [ 321.862685][T12648] syzkaller0: entered promiscuous mode [ 321.874383][T12648] syzkaller0: entered allmulticast mode [ 321.892870][T12648] tipc: Resetting bearer [ 322.064503][ T8846] tipc: Resetting bearer [ 322.085642][T12647] tipc: Resetting bearer [ 322.583391][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 322.673630][ T5870] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 322.750837][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 322.824651][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 322.832034][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 322.843871][ T5870] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.852982][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.861186][ T5870] usb 3-1: Product: syz [ 322.865432][ T5870] usb 3-1: Manufacturer: syz [ 322.870064][ T5870] usb 3-1: SerialNumber: syz [ 322.891600][ T5870] usb 3-1: config 0 descriptor?? [ 322.901181][ T5870] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.911330][ T5870] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 323.515284][ T5870] em28xx 3-1:0.0: chip ID is em2874 [ 323.565501][T12647] tipc: Disabling bearer [ 323.605455][ T5820] tipc: Node number set to 3491900159 [ 323.984462][T12709] syzkaller0: entered promiscuous mode [ 324.005051][T12709] syzkaller0: entered allmulticast mode [ 324.134233][ T5870] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.152133][ T5870] em28xx 3-1:0.0: board has no eeprom [ 324.342747][T12721] tipc: Enabled bearer , priority 0 [ 324.369599][T12721] syzkaller0: entered promiscuous mode [ 324.375257][T12721] syzkaller0: entered allmulticast mode [ 324.425790][T12721] tipc: Resetting bearer [ 324.442539][T12720] tipc: Resetting bearer [ 324.464936][ T5870] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 324.479690][ T5870] em28xx 3-1:0.0: dvb set to bulk mode. [ 324.497208][T12720] tipc: Disabling bearer [ 324.505888][ T1582] em28xx 3-1:0.0: Binding DVB extension [ 324.532269][ T5870] usb 3-1: USB disconnect, device number 6 [ 324.565950][ T5870] em28xx 3-1:0.0: Disconnecting em28xx [ 324.604277][ T1582] em28xx 3-1:0.0: Registering input extension [ 324.692934][ T30] audit: type=1400 audit(1763123568.190:406): avc: denied { watch } for pid=12727 comm="syz.3.2292" path="/464" dev="tmpfs" ino=2392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 324.730093][ T1582] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 324.743174][ T1582] Registered IR keymap rc-empty [ 324.754130][ T1582] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 324.776649][ T1582] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 324.814276][ T1582] em28xx 3-1:0.0: Input extension successfully initialized [ 324.821791][ T5870] em28xx 3-1:0.0: Closing input extension [ 324.858942][ T30] audit: type=1400 audit(1763123568.360:407): avc: denied { watch watch_reads } for pid=12733 comm="syz.1.2294" path="/468/file0" dev="tmpfs" ino=2402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.949666][ T5870] em28xx 3-1:0.0: Freeing device [ 325.686156][T12752] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2302'. [ 325.707242][T12752] 0ªX¹¦À: renamed from caif0 [ 325.719154][T12752] 0ªX¹¦À: entered allmulticast mode [ 325.727132][T12752] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 326.276729][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 326.670253][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2322'. [ 326.859268][T12811] binder: Unknown parameter 'c' [ 327.150794][T12833] tipc: Enabling not permitted [ 327.158208][T12833] tipc: Enabling of bearer rejected, failed to enable media [ 327.333624][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 327.632545][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 327.733624][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 327.742603][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 327.761324][ T24] usb 5-1: config 0 has no interface number 0 [ 327.780699][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 327.813174][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.831162][ T24] usb 5-1: Product: syz [ 327.841117][ T24] usb 5-1: Manufacturer: syz [ 327.852299][ T24] usb 5-1: SerialNumber: syz [ 327.867336][ T24] usb 5-1: config 0 descriptor?? [ 327.890142][ T24] smsc95xx v2.0.0 [ 327.972989][T12860] tipc: Enabled bearer , priority 0 [ 327.988512][T12860] tipc: Resetting bearer [ 328.009813][T12859] tipc: Disabling bearer [ 328.111828][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 328.188485][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 328.254231][ T24] usb 5-1: USB disconnect, device number 10 [ 328.445362][T12878] vxcan1: entered allmulticast mode [ 328.845222][T12886] tipc: Enabling not permitted [ 328.858197][T12886] tipc: Enabling of bearer rejected, failed to enable media [ 329.136245][T12878] Cannot find set identified by id 1 to match [ 329.457723][T12905] tipc: Enabled bearer , priority 0 [ 329.468630][T12905] tipc: Resetting bearer [ 329.497198][T12903] tipc: Disabling bearer [ 329.633212][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2368'. [ 329.677591][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 329.798479][T12923] tipc: Enabling not permitted [ 329.804205][T12923] tipc: Enabling of bearer rejected, failed to enable media [ 330.870920][T12936] input: syz0 as /devices/virtual/input/input21 [ 331.019188][T12942] tipc: Enabled bearer , priority 0 [ 331.047036][T12944] vxcan1: entered allmulticast mode [ 331.754084][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 331.761417][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 331.782104][T12945] Cannot find set identified by id 1 to match [ 331.830222][T12952] tipc: Resetting bearer [ 331.877334][T12941] tipc: Disabling bearer [ 332.169637][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'. [ 332.385251][T12988] syzkaller0: entered promiscuous mode [ 332.390946][T12988] syzkaller0: entered allmulticast mode [ 332.830006][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2404'. [ 332.951249][T13018] input: syz0 as /devices/virtual/input/input23 [ 333.207594][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2415'. [ 333.464751][T13047] input: syz0 as /devices/virtual/input/input24 [ 334.000202][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 334.112132][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 334.875789][T13090] tipc: Enabling of bearer rejected, failed to enable media [ 334.893218][T13090] syzkaller0: entered promiscuous mode [ 334.910244][T13090] syzkaller0: entered allmulticast mode [ 334.985016][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'. [ 335.435859][T13106] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 335.450486][T13106] SET target dimension over the limit! [ 335.695729][T13128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 335.883429][T13136] tipc: Enabling of bearer rejected, failed to enable media [ 335.899841][T13136] syzkaller0: entered promiscuous mode [ 335.908562][T13136] syzkaller0: entered allmulticast mode [ 336.077819][T13144] syzkaller0: entered promiscuous mode [ 336.083333][T13144] syzkaller0: entered allmulticast mode [ 336.236830][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 336.412928][T13160] vxcan1: entered allmulticast mode [ 337.190612][T13162] Cannot find set identified by id 1 to match [ 337.207618][T13173] syzkaller0: entered promiscuous mode [ 337.214624][T13173] syzkaller0: entered allmulticast mode [ 338.011024][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2480'. [ 338.389805][T13219] syzkaller0: entered promiscuous mode [ 338.408596][T13219] syzkaller0: entered allmulticast mode [ 338.421875][T13219] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 338.657695][T13229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 340.030733][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2504'. [ 340.336158][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 340.464338][T13276] tipc: Enabling not permitted [ 340.473989][T13276] tipc: Enabling of bearer rejected, failed to enable media [ 340.572787][T13281] syzkaller0: entered promiscuous mode [ 340.583641][T13281] syzkaller0: entered allmulticast mode [ 340.621440][T13281] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 340.941316][T13294] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2515'. [ 341.001278][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'. [ 342.089530][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2533'. [ 342.300315][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 342.368320][T13340] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2537'. [ 342.407463][T13340] 0ªX¹¦À: renamed from 61ªX¹¦À [ 342.428730][T13340] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 342.697211][ T30] audit: type=1400 audit(1763123586.190:408): avc: denied { write } for pid=13359 comm="syz.3.2543" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 342.940458][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 342.974178][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 342.993047][T13370] input: syz0 as /devices/virtual/input/input28 [ 343.138084][ T5816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.160862][T13376] syzkaller0: entered promiscuous mode [ 343.184061][ T5816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.193042][T13376] syzkaller0: entered allmulticast mode [ 343.202900][T13380] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2553'. [ 343.224726][T13380] 1ªX¹¦À: renamed from 60ªX¹¦À [ 343.229970][ T5816] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.240955][T13380] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 343.251833][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.285122][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 343.297501][ T5816] usb 4-1: SerialNumber: syz [ 343.520908][ T5816] usb 4-1: 0:2 : does not exist [ 343.561105][ T5816] usb 4-1: USB disconnect, device number 8 [ 343.649281][T12770] udevd[12770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.792742][T13401] tipc: Enabling not permitted [ 343.798586][T13401] tipc: Enabling of bearer rejected, failed to enable media [ 343.930901][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2562'. [ 344.678414][T13436] syzkaller0: entered promiscuous mode [ 344.687198][T13436] syzkaller0: entered allmulticast mode [ 344.854387][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2578'. [ 345.047921][T13451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2581'. [ 345.098749][T13455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2583'. [ 345.354587][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 345.360939][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 345.748524][T13467] netlink: 'syz.2.2587': attribute type 12 has an invalid length. [ 345.767945][T13467] IPVS: fo: FWM 3 0x00000003 - no destination available [ 345.803789][T13467] IPVS: fo: FWM 3 0x00000003 - no destination available [ 346.143642][ T1582] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 346.305182][ T1582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.336575][ T1582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.336690][T13473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2591'. [ 346.415185][ T1582] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 346.435942][ T1582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.474618][ T1582] usb 3-1: config 0 descriptor?? [ 346.911097][ T1582] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 346.924006][ T1582] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x0 [ 346.941697][ T1582] greenasia 0003:0E8F:0012.0002: item fetching failed at offset 2/7 [ 346.960541][ T1582] greenasia 0003:0E8F:0012.0002: parse failed [ 346.973695][ T1582] greenasia 0003:0E8F:0012.0002: probe with driver greenasia failed with error -22 [ 347.104447][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2598'. [ 347.148099][ T1582] usb 3-1: USB disconnect, device number 7 [ 347.170945][T13489] input: syz0 as /devices/virtual/input/input30 [ 347.716096][T13496] tipc: Enabling not permitted [ 347.721850][T13496] tipc: Enabling of bearer rejected, failed to enable media [ 347.782157][T13498] syzkaller0: entered promiscuous mode [ 347.800823][T13498] syzkaller0: entered allmulticast mode [ 347.892804][T13502] netlink: 'syz.2.2605': attribute type 12 has an invalid length. [ 347.923459][T13502] IPVS: fo: FWM 3 0x00000003 - no destination available [ 348.303648][ T5820] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 348.355291][T13514] syzkaller0: entered promiscuous mode [ 348.360788][T13514] syzkaller0: entered allmulticast mode [ 348.393859][T13516] input: syz0 as /devices/virtual/input/input31 [ 348.483127][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 348.525978][ T5820] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 348.555484][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.588059][ T5820] usb 3-1: config 0 descriptor?? [ 348.593712][T13508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.640365][T13522] syzkaller0: entered promiscuous mode [ 348.673657][T13522] syzkaller0: entered allmulticast mode [ 349.008586][ T5820] usbhid 3-1:0.0: can't add hid device: -71 [ 349.015052][ T5820] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 349.040424][ T5820] usb 3-1: USB disconnect, device number 8 [ 349.275163][T13535] netlink: 'syz.1.2621': attribute type 5 has an invalid length. [ 349.311576][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 349.598666][T13539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2623'. [ 350.426726][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 350.545120][T13573] tipc: Enabling not permitted [ 350.555497][T13573] tipc: Enabling of bearer rejected, failed to enable media [ 351.293424][T13583] syzkaller0: entered promiscuous mode [ 351.308127][T13583] syzkaller0: entered allmulticast mode [ 351.543409][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2644'. [ 352.053252][T13606] input: syz0 as /devices/virtual/input/input32 [ 352.852935][T13612] syzkaller0: entered promiscuous mode [ 352.859081][T13612] syzkaller0: entered allmulticast mode [ 353.193600][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 353.193968][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 353.398029][T13633] syzkaller0: entered promiscuous mode [ 353.420418][T13633] syzkaller0: entered allmulticast mode [ 353.441692][T13633] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.517287][T13639] syzkaller0: entered promiscuous mode [ 353.522787][T13639] syzkaller0: entered allmulticast mode [ 353.677938][T13645] syzkaller0: entered promiscuous mode [ 353.683999][T13645] syzkaller0: entered allmulticast mode [ 354.151067][T13658] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2667'. [ 354.489991][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 355.924712][T13699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13699 comm=syz.2.2685 [ 356.554935][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 356.560458][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 356.958033][T13725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13725 comm=syz.1.2696 [ 357.033658][ T5824] Bluetooth: hci6: command 0x1003 tx timeout [ 357.034098][ T5826] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 358.027163][T13745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2704'. [ 358.216025][T13748] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 358.300029][T13748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 358.454912][T13751] tipc: Enabling of bearer rejected, failed to enable media [ 358.464370][T13751] syzkaller0: entered promiscuous mode [ 358.469860][T13751] syzkaller0: entered allmulticast mode [ 358.796555][T13769] syzkaller0: entered promiscuous mode [ 358.833721][T13769] syzkaller0: entered allmulticast mode [ 359.097530][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2718'. [ 359.134107][T13785] input: syz0 as /devices/virtual/input/input35 [ 359.852457][T13804] siw: device registration error -23 [ 360.834912][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2735'. [ 361.802306][T13845] syzkaller0: entered promiscuous mode [ 361.826167][T13845] syzkaller0: entered allmulticast mode [ 361.967487][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2745'. [ 363.566145][T13883] syzkaller0: entered promiscuous mode [ 363.579678][T13883] syzkaller0: entered allmulticast mode [ 363.724917][T13888] +$<¶: renamed from bridge0 (while UP) [ 364.148198][T13903] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2765'. [ 364.532499][T13924] tipc: Enabling not permitted [ 364.540671][T13924] tipc: Enabling of bearer rejected, failed to enable media [ 364.621764][T13926] syzkaller0: entered promiscuous mode [ 364.631591][T13926] syzkaller0: entered allmulticast mode [ 365.644799][T13954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2785'. [ 365.846232][T13960] syzkaller0: entered promiscuous mode [ 365.861199][T13960] syzkaller0: entered allmulticast mode [ 365.974949][T13964] input: syz0 as /devices/virtual/input/input36 [ 366.011905][T13968] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2791'. [ 366.064407][T13968] 0ªX¹¦À: renamed from 61ªX¹¦À [ 366.095513][T13968] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 366.296817][T13978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2798'. [ 366.507178][T13988] tipc: Enabling of bearer rejected, failed to enable media [ 366.584394][T13988] syzkaller0: entered promiscuous mode [ 366.590121][T13988] syzkaller0: entered allmulticast mode [ 367.573712][ T5820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 367.764200][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 367.782736][ T5820] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 367.802501][ T5820] usb 4-1: config 179 has no interface number 0 [ 367.827894][ T5820] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 367.863690][ T5820] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 367.883655][ T5820] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 367.920660][ T5820] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 367.952834][ T5820] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 368.007269][ T5820] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 368.043636][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.069926][T13999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 368.337297][T14025] syzkaller0: entered promiscuous mode [ 368.373670][T14025] syzkaller0: entered allmulticast mode [ 368.520607][ T5926] usb 4-1: USB disconnect, device number 9 [ 368.520679][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 368.535463][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 368.547616][ T1582] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 368.644224][T14030] IPVS: nq: FWM 3 0x00000003 - no destination available [ 368.703754][ T1582] usb 2-1: Using ep0 maxpacket: 32 [ 368.710581][ T1582] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 368.718962][ T1582] usb 2-1: config 0 has no interface number 0 [ 368.738580][ T1582] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 368.760698][ T1582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.773807][ T1582] usb 2-1: Product: syz [ 368.777996][ T1582] usb 2-1: Manufacturer: syz [ 368.793169][ T1582] usb 2-1: SerialNumber: syz [ 368.805217][ T1582] usb 2-1: config 0 descriptor?? [ 368.825596][ T1582] smsc95xx v2.0.0 [ 369.036537][ T1582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 369.047615][ T1582] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 369.061677][T14036] overlayfs: missing 'lowerdir' [ 369.115862][T14038] input: syz0 as /devices/virtual/input/input37 [ 369.134645][ T1582] usb 2-1: USB disconnect, device number 3 [ 369.398208][T14047] tipc: Enabling of bearer rejected, failed to enable media [ 369.753284][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 371.402424][T14093] syzkaller0: entered promiscuous mode [ 371.408173][T14093] syzkaller0: entered allmulticast mode [ 371.753634][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.893756][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 372.065781][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 372.086541][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 372.293687][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.738217][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 373.036341][T14134] syzkaller0: entered promiscuous mode [ 373.059168][T14134] syzkaller0: entered allmulticast mode [ 373.112504][ T50] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.126991][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.149896][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.159585][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.175607][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.183472][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.201000][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.221722][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.239885][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.260227][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.271077][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.298530][ T50] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.392460][T14146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2867'. [ 373.411980][ T50] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.460006][T14148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2868'. [ 373.491999][ T50] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.844141][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 373.855164][ T24] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 373.876226][ T24] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 373.969421][ T50] bridge_slave_1: left allmulticast mode [ 373.994421][ T50] bridge_slave_1: left promiscuous mode [ 374.001573][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.049550][ T50] bridge_slave_0: left allmulticast mode [ 374.070084][ T5945] usb 1-1: USB disconnect, device number 2 [ 374.073881][ T50] bridge_slave_0: left promiscuous mode [ 374.092464][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.022515][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.046541][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.067716][ T50] bond0 (unregistering): (slave team0): Releasing backup interface [ 375.086202][ T50] bond0 (unregistering): Released all slaves [ 375.119147][T14162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.132826][T14162] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 375.185255][T14138] chnl_net:caif_netlink_parms(): no params data found [ 375.197330][T14186] input: syz0 as /devices/virtual/input/input41 [ 375.252729][ T50] tipc: Left network mode [ 375.574120][T14138] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.600575][T14138] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.615954][T14138] bridge_slave_0: entered allmulticast mode [ 375.634066][T14138] bridge_slave_0: entered promiscuous mode [ 375.667829][T14138] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.685632][T14138] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.692897][T14138] bridge_slave_1: entered allmulticast mode [ 375.743660][T14138] bridge_slave_1: entered promiscuous mode [ 375.862866][T14138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.916110][T14138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.008815][ T50] hsr_slave_0: left promiscuous mode [ 376.064512][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.099865][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.144595][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.252715][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.608532][ T50] veth1_macvtap: left promiscuous mode [ 376.620465][ T50] veth0_macvtap: left promiscuous mode [ 376.640174][ T50] veth1_vlan: left promiscuous mode [ 376.660085][ T50] veth0_vlan: left promiscuous mode [ 376.693599][ T5885] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 376.910636][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 376.929031][ T5885] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 376.949475][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.980288][ T5885] usb 5-1: config 0 descriptor?? [ 376.995931][T14226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.424443][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 377.430457][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 377.480025][ T5885] usb 5-1: USB disconnect, device number 11 [ 377.629054][ T50] team0 (unregistering): Port device team_slave_1 removed [ 377.672737][ T50] team0 (unregistering): Port device team_slave_0 removed [ 378.243093][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.249554][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.369736][T14242] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2891'. [ 378.684184][T14138] team0: Port device team_slave_0 added [ 378.724639][T14138] team0: Port device team_slave_1 added [ 378.782106][ T30] audit: type=1400 audit(1763123622.280:409): avc: denied { append } for pid=14254 comm="syz.0.2900" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 378.952527][T14138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.984175][T14138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.043925][T14138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.075091][T14138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.082046][T14138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.143741][T14138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.283777][T14263] tipc: Enabling of bearer rejected, failed to enable media [ 379.442745][T14138] hsr_slave_0: entered promiscuous mode [ 379.471496][T14138] hsr_slave_1: entered promiscuous mode [ 379.499355][T14138] debugfs: 'hsr0' already exists in 'hsr' [ 379.535407][T14138] Cannot create hsr debugfs directory [ 379.695466][ T50] IPVS: stop unused estimator thread 0... [ 379.773549][T14255] comedi comedi0: reset error (fatal) [ 380.084270][T14289] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2906'. [ 380.663807][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 380.737089][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2913'. [ 380.818770][T14321] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2913'. [ 380.847913][T14321] 1ªX¹¦À: renamed from 60ªX¹¦À [ 381.100809][T14321] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 381.375632][T14138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.467776][T14138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.500950][T14138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.544310][T14138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.077667][T14138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.137959][T14138] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.175189][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.182365][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.372397][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.379606][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.910752][T14138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.056943][T14138] veth0_vlan: entered promiscuous mode [ 383.097624][T14138] veth1_vlan: entered promiscuous mode [ 383.168270][T14138] veth0_macvtap: entered promiscuous mode [ 383.173153][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 383.527999][T14138] veth1_macvtap: entered promiscuous mode [ 383.550685][T14138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.577872][T14138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.635044][ T8846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.683175][ T8846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.773890][T14419] netlink: 'syz.3.2938': attribute type 5 has an invalid length. [ 384.220373][ T8846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.254799][ T8846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.701671][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.089018][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.219820][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.367276][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.381164][ T5829] Bluetooth: hci1: sending frame failed (-49) [ 386.390797][ T5826] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 386.431079][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.439516][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.449957][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.461300][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.469778][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.477425][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 386.504056][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.511416][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.519142][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.527023][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.534930][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.648807][T14510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'. [ 386.659038][T14510] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2960'. [ 386.669594][T14510] 1ªX¹¦À: renamed from 60ªX¹¦À [ 386.677786][T14510] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 386.761982][ T12] bridge_slave_1: left allmulticast mode [ 386.775666][ T12] bridge_slave_1: left promiscuous mode [ 386.787303][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.807063][ T12] bridge_slave_0: left allmulticast mode [ 386.813470][ T12] bridge_slave_0: left promiscuous mode [ 386.819921][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.480806][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.534725][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.571084][ T5826] Bluetooth: hci1: command tx timeout [ 388.581175][ T30] audit: type=1400 audit(1763123632.080:410): avc: denied { read } for pid=14561 comm="syz.4.2974" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.625263][ T12] bond0 (unregistering): Released all slaves [ 388.703902][ T30] audit: type=1400 audit(1763123632.120:411): avc: denied { open } for pid=14561 comm="syz.4.2974" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.779306][T14554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 388.808889][T14554] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 388.981601][T14503] chnl_net:caif_netlink_parms(): no params data found [ 389.019305][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2977'. [ 389.282934][T14503] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.294446][T14503] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.301781][T14503] bridge_slave_0: entered allmulticast mode [ 389.309414][T14503] bridge_slave_0: entered promiscuous mode [ 389.327937][T14503] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.341401][T14503] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.348990][T14503] bridge_slave_1: entered allmulticast mode [ 389.358592][T14503] bridge_slave_1: entered promiscuous mode [ 389.410536][T14503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.423906][T14503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.451271][T14503] team0: Port device team_slave_0 added [ 389.458801][T14503] team0: Port device team_slave_1 added [ 389.482960][T14503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.490121][T14503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.516814][T14503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.529060][T14503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.536089][T14503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.562823][T14503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.648199][T14503] hsr_slave_0: entered promiscuous mode [ 389.662091][T14503] hsr_slave_1: entered promiscuous mode [ 389.669199][T14503] debugfs: 'hsr0' already exists in 'hsr' [ 389.675518][T14503] Cannot create hsr debugfs directory [ 390.044382][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2981'. [ 390.266991][T14503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.280154][T14503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.352970][T14503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 390.447079][T14503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 390.778657][T14503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.805009][T14503] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.819268][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.826403][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.842095][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.849238][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.906321][T14503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.156402][T14503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.262915][T14503] veth0_vlan: entered promiscuous mode [ 391.284860][T14503] veth1_vlan: entered promiscuous mode [ 391.341447][T14503] veth0_macvtap: entered promiscuous mode [ 391.367130][T14503] veth1_macvtap: entered promiscuous mode [ 391.386659][T14503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.410339][ T30] audit: type=1400 audit(1763123634.910:412): avc: denied { append } for pid=14660 comm="syz.4.2987" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 391.442982][T14503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.462550][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.504161][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.520563][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.530695][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.590371][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2988'. [ 439.675618][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.681922][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.118600][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.125319][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.033673][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 535.041310][ T31] Not tainted syzkaller #0 [ 535.046640][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.055520][ T31] task:kworker/u8:0 state:D stack:22744 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 535.067600][ T31] Workqueue: netns cleanup_net [ 535.072397][ T31] Call Trace: [ 535.075775][ T31] [ 535.078697][ T31] __schedule+0x1190/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 535.083189][ T31] ? check_path.constprop.0+0x24/0x50 [ 535.089160][ T31] ? __lock_acquire+0x622/0x1c90 [ 535.094529][ T31] ? __pfx___schedule+0x10/0x10 [ 535.099490][ T31] ? find_held_lock+0x2b/0x80 [ 535.104246][ T31] ? schedule+0x2d7/0x3a0 [ 535.142904][ T31] ? rfkill_unregister+0xec/0x2c0 [ 535.153531][ T31] schedule+0xe7/0x3a0 [ 535.157651][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.163124][ T31] __mutex_lock+0x818/0x1060 [ 535.168555][ T31] ? class_to_subsys+0x10f/0x160 [ 535.173613][ T31] ? rfkill_unregister+0xec/0x2c0 [ 535.178660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.183923][ T31] ? device_del+0x6b6/0x9f0 [ 535.188427][ T31] ? __pfx_device_del+0x10/0x10 [ 535.193252][ T31] ? rfkill_unregister+0xec/0x2c0 [ 535.198309][ T31] rfkill_unregister+0xec/0x2c0 [ 535.203158][ T31] wiphy_unregister+0x133/0xc50 [ 535.208128][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 535.213581][ T31] ieee80211_unregister_hw+0x248/0x3a0 [ 535.219029][ T31] hwsim_exit_net+0x788/0x1590 [ 535.223858][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 535.229048][ T31] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 535.234455][ T31] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 535.240169][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 535.245557][ T31] ops_undo_list+0x2ee/0xab0 [ 535.250164][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 535.255359][ T31] ? cleanup_net+0x347/0x8b0 [ 535.259967][ T31] ? idr_destroy+0x62/0x2e0 [ 535.264521][ T31] cleanup_net+0x41b/0x8b0 [ 535.268940][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 535.273986][ T31] process_one_work+0x9cf/0x1b70 [ 535.278935][ T31] ? __pfx_process_one_work+0x10/0x10 [ 535.284481][ T31] ? assign_work+0x1a0/0x250 [ 535.289068][ T31] worker_thread+0x6c8/0xf10 [ 535.293900][ T31] ? __pfx_worker_thread+0x10/0x10 [ 535.299001][ T31] kthread+0x3c5/0x780 [ 535.303041][ T31] ? __pfx_kthread+0x10/0x10 [ 535.307770][ T31] ? rcu_is_watching+0x12/0xc0 [ 535.312530][ T31] ? __pfx_kthread+0x10/0x10 [ 535.317202][ T31] ret_from_fork+0x675/0x7d0 [ 535.321786][ T31] ? __pfx_kthread+0x10/0x10 [ 535.326659][ T31] ret_from_fork_asm+0x1a/0x30 [ 535.331456][ T31] [ 535.334783][ T31] INFO: task kworker/0:6:5945 blocked for more than 143 seconds. [ 535.342493][ T31] Not tainted syzkaller #0 [ 535.348196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.356888][ T31] task:kworker/0:6 state:D stack:27784 pid:5945 tgid:5945 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 535.369032][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 535.375785][ T31] Call Trace: [ 535.379060][ T31] [ 535.381990][ T31] __schedule+0x1190/0x5de0 [ 535.386546][ T31] ? __lock_acquire+0xaf1/0x1c90 [ 535.391484][ T31] ? __pfx___schedule+0x10/0x10 [ 535.396373][ T31] ? find_held_lock+0x2b/0x80 [ 535.401050][ T31] ? schedule+0x2d7/0x3a0 [ 535.405629][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 535.411975][ T31] schedule+0xe7/0x3a0 [ 535.416103][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.421568][ T31] __mutex_lock+0x818/0x1060 [ 535.426184][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 535.432518][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.437586][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 535.443404][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 535.449902][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 535.456102][ T31] process_one_work+0x9cf/0x1b70 [ 535.461034][ T31] ? __pfx_process_one_work+0x10/0x10 [ 535.466437][ T31] ? assign_work+0x1a0/0x250 [ 535.471106][ T31] worker_thread+0x6c8/0xf10 [ 535.475781][ T31] ? __kthread_parkme+0x19e/0x250 [ 535.480805][ T31] ? __pfx_worker_thread+0x10/0x10 [ 535.486016][ T31] kthread+0x3c5/0x780 [ 535.490096][ T31] ? __pfx_kthread+0x10/0x10 [ 535.494734][ T31] ? rcu_is_watching+0x12/0xc0 [ 535.499501][ T31] ? __pfx_kthread+0x10/0x10 [ 535.504234][ T31] ret_from_fork+0x675/0x7d0 [ 535.508831][ T31] ? __pfx_kthread+0x10/0x10 [ 535.513398][ T31] ret_from_fork_asm+0x1a/0x30 [ 535.518529][ T31] [ 535.521564][ T31] INFO: task syz-executor:14503 blocked for more than 143 seconds. [ 535.530178][ T31] Not tainted syzkaller #0 [ 535.535144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.543839][ T31] task:syz-executor state:D stack:22240 pid:14503 tgid:14503 ppid:1 task_flags:0x400140 flags:0x00080002 [ 535.555813][ T31] Call Trace: [ 535.559072][ T31] [ 535.561980][ T31] __schedule+0x1190/0x5de0 [ 535.566581][ T31] ? __lock_acquire+0x622/0x1c90 [ 535.571527][ T31] ? __pfx___schedule+0x10/0x10 [ 535.576444][ T31] ? find_held_lock+0x2b/0x80 [ 535.581382][ T31] ? schedule+0x2d7/0x3a0 [ 535.585757][ T31] ? rfkill_fop_open+0x136/0x750 [ 535.590705][ T31] schedule+0xe7/0x3a0 [ 535.594839][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.600299][ T31] __mutex_lock+0x818/0x1060 [ 535.604975][ T31] ? rfkill_fop_open+0x136/0x750 [ 535.609916][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.614996][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 535.620380][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 535.625982][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 535.631273][ T31] ? rfkill_fop_open+0x136/0x750 [ 535.636246][ T31] rfkill_fop_open+0x136/0x750 [ 535.641001][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 535.646721][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 535.652004][ T31] misc_open+0x26d/0x450 [ 535.656280][ T31] ? __pfx_misc_open+0x10/0x10 [ 535.661038][ T31] chrdev_open+0x234/0x6a0 [ 535.665475][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 535.670408][ T31] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 535.676836][ T31] do_dentry_open+0x982/0x1530 [ 535.681597][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 535.686637][ T31] vfs_open+0x82/0x3f0 [ 535.690705][ T31] path_openat+0x1de4/0x2cb0 [ 535.695351][ T31] ? __pfx_path_openat+0x10/0x10 [ 535.700285][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 535.705260][ T31] do_filp_open+0x20b/0x470 [ 535.709754][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 535.714813][ T31] ? alloc_fd+0x471/0x7d0 [ 535.719131][ T31] do_sys_openat2+0x11b/0x1d0 [ 535.723919][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.729115][ T31] ? __fput+0x68d/0xb70 [ 535.733244][ T31] ? __fput+0x68d/0xb70 [ 535.737648][ T31] __x64_sys_openat+0x174/0x210 [ 535.742508][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.747943][ T31] do_syscall_64+0xcd/0xfa0 [ 535.752442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.758440][ T31] RIP: 0033:0x7fa6ce98df10 [ 535.762831][ T31] RSP: 002b:00007fff620e2190 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 535.771352][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa6ce98df10 [ 535.779366][ T31] RDX: 0000000000000002 RSI: 00007fa6cea12a62 RDI: 00000000ffffff9c [ 535.787360][ T31] RBP: 00007fa6cea12a62 R08: 0000000000000000 R09: 0000000000000000 [ 535.795367][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 535.803315][ T31] R13: 0000000000000003 R14: 00007fff620e2568 R15: 0000000000000000 [ 535.811399][ T31] [ 535.814448][ T31] INFO: task syz.2.2970:14548 blocked for more than 144 seconds. [ 535.822156][ T31] Not tainted syzkaller #0 [ 535.828676][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.837435][ T31] task:syz.2.2970 state:D stack:26656 pid:14548 tgid:14548 ppid:5815 task_flags:0x400040 flags:0x00080002 [ 535.849639][ T31] Call Trace: [ 535.852898][ T31] [ 535.855950][ T31] __schedule+0x1190/0x5de0 [ 535.860455][ T31] ? check_path.constprop.0+0x24/0x50 [ 535.865888][ T31] ? __lock_acquire+0x622/0x1c90 [ 535.870908][ T31] ? __pfx___schedule+0x10/0x10 [ 535.875799][ T31] ? find_held_lock+0x2b/0x80 [ 535.880464][ T31] ? schedule+0x2d7/0x3a0 [ 535.884825][ T31] ? rfkill_unregister+0xec/0x2c0 [ 535.889859][ T31] schedule+0xe7/0x3a0 [ 535.893957][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.899411][ T31] __mutex_lock+0x818/0x1060 [ 535.904003][ T31] ? class_to_subsys+0x10f/0x160 [ 535.908937][ T31] ? rfkill_unregister+0xec/0x2c0 [ 535.914403][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.919426][ T31] ? device_del+0x6b6/0x9f0 [ 535.923958][ T31] ? __pfx_device_del+0x10/0x10 [ 535.928800][ T31] ? rfkill_unregister+0xec/0x2c0 [ 535.933848][ T31] rfkill_unregister+0xec/0x2c0 [ 535.938719][ T31] nfc_unregister_device+0x94/0x330 [ 535.943938][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 535.949656][ T31] virtual_ncidev_close+0x4b/0xa0 [ 535.954960][ T31] __fput+0x402/0xb70 [ 535.958932][ T31] task_work_run+0x150/0x240 [ 535.963565][ T31] ? __pfx_task_work_run+0x10/0x10 [ 535.968665][ T31] ? __might_fault+0x13b/0x190 [ 535.973410][ T31] exit_to_user_mode_loop+0xec/0x130 [ 535.978729][ T31] do_syscall_64+0x426/0xfa0 [ 535.983314][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.989243][ T31] RIP: 0033:0x7fa04978f6c9 [ 535.993734][ T31] RSP: 002b:00007ffd96d3ea88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 536.002348][ T31] RAX: 0000000000000000 RBX: 00007fa0499e7da0 RCX: 00007fa04978f6c9 [ 536.010562][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 536.018582][ T31] RBP: 00007fa0499e7da0 R08: 000000000000141c R09: 0000001b96d3ed7f [ 536.026841][ T31] R10: 00007fa0499e7cb0 R11: 0000000000000246 R12: 000000000005ee86 [ 536.034929][ T31] R13: 00007fa0499e6090 R14: ffffffffffffffff R15: 00007ffd96d3eba0 [ 536.042897][ T31] [ 536.045980][ T31] INFO: task syz.3.2971:14554 blocked for more than 144 seconds. [ 536.053780][ T31] Not tainted syzkaller #0 [ 536.058713][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.067522][ T31] task:syz.3.2971 state:D stack:26584 pid:14554 tgid:14550 ppid:5814 task_flags:0x400140 flags:0x00080003 [ 536.079673][ T31] Call Trace: [ 536.082970][ T31] [ 536.086112][ T31] __schedule+0x1190/0x5de0 [ 536.090620][ T31] ? check_path.constprop.0+0x24/0x50 [ 536.096043][ T31] ? __lock_acquire+0x622/0x1c90 [ 536.100989][ T31] ? __pfx___schedule+0x10/0x10 [ 536.106101][ T31] ? find_held_lock+0x2b/0x80 [ 536.110789][ T31] ? schedule+0x2d7/0x3a0 [ 536.115279][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 536.119869][ T31] schedule+0xe7/0x3a0 [ 536.124095][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.129553][ T31] __mutex_lock+0x818/0x1060 [ 536.135605][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 536.140208][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.145288][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 536.150307][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 536.154999][ T31] ? mark_held_locks+0x49/0x80 [ 536.159763][ T31] nfc_dev_down+0x2d/0x2e0 [ 536.164447][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 536.169465][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 536.175219][ T31] rfkill_set_block+0x1fe/0x550 [ 536.180076][ T31] rfkill_fop_write+0x2c0/0x580 [ 536.185162][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 536.190526][ T31] ? bpf_lsm_kernfs_init_security+0x10/0x10 [ 536.196435][ T31] ? security_file_permission+0x71/0x210 [ 536.202061][ T31] ? rw_verify_area+0xcf/0x6c0 [ 536.206892][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 536.212262][ T31] vfs_write+0x2a0/0x11d0 [ 536.216628][ T31] ? __pfx_vfs_write+0x10/0x10 [ 536.221384][ T31] ? find_held_lock+0x2b/0x80 [ 536.226129][ T31] ? __fget_files+0x204/0x3c0 [ 536.230809][ T31] ? __fget_files+0x20e/0x3c0 [ 536.235529][ T31] ksys_write+0x1f8/0x250 [ 536.239960][ T31] ? __pfx_ksys_write+0x10/0x10 [ 536.244886][ T31] ? syscall_trace_enter+0x1cb/0x240 [ 536.250182][ T31] ? rcu_is_watching+0x12/0xc0 [ 536.255001][ T31] do_syscall_64+0xcd/0xfa0 [ 536.259497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.265469][ T31] RIP: 0033:0x7f3cec98f6c9 [ 536.269908][ T31] RSP: 002b:00007f3ced8c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.278462][ T31] RAX: ffffffffffffffda RBX: 00007f3cecbe5fa0 RCX: 00007f3cec98f6c9 [ 536.286829][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 536.294985][ T31] RBP: 00007f3ceca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.302947][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.310960][ T31] R13: 00007f3cecbe6038 R14: 00007f3cecbe5fa0 R15: 00007ffeee23e888 [ 536.319056][ T31] [ 536.322080][ T31] INFO: task syz.0.2975:14564 blocked for more than 144 seconds. [ 536.330068][ T31] Not tainted syzkaller #0 [ 536.335101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.343808][ T31] task:syz.0.2975 state:D stack:27192 pid:14564 tgid:14563 ppid:5813 task_flags:0x400140 flags:0x00080002 [ 536.355770][ T31] Call Trace: [ 536.359053][ T31] [ 536.361981][ T31] __schedule+0x1190/0x5de0 [ 536.366559][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 536.371935][ T31] ? __lock_acquire+0x622/0x1c90 [ 536.376907][ T31] ? __pfx___schedule+0x10/0x10 [ 536.381759][ T31] ? find_held_lock+0x2b/0x80 [ 536.386484][ T31] ? schedule+0x2d7/0x3a0 [ 536.390829][ T31] ? rfkill_register+0x3a/0xb40 [ 536.395718][ T31] schedule+0xe7/0x3a0 [ 536.399794][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.405446][ T31] __mutex_lock+0x818/0x1060 [ 536.410028][ T31] ? rfkill_register+0x3a/0xb40 [ 536.414931][ T31] ? __pfx___debug_object_init+0x10/0x10 [ 536.420576][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.425643][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 536.431020][ T31] ? __init_waitqueue_head+0xca/0x150 [ 536.436449][ T31] ? rfkill_register+0x3a/0xb40 [ 536.441298][ T31] ? rfkill_alloc+0x25b/0x330 [ 536.446005][ T31] rfkill_register+0x3a/0xb40 [ 536.450679][ T31] hci_register_dev+0x3cc/0xc60 [ 536.455562][ T31] hci_uart_tty_ioctl+0x7e2/0xc30 [ 536.460582][ T31] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 536.466170][ T31] tty_ioctl+0x700/0x1680 [ 536.470512][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 536.475511][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 536.482365][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 536.487956][ T31] ? selinux_file_ioctl+0x180/0x270 [ 536.493146][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 536.498300][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 536.503064][ T31] __x64_sys_ioctl+0x18e/0x210 [ 536.507859][ T31] do_syscall_64+0xcd/0xfa0 [ 536.512364][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.518458][ T31] RIP: 0033:0x7fa60638f6c9 [ 536.522888][ T31] RSP: 002b:00007fa6071f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.531402][ T31] RAX: ffffffffffffffda RBX: 00007fa6065e5fa0 RCX: 00007fa60638f6c9 [ 536.539493][ T31] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000005 [ 536.547518][ T31] RBP: 00007fa606411f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.555617][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.563648][ T31] R13: 00007fa6065e6038 R14: 00007fa6065e5fa0 R15: 00007ffcbbc66cf8 [ 536.571619][ T31] [ 536.574687][ T31] INFO: task syz.0.2975:14565 blocked for more than 144 seconds. [ 536.582393][ T31] Not tainted syzkaller #0 [ 536.587408][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.596124][ T31] task:syz.0.2975 state:D stack:28704 pid:14565 tgid:14563 ppid:5813 task_flags:0x400140 flags:0x00080002 [ 536.608104][ T31] Call Trace: [ 536.611381][ T31] [ 536.614372][ T31] __schedule+0x1190/0x5de0 [ 536.618883][ T31] ? unwind_get_return_address+0x59/0xa0 [ 536.624644][ T31] ? arch_stack_walk+0xa6/0x100 [ 536.629498][ T31] ? __lock_acquire+0x622/0x1c90 [ 536.634556][ T31] ? __pfx___schedule+0x10/0x10 [ 536.639423][ T31] ? find_held_lock+0x2b/0x80 [ 536.644156][ T31] ? schedule+0x2d7/0x3a0 [ 536.648485][ T31] schedule+0xe7/0x3a0 [ 536.652535][ T31] schedule_timeout+0x257/0x290 [ 536.657411][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 536.662793][ T31] ? mark_held_locks+0x49/0x80 [ 536.667597][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.672792][ T31] __ldsem_down_write_nested+0x37d/0x850 [ 536.678460][ T31] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 536.684667][ T31] ? __pfx___might_resched+0x10/0x10 [ 536.689948][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.695797][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.701054][ T31] ? tty_ldisc_lock+0x65/0xb0 [ 536.705786][ T31] tty_ldisc_lock+0x65/0xb0 [ 536.710288][ T31] tty_ldisc_hangup+0x225/0x730 [ 536.715213][ T31] __tty_hangup.part.0+0x3fe/0x8c0 [ 536.720355][ T31] tty_ioctl+0x1057/0x1680 [ 536.724853][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 536.729624][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 536.736549][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 536.742119][ T31] ? selinux_file_ioctl+0x180/0x270 [ 536.747573][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 536.752755][ T31] ? __pfx_tty_ioctl+0x10/0x10 [ 536.757583][ T31] __x64_sys_ioctl+0x18e/0x210 [ 536.762350][ T31] do_syscall_64+0xcd/0xfa0 [ 536.766931][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.772819][ T31] RIP: 0033:0x7fa60638f6c9 [ 536.777288][ T31] RSP: 002b:00007fa6071d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.785732][ T31] RAX: ffffffffffffffda RBX: 00007fa6065e6090 RCX: 00007fa60638f6c9 [ 536.794212][ T31] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000005 [ 536.802278][ T31] RBP: 00007fa606411f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.810294][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.818288][ T31] R13: 00007fa6065e6128 R14: 00007fa6065e6090 R15: 00007ffcbbc66cf8 [ 536.826310][ T31] [ 536.829343][ T31] [ 536.829343][ T31] Showing all locks held in the system: [ 536.837662][ T31] 4 locks held by kworker/u8:0/12: [ 536.842757][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 536.853165][ T31] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 536.863279][ T31] #2: ffffffff900d1210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 536.872636][ T31] #3: ffffffff90591fc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 536.882791][ T31] 1 lock held by khungtaskd/31: [ 536.887681][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 536.897568][ T31] 2 locks held by getty/5572: [ 536.902213][ T31] #0: ffff88814d76d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 536.911981][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 536.922115][ T31] 3 locks held by kworker/0:6/5945: [ 536.927337][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 536.937835][ T31] #1: ffffc9000440fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 536.950736][ T31] #2: ffffffff90591fc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 536.962874][ T31] 2 locks held by syz-executor/14503: [ 536.968441][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 536.976958][ T31] #1: ffffffff90591fc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 536.987022][ T31] 2 locks held by syz.2.2970/14548: [ 536.992224][ T31] #0: ffff888074ea7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 537.002058][ T31] #1: ffffffff90591fc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 537.012201][ T31] 2 locks held by syz.3.2971/14554: [ 537.017413][ T31] #0: ffffffff90591fc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 537.027548][ T31] #1: ffff888074ea7100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 537.036744][ T31] 2 locks held by syz.0.2975/14564: [ 537.041941][ T31] #0: ffff888028e490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 537.052079][ T31] #1: ffffffff90591fc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 537.062075][ T31] 2 locks held by syz.0.2975/14565: [ 537.067292][ T31] #0: ffff888028e491c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup.part.0+0xda/0x8c0 [ 537.077578][ T31] #1: ffff888028e490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x65/0xb0 [ 537.087062][ T31] 1 lock held by syz.4.2990/14682: [ 537.092149][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.100651][ T31] 1 lock held by syz-executor/14705: [ 537.105981][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.114825][ T31] 1 lock held by syz-executor/14706: [ 537.120105][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.128958][ T31] 1 lock held by syz-executor/14708: [ 537.134294][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.142772][ T31] 1 lock held by syz-executor/14710: [ 537.148111][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.156609][ T31] 1 lock held by syz-executor/14715: [ 537.161877][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.170331][ T31] 1 lock held by syz-executor/14718: [ 537.175646][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.184118][ T31] 1 lock held by syz-executor/14719: [ 537.189387][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.198114][ T31] 1 lock held by syz-executor/14721: [ 537.203394][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.212302][ T31] 1 lock held by syz-executor/14723: [ 537.217618][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.226247][ T31] 1 lock held by syz-executor/14728: [ 537.231560][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.240104][ T31] 1 lock held by syz-executor/14731: [ 537.245419][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.253912][ T31] 1 lock held by syz-executor/14732: [ 537.259194][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.267670][ T31] 1 lock held by syz-executor/14734: [ 537.272939][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.281441][ T31] 1 lock held by syz-executor/14736: [ 537.286746][ T31] #0: ffffffff8f074428 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 537.295258][ T31] [ 537.297573][ T31] ============================================= [ 537.297573][ T31] [ 537.306124][ T31] NMI backtrace for cpu 1 [ 537.306138][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 537.306157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.306166][ T31] Call Trace: [ 537.306172][ T31] [ 537.306178][ T31] dump_stack_lvl+0x116/0x1f0 [ 537.306212][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 537.306234][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 537.306263][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 537.306287][ T31] watchdog+0xf3f/0x1170 [ 537.306314][ T31] ? rcu_is_watching+0x12/0xc0 [ 537.306337][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.306358][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 537.306384][ T31] ? __kthread_parkme+0x19e/0x250 [ 537.306410][ T31] ? __pfx_watchdog+0x10/0x10 [ 537.306432][ T31] kthread+0x3c5/0x780 [ 537.306450][ T31] ? __pfx_kthread+0x10/0x10 [ 537.306468][ T31] ? rcu_is_watching+0x12/0xc0 [ 537.306490][ T31] ? __pfx_kthread+0x10/0x10 [ 537.306508][ T31] ret_from_fork+0x675/0x7d0 [ 537.306524][ T31] ? __pfx_kthread+0x10/0x10 [ 537.306541][ T31] ret_from_fork_asm+0x1a/0x30 [ 537.306578][ T31] [ 537.306585][ T31] Sending NMI from CPU 1 to CPUs 0: [ 537.426489][ C0] NMI backtrace for cpu 0 [ 537.426503][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 537.426519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.426527][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 537.426554][ C0] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 84 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 537.426568][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 537.426584][ C0] RAX: 00000000010cd80d RBX: 0000000000000000 RCX: ffffffff8b60a2a9 [ 537.426594][ C0] RDX: 0000000000000000 RSI: ffffffff8da2ba54 RDI: ffffffff8bf070c0 [ 537.426603][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 537.426612][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 537.426620][ C0] R13: ffffffff8e097a00 R14: ffffffff908211d0 R15: 0000000000000000 [ 537.426629][ C0] FS: 0000000000000000(0000) GS:ffff888124a06000(0000) knlGS:0000000000000000 [ 537.426644][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.426661][ C0] CR2: 00005649e920ead8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 537.426670][ C0] Call Trace: [ 537.426675][ C0] [ 537.426679][ C0] default_idle+0x13/0x20 [ 537.426695][ C0] default_idle_call+0x6c/0xb0 [ 537.426709][ C0] do_idle+0x38d/0x500 [ 537.426728][ C0] ? __pfx_do_idle+0x10/0x10 [ 537.426744][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 537.426762][ C0] cpu_startup_entry+0x4f/0x60 [ 537.426778][ C0] rest_init+0x16b/0x2b0 [ 537.426793][ C0] ? acpi_subsystem_init+0x133/0x180 [ 537.426812][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 537.426832][ C0] start_kernel+0x3f6/0x4e0 [ 537.426850][ C0] x86_64_start_reservations+0x18/0x30 [ 537.426869][ C0] x86_64_start_kernel+0x130/0x190 [ 537.426887][ C0] common_startup_64+0x13e/0x148 [ 537.426907][ C0]