last executing test programs: 15.871684087s ago: executing program 1 (id=837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x302) getrusage(0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x48842, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) 14.347213783s ago: executing program 1 (id=840): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000240)=0x3, 0x4) bind$llc(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) 13.028181089s ago: executing program 2 (id=844): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) chdir(0x0) ftruncate(0xffffffffffffffff, 0x81fd) unlink(0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 11.142373441s ago: executing program 2 (id=846): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x7ffffffe}, 0x48) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], [0x20000, 0x0, 0x10000], [], [0x0, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000}) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000080)='C', 0x1}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 11.09772165s ago: executing program 1 (id=847): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)='binfmt_misc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x4, 0x0) recvmmsg(r3, 0x0, 0x0, 0x425826b85cacf01a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 10.694177687s ago: executing program 2 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) 9.743343803s ago: executing program 3 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x7f, 0x1800}], 0x1, 0x0) unshare(0x60400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040)=0x108, 0x4) 8.489784333s ago: executing program 3 (id=854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa4}, 0x1, 0x7a00}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r7, 0x0, 0x0}) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r8, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000000240)=""/55, &(0x7f0000000280)=0x37) 8.432137237s ago: executing program 1 (id=855): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0xffffff1f, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) 8.430614873s ago: executing program 4 (id=856): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1}, 0x20) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 7.617063641s ago: executing program 3 (id=858): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r3, 0x10001, 0x0) 7.408502531s ago: executing program 4 (id=859): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x100000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getrlimit(0x3, &(0x7f00000000c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x80045104, 0xfffffffffffffffe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) mount(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "ea70ebf25edeb9a1ef0bc091d9e8d6254f3b4e06f333de58702eccd64a8511e4f47bd0f07d4b94b91516bb47e0ae3ad7b4586927f4eded307507b048"}, 0x47) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 6.658356491s ago: executing program 0 (id=860): bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0x2c) 5.083109619s ago: executing program 3 (id=861): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000001b000000000000000000000000000000000000000000000000000001e000f600000000000000000054"], 0xc0}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.056766974s ago: executing program 0 (id=862): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES8], 0xfe33) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = syz_io_uring_setup(0x1851, &(0x7f0000001400)={0x0, 0x0, 0x40}, &(0x7f0000001480), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0xf7361452b5bbf42a}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0xb4}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x41b}}}, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe(&(0x7f00000001c0)) 4.918288567s ago: executing program 1 (id=863): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0xb11}, 0x14}}, 0x0) 4.761134451s ago: executing program 4 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) write$eventfd(r1, &(0x7f00000000c0), 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.68674011s ago: executing program 0 (id=865): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="157c9e00650600000000000000397a7a9317"], 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @private}}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}, {0x20, 'gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x10\xdfH(|\xf4:e\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f'}]}, 0x488) close(r3) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=[&(0x7f0000002600)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?\xe8\xafLpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$\x0fV\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xdf\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\xa7\x9dN\xaeT\xe2\x96$\x940$+X\x90', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0, 0x0], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000002b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00']) 4.659841841s ago: executing program 2 (id=866): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}], 0x1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000001c0)="b8c9c0987656bed57b35dc23b9e416c751bfcc422eacadd0177e5aa4fefa219fb4b4f5c56f08d8435018fdf8a08bcd2d7b447489783d1d7884a2c74f723eccce5cf5f9", 0x43) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/clear_refs\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x4, 0x3ff, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) 2.533640846s ago: executing program 0 (id=867): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 2.533376568s ago: executing program 1 (id=868): socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[], 0x6) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.533171543s ago: executing program 2 (id=869): socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000002380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x0, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 2.530123193s ago: executing program 3 (id=870): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x13e000, @remote}, 0x0, {[0x0, 0x0, 0xffdffffa, 0x2, 0x40001f]}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x10, 0xffffffffffffffff, 0x4128f000) clock_gettime(0x3, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000380)={0x0, r2/1000+60000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) accept$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000040)={0x1}) socket$netlink(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000004c0)={0x2, 0x1, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x41, 0xed, &(0x7f0000000740)=""/237, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xd, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x7}, 0xc) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) 2.529679407s ago: executing program 4 (id=871): mq_open(&(0x7f0000000040)='\xb3(/}/$\x00', 0x80, 0x140, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x1}) socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000062c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0xb, 0x1, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 2.312359495s ago: executing program 3 (id=872): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10000) creat(&(0x7f0000000080)='./file0\x00', 0x1de) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000557000/0x2000)=nil, &(0x7f0000509000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000bff000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000a8b000/0x1000)=nil, &(0x7f00009fe000/0x3000)=nil, 0x0}, 0x68) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004000) 1.472223746s ago: executing program 0 (id=873): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.470579055s ago: executing program 4 (id=874): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xfffffffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x61) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x10, r2, 0x737ea000) r3 = io_uring_setup(0x475, &(0x7f0000000180)) io_uring_enter(r3, 0x0, 0x96a3, 0x3, 0x0, 0x0) 309.348645ms ago: executing program 0 (id=875): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x18a}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x228000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 207.61977ms ago: executing program 2 (id=876): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000940)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d00108025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb370000004d0012"], 0xb4}}, 0x0) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=877): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000040)) kernel console output (not intermixed with test programs): dle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.879618][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.904416][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.914083][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.984713][ T7195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.423674][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.063380][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.211020][ T7115] hsr_slave_0: entered promiscuous mode [ 295.236085][ T7115] hsr_slave_1: entered promiscuous mode [ 295.637330][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.107385][ T7115] Cannot create hsr debugfs directory [ 296.158898][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.166142][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.211523][ T2991] bridge_slave_1: left allmulticast mode [ 296.230508][ T2991] bridge_slave_1: left promiscuous mode [ 296.236341][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.278914][ T2991] bridge_slave_0: left allmulticast mode [ 296.284611][ T2991] bridge_slave_0: left promiscuous mode [ 296.291267][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.338248][ T7208] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 296.407974][ T7208] kvm: pic: level sensitive irq not supported [ 296.408081][ T7208] kvm: pic: non byte read [ 296.434036][ T7208] kvm: pic: non byte read [ 300.518934][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.545987][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.573033][ T2991] bond0 (unregistering): Released all slaves [ 300.680030][ T2585] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.687393][ T2585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.587386][ T7268] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 301.613178][ T7266] IPVS: stopping backup sync thread 7268 ... [ 301.781039][ T2991] hsr_slave_0: left promiscuous mode [ 301.884808][ T2991] hsr_slave_1: left promiscuous mode [ 301.938275][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.945741][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.310152][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.427350][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.098104][ T2991] veth1_macvtap: left promiscuous mode [ 303.103707][ T2991] veth0_macvtap: left promiscuous mode [ 303.127011][ T2991] veth1_vlan: left promiscuous mode [ 303.132445][ T2991] veth0_vlan: left promiscuous mode [ 307.548479][ T29] audit: type=1400 audit(1725828559.153:436): avc: denied { write } for pid=7305 comm="syz.3.386" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.688991][ T29] audit: type=1400 audit(1725828559.303:437): avc: denied { create } for pid=7305 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 307.770722][ T29] audit: type=1400 audit(1725828559.333:438): avc: denied { write } for pid=7305 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 307.907179][ T5245] Bluetooth: hci1: sending frame failed (-49) [ 307.915573][ T56] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 308.036940][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.046306][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.057333][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.065725][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.073724][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 308.084184][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.175413][ T5288] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 309.403711][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 309.461778][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 309.480421][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 309.501386][ T5288] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 309.509632][ T5288] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 309.521315][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.532301][ T5288] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.542296][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.555863][ T5288] usb 2-1: config 0 descriptor?? [ 309.570988][ T5288] hub 2-1:0.0: USB hub found [ 309.793385][ T5288] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 310.030541][ T5288] hid-generic 0003:046D:C314.0004: unknown main item tag 0x0 [ 310.047462][ T5288] hid-generic 0003:046D:C314.0004: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 310.166806][ T5245] Bluetooth: hci6: command tx timeout [ 310.194689][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.203910][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.283314][ T7309] bridge0: entered allmulticast mode [ 310.330613][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.337930][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.345559][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.352822][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.365500][ T7311] bridge0: entered promiscuous mode [ 310.437135][ T53] usb 2-1: USB disconnect, device number 3 [ 311.368368][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 311.584059][ T7115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.595632][ T7115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.617350][ T7115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.656316][ T7115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.692733][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.701147][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.708537][ T7316] bridge_slave_0: entered allmulticast mode [ 311.715543][ T7316] bridge_slave_0: entered promiscuous mode [ 311.724942][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.732847][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.744389][ T7316] bridge_slave_1: entered allmulticast mode [ 311.751640][ T7316] bridge_slave_1: entered promiscuous mode [ 311.844966][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.860584][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.963165][ T7316] team0: Port device team_slave_0 added [ 311.992609][ T7316] team0: Port device team_slave_1 added [ 312.162762][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.174096][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.202702][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.227365][ T2559] bridge_slave_1: left allmulticast mode [ 312.237998][ T2559] bridge_slave_1: left promiscuous mode [ 312.243921][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.255689][ T5245] Bluetooth: hci6: command tx timeout [ 312.264573][ T2559] bridge_slave_0: left allmulticast mode [ 312.271155][ T2559] bridge_slave_0: left promiscuous mode [ 312.284655][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.943692][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.962143][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.983608][ T2559] bond0 (unregistering): Released all slaves [ 313.010486][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.020529][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.069683][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.228852][ T2559] hsr_slave_0: left promiscuous mode [ 313.235165][ T2559] hsr_slave_1: left promiscuous mode [ 313.250496][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.263487][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.684894][ T2559] team0 (unregistering): Port device team_slave_1 removed [ 313.736652][ T2559] team0 (unregistering): Port device team_slave_0 removed [ 314.217813][ T7316] hsr_slave_0: entered promiscuous mode [ 314.237769][ T7316] hsr_slave_1: entered promiscuous mode [ 314.278912][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.328875][ T5245] Bluetooth: hci6: command tx timeout [ 314.434569][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.469509][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.476743][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.561022][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.568247][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.121395][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.232533][ T7316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.247925][ T7316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.268624][ T7316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.281461][ T7316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.303411][ T7115] veth0_vlan: entered promiscuous mode [ 315.324082][ T7115] veth1_vlan: entered promiscuous mode [ 315.426050][ T7115] veth0_macvtap: entered promiscuous mode [ 315.453786][ T7115] veth1_macvtap: entered promiscuous mode [ 315.509465][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.521379][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.535349][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.546313][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.566641][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.577462][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.596397][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.620200][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.635401][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.657082][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.673147][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.683499][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.710005][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.722595][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.743311][ T7115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.764568][ T7115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.774284][ T7115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.790307][ T7115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.820998][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.942761][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.974301][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.981543][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.063817][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.071061][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.101339][ T1294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.111184][ T1294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.185800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.195917][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.410428][ T5245] Bluetooth: hci6: command tx timeout [ 317.511823][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.772075][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.779280][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.593638][ T7316] veth0_vlan: entered promiscuous mode [ 318.642159][ T7316] veth1_vlan: entered promiscuous mode [ 318.782021][ T7316] veth0_macvtap: entered promiscuous mode [ 318.799955][ T7316] veth1_macvtap: entered promiscuous mode [ 318.843803][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.854470][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.865393][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.876479][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.889697][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.900683][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.911451][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.922179][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.935543][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.959801][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.973402][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.983743][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.994714][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.008613][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.019229][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.029277][ T7316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.040130][ T7316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.057072][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.076807][ T7316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.085636][ T7316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.094816][ T7316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.103806][ T7316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.265068][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.274624][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.338611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.353183][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.075718][ T7449] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 320.084242][ T7449] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 320.093588][ T7449] ALSA: mixer_oss: invalid OSS volume 'lg' [ 320.099583][ T7449] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 320.107979][ T7449] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 320.116296][ T7449] ALSA: mixer_oss: invalid OSS volume '' [ 320.122098][ T7449] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 320.129930][ T7449] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 320.140089][ T7449] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 320.148762][ T7449] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 320.157294][ T7449] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 320.164738][ T7449] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 320.275147][ T29] audit: type=1400 audit(1725828571.883:439): avc: denied { write } for pid=7445 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.378471][ T7474] xt_connbytes: Forcing CT accounting to be enabled [ 322.793748][ T7471] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 323.061225][ T7471] kvm: pic: level sensitive irq not supported [ 323.061316][ T7471] kvm: pic: non byte read [ 323.110311][ T7471] kvm: pic: non byte read [ 323.826787][ T29] audit: type=1400 audit(1725828574.783:440): avc: denied { getopt } for pid=7486 comm="syz.0.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 323.876685][ T5291] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 324.787198][ T5291] usb 5-1: Using ep0 maxpacket: 8 [ 324.847704][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.878137][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.890911][ T5291] usb 5-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 324.905877][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.949556][ T5291] usb 5-1: config 0 descriptor?? [ 324.976948][ T5291] usb 5-1: can't set config #0, error -71 [ 324.999147][ T5291] usb 5-1: USB disconnect, device number 5 [ 325.127165][ T5243] Bluetooth: hci5: command 0x0406 tx timeout [ 325.133377][ T5256] Bluetooth: hci4: command 0x0406 tx timeout [ 325.486655][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 325.917477][ T47] usb 2-1: config index 0 descriptor too short (expected 106, got 36) [ 325.926212][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 325.960428][ T47] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 326.005531][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.094160][ T47] usb 2-1: config 0 descriptor?? [ 326.838833][ T7509] ptrace attach of "./syz-executor exec"[7510] was attempted by "./syz-executor exec"[7509] [ 329.628656][ T47] usbhid 2-1:0.0: can't add hid device: -71 [ 329.659793][ T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 329.713273][ T47] usb 2-1: USB disconnect, device number 4 [ 329.804799][ T29] audit: type=1326 audit(1725828581.413:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7511 comm="syz.0.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27edd7cef9 code=0x0 [ 330.008125][ T7522] Cannot find add_set index 0 as target [ 331.306724][ T5294] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 331.518947][ T5294] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 331.639628][ T7527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.811102][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.849990][ T5294] usb 2-1: config 0 descriptor?? [ 331.861684][ T5294] cp210x 2-1:0.0: cp210x converter detected [ 332.382171][ T5294] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 332.432888][ T5294] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 332.466628][ T5294] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 332.468519][ T29] audit: type=1326 audit(1725828584.063:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7528 comm="syz.0.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27edd7cef9 code=0x0 [ 332.526460][ T5294] usb 2-1: cp210x converter now attached to ttyUSB0 [ 332.593720][ T5294] usb 2-1: USB disconnect, device number 5 [ 332.794336][ T5294] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.811995][ T5294] cp210x 2-1:0.0: device disconnected [ 335.126172][ T29] audit: type=1400 audit(1725828586.733:443): avc: denied { write } for pid=7546 comm="syz.4.421" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 335.356953][ T29] audit: type=1400 audit(1725828586.963:444): avc: denied { read } for pid=7546 comm="syz.4.421" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 336.357155][ T29] audit: type=1400 audit(1725828586.963:445): avc: denied { open } for pid=7546 comm="syz.4.421" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 337.439615][ T7561] ptrace attach of "./syz-executor exec"[7562] was attempted by "./syz-executor exec"[7561] [ 342.388439][ T7583] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 343.016608][ T29] audit: type=1400 audit(1725828594.613:446): avc: denied { ioctl } for pid=7576 comm="syz.4.432" path="socket:[21583]" dev="sockfs" ino=21583 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 343.117648][ T29] audit: type=1400 audit(1725828594.663:447): avc: denied { setopt } for pid=7576 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 345.313243][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.338899][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.349286][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.368437][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.376221][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.385687][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.106947][ T5288] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 346.359288][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 346.390586][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 346.432055][ T5288] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 346.456197][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 346.459829][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.476448][ T5288] usb 5-1: Product: syz [ 346.483176][ T5288] usb 5-1: Manufacturer: syz [ 346.497901][ T5288] usb 5-1: SerialNumber: syz [ 346.558129][ T5288] usb 5-1: config 0 descriptor?? [ 346.586826][ T5288] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 346.806762][ T5288] usb 5-1: USB disconnect, device number 6 [ 346.889189][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.910489][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.928317][ T7597] bridge_slave_0: entered allmulticast mode [ 346.950337][ T7597] bridge_slave_0: entered promiscuous mode [ 346.973832][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.987713][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.995361][ T7597] bridge_slave_1: entered allmulticast mode [ 347.003072][ T7597] bridge_slave_1: entered promiscuous mode [ 347.114124][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.139258][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.263212][ T7597] team0: Port device team_slave_0 added [ 347.280234][ T7597] team0: Port device team_slave_1 added [ 347.449144][ T5245] Bluetooth: hci1: command tx timeout [ 347.485247][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.515314][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.544473][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.611210][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.618369][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.644509][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.047361][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 349.274946][ T7597] hsr_slave_0: entered promiscuous mode [ 349.359437][ T7641] xt_TPROXY: Can be used only with -p tcp or -p udp [ 349.990281][ T5245] Bluetooth: hci1: command tx timeout [ 350.019891][ T7597] hsr_slave_1: entered promiscuous mode [ 350.086808][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 350.103064][ T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 350.117933][ T25] usb 4-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 350.126434][ T25] usb 4-1: Product: syz [ 350.138685][ T25] usb 4-1: Manufacturer: syz [ 350.147356][ T25] usb 4-1: SerialNumber: syz [ 350.155819][ T25] usb 4-1: config 0 descriptor?? [ 350.162026][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.172285][ T25] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 350.179831][ T7597] Cannot create hsr debugfs directory [ 350.189046][ T25] usb 4-1: Detected FT4232HA [ 350.550624][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 350.572143][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 350.595764][ T25] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 350.653844][ T25] usb 4-1: USB disconnect, device number 6 [ 350.715189][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 350.761333][ T25] ftdi_sio 4-1:0.0: device disconnected [ 352.006683][ T5245] Bluetooth: hci1: command tx timeout [ 353.636702][ T29] audit: type=1400 audit(1725828605.233:448): avc: denied { connect } for pid=7657 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 353.871298][ T7597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.087484][ T5245] Bluetooth: hci1: command tx timeout [ 355.311320][ T7597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.498451][ T7597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.167826][ T7597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.503655][ T54] bridge_slave_1: left allmulticast mode [ 359.514201][ T54] bridge_slave_1: left promiscuous mode [ 359.537334][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.363758][ T54] bridge_slave_0: left allmulticast mode [ 360.381492][ T54] bridge_slave_0: left promiscuous mode [ 360.404189][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.570515][ T29] audit: type=1400 audit(1725828612.183:449): avc: denied { create } for pid=7711 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.338583][ T29] audit: type=1400 audit(1725828612.423:450): avc: denied { create } for pid=7715 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 361.856709][ T29] audit: type=1400 audit(1725828612.423:451): avc: denied { write } for pid=7715 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 361.887896][ T5321] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 362.176489][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.266647][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.323961][ T5321] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 362.371642][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.393452][ T5321] usb 1-1: config 0 descriptor?? [ 362.855058][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0 [ 362.869157][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0 [ 362.928255][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0 [ 362.993916][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0 [ 363.001907][ T5321] greenasia 0003:0E8F:0012.0005: unknown main item tag 0x0 [ 363.033852][ T29] audit: type=1400 audit(1725828614.633:452): avc: denied { read } for pid=7715 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 363.060651][ T5321] greenasia 0003:0E8F:0012.0005: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.0-1/input0 [ 363.129554][ T5321] greenasia 0003:0E8F:0012.0005: no inputs found [ 363.209966][ T5321] usb 1-1: USB disconnect, device number 5 [ 364.382087][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.665835][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.032381][ T54] bond0 (unregistering): Released all slaves [ 367.575405][ T7758] trusted_key: syz.1.481 sent an empty control message without MSG_MORE. [ 367.664327][ T7597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.791171][ T7597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.820324][ T7597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.895388][ T7597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.026230][ T54] hsr_slave_0: left promiscuous mode [ 369.063713][ T54] hsr_slave_1: left promiscuous mode [ 369.100896][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.142061][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.167132][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.195804][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.338997][ T54] veth1_macvtap: left promiscuous mode [ 369.354802][ T54] veth0_macvtap: left promiscuous mode [ 369.370849][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 369.385065][ T54] veth1_vlan: left promiscuous mode [ 369.400141][ T54] veth0_vlan: left promiscuous mode [ 370.383569][ T29] audit: type=1400 audit(1725828621.993:453): avc: denied { create } for pid=7778 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.497366][ T29] audit: type=1400 audit(1725828622.023:454): avc: denied { getopt } for pid=7778 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.537927][ T7782] Invalid option length (1031570) for dns_resolver key [ 371.553653][ T54] team0 (unregistering): Port device team_slave_1 removed [ 371.664317][ T7788] xt_CT: No such helper "syz0" [ 371.784808][ T54] team0 (unregistering): Port device team_slave_0 removed [ 372.126788][ T5288] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 373.029595][ T5288] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.055087][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.066899][ T5288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.093971][ T5288] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.131546][ T5288] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.142383][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.152243][ T5288] usb 2-1: Product: syz [ 373.177764][ T5288] usb 2-1: Manufacturer: syz [ 373.220967][ T5288] cdc_wdm 2-1:1.0: skipping garbage [ 373.232145][ T5288] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 373.763328][ T5294] usb 2-1: USB disconnect, device number 6 [ 374.172479][ T7775] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 374.196363][ T7775] bond1: entered promiscuous mode [ 374.489045][ T7814] Cannot find add_set index 0 as target [ 375.663508][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.229914][ T7597] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.291178][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.298352][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.361057][ T2559] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.368250][ T2559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.978657][ T29] audit: type=1400 audit(1725828630.593:455): avc: denied { read } for pid=7836 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 379.967238][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.973601][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.077179][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.540262][ T7597] veth0_vlan: entered promiscuous mode [ 380.826976][ T7597] veth1_vlan: entered promiscuous mode [ 380.942663][ T7597] veth0_macvtap: entered promiscuous mode [ 380.987307][ T7597] veth1_macvtap: entered promiscuous mode [ 381.028195][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.063317][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.128402][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.142664][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.172598][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.193467][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.236730][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.262112][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.290583][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.641158][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.664166][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.706592][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.717605][ T7865] kAFS: No cell specified [ 382.735574][ T29] audit: type=1400 audit(1725828634.323:456): avc: denied { bind } for pid=7855 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 382.762267][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.777955][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.788566][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.814050][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.832330][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.845718][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.901726][ T7597] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.915768][ T7597] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.924695][ T7597] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.936724][ T7597] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.067631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.075460][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.117509][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.125385][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.213260][ T29] audit: type=1400 audit(1725828634.823:457): avc: denied { bind } for pid=7866 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.552284][ T7882] netlink: 'syz.3.520': attribute type 3 has an invalid length. [ 384.913635][ T7892] Cannot find add_set index 0 as target [ 386.384366][ T7901] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 387.330982][ T29] audit: type=1400 audit(1725828638.943:458): avc: denied { ioctl } for pid=7903 comm="syz.1.512" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 387.582757][ T29] audit: type=1400 audit(1725828639.183:459): avc: denied { accept } for pid=7908 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.786661][ T53] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 389.733019][ T29] audit: type=1400 audit(1725828640.303:460): avc: denied { getopt } for pid=7910 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.066901][ T53] usb 2-1: device not accepting address 7, error -71 [ 391.791861][ T7928] IPVS: stopping backup sync thread 7937 ... [ 391.811724][ T7937] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 393.501838][ T29] audit: type=1400 audit(1725828645.113:461): avc: denied { bind } for pid=7942 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 393.608631][ T29] audit: type=1400 audit(1725828645.143:462): avc: denied { listen } for pid=7942 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.097614][ T29] audit: type=1400 audit(1725828645.703:463): avc: denied { mount } for pid=7955 comm="syz.3.530" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 395.381741][ T29] audit: type=1400 audit(1725828646.993:464): avc: denied { unmount } for pid=6312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 395.383185][ T7964] loop2: detected capacity change from 0 to 7 [ 395.432903][ T7964] Dev loop2: unable to read RDB block 7 [ 395.469200][ T7964] loop2: unable to read partition table [ 395.495928][ T7964] loop2: partition table beyond EOD, truncated [ 395.510644][ T7964] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 396.339805][ T29] audit: type=1400 audit(1725828647.953:465): avc: denied { bind } for pid=7967 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 399.406508][ C1] sched: RT throttling activated [ 405.007205][ T29] audit: type=1400 audit(1725828656.593:466): avc: denied { setopt } for pid=7986 comm="syz.0.540" lport=52418 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 405.136707][ T29] audit: type=1400 audit(1725828656.603:467): avc: denied { read } for pid=7986 comm="syz.0.540" lport=52418 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 407.053980][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 407.100258][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 407.109580][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 407.118598][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 407.130979][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 407.139385][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 407.147059][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.716808][ T2559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.291323][ T5245] Bluetooth: hci2: command tx timeout [ 409.307172][ T29] audit: type=1400 audit(1725828660.923:468): avc: denied { ioctl } for pid=8022 comm="syz.3.550" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 409.360617][ T8024] input: syz0 as /devices/virtual/input/input8 [ 409.449136][ T2559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.596970][ T8029] netlink: 'syz.1.552': attribute type 21 has an invalid length. [ 409.604727][ T8029] netlink: 128 bytes leftover after parsing attributes in process `syz.1.552'. [ 409.675010][ T8029] netlink: 'syz.1.552': attribute type 6 has an invalid length. [ 409.759101][ T8029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.552'. [ 410.017283][ T8036] No such timeout policy "syz1" [ 410.925910][ T2559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.369728][ T5245] Bluetooth: hci2: command tx timeout [ 411.439562][ T2559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.978123][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 412.559697][ T2559] bridge_slave_1: left allmulticast mode [ 412.582001][ T2559] bridge_slave_1: left promiscuous mode [ 412.608642][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.666908][ T2559] bridge_slave_0: left allmulticast mode [ 412.676581][ T2559] bridge_slave_0: left promiscuous mode [ 412.685048][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.456685][ T5245] Bluetooth: hci2: command tx timeout [ 414.630538][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.654634][ T8079] 9pnet_fd: Insufficient options for proto=fd [ 414.689606][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.751654][ T2559] bond0 (unregistering): Released all slaves [ 415.527914][ T5245] Bluetooth: hci2: command tx timeout [ 415.994792][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.043798][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.053600][ T29] audit: type=1400 audit(1725828667.663:469): avc: denied { setopt } for pid=8086 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 416.056750][ T8009] bridge_slave_0: entered allmulticast mode [ 416.270664][ T8009] bridge_slave_0: entered promiscuous mode [ 416.280314][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.316231][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.366334][ T8009] bridge_slave_1: entered allmulticast mode [ 417.378042][ T8009] bridge_slave_1: entered promiscuous mode [ 418.916555][ T29] audit: type=1400 audit(1725828669.783:470): avc: denied { connect } for pid=8098 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 419.860050][ T29] audit: type=1400 audit(1725828669.793:471): avc: denied { write } for pid=8098 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 419.936212][ T29] audit: type=1400 audit(1725828669.793:472): avc: denied { read } for pid=8098 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 419.990924][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.052145][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.905889][ T8009] team0: Port device team_slave_0 added [ 421.958893][ T8009] team0: Port device team_slave_1 added [ 422.936609][ T2559] hsr_slave_0: left promiscuous mode [ 423.506837][ T2559] hsr_slave_1: left promiscuous mode [ 424.072220][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.082696][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.091931][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.103728][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.113724][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.121561][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.129192][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 424.146828][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.200300][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.207921][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.371357][ T2559] veth1_macvtap: left promiscuous mode [ 424.396803][ T2559] veth0_macvtap: left promiscuous mode [ 424.413109][ T2559] veth1_vlan: left promiscuous mode [ 424.448239][ T2559] veth0_vlan: left promiscuous mode [ 426.288932][ T5243] Bluetooth: hci4: command tx timeout [ 426.706691][ T29] audit: type=1804 audit(1725828678.303:473): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.587" name="/newroot/18/file0" dev="fuse" ino=1 res=1 errno=0 [ 428.336720][ T5243] Bluetooth: hci4: command tx timeout [ 429.243219][ T2559] team0 (unregistering): Port device team_slave_1 removed [ 429.438080][ T2559] team0 (unregistering): Port device team_slave_0 removed [ 430.408401][ T5243] Bluetooth: hci4: command tx timeout [ 431.038484][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.046703][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.076813][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.243144][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.266660][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.307017][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.479211][ T8009] hsr_slave_0: entered promiscuous mode [ 431.507125][ T8009] hsr_slave_1: entered promiscuous mode [ 432.149226][ T2559] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.358460][ T2559] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.494174][ T2559] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.498476][ T5243] Bluetooth: hci4: command tx timeout [ 432.580970][ T2559] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.750843][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 433.142641][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.150465][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.159994][ T8150] bridge_slave_0: entered allmulticast mode [ 433.170615][ T8150] bridge_slave_0: entered promiscuous mode [ 433.179948][ T2559] bridge_slave_1: left allmulticast mode [ 433.187743][ T2559] bridge_slave_1: left promiscuous mode [ 433.193630][ T2559] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.203214][ T2559] bridge_slave_0: left allmulticast mode [ 433.209852][ T2559] bridge_slave_0: left promiscuous mode [ 433.215557][ T2559] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.692735][ T2559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.705671][ T2559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.718261][ T2559] bond0 (unregistering): Released all slaves [ 433.732116][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.744751][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.757186][ T8150] bridge_slave_1: entered allmulticast mode [ 433.770898][ T8150] bridge_slave_1: entered promiscuous mode [ 433.893745][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.921868][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.155394][ T8150] team0: Port device team_slave_0 added [ 434.263728][ T8150] team0: Port device team_slave_1 added [ 434.311160][ T8009] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.323893][ T8009] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.394560][ T8009] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.409801][ T8009] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.438463][ T2559] hsr_slave_0: left promiscuous mode [ 434.444719][ T2559] hsr_slave_1: left promiscuous mode [ 434.451584][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.460472][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.469577][ T2559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.478753][ T2559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.523806][ T2559] veth1_macvtap: left promiscuous mode [ 434.529712][ T2559] veth0_macvtap: left promiscuous mode [ 434.535435][ T2559] veth1_vlan: left promiscuous mode [ 434.541550][ T2559] veth0_vlan: left promiscuous mode [ 435.093421][ T2559] team0 (unregistering): Port device team_slave_1 removed [ 435.166640][ T2559] team0 (unregistering): Port device team_slave_0 removed [ 435.738827][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.747844][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.775459][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.794003][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.801392][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.828316][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.993033][ T8150] hsr_slave_0: entered promiscuous mode [ 435.999653][ T8150] hsr_slave_1: entered promiscuous mode [ 436.005812][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.013828][ T8150] Cannot create hsr debugfs directory [ 436.374203][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.415660][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.472645][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.479985][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.635497][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.642748][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.805004][ T8009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.032385][ T8150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.057505][ T8150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.081942][ T8150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.100501][ T8150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.184176][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.415020][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.463363][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.510975][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.518226][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.542789][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.550006][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.830660][ T8009] veth0_vlan: entered promiscuous mode [ 437.870638][ T8009] veth1_vlan: entered promiscuous mode [ 438.013755][ T8009] veth0_macvtap: entered promiscuous mode [ 438.056260][ T8009] veth1_macvtap: entered promiscuous mode [ 438.072915][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.112913][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.132367][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.145300][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.161164][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.174548][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.190846][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.216807][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.256165][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.273434][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.284781][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.301608][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.317601][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.329903][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.342343][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.378752][ T8009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.394391][ T8009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.415936][ T8009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.427688][ T8009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.495371][ T8150] veth0_vlan: entered promiscuous mode [ 438.571095][ T8150] veth1_vlan: entered promiscuous mode [ 438.665973][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.684644][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.785600][ T8150] veth0_macvtap: entered promiscuous mode [ 438.825176][ T8150] veth1_macvtap: entered promiscuous mode [ 438.854300][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.876250][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.896349][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.915496][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.931931][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.943251][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.953634][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.965898][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.982193][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.001702][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.025722][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.063225][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.073796][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.091586][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.104520][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.115884][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.139024][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.154387][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.171516][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.184387][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.226293][ T8150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.247933][ T8150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.257354][ T8150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.302293][ T8150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.667622][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.674115][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.699505][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.709042][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.795476][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.829817][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.688566][ T8312] Bluetooth: MGMT ver 1.23 [ 442.781632][ T8328] syz.4.592[8328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.781840][ T8328] syz.4.592[8328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.112379][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'. [ 444.915490][ T29] audit: type=1400 audit(1725828696.523:474): avc: denied { getopt } for pid=8353 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 446.081081][ T29] audit: type=1400 audit(1725828697.693:475): avc: denied { ioctl } for pid=8361 comm="syz.0.595" path="socket:[25364]" dev="sockfs" ino=25364 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 446.210667][ T29] audit: type=1400 audit(1725828697.763:476): avc: denied { create } for pid=8361 comm="syz.0.595" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.276063][ T29] audit: type=1400 audit(1725828697.763:477): avc: denied { write } for pid=8361 comm="syz.0.595" name="file5" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.426676][ T29] audit: type=1400 audit(1725828697.763:478): avc: denied { open } for pid=8361 comm="syz.0.595" path="/46/file5" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.508568][ T29] audit: type=1400 audit(1725828697.803:479): avc: denied { ioctl } for pid=8361 comm="syz.0.595" path="/46/file5" dev="tmpfs" ino=252 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 447.466783][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 447.756751][ T29] audit: type=1400 audit(1725828697.993:480): avc: denied { unlink } for pid=7115 comm="syz-executor" name="file5" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 447.785658][ T29] audit: type=1400 audit(1725828699.173:481): avc: denied { shutdown } for pid=8373 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.976560][ T29] audit: type=1400 audit(1725828699.583:482): avc: denied { setopt } for pid=8368 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 449.970108][ T8406] netlink: 156 bytes leftover after parsing attributes in process `syz.2.612'. [ 457.800012][ T8462] binder: BINDER_SET_CONTEXT_MGR already set [ 457.830072][ T8462] binder: 8452:8462 ioctl 4018620d 20000100 returned -16 [ 457.895404][ T8465] binder: 8452:8465 ioctl c018620c 20000000 returned -1 [ 460.505475][ T8475] kvm: kvm [8474]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 466.986363][ T8534] netlink: 156 bytes leftover after parsing attributes in process `syz.1.645'. [ 467.066719][ T8534] netlink: 'syz.1.645': attribute type 2 has an invalid length. [ 467.107416][ T8534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.645'. [ 468.486834][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 468.923428][ T8559] capability: warning: `syz.4.652' uses 32-bit capabilities (legacy support in use) [ 468.996575][ T29] audit: type=1400 audit(468.954:483): avc: denied { setopt } for pid=8557 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 469.090311][ T29] audit: type=1400 audit(469.044:484): avc: denied { setopt } for pid=8562 comm="syz.1.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 470.233998][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 470.250071][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 470.306673][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 470.340663][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 470.357378][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 470.368938][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 471.596626][ T29] audit: type=1400 audit(471.564:485): avc: denied { mount } for pid=8586 comm="syz.0.661" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 472.649400][ T5245] Bluetooth: hci5: command tx timeout [ 472.871542][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 472.946915][ T29] audit: type=1400 audit(472.904:486): avc: denied { unmount } for pid=7115 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 472.966141][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.219204][ T5245] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 473.229617][ T5245] Bluetooth: hci2: Injecting HCI hardware error event [ 473.353872][ T56] Bluetooth: hci2: hardware error 0x00 [ 474.253293][ T29] audit: type=1400 audit(474.224:487): avc: denied { watch_mount } for pid=8608 comm="syz.4.667" path="/14/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 474.359898][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.371159][ T29] audit: type=1400 audit(474.344:488): avc: denied { unmount } for pid=8009 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 474.995618][ T5245] Bluetooth: hci5: command 0x041b tx timeout [ 475.217627][ T5293] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 476.006676][ T56] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 477.296674][ T56] Bluetooth: hci5: command 0x041b tx timeout [ 478.009886][ T29] audit: type=1400 audit(477.974:489): avc: denied { connect } for pid=8620 comm="syz.2.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 479.367855][ T56] Bluetooth: hci5: command 0x041b tx timeout [ 479.565980][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.919355][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.031882][ T56] Bluetooth: hci5: command 0x041b tx timeout [ 483.890941][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.923398][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.946949][ T8573] bridge_slave_0: entered allmulticast mode [ 483.959197][ T8573] bridge_slave_0: entered promiscuous mode [ 484.040318][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.120927][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.147271][ T8573] bridge_slave_1: entered allmulticast mode [ 484.160650][ T8573] bridge_slave_1: entered promiscuous mode [ 485.850795][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.746908][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.810068][ T8680] tipc: Started in network mode [ 486.828192][ T8680] tipc: Node identity fffffff9, cluster identity 4711 [ 486.865582][ T8680] tipc: Node number set to 4294967289 [ 486.919951][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.152369][ T8573] team0: Port device team_slave_0 added [ 487.217247][ T8573] team0: Port device team_slave_1 added [ 487.377547][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.397056][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.505957][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.598933][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.636734][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.095462][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.561807][ T8573] hsr_slave_0: entered promiscuous mode [ 488.585644][ T8573] hsr_slave_1: entered promiscuous mode [ 488.610194][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.625395][ T8573] Cannot create hsr debugfs directory [ 488.635908][ T54] bridge_slave_1: left allmulticast mode [ 488.656949][ T54] bridge_slave_1: left promiscuous mode [ 488.662921][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.673131][ T54] bridge_slave_0: left allmulticast mode [ 488.679710][ T54] bridge_slave_0: left promiscuous mode [ 488.687969][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.313892][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.326755][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.342547][ T54] bond0 (unregistering): Released all slaves [ 489.355403][ T54] bond1 (unregistering): Released all slaves [ 489.842967][ T54] hsr_slave_0: left promiscuous mode [ 489.878849][ T54] hsr_slave_1: left promiscuous mode [ 489.885167][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.893145][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.901416][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.911005][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.946873][ T54] veth1_macvtap: left promiscuous mode [ 489.952661][ T54] veth0_macvtap: left promiscuous mode [ 489.958474][ T54] veth1_vlan: left promiscuous mode [ 489.963840][ T54] veth0_vlan: left promiscuous mode [ 490.760799][ T54] team0 (unregistering): Port device team_slave_1 removed [ 490.826357][ T54] team0 (unregistering): Port device team_slave_0 removed [ 492.106416][ T8573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 492.120536][ T8573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 492.142983][ T8573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 492.178239][ T8573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 492.357790][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.394837][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.411601][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.418834][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.443928][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.451203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.835480][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.974666][ T8573] veth0_vlan: entered promiscuous mode [ 493.015027][ T8573] veth1_vlan: entered promiscuous mode [ 493.092868][ T8573] veth0_macvtap: entered promiscuous mode [ 493.114631][ T8573] veth1_macvtap: entered promiscuous mode [ 493.145393][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.156383][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.167353][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.178730][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.194063][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.206635][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.219097][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.231119][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.248776][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.272186][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.282743][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.296209][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.307642][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.317917][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.328952][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.339260][ T8573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.350324][ T8573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.362676][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.382130][ T8573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.405896][ T8573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.414919][ T8573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.426521][ T8573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.627507][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.635365][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.683424][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.691639][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.087627][ T8760] syzkaller0: entered promiscuous mode [ 496.154581][ T8760] syzkaller0: entered allmulticast mode [ 497.300982][ T56] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 497.316635][ T5294] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 497.516690][ T5294] usb 4-1: Using ep0 maxpacket: 32 [ 497.527360][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.558048][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.601594][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 497.646811][ T5293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 497.654506][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 497.714075][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 497.744786][ T5294] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 497.754603][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.861392][ T5294] usb 4-1: config 0 descriptor?? [ 497.890958][ T5293] usb 3-1: Using ep0 maxpacket: 32 [ 497.935288][ T5293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 497.993429][ T5293] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 498.025368][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 498.074085][ T5293] usb 3-1: Product: syz [ 498.102807][ T5293] usb 3-1: Manufacturer: syz [ 498.136804][ T5293] usb 3-1: SerialNumber: syz [ 498.171768][ T5293] usb 3-1: config 0 descriptor?? [ 498.200507][ T8792] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 498.399345][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 498.434708][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 498.459613][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 498.508853][ T8792] netlink: 'syz.2.693': attribute type 8 has an invalid length. [ 498.522355][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 498.551177][ T5294] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 498.571381][ T8792] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.693'. [ 498.602045][ T5294] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 498.630778][ T5291] usb 3-1: USB disconnect, device number 6 [ 498.770105][ T5294] usb 4-1: USB disconnect, device number 7 [ 500.992131][ T29] audit: type=1400 audit(499.964:490): avc: denied { map } for pid=8819 comm="syz.0.712" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 501.324611][ T8830] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 502.128669][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.141920][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.546368][ T8837] Bluetooth: MGMT ver 1.23 [ 505.898883][ T29] audit: type=1400 audit(505.874:491): avc: denied { ioctl } for pid=8867 comm="syz.3.714" path="socket:[27230]" dev="sockfs" ino=27230 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 506.582423][ T943] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 507.638137][ T943] usb 1-1: not running at top speed; connect to a high speed hub [ 507.697337][ T943] usb 1-1: config 1 interface 0 has no altsetting 0 [ 507.726720][ T943] usb 1-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.40 [ 507.759907][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.790808][ T943] usb 1-1: Product: syz [ 507.795026][ T943] usb 1-1: Manufacturer: 粘殙彥됋ꄧ廀쉛ʉ᭦⍈ꄙ귤寪펱῵혙鳂䦲瀰臰弄૙糠륄䧖뗿￐퓨ힽ眢⮔滸䚵꽠垭᷺℮豾㫏첃餅炇菉弸쎼ᕯ郋鉡塨뙾㦆㶗篿埦择鍧졕卍留ꌲ綊嶷폖뜆㗪橞줃툊헔귗夬鎁紼擮뼔Ꜩ⨋࡟ᔳ㻧辎便ꝉ쩝䛛駪ꖳᗆ╾迗돭ꦯ逳픔 [ 507.803778][ T29] audit: type=1400 audit(507.774:492): avc: denied { create } for pid=8884 comm="syz.3.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 507.865840][ T943] usb 1-1: SerialNumber: syz [ 508.469898][ T943] usbhid 1-1:1.0: can't add hid device: -71 [ 508.478932][ T943] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 508.590709][ T943] usb 1-1: USB disconnect, device number 6 [ 508.607073][ T8890] syzkaller0: entered promiscuous mode [ 508.620660][ T8890] syzkaller0: entered allmulticast mode [ 511.584839][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.604909][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.637226][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.679043][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.701896][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 511.713601][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.848902][ T56] Bluetooth: hci0: command tx timeout [ 515.935523][ T56] Bluetooth: hci0: command tx timeout [ 516.146281][ T8904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'. [ 516.165089][ T8906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.724'. [ 516.196989][ T8919] netlink: 76 bytes leftover after parsing attributes in process `syz.3.727'. [ 516.338124][ T8921] Cannot find set identified by id 0 to match [ 516.719826][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.749772][ T8911] chnl_net:caif_netlink_parms(): no params data found [ 516.821993][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.881825][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.889273][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.896793][ T8911] bridge_slave_0: entered allmulticast mode [ 516.906103][ T8911] bridge_slave_0: entered promiscuous mode [ 516.939796][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.954839][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.962849][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.971066][ T8911] bridge_slave_1: entered allmulticast mode [ 516.979142][ T8911] bridge_slave_1: entered promiscuous mode [ 517.046527][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.068268][ T8911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.080602][ T8911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.125816][ T8911] team0: Port device team_slave_0 added [ 517.141451][ T8911] team0: Port device team_slave_1 added [ 517.186050][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.193793][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.220130][ T8911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.236244][ T8911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.244593][ T8911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.272706][ T8911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.364957][ T8911] hsr_slave_0: entered promiscuous mode [ 517.372546][ T8911] hsr_slave_1: entered promiscuous mode [ 517.381142][ T8911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.389202][ T8911] Cannot create hsr debugfs directory [ 517.480298][ T12] bridge_slave_1: left allmulticast mode [ 517.486012][ T12] bridge_slave_1: left promiscuous mode [ 517.493906][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.507867][ T12] bridge_slave_0: left allmulticast mode [ 517.513530][ T12] bridge_slave_0: left promiscuous mode [ 517.519823][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.010313][ T56] Bluetooth: hci0: command tx timeout [ 518.076416][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.091118][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.104259][ T12] bond0 (unregistering): Released all slaves [ 518.213212][ T12] tipc: Left network mode [ 518.683603][ T12] hsr_slave_0: left promiscuous mode [ 518.700198][ T12] hsr_slave_1: left promiscuous mode [ 518.708935][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.716397][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.731327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.739058][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.776045][ T12] veth1_macvtap: left promiscuous mode [ 518.783611][ T12] veth0_macvtap: left promiscuous mode [ 518.801316][ T12] veth1_vlan: left promiscuous mode [ 518.807734][ T12] veth0_vlan: left promiscuous mode [ 519.523394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 519.589372][ T12] team0 (unregistering): Port device team_slave_0 removed [ 520.105273][ T56] Bluetooth: hci0: command tx timeout [ 520.816632][ T8911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 520.839683][ T8911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 520.859137][ T8911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.877789][ T8911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 521.095273][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.163037][ T8911] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.179907][ T8619] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.187179][ T8619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.220415][ T8619] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.227686][ T8619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.570710][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.924679][ T8911] veth0_vlan: entered promiscuous mode [ 521.945318][ T8911] veth1_vlan: entered promiscuous mode [ 521.982554][ T8911] veth0_macvtap: entered promiscuous mode [ 521.993886][ T8911] veth1_macvtap: entered promiscuous mode [ 522.015649][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.032965][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.043858][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.056092][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.068301][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.078788][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.089312][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.100633][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.113092][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.133158][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.145667][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.158011][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.169372][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.179246][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.191631][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.201622][ T8911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.212431][ T8911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.224857][ T8911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.243799][ T8911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.253385][ T8911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.264926][ T8911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.277023][ T8911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.380562][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.400713][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.434962][ T2559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.443138][ T2559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.610253][ T29] audit: type=1400 audit(522.584:493): avc: denied { write } for pid=8982 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 524.045747][ T8996] tmpfs: Bad value for 'mpol' [ 524.896607][ T5294] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 525.257389][ T5294] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.298686][ T5294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.338376][ T5294] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 525.359560][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 525.389196][ T5294] usb 1-1: SerialNumber: syz [ 525.809118][ T5294] usb 1-1: 0:2 : does not exist [ 525.830098][ T5294] usb 1-1: unit 5 not found! [ 526.712931][ T5294] usb 1-1: USB disconnect, device number 7 [ 527.039514][ T7989] udevd[7989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.330329][ T5243] Bluetooth: hci0: command 0x0405 tx timeout [ 531.379064][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 531.592109][ T29] audit: type=1400 audit(531.554:494): avc: denied { override_creds } for pid=9044 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 531.625669][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 531.653492][ T25] usb 4-1: config index 0 descriptor too short (expected 55488, got 18) [ 531.665719][ T25] usb 4-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 531.677123][ T25] usb 4-1: config 0 has no interfaces? [ 531.688580][ T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 531.699238][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.707754][ T25] usb 4-1: Product: syz [ 531.712201][ T25] usb 4-1: Manufacturer: syz [ 531.717397][ T25] usb 4-1: SerialNumber: syz [ 531.782720][ T25] usb 4-1: config 0 descriptor?? [ 531.975318][ T9059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.649200][ T25] usb 4-1: USB disconnect, device number 8 [ 533.132639][ T29] audit: type=1400 audit(533.104:495): avc: denied { mounton } for pid=9065 comm="syz.4.752" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 533.171936][ T9066] syz.4.752: attempt to access beyond end of device [ 533.171936][ T9066] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 533.224745][ T9066] syz.4.752: attempt to access beyond end of device [ 533.224745][ T9066] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 533.296703][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 533.335422][ T9066] syz.4.752: attempt to access beyond end of device [ 533.335422][ T9066] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 533.446623][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 533.486702][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 533.507569][ T9066] UDF-fs: Scanning with blocksize 512 failed [ 533.642727][ T9066] syz.4.752: attempt to access beyond end of device [ 533.642727][ T9066] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 533.696998][ T9066] syz.4.752: attempt to access beyond end of device [ 533.696998][ T9066] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 534.159327][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 534.813893][ T9066] syz.4.752: attempt to access beyond end of device [ 534.813893][ T9066] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 534.943605][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.004353][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.031029][ T9066] UDF-fs: Scanning with blocksize 1024 failed [ 535.050860][ T9066] syz.4.752: attempt to access beyond end of device [ 535.050860][ T9066] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 535.071425][ T9066] syz.4.752: attempt to access beyond end of device [ 535.071425][ T9066] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 535.092030][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.105913][ T9066] syz.4.752: attempt to access beyond end of device [ 535.105913][ T9066] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 535.156939][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.197576][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.246905][ T9066] UDF-fs: Scanning with blocksize 2048 failed [ 535.283383][ T9066] syz.4.752: attempt to access beyond end of device [ 535.283383][ T9066] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 535.346765][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.383771][ T9066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.410822][ T9066] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.459608][ T9066] UDF-fs: Scanning with blocksize 4096 failed [ 535.503394][ T9066] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 535.750582][ T8293] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 536.766178][ T8293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.851478][ T8293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.121048][ T8293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.180786][ T8293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.207702][ T8293] usb 2-1: config 0 descriptor?? [ 538.377878][ T8293] usbhid 2-1:0.0: can't add hid device: -71 [ 538.402170][ T8293] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 538.561948][ T8293] usb 2-1: USB disconnect, device number 10 [ 540.285092][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.298705][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.318053][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.339422][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.347538][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 540.354881][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.563628][ T29] audit: type=1400 audit(540.534:496): avc: denied { bind } for pid=9108 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 545.759781][ T56] Bluetooth: hci2: command tx timeout [ 546.650535][ T29] audit: type=1400 audit(546.614:497): avc: denied { write } for pid=9113 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 546.893795][ T9123] qrtr: Invalid version 0 [ 547.886502][ T5243] Bluetooth: hci2: command tx timeout [ 548.299825][ T29] audit: type=1400 audit(548.264:498): avc: denied { getopt } for pid=9126 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 548.443187][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 549.855068][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 549.869446][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 549.878610][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 549.892727][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 549.901718][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 549.926725][ T5245] Bluetooth: hci2: command tx timeout [ 549.933051][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 550.122293][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.155120][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.196714][ T9104] bridge_slave_0: entered allmulticast mode [ 550.216786][ T9104] bridge_slave_0: entered promiscuous mode [ 550.246757][ T9142] Bluetooth: hci4: command 0x0406 tx timeout [ 550.285402][ T9144] syzkaller0: entered allmulticast mode [ 550.294234][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.324943][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.356634][ T9104] bridge_slave_1: entered allmulticast mode [ 550.380108][ T9104] bridge_slave_1: entered promiscuous mode [ 551.174702][ T9149] Bluetooth: MGMT ver 1.23 [ 552.647685][ T5243] Bluetooth: hci2: command tx timeout [ 552.653246][ T5243] Bluetooth: hci6: command tx timeout [ 553.623608][ T1294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.695081][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.960123][ T1294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.009409][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.269870][ T1294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.387755][ T29] audit: type=1400 audit(554.364:499): avc: denied { map } for pid=9159 comm="syz.4.777" path="socket:[29580]" dev="sockfs" ino=29580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 554.581181][ T1294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.648068][ T9104] team0: Port device team_slave_0 added [ 554.707715][ T9104] team0: Port device team_slave_1 added [ 554.726667][ T5243] Bluetooth: hci6: command tx timeout [ 554.918543][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.926089][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.009795][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.042192][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.099577][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.222610][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.709801][ T9104] hsr_slave_0: entered promiscuous mode [ 556.734599][ T9104] hsr_slave_1: entered promiscuous mode [ 556.806658][ T5243] Bluetooth: hci6: command tx timeout [ 557.101782][ T9140] chnl_net:caif_netlink_parms(): no params data found [ 558.858503][ T1294] bridge_slave_1: left allmulticast mode [ 558.865485][ T1294] bridge_slave_1: left promiscuous mode [ 558.886608][ T5243] Bluetooth: hci6: command tx timeout [ 558.905385][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.094321][ T1294] bridge_slave_0: left allmulticast mode [ 559.119468][ T1294] bridge_slave_0: left promiscuous mode [ 559.149445][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.576294][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.786'. [ 561.117229][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.156269][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.186255][ T1294] bond0 (unregistering): Released all slaves [ 561.706143][ T9225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.788'. [ 563.430996][ T29] audit: type=1400 audit(563.394:500): avc: denied { read } for pid=9230 comm="syz.1.792" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 563.489769][ T29] audit: type=1400 audit(563.394:501): avc: denied { open } for pid=9230 comm="syz.1.792" path="/48/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 563.537471][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.543843][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.678089][ T9140] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.687896][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.695200][ T9140] bridge_slave_0: entered allmulticast mode [ 563.699133][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 563.704121][ T9140] bridge_slave_0: entered promiscuous mode [ 563.754360][ T9241] block device autoloading is deprecated and will be removed. [ 563.930550][ T25] usb 5-1: config 1 has an invalid descriptor of length 134, skipping remainder of the config [ 563.932450][ T29] audit: type=1400 audit(563.904:502): avc: denied { getopt } for pid=9246 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 563.950893][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 563.993230][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.025981][ T9140] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.039979][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.041783][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.056095][ T9140] bridge_slave_1: entered allmulticast mode [ 564.075187][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.077506][ T9140] bridge_slave_1: entered promiscuous mode [ 564.091214][ T25] usb 5-1: Product: syz [ 564.100341][ T25] usb 5-1: Manufacturer: syz [ 564.113137][ T25] usb 5-1: SerialNumber: syz [ 564.209965][ T25] cdc_ncm 5-1:1.0: skipping garbage [ 564.236137][ T25] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 564.277447][ T25] cdc_ncm 5-1:1.0: bind() failure [ 564.291471][ T1294] hsr_slave_0: left promiscuous mode [ 564.350465][ T1294] hsr_slave_1: left promiscuous mode [ 564.358463][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.371120][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.442469][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.477538][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.028841][ T1294] veth1_macvtap: left promiscuous mode [ 565.038571][ T1294] veth0_macvtap: left promiscuous mode [ 565.044576][ T1294] veth1_vlan: left promiscuous mode [ 565.052895][ T1294] veth0_vlan: left promiscuous mode [ 565.397783][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.464865][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.487648][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.516841][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.596028][ T943] usb 5-1: USB disconnect, device number 7 [ 566.742872][ T1294] team0 (unregistering): Port device team_slave_1 removed [ 566.831989][ T1294] team0 (unregistering): Port device team_slave_0 removed [ 567.902042][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.932943][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.036411][ T9260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.216108][ T9140] team0: Port device team_slave_0 added [ 568.251030][ T9140] team0: Port device team_slave_1 added [ 568.399773][ T9260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.278453][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.285431][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.522016][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.559573][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.577676][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.620937][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.708693][ T9260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.769411][ T29] audit: type=1400 audit(569.674:503): avc: denied { read } for pid=9292 comm="syz.1.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 569.920865][ T9260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.057105][ T9140] hsr_slave_0: entered promiscuous mode [ 570.067207][ T9140] hsr_slave_1: entered promiscuous mode [ 570.081149][ T9140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.094044][ T9140] Cannot create hsr debugfs directory [ 570.106322][ T29] audit: type=1804 audit(570.074:504): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.806" name="/newroot/53/file0" dev="fuse" ino=1 res=1 errno=0 [ 570.236689][ T9104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 570.253387][ T9104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 570.296203][ T9104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 570.587070][ T1294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.623087][ T9104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 570.753462][ T1294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.959721][ T9260] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.089258][ T1294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.152731][ T9260] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.293718][ T1294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.436862][ T9260] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.494916][ T9260] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.866219][ T1294] bridge_slave_1: left allmulticast mode [ 572.879911][ T1294] bridge_slave_1: left promiscuous mode [ 572.888277][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.905958][ T1294] bridge_slave_0: left allmulticast mode [ 572.936593][ T1294] bridge_slave_0: left promiscuous mode [ 572.946053][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.246966][ T5243] Bluetooth: hci6: command 0x0405 tx timeout [ 575.112921][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.146041][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.176218][ T1294] bond0 (unregistering): Released all slaves [ 575.331771][ T9335] syzkaller0: entered promiscuous mode [ 575.352963][ T9335] syzkaller0: entered allmulticast mode [ 575.883327][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.184825][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.264665][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.271908][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.606776][ T1294] hsr_slave_0: left promiscuous mode [ 576.619986][ T1294] hsr_slave_1: left promiscuous mode [ 576.636798][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.645514][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.689501][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.706093][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.805711][ T1294] veth1_macvtap: left promiscuous mode [ 576.822840][ T1294] veth0_macvtap: left promiscuous mode [ 576.838245][ T1294] veth1_vlan: left promiscuous mode [ 576.854044][ T1294] veth0_vlan: left promiscuous mode [ 579.211925][ T9400] netlink: 156 bytes leftover after parsing attributes in process `syz.3.816'. [ 580.440212][ T9408] netlink: 'syz.1.819': attribute type 2 has an invalid length. [ 580.485050][ T1294] team0 (unregistering): Port device team_slave_1 removed [ 580.496599][ T943] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 580.691093][ T943] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 580.692395][ T1294] team0 (unregistering): Port device team_slave_0 removed [ 580.714050][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.763597][ T943] usb 4-1: config 0 descriptor?? [ 580.781302][ T943] bfusb 4-1:0.0: probe with driver bfusb failed with error -5 [ 580.841856][ T9142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.869198][ T9142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.878159][ T9142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.889426][ T9142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.907174][ T9142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 580.915854][ T9142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.193912][ T5321] usb 4-1: USB disconnect, device number 9 [ 582.996378][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.003545][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.058940][ T9142] Bluetooth: hci1: command tx timeout [ 583.401914][ T9140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.415567][ T9140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 583.503711][ T9140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 583.534604][ T9140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 583.912711][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.932686][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 583.970773][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.072051][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.079388][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.088683][ T9409] bridge_slave_0: entered allmulticast mode [ 584.095742][ T9409] bridge_slave_0: entered promiscuous mode [ 584.104720][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.113621][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.121326][ T9409] bridge_slave_1: entered allmulticast mode [ 584.129729][ T9409] bridge_slave_1: entered promiscuous mode [ 584.174869][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.199334][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.263560][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.282650][ T9409] team0: Port device team_slave_0 added [ 584.293802][ T9409] team0: Port device team_slave_1 added [ 584.349982][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.357511][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.384689][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.409312][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.416581][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.430748][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.438814][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.471371][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.483072][ T9104] veth0_vlan: entered promiscuous mode [ 584.512007][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.519315][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.577513][ T9409] hsr_slave_0: entered promiscuous mode [ 584.584548][ T9409] hsr_slave_1: entered promiscuous mode [ 584.591267][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.599400][ T9409] Cannot create hsr debugfs directory [ 584.612832][ T9104] veth1_vlan: entered promiscuous mode [ 584.863951][ T9409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.893395][ T9104] veth0_macvtap: entered promiscuous mode [ 584.923251][ T9104] veth1_macvtap: entered promiscuous mode [ 584.991720][ T9409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.073225][ T9409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.094004][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.108414][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.118354][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.129274][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.139270][ T9142] Bluetooth: hci1: command tx timeout [ 585.146339][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.156978][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.169236][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.180930][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.200928][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.213463][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.224463][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.235456][ T9104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.254575][ T9104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.270353][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.318399][ T9409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.344984][ T9104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.355578][ T9104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.365115][ T9104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.374516][ T9104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.533589][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.594852][ T1294] bridge_slave_1: left allmulticast mode [ 585.601111][ T1294] bridge_slave_1: left promiscuous mode [ 585.607505][ T1294] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.620604][ T1294] bridge_slave_0: left allmulticast mode [ 585.626280][ T1294] bridge_slave_0: left promiscuous mode [ 585.632502][ T1294] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.139346][ T1294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.150621][ T1294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.164224][ T1294] bond0 (unregistering): Released all slaves [ 586.216589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.224445][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.364868][ T9409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 586.433087][ T9140] veth0_vlan: entered promiscuous mode [ 586.445250][ T9409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 586.462818][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.464339][ T9409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 586.481435][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.510134][ T9409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 586.541526][ T9140] veth1_vlan: entered promiscuous mode [ 586.709873][ T1294] hsr_slave_0: left promiscuous mode [ 586.733929][ T1294] hsr_slave_1: left promiscuous mode [ 586.745671][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.765752][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.788045][ T1294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.795509][ T1294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.838756][ T1294] veth1_macvtap: left promiscuous mode [ 586.852584][ T1294] veth0_macvtap: left promiscuous mode [ 586.860138][ T1294] veth1_vlan: left promiscuous mode [ 586.865721][ T1294] veth0_vlan: left promiscuous mode [ 587.227275][ T9142] Bluetooth: hci1: command tx timeout [ 588.260171][ T1294] team0 (unregistering): Port device team_slave_1 removed [ 588.325812][ T1294] team0 (unregistering): Port device team_slave_0 removed [ 589.022907][ T9140] veth0_macvtap: entered promiscuous mode [ 589.066324][ T9140] veth1_macvtap: entered promiscuous mode [ 589.129878][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.144256][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.159450][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.170916][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.182586][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.193436][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.224708][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.258819][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.272759][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.283050][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.296369][ T9142] Bluetooth: hci1: command tx timeout [ 589.304414][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.314522][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.325425][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.352314][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.375447][ T9140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.384805][ T9140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.394477][ T9140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.403583][ T9140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.528689][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.597062][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.604208][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.610248][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.633465][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.640697][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.664730][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.671970][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.718797][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.730742][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.171207][ T29] audit: type=1400 audit(591.134:505): avc: denied { connect } for pid=9445 comm="syz.2.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 591.257308][ T29] audit: type=1400 audit(591.184:506): avc: denied { write } for pid=9445 comm="syz.2.833" path="socket:[32870]" dev="sockfs" ino=32870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 592.723735][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.505780][ T9409] veth0_vlan: entered promiscuous mode [ 594.549175][ T9409] veth1_vlan: entered promiscuous mode [ 594.707395][ T9409] veth0_macvtap: entered promiscuous mode [ 594.722888][ T9409] veth1_macvtap: entered promiscuous mode [ 594.969533][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.986253][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.005948][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.164444][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.756632][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.779640][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.832692][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.865581][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.892797][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.366665][ T5256] Bluetooth: hci5: command 0x041b tx timeout [ 596.902891][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.942942][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.978261][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.002981][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.064231][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.080555][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.106566][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.125958][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.161652][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.206537][ T9142] Bluetooth: hci1: command 0x0405 tx timeout [ 598.182081][ T9409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.206316][ T9409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.236004][ T9409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.252054][ T9409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.630629][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.663098][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.628863][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.656345][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.303660][ T29] audit: type=1400 audit(601.254:507): avc: denied { map } for pid=9532 comm="syz.2.844" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 604.506328][ T29] audit: type=1400 audit(604.424:508): avc: denied { unmount } for pid=8150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 604.816583][ T9572] ptrace attach of "./syz-executor exec"[9409] was attempted by ""[9572] [ 608.051224][ T5243] Bluetooth: hci6: unexpected event for opcode 0x041b [ 608.950908][ T8293] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 609.265048][ T8293] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.310768][ T8293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.331904][ T8293] usb 1-1: config 0 descriptor?? [ 609.681196][ T8293] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 609.691743][ T8293] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 609.700249][ T8293] [drm:udl_init] *ERROR* Selecting channel failed [ 609.731649][ T8293] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 609.739315][ T8293] [drm] Initialized udl on minor 2 [ 609.749215][ T8293] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.761585][ T8293] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 609.771942][ T5291] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.792498][ T5291] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.801450][ T8293] usb 1-1: USB disconnect, device number 8 [ 609.822233][ T5291] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 610.504860][ T29] audit: type=1400 audit(610.474:509): avc: denied { accept } for pid=9619 comm="syz.3.870" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 611.437787][ T29] audit: type=1400 audit(611.414:510): avc: denied { ioctl } for pid=9618 comm="syz.2.869" path="socket:[33197]" dev="sockfs" ino=33197 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 611.812534][ T29] audit: type=1400 audit(611.784:511): avc: denied { write } for pid=9635 comm="syz.4.874" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 612.311731][ T5243] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 612.539596][ T5243] Bluetooth: hci6: Injecting HCI hardware error event [ 612.552005][ T9142] Bluetooth: hci6: hardware error 0x00 [ 612.916362][ T943] ================================================================== [ 612.924448][ T943] BUG: KASAN: slab-use-after-free in __mutex_lock+0x8e6/0x9c0 [ 612.931911][ T943] Read of size 8 at addr ffff8880313cfb20 by task kworker/0:2/943 [ 612.939730][ T943] [ 612.942072][ T943] CPU: 0 UID: 0 PID: 943 Comm: kworker/0:2 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 612.952766][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 612.962840][ T943] Workqueue: events l2cap_chan_timeout [ 612.968335][ T943] Call Trace: [ 612.971626][ T943] [ 612.974566][ T943] dump_stack_lvl+0x116/0x1f0 [ 612.979273][ T943] print_report+0xc3/0x620 [ 612.983703][ T943] ? __virt_addr_valid+0x5e/0x590 [ 612.988748][ T943] ? __phys_addr+0xc6/0x150 [ 612.993270][ T943] kasan_report+0xd9/0x110 [ 612.997703][ T943] ? __mutex_lock+0x8e6/0x9c0 [ 613.002417][ T943] ? __mutex_lock+0x8e6/0x9c0 [ 613.007125][ T943] __mutex_lock+0x8e6/0x9c0 [ 613.011663][ T943] ? l2cap_chan_timeout+0x6d/0x310 [ 613.016803][ T943] ? __pfx___mutex_lock+0x10/0x10 [ 613.021846][ T943] ? __pfx_lock_release+0x10/0x10 [ 613.026880][ T943] ? l2cap_chan_timeout+0x6d/0x310 [ 613.031990][ T943] l2cap_chan_timeout+0x6d/0x310 [ 613.036930][ T943] process_one_work+0x9c5/0x1b40 [ 613.041867][ T943] ? __pfx_delayed_vfree_work+0x10/0x10 [ 613.047400][ T943] ? __pfx_process_one_work+0x10/0x10 [ 613.052766][ T943] ? assign_work+0x1a0/0x250 [ 613.057347][ T943] worker_thread+0x6c8/0xed0 [ 613.061935][ T943] ? __kthread_parkme+0x148/0x220 [ 613.066959][ T943] ? __pfx_worker_thread+0x10/0x10 [ 613.072107][ T943] kthread+0x2c1/0x3a0 [ 613.076195][ T943] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.081418][ T943] ? __pfx_kthread+0x10/0x10 [ 613.086038][ T943] ret_from_fork+0x45/0x80 [ 613.090483][ T943] ? __pfx_kthread+0x10/0x10 [ 613.095096][ T943] ret_from_fork_asm+0x1a/0x30 [ 613.099895][ T943] [ 613.102916][ T943] [ 613.105242][ T943] Allocated by task 9325: [ 613.109571][ T943] kasan_save_stack+0x33/0x60 [ 613.114270][ T943] kasan_save_track+0x14/0x30 [ 613.118968][ T943] __kasan_kmalloc+0xaa/0xb0 [ 613.123582][ T943] l2cap_conn_add.part.0+0x60/0xa60 [ 613.128801][ T943] l2cap_chan_connect+0x15fa/0x2040 [ 613.134047][ T943] lowpan_control_write+0x3dc/0x730 [ 613.139368][ T943] full_proxy_write+0x127/0x1a0 [ 613.144253][ T943] vfs_write+0x29a/0x1140 [ 613.148601][ T943] ksys_write+0x12f/0x260 [ 613.152945][ T943] do_syscall_64+0xcd/0x250 [ 613.157479][ T943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.163393][ T943] [ 613.165720][ T943] Freed by task 9142: [ 613.169706][ T943] kasan_save_stack+0x33/0x60 [ 613.174405][ T943] kasan_save_track+0x14/0x30 [ 613.179104][ T943] kasan_save_free_info+0x3b/0x60 [ 613.184151][ T943] poison_slab_object+0xf7/0x160 [ 613.189113][ T943] __kasan_slab_free+0x32/0x50 [ 613.193905][ T943] kfree+0x12a/0x3b0 [ 613.197821][ T943] l2cap_conn_del+0x59d/0x730 [ 613.202516][ T943] l2cap_disconn_cfm+0x96/0xd0 [ 613.207304][ T943] hci_conn_hash_flush+0x114/0x260 [ 613.212435][ T943] hci_dev_close_sync+0x59e/0x1110 [ 613.217565][ T943] hci_dev_do_close+0x2e/0x90 [ 613.222257][ T943] hci_error_reset+0xbf/0x320 [ 613.226950][ T943] process_one_work+0x9c5/0x1b40 [ 613.231922][ T943] worker_thread+0x6c8/0xed0 [ 613.236538][ T943] kthread+0x2c1/0x3a0 [ 613.240624][ T943] ret_from_fork+0x45/0x80 [ 613.245072][ T943] ret_from_fork_asm+0x1a/0x30 [ 613.249862][ T943] [ 613.252183][ T943] The buggy address belongs to the object at ffff8880313cf800 [ 613.252183][ T943] which belongs to the cache kmalloc-1k of size 1024 [ 613.266256][ T943] The buggy address is located 800 bytes inside of [ 613.266256][ T943] freed 1024-byte region [ffff8880313cf800, ffff8880313cfc00) [ 613.280161][ T943] [ 613.282488][ T943] The buggy address belongs to the physical page: [ 613.288915][ T943] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x313c8 [ 613.297694][ T943] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 613.306217][ T943] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 613.313786][ T943] page_type: 0xfdffffff(slab) [ 613.318486][ T943] raw: 00fff00000000040 ffff88801ac41dc0 ffffea00018e2000 dead000000000002 [ 613.327075][ T943] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 613.335746][ T943] head: 00fff00000000040 ffff88801ac41dc0 ffffea00018e2000 dead000000000002 [ 613.344412][ T943] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 613.353076][ T943] head: 00fff00000000003 ffffea0000c4f201 ffffffffffffffff 0000000000000000 [ 613.361744][ T943] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 613.370409][ T943] page dumped because: kasan: bad access detected [ 613.376840][ T943] page_owner tracks the page as allocated [ 613.382537][ T943] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5175, tgid 5175 (dhcpcd), ts 64883669433, free_ts 64825828818 [ 613.403386][ T943] post_alloc_hook+0x2d1/0x350 [ 613.408168][ T943] get_page_from_freelist+0x1351/0x2e50 [ 613.413707][ T943] __alloc_pages_noprof+0x22b/0x2460 [ 613.418995][ T943] alloc_slab_page+0x4e/0xf0 [ 613.423587][ T943] new_slab+0x84/0x260 [ 613.427752][ T943] ___slab_alloc+0xdac/0x1870 [ 613.432429][ T943] __slab_alloc.constprop.0+0x56/0xb0 [ 613.437898][ T943] __kmalloc_noprof+0x367/0x400 [ 613.442753][ T943] load_elf_phdrs+0x103/0x210 [ 613.447420][ T943] load_elf_binary+0x14ab/0x4d90 [ 613.452348][ T943] bprm_execve+0x703/0x1960 [ 613.456863][ T943] do_execveat_common.isra.0+0x4f1/0x630 [ 613.462497][ T943] __x64_sys_execve+0x8c/0xb0 [ 613.467171][ T943] do_syscall_64+0xcd/0x250 [ 613.471690][ T943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.477571][ T943] page last free pid 5172 tgid 5172 stack trace: [ 613.483890][ T943] free_unref_page+0x64a/0xe40 [ 613.488647][ T943] __put_partials+0x14c/0x170 [ 613.493322][ T943] qlist_free_all+0x4e/0x140 [ 613.497915][ T943] kasan_quarantine_reduce+0x192/0x1e0 [ 613.503370][ T943] __kasan_slab_alloc+0x69/0x90 [ 613.508221][ T943] kmem_cache_alloc_noprof+0x121/0x2f0 [ 613.513687][ T943] vm_area_alloc+0x1f/0x230 [ 613.518207][ T943] mmap_region+0x3a5/0x2760 [ 613.522707][ T943] do_mmap+0xbfb/0xfb0 [ 613.526762][ T943] vm_mmap_pgoff+0x1ba/0x360 [ 613.531337][ T943] ksys_mmap_pgoff+0x332/0x5d0 [ 613.536091][ T943] __x64_sys_mmap+0x125/0x190 [ 613.540839][ T943] do_syscall_64+0xcd/0x250 [ 613.545332][ T943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.551225][ T943] [ 613.553529][ T943] Memory state around the buggy address: [ 613.559157][ T943] ffff8880313cfa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.567212][ T943] ffff8880313cfa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.575261][ T943] >ffff8880313cfb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.583300][ T943] ^ [ 613.588404][ T943] ffff8880313cfb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.596478][ T943] ffff8880313cfc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 613.604543][ T943] ================================================================== [ 613.612682][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.627841][ T943] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 613.635055][ T943] CPU: 0 UID: 0 PID: 943 Comm: kworker/0:2 Not tainted 6.11.0-rc6-syzkaller-00363-g89f5e14d05b4 #0 [ 613.645713][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 613.655778][ T943] Workqueue: events l2cap_chan_timeout [ 613.661233][ T943] Call Trace: [ 613.664495][ T943] [ 613.667410][ T943] dump_stack_lvl+0x3d/0x1f0 [ 613.671993][ T943] panic+0x6dc/0x7c0 [ 613.675873][ T943] ? mark_held_locks+0x9f/0xe0 [ 613.680621][ T943] ? __pfx_panic+0x10/0x10 [ 613.685023][ T943] ? irqentry_exit+0x3b/0x90 [ 613.689602][ T943] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.694798][ T943] ? check_panic_on_warn+0x1f/0xb0 [ 613.699910][ T943] check_panic_on_warn+0xab/0xb0 [ 613.704858][ T943] end_report+0x117/0x180 [ 613.709173][ T943] kasan_report+0xe9/0x110 [ 613.713572][ T943] ? __mutex_lock+0x8e6/0x9c0 [ 613.718240][ T943] ? __mutex_lock+0x8e6/0x9c0 [ 613.722906][ T943] __mutex_lock+0x8e6/0x9c0 [ 613.727398][ T943] ? l2cap_chan_timeout+0x6d/0x310 [ 613.732499][ T943] ? __pfx___mutex_lock+0x10/0x10 [ 613.737525][ T943] ? __pfx_lock_release+0x10/0x10 [ 613.742584][ T943] ? l2cap_chan_timeout+0x6d/0x310 [ 613.747684][ T943] l2cap_chan_timeout+0x6d/0x310 [ 613.752610][ T943] process_one_work+0x9c5/0x1b40 [ 613.757541][ T943] ? __pfx_delayed_vfree_work+0x10/0x10 [ 613.763086][ T943] ? __pfx_process_one_work+0x10/0x10 [ 613.768449][ T943] ? assign_work+0x1a0/0x250 [ 613.773049][ T943] worker_thread+0x6c8/0xed0 [ 613.777632][ T943] ? __kthread_parkme+0x148/0x220 [ 613.782640][ T943] ? __pfx_worker_thread+0x10/0x10 [ 613.787748][ T943] kthread+0x2c1/0x3a0 [ 613.791815][ T943] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.797011][ T943] ? __pfx_kthread+0x10/0x10 [ 613.801593][ T943] ret_from_fork+0x45/0x80 [ 613.806010][ T943] ? __pfx_kthread+0x10/0x10 [ 613.810599][ T943] ret_from_fork_asm+0x1a/0x30 [ 613.815369][ T943] [ 613.818585][ T943] Kernel Offset: disabled [ 613.822892][ T943] Rebooting in 86400 seconds..