last executing test programs: 3m18.652488054s ago: executing program 2 (id=2893): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, r5, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_a, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)='[', 0x1) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = io_uring_setup(0x177f, &(0x7f0000000140)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r12 = syz_open_pts(r11, 0x801) r13 = dup3(r12, r11, 0x0) ppoll(&(0x7f0000000140)=[{r13}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r13, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 2m38.066958677s ago: executing program 2 (id=2893): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, r5, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_a, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)='[', 0x1) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = io_uring_setup(0x177f, &(0x7f0000000140)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r12 = syz_open_pts(r11, 0x801) r13 = dup3(r12, r11, 0x0) ppoll(&(0x7f0000000140)=[{r13}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r13, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 1m45.989436363s ago: executing program 2 (id=2893): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, r5, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_a, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)='[', 0x1) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = io_uring_setup(0x177f, &(0x7f0000000140)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r12 = syz_open_pts(r11, 0x801) r13 = dup3(r12, r11, 0x0) ppoll(&(0x7f0000000140)=[{r13}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r13, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 1m14.098897704s ago: executing program 2 (id=2893): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, r5, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_a, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)='[', 0x1) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = io_uring_setup(0x177f, &(0x7f0000000140)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r12 = syz_open_pts(r11, 0x801) r13 = dup3(r12, r11, 0x0) ppoll(&(0x7f0000000140)=[{r13}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r13, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 31.661889044s ago: executing program 2 (id=2893): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, r5, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_a, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)='[', 0x1) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = io_uring_setup(0x177f, &(0x7f0000000140)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r12 = syz_open_pts(r11, 0x801) r13 = dup3(r12, r11, 0x0) ppoll(&(0x7f0000000140)=[{r13}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r13, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 18.124346159s ago: executing program 0 (id=3497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000), 0x4) 15.373517769s ago: executing program 0 (id=3498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)={0x34, r1, 0x319, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 15.238483611s ago: executing program 0 (id=3500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7}, 0x90) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23d", 0x9, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x223216, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0c000c4000000000000000be0008000200ac14142708000200ac1414bb0c000c400000000000007c81080035d99db200010c000c400000000001"], 0x80}, 0x1, 0x0, 0x0, 0xbcdbed14c2b56544}, 0x4004840) 13.954444679s ago: executing program 0 (id=3503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000003a000000"]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x29, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000000c0)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="3c59ea66b8fc0dab802eed88c11a00000000000000bf666569c1699a67b2526461962ec85571b09403aea11c3b23be6b2c89041e244a6a7f5c75736167bd06047cdea316f3770ecb0d2b409a21ba2b6ca8984f3bc51a15ada54ea1e1fe3cc56982a60006e1943f11032c5d87f573ed216e612db2ea3b5ac5da23adb047882c31ad6db66fd123617703bff6a9cd56c5446dcc132ef57eb75ec9f0750ca55de73747e3529f94b6", 0xa6}], 0x1, &(0x7f0000000240)=[{0xd8, 0x110, 0x5, "5a5cb4d01d352b436703092c17a5517e0422493e015ccac97cf93ece3a98d5bbec1a52df84b3f2565f6fed30e7218a50d21f60ba2dc764ab49d4e08b16a36890169b64e2a567e8395ecad46a30308d792bdf832a52368df4d6ab5e8dc8c4282c4c5e074a52eac0d93d928c77d074b70379ee639ff8fe0100ce1c5dda7354b2439892ee41bf19d3f924bfc6d7acf9e7c4414fb52bb03e74553f884db6a3e0f5be1a7e2e2895d1380d9f51eaf693b19d2502f5971110cb62ab90643e87d77ddb943186787e79aef4c9df"}, {0xe4, 0x110, 0x0, "39209d66ca19a1033f6da31923a08c520b4a8a648d741f4693b2f872eb65366a2460d3c869c7aa124bfffd19cfd7f408469a56b6697c1d74c50183b16d05c014b3c6e9ecafc95de93e313ce7187ad878030dab55f5220b78898941d9a6b7feaa39cbded710d1c22630c7b337cebf82cc40552bc3acd7d44a6e87d927086faf5249b00d6e17a7a06178add5d21e760bf43394c1b1f45fcc79c0a5a3f1fae29d24ed9d4843d1d383c4dcc3f48cce539ef3befca3bc87193dc3b0a8e1c40bb55e1dcb4b9e997a5cc2f311481a33807b12f2faa1e43b308a10"}, {0x60, 0x107, 0x3, "f9a096699be5c29823e5685a01d27a66ca5ee2c99f1d06453006e21a7b2d1acb30ec9d2ba6d69edc47456c9718515838a1dda36a46f8441a33e5b1e431cbcdec2d05b6d1350d6e8258cc0e2090b4d74c229d9831"}], 0x21c}, 0x4050) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000580)=0x5) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x20, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000540)=&(0x7f00000002c0)) syz_usb_connect$hid(0x0, 0x151, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400), 0x4) 13.299464846s ago: executing program 3 (id=3506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x20040800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[], [0x0, 0xffffffff]], '\x00', [{}, {}, {}, {0x8000}], '\x00', 0x0, 0x0, 0x0, 0x2}) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="180004000400002c04000f80"], 0x18}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000017c0)={0x5, [[0x7fffffff, 0x5, 0x7, 0x80000000, 0x0, 0x1, 0x6, 0x9], [0x1, 0x5, 0x2, 0x9, 0x2, 0x100, 0x11, 0x40], [0x0, 0x7, 0x9f, 0x7f, 0x80000002, 0x8, 0x0, 0x1f]], '\x00', [{0x7, 0x1, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x56, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x5}, {0x70, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x3673}, {0x9, 0x679, 0x0, 0x1}, {0x101, 0xac, 0x0, 0x1, 0x1}, {0x5, 0x7fff, 0x0, 0x1, 0x1, 0x1}, {0x1003, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x800, 0x10001, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}], '\x00', 0x9}) 11.98078404s ago: executing program 3 (id=3509): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040), 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) chdir(0x0) io_setup(0x2, &(0x7f0000000100)=0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000001480)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00'}, 0x10) r5 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2}, "30b00afe4e"}}}}}}}, 0x0) 10.404232676s ago: executing program 0 (id=3512): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) dup(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 9.319415911s ago: executing program 0 (id=3514): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) move_pages(0x0, 0x1ffffffffffffd15, &(0x7f0000000040), 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) socket$caif_stream(0x25, 0x1, 0x3) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xfc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$join(0x1, 0x0) keyctl$revoke(0x3, r2) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r3}, 0x10) r4 = socket(0x25, 0x1, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000000740)={0x1}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x0, 0x0}, 0x8) r11 = fcntl$dupfd(r7, 0x406, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x1c, &(0x7f0000000840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0xb, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xc}, @jmp={0x5, 0x0, 0xa, 0xa, 0x3, 0x18, 0x10}, @map_fd={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x5e, &(0x7f0000000340)=""/94, 0x41000, 0x8, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[r11, r5], &(0x7f0000000580)=[{0x3, 0x3, 0xb, 0x1}], 0x10, 0xfffffe01}, 0x90) getsockopt$sock_cred(r8, 0x1, 0x49, 0x0, &(0x7f00000014c0)) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xc, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 9.035384068s ago: executing program 3 (id=3516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) syz_emit_vhci(0x0, 0x8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x40084146, 0x40944f9c780000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x800, 0x4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@initdev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2243003, &(0x7f0000000980)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize}], [{@obj_type={'obj_type', 0x3d, '{[^'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@uid_lt={'uid<', r1}}]}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d2000020961b0a0000000000000109022d0001000000000904000005030000000921000000012205000905810302030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="56e5566b207cb0c7", 0x8}], 0x1, 0xf739, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) msync(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x6) 8.028530792s ago: executing program 1 (id=3518): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 7.721175154s ago: executing program 1 (id=3519): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x1, 0x47}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) lseek(r1, 0xfffffffffffffff5, 0x1) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071122d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x9b, {"a2e3ad09ed0d09f91a5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="752b8fcc691d9257f9f3d397c4554713ec27b2d75a33565bd93f6a6d0b68ee1c71352102d52df6e6cd059a29d4c4e7889f716c775a2aff0c24d2bfedad55", @ANYRES8=0x0], 0x38}, 0x1, 0x2, 0x0, 0xc4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'sit0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @loopback, @loopback}, 0xc) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000004c0)={@local, @multicast2}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @multicast1}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32, @ANYRES8], 0x6c}}, 0x0) socket$packet(0x11, 0x3, 0x300) 6.080218513s ago: executing program 1 (id=3521): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x3e) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 5.527005333s ago: executing program 1 (id=3522): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'bridge_slave_1\x00', &(0x7f0000000b80)=@ethtool_eee={0x2b}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r3, 0x400455c8, 0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000d0000000000000804000000002e00005f00189d9d703a906fa9ac1a155900c845a069db0a8c4f56dc806c"], &(0x7f00000000c0)=""/132, 0x2a, 0x84, 0x1, 0xb}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x48) 4.936841116s ago: executing program 4 (id=3523): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd}) 4.753448894s ago: executing program 4 (id=3524): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 4.562194301s ago: executing program 4 (id=3525): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000010000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_fc_replay_scan\x00', r0}, 0x10) 4.432757003s ago: executing program 4 (id=3526): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 4.317286628s ago: executing program 2 (id=2893): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, r5, 0x7562f43b63fde81f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_a, @device_b}, @addba_resp}}]}, 0x44}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000540)='[', 0x1) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r8 = dup(r1) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = io_uring_setup(0x177f, &(0x7f0000000140)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r12 = syz_open_pts(r11, 0x801) r13 = dup3(r12, r11, 0x0) ppoll(&(0x7f0000000140)=[{r13}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r13, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 3.159535413s ago: executing program 1 (id=3527): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 3.157680873s ago: executing program 4 (id=3528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\n\x00^ ', "614db575ffffffff"}, 0x28) 2.32202064s ago: executing program 4 (id=3529): socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x7}, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x1, 0x4, 0x250d, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000000)={0x57}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dccf9540cd1416616001000000010902120001000000000904000000e338ab00"], 0x0) syslog(0x3, &(0x7f00000002c0)=""/168, 0xa8) 1.051279452s ago: executing program 3 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x70) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000001140)=ANY=[], 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000f0000002c000000020000000000000001"], 0x0, 0x46}, 0x20) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="cf488190e610e8c014853e5c8eea917335845f91f7a8aa486999a3113aa36c166fedec83ed8861d6b9fd658e08ed9562c22c3c32b55473d4c31291a2627163dcb78911a768dbe6df312d8f437b553499ad6dcf3e57b882d240f53a92a27856a14a462ff6ee30c74e692851e87018d63dcbc776d0f93f08f7633ac3ec309ec3f381a690cecc2966917b53b11c176133eead313a92597397b0332748049e9d87c6bbbcd0e48a22b70481efd491dfbe6c281e3465e87b6ae61870a8a1f93845f8ded3805d6ba3", 0xc5, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000003c0)=[{{&(0x7f0000000440)=@ax25={{0x3, @null}, [@remote, @rose, @netrom, @bcast, @null, @rose, @remote, @bcast]}, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/189}, {&(0x7f00000004c0)=""/92}, {&(0x7f0000000780)=""/181}, {&(0x7f0000000880)=""/200}, {&(0x7f0000000980)=""/252}, {&(0x7f0000000a80)=""/94}, {&(0x7f0000000b00)=""/192}, {&(0x7f0000000bc0)=""/194}], 0x0, &(0x7f0000000d40)=""/211}}], 0x1d, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000004c0)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0xd0008}}, 0x50) read$FUSE(r4, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000006500)={0x50, 0x0, r6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003a40)={r2, 0x0, &(0x7f00000039c0)=""/81}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 389.500916ms ago: executing program 3 (id=3531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 321.609985ms ago: executing program 1 (id=3532): socket$packet(0x11, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0xa000, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) socket$igmp6(0xa, 0x3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r4) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) 0s ago: executing program 3 (id=3533): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04"], 0x47) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080), 0xc) read(r3, &(0x7f00000001c0)=""/149, 0x95) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x891a, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0xb1b2350], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], 0xfffffffc}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): ave_1 [ 1001.562723][T16246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.717860][T16246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.007358][T16246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.038833][T16246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.102409][T16246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.171455][T16246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.180180][T16246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.230682][T16246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.458919][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.495551][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.580092][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.612317][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.886870][ T5142] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1003.211939][ T5142] usb 1-1: not running at top speed; connect to a high speed hub [ 1003.226209][ T5142] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.240392][ T5142] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1003.255028][ T5142] usb 1-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 1003.270332][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.278368][ T5142] usb 1-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴îœë¯°ê®˜ç¢ [ 1003.330442][ T5142] usb 1-1: SerialNumber: é‹ìŠ£â€€ì»“鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧæ¬ãœ¶ê¢’䡔駌࠭놶昄ã³ç¬‘ã‰æ¿‹ç­žä²µå‘»è·æ©´çƒ—际鑦âµê¯à©Ší“°ç¨ì·­â¦›ç‚ˆéœ¢â‡¢æ‘¸ [ 1003.546029][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.569305][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.579139][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.589795][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.598229][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1003.605983][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.841698][T16569] kernel read not supported for file /  (pid: 16569 comm: syz.0.2977) [ 1003.938192][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.954134][ T29] audit: type=1800 audit(1721121555.941:1273): pid=16569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2977" name=2001 dev="mqueue" ino=63019 res=0 errno=0 [ 1003.964533][ T5142] usbhid 1-1:1.0: can't add hid device: -71 [ 1004.033408][ T5142] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1004.080685][ T5142] usb 1-1: USB disconnect, device number 23 [ 1004.348348][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.381750][T16587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16587 comm=syz.4.2982 [ 1004.633802][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.983583][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.107261][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1005.123840][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1005.132236][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1005.147108][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1005.161852][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1005.169317][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1005.715124][T16606] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 1005.858327][ T5100] Bluetooth: hci2: command tx timeout [ 1006.293036][T16606] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.2990'. [ 1006.330484][T16606] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 1006.532404][ T29] audit: type=1400 audit(1721121558.541:1274): avc: denied { map } for pid=16613 comm="syz.0.2991" path="socket:[64262]" dev="sockfs" ino=64262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1006.708144][ T1105] bridge_slave_1: left allmulticast mode [ 1006.756908][ T1105] bridge_slave_1: left promiscuous mode [ 1006.788962][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.812999][ T1105] bridge_slave_0: left allmulticast mode [ 1006.820873][ T1105] bridge_slave_0: left promiscuous mode [ 1006.826583][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.251288][ T5100] Bluetooth: hci4: command tx timeout [ 1007.408543][T16621] overlayfs: failed to resolve './bus': -2 [ 1007.880981][ T5100] Bluetooth: hci2: command tx timeout [ 1008.320804][T16634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16634 comm=syz.0.2995 [ 1008.733488][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.753738][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.776311][ T1105] bond0 (unregistering): Released all slaves [ 1008.806257][T16612] netlink: 'syz.3.2992': attribute type 41 has an invalid length. [ 1008.915935][T16574] chnl_net:caif_netlink_parms(): no params data found [ 1009.320511][ T5100] Bluetooth: hci4: command tx timeout [ 1009.351305][ T5140] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1009.542950][ T5140] usb 4-1: not running at top speed; connect to a high speed hub [ 1009.564096][ T5140] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1009.577621][ T5140] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1009.598882][ T5140] usb 4-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 1009.608819][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.630485][ T5140] usb 4-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴îœë¯°ê®˜ç¢ [ 1009.647726][ T5140] usb 4-1: SerialNumber: é‹ìŠ£â€€ì»“鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧæ¬ãœ¶ê¢’䡔駌࠭놶昄ã³ç¬‘ã‰æ¿‹ç­žä²µå‘»è·æ©´çƒ—际鑦âµê¯à©Ší“°ç¨ì·­â¦›ç‚ˆéœ¢â‡¢æ‘¸ [ 1009.785947][T16574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.820715][T16574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.828125][T16574] bridge_slave_0: entered allmulticast mode [ 1009.857117][T16574] bridge_slave_0: entered promiscuous mode [ 1009.907651][ T1105] hsr_slave_0: left promiscuous mode [ 1009.931162][T16643] kernel read not supported for file /  (pid: 16643 comm: syz.3.2998) [ 1009.941247][ T1105] hsr_slave_1: left promiscuous mode [ 1009.956146][ T29] audit: type=1800 audit(1721121561.961:1275): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2998" name=2001 dev="mqueue" ino=63313 res=0 errno=0 [ 1009.977212][ T5100] Bluetooth: hci2: command tx timeout [ 1009.983512][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.011909][ T5140] usbhid 4-1:1.0: can't add hid device: -71 [ 1010.012711][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.018044][ T5140] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1010.051893][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.052089][ T5140] usb 4-1: USB disconnect, device number 18 [ 1010.081528][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.187319][ T1105] veth1_macvtap: left promiscuous mode [ 1010.206341][ T1105] veth0_macvtap: left promiscuous mode [ 1010.229117][ T1105] veth1_vlan: left promiscuous mode [ 1010.237036][ T1105] veth0_vlan: left promiscuous mode [ 1010.817762][T16658] input: syz1 as /devices/virtual/input/input40 [ 1010.830659][T16660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.954035][ T29] audit: type=1400 audit(1721121562.961:1276): avc: denied { shutdown } for pid=16659 comm="syz.4.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1011.201385][ T29] audit: type=1400 audit(1721121563.211:1277): avc: denied { ioctl } for pid=16659 comm="syz.4.3004" path="socket:[63381]" dev="sockfs" ino=63381 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1011.544927][ T5100] Bluetooth: hci4: command tx timeout [ 1011.563919][T16672] ebtables: ebtables: counters copy to user failed while replacing table [ 1012.821111][T16671] hfsplus: unable to find HFS+ superblock [ 1012.839187][ T5095] Bluetooth: hci2: command tx timeout [ 1013.951553][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1014.073428][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1014.840428][ T5095] Bluetooth: hci4: command tx timeout [ 1015.425251][T16574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.440458][T16574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.461078][T16574] bridge_slave_1: entered allmulticast mode [ 1015.468837][T16574] bridge_slave_1: entered promiscuous mode [ 1015.509931][T16665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.750018][T16596] chnl_net:caif_netlink_parms(): no params data found [ 1015.759942][T16699] input: syz1 as /devices/virtual/input/input41 [ 1015.826443][T16574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.866119][T16574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.341744][T16706] hfsplus: unable to find HFS+ superblock [ 1017.058479][T16701] bpq0: entered promiscuous mode [ 1017.079148][T16701] bpq0: entered allmulticast mode [ 1017.191605][T16574] team0: Port device team_slave_0 added [ 1017.235010][T16574] team0: Port device team_slave_1 added [ 1017.523360][T16574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.560290][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.679584][T16574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.731046][T16574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.731758][T16710] overlayfs: failed to resolve './bus': -2 [ 1017.761825][T16574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.833131][T16574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.950937][ T5142] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1017.976528][T16596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.992285][T16596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.000175][T16596] bridge_slave_0: entered allmulticast mode [ 1018.018320][T16596] bridge_slave_0: entered promiscuous mode [ 1018.119898][T16596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.139627][T16596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.153147][ T5142] usb 5-1: not running at top speed; connect to a high speed hub [ 1018.171583][ T5142] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1018.188798][T16596] bridge_slave_1: entered allmulticast mode [ 1018.210554][T16596] bridge_slave_1: entered promiscuous mode [ 1018.217648][ T5142] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1018.249416][ T5142] usb 5-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 1018.262168][T16574] hsr_slave_0: entered promiscuous mode [ 1018.273520][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.296440][T16574] hsr_slave_1: entered promiscuous mode [ 1018.304708][T16574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.327927][ T5142] usb 5-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴îœë¯°ê®˜ç¢ [ 1018.328181][T16574] Cannot create hsr debugfs directory [ 1018.340323][ T5142] usb 5-1: SerialNumber: é‹ìŠ£â€€ì»“鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧæ¬ãœ¶ê¢’䡔駌࠭놶昄ã³ç¬‘ã‰æ¿‹ç­žä²µå‘»è·æ©´çƒ—际鑦âµê¯à©Ší“°ç¨ì·­â¦›ç‚ˆéœ¢â‡¢æ‘¸ [ 1018.570201][T16596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.608962][T16596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.673758][T16722] kernel read not supported for file /  (pid: 16722 comm: syz.4.3020) [ 1018.708023][ T29] audit: type=1800 audit(1721121570.711:1278): pid=16722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3020" name=2001 dev="mqueue" ino=63478 res=0 errno=0 [ 1018.743369][ T5142] usbhid 5-1:1.0: can't add hid device: -71 [ 1018.764524][ T5142] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1018.814799][ T5142] usb 5-1: USB disconnect, device number 17 [ 1019.255553][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.290114][T16730] netlink: 'syz.3.3022': attribute type 11 has an invalid length. [ 1019.335973][T16596] team0: Port device team_slave_0 added [ 1019.387344][T16596] team0: Port device team_slave_1 added [ 1019.586974][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.833978][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.869966][T16596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.884570][T16596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.942712][T16596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.966323][T16596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.978662][T16596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.033202][T16596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.064995][T16743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.114151][ T1105] bond0: (slave netdevsim0): Releasing backup interface [ 1020.124678][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.332249][T16596] hsr_slave_0: entered promiscuous mode [ 1020.348204][T16596] hsr_slave_1: entered promiscuous mode [ 1020.365442][T16596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.383356][T16596] Cannot create hsr debugfs directory [ 1022.558902][ T29] audit: type=1400 audit(1721121574.531:1279): avc: denied { watch_mount watch_reads } for pid=16756 comm="syz.3.3031" path="/proc/685/task/686/pagemap" dev="proc" ino=65671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1023.394327][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.444679][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.478829][ T1105] bond0 (unregistering): Released all slaves [ 1023.740151][ T1105] IPVS: stopping master sync thread 12309 ... [ 1023.769291][ T1105] IPVS: stopping master sync thread 12308 ... [ 1023.807505][ T1105] IPVS: stopping master sync thread 12306 ... [ 1023.830504][ T1105] IPVS: stopping master sync thread 12305 ... [ 1024.332645][ T1105] hsr_slave_0: left promiscuous mode [ 1024.355822][ T1105] hsr_slave_1: left promiscuous mode [ 1024.377065][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.385324][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.400040][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.426769][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.231579][ T1105] veth1_macvtap: left promiscuous mode [ 1025.237115][ T1105] veth0_macvtap: left promiscuous mode [ 1025.290937][ T1105] veth1_vlan: left promiscuous mode [ 1025.296250][ T1105] veth0_vlan: left promiscuous mode [ 1027.315839][T16813] ebtables: ebtables: counters copy to user failed while replacing table [ 1028.005712][ T5095] Bluetooth: hci0: SCO packet for unknown connection handle 3341 [ 1028.006175][ T5095] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1028.897628][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 1029.083913][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 1029.547788][ T29] audit: type=1400 audit(1721121581.551:1280): avc: denied { ioctl } for pid=16835 comm="syz.0.3058" path="socket:[64647]" dev="sockfs" ino=64647 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1029.783457][T16838] nbd: must specify a device to reconfigure [ 1030.542482][ T29] audit: type=1400 audit(1721121582.541:1281): avc: denied { recv } for pid=5079 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.23 dest=57524 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1031.924986][T16574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1032.051415][T16574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.107249][T16574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.182424][T16574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.550830][ T29] audit: type=1400 audit(1721121584.551:1282): avc: denied { name_bind } for pid=16863 comm="syz.3.3066" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1032.663513][ T29] audit: type=1400 audit(1721121584.621:1283): avc: denied { name_connect } for pid=16863 comm="syz.3.3066" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1032.685889][T16858] overlayfs: failed to resolve './bus': -2 [ 1032.884011][T16574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.017821][T16574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.098262][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.105565][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.138000][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.145201][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.198407][ T29] audit: type=1400 audit(1721121585.201:1284): avc: denied { egress } for pid=77 comm="kworker/u8:5" daddr=ff02::1:ffaa:aa1c netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1033.317971][T16596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1033.339839][ T29] audit: type=1400 audit(1721121585.201:1285): avc: denied { sendto } for pid=77 comm="kworker/u8:5" daddr=ff02::1:ffaa:aa1c netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1033.419129][T16596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1033.469068][T16596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1033.587444][T16596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1034.257857][T16596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.346201][T16596] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.395981][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.403268][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.456118][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.463517][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.529015][T16574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.678678][T16893] netlink: 'syz.0.3072': attribute type 11 has an invalid length. [ 1034.960633][T16574] veth0_vlan: entered promiscuous mode [ 1035.355876][T16574] veth1_vlan: entered promiscuous mode [ 1035.663472][T16902] hfsplus: unable to find HFS+ superblock [ 1035.988829][T16574] veth0_macvtap: entered promiscuous mode [ 1036.039565][T16574] veth1_macvtap: entered promiscuous mode [ 1036.107812][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.161808][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.230336][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.270704][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.300418][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.318509][T16911] xt_ipvs: protocol family 7 not supported [ 1036.324872][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.334880][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.346007][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.358179][T16574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.418538][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.475390][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.493675][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.508001][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.529994][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.549828][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.572428][T16574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.610771][T16574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.645607][T16574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.698313][T16574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.737956][T16574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.800200][T16574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.827962][T16574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.888031][T16596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.206244][ T2460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.300161][ T2460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.394606][T16596] veth0_vlan: entered promiscuous mode [ 1037.597557][T16596] veth1_vlan: entered promiscuous mode [ 1037.612693][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.629623][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.758415][ T29] audit: type=1400 audit(1721121589.761:1286): avc: denied { mount } for pid=16574 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1037.814010][T16596] veth0_macvtap: entered promiscuous mode [ 1037.858685][T16596] veth1_macvtap: entered promiscuous mode [ 1037.970964][T16925] overlayfs: failed to resolve './bus': -2 [ 1037.978322][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.012944][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.052325][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.075186][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.110426][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.139452][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.164958][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.197427][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.228007][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.265061][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.297696][T16596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.355325][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.470778][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.543627][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.590194][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.626723][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.674015][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.697357][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.726035][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.756213][T16596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1038.799624][T16596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.822382][T16596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1038.863402][T16596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.043175][T16596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.080765][T16596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.240470][T16951] hfsplus: unable to find HFS+ superblock [ 1039.949517][T16596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.248408][T16954] xt_ipvs: protocol family 7 not supported [ 1040.372022][T16960] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1040.379438][T16960] vhci_hcd: invalid port number 9 [ 1040.384525][T16960] vhci_hcd: invalid port number 9 [ 1042.199043][ T2825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.250208][ T2825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.390478][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.431193][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.433825][ T29] audit: type=1400 audit(1721121594.931:1287): avc: denied { connect } for pid=16984 comm="syz.4.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1044.269716][ T2825] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.635558][ T2825] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.890940][ T2825] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.984437][ T5095] Bluetooth: hci2: SCO packet for unknown connection handle 3341 [ 1045.252770][ T2825] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.436513][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1045.451168][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1045.462165][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1045.473718][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1045.482237][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1045.489973][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1045.928936][ T2825] bridge_slave_1: left allmulticast mode [ 1045.948510][ T2825] bridge_slave_1: left promiscuous mode [ 1045.956921][ T2825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.980803][ T2825] bridge_slave_0: left allmulticast mode [ 1045.987026][ T2825] bridge_slave_0: left promiscuous mode [ 1046.005347][ T2825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.670713][ T5140] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1046.891485][ T5140] usb 1-1: Using ep0 maxpacket: 16 [ 1046.936197][ T5140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1046.952869][ T5140] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1046.971644][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.983232][ T5140] usb 1-1: config 0 descriptor?? [ 1047.251065][T17023] PKCS7: Unknown OID: [4] (bad) [ 1047.272698][T17023] PKCS7: Only support pkcs7_signedData type [ 1047.292946][ T5100] Bluetooth: Wrong link type (-71) [ 1047.298636][ T5100] Bluetooth: hci3: link tx timeout [ 1047.306266][ T5100] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1047.469464][ T2825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.492544][ T2825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.506416][ T2825] bond0 (unregistering): Released all slaves [ 1047.570537][ T5100] Bluetooth: hci4: command tx timeout [ 1047.788292][T17023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.948453][T17023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.855984][T17068] hfsplus: unable to find HFS+ superblock [ 1049.578469][T17070] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1049.585997][T17070] vhci_hcd: invalid port number 9 [ 1049.591144][T17070] vhci_hcd: invalid port number 9 [ 1050.213640][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 1050.220407][T13367] Bluetooth: hci4: command tx timeout [ 1050.362608][T17016] chnl_net:caif_netlink_parms(): no params data found [ 1050.369518][ T5140] usbhid 1-1:0.0: can't add hid device: -71 [ 1050.393924][ T5140] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1050.408789][ T5140] usb 1-1: USB disconnect, device number 24 [ 1050.829613][ T2825] hsr_slave_0: left promiscuous mode [ 1050.866868][ T2825] hsr_slave_1: left promiscuous mode [ 1050.887488][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.916251][T17086] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1050.930475][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.981854][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.012893][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.084673][ T29] audit: type=1400 audit(1721121603.091:1288): avc: denied { write } for pid=17087 comm="syz.4.3133" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1051.111251][ T2825] veth1_macvtap: left promiscuous mode [ 1051.119892][ T2825] veth0_macvtap: left promiscuous mode [ 1051.131475][ T2825] veth1_vlan: left promiscuous mode [ 1051.137021][ T2825] veth0_vlan: left promiscuous mode [ 1051.872994][T17107] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1051.872994][T17107] SÃȘØÈžZ§6ŸÂ' [ 1052.384397][ T5095] Bluetooth: hci4: command tx timeout [ 1052.990035][T17121] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1054.440510][ T5095] Bluetooth: hci4: command tx timeout [ 1054.813057][ T2825] team0 (unregistering): Port device team_slave_1 removed [ 1054.952883][ T2825] team0 (unregistering): Port device team_slave_0 removed [ 1055.016812][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.023254][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.279744][ T29] audit: type=1400 audit(1721121607.281:1289): avc: denied { remount } for pid=17153 comm="syz.4.3157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1056.287178][T17138] dvmrp5: entered allmulticast mode [ 1056.484412][T17016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.500472][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.513218][T17016] bridge_slave_0: entered allmulticast mode [ 1056.541553][T17016] bridge_slave_0: entered promiscuous mode [ 1056.565256][T17016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.599886][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.620616][T17016] bridge_slave_1: entered allmulticast mode [ 1056.628972][T17016] bridge_slave_1: entered promiscuous mode [ 1056.926166][T17016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.021119][T17016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.151341][T17016] team0: Port device team_slave_0 added [ 1057.556472][T17016] team0: Port device team_slave_1 added [ 1057.837112][T17016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.867657][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.899325][T17016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.919236][T17016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.951294][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.986034][T17016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.225083][T17182] dvmrp5: entered allmulticast mode [ 1058.392145][T17016] hsr_slave_0: entered promiscuous mode [ 1058.412720][T17016] hsr_slave_1: entered promiscuous mode [ 1058.426361][T17016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.683851][T17016] Cannot create hsr debugfs directory [ 1059.884004][T17194] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1059.892106][T17194] vhci_hcd: invalid port number 9 [ 1059.897204][T17194] vhci_hcd: invalid port number 9 [ 1060.434132][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1060.444828][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1060.454262][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1060.569344][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1060.578742][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1060.587753][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.714921][T17201] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1060.824890][ T2825] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.313320][ T2825] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.453561][T17218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.587447][ T2825] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.788439][ T2825] bond0: (slave netdevsim0): Releasing backup interface [ 1061.837239][ T2825] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.749491][T17235] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1062.749491][T17235] SÃȘØÈžZ§6ŸÂ' [ 1062.787926][ T5100] Bluetooth: hci0: command tx timeout [ 1063.420682][T17239] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1063.608902][ T29] audit: type=1400 audit(1721121615.611:1290): avc: denied { create } for pid=17249 comm="syz.3.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1064.159929][T17254] usb usb8: usbfs: process 17254 (syz.0.3189) did not claim interface 0 before use [ 1064.738571][ T29] audit: type=1400 audit(1721121616.461:1291): avc: denied { write } for pid=17249 comm="syz.3.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1064.850808][ T5100] Bluetooth: hci0: command tx timeout [ 1065.489114][T17267] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3194'. [ 1065.654167][ T2825] team0: left allmulticast mode [ 1065.678281][ T2825] team_slave_0: left allmulticast mode [ 1065.688494][ T2825] team_slave_1: left allmulticast mode [ 1065.705808][ T2825] bridge0: port 3(team0) entered disabled state [ 1065.745143][ T2825] bridge_slave_1: left allmulticast mode [ 1065.758257][ T2825] bridge_slave_1: left promiscuous mode [ 1065.772537][ T2825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.007473][ T2825] bridge_slave_0: left allmulticast mode [ 1066.030418][ T2825] bridge_slave_0: left promiscuous mode [ 1066.036134][ T2825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.139181][T17275] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1066.139181][T17275] SÃȘØÈžZ§6ŸÂ' [ 1066.921453][ T5100] Bluetooth: hci0: command tx timeout [ 1069.000769][ T5100] Bluetooth: hci0: command tx timeout [ 1069.388889][ T2825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.402507][ T2825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.414844][ T2825] bond0 (unregistering): Released all slaves [ 1069.437604][T17196] chnl_net:caif_netlink_parms(): no params data found [ 1069.711953][ T2825] tipc: Disabling bearer [ 1069.743340][ T2825] tipc: Left network mode [ 1070.420679][T17303] futex_wake_op: syz.0.3202 tries to shift op by 144; fix this program [ 1072.986128][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.215361][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.251613][T17196] bridge_slave_0: entered allmulticast mode [ 1073.259588][T17196] bridge_slave_0: entered promiscuous mode [ 1073.291956][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.299166][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.361913][T17196] bridge_slave_1: entered allmulticast mode [ 1073.369687][T17196] bridge_slave_1: entered promiscuous mode [ 1073.906619][T17016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1073.955478][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.977562][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'. [ 1074.918637][T17016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1074.954720][T17016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1075.030629][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.231054][ T2825] hsr_slave_0: left promiscuous mode [ 1075.241117][ T2825] hsr_slave_1: left promiscuous mode [ 1075.280037][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.294227][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.337182][ T2825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.378421][ T2825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.657110][ T2825] veth1_macvtap: left promiscuous mode [ 1075.671358][ T2825] veth0_macvtap: left promiscuous mode [ 1075.677366][ T2825] veth1_vlan: left promiscuous mode [ 1075.775950][T17341] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1075.783509][T17341] vhci_hcd: invalid port number 9 [ 1075.788653][T17341] vhci_hcd: invalid port number 9 [ 1076.277455][ T2825] veth0_vlan: left promiscuous mode [ 1077.562447][T17353] Bluetooth: MGMT ver 1.22 [ 1077.642788][ T5100] Bluetooth: hci3: command 0x0406 tx timeout [ 1079.683905][ T2825] team_slave_1 (unregistering): left promiscuous mode [ 1079.725059][ T2825] team0 (unregistering): Port device team_slave_1 removed [ 1079.886074][ T2825] team_slave_0 (unregistering): left promiscuous mode [ 1079.917909][ T2825] team0 (unregistering): Port device team_slave_0 removed [ 1082.227743][T17016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1082.274057][T17196] team0: Port device team_slave_0 added [ 1082.357511][T17196] team0: Port device team_slave_1 added [ 1082.827610][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.859411][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.773754][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.819576][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.864831][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.941560][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.228684][T17386] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1084.228684][T17386] SÃȘØÈžZ§6ŸÂ' [ 1085.102180][ T29] audit: type=1400 audit(1721121637.101:1292): avc: denied { setopt } for pid=17389 comm="syz.1.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1085.174775][T17196] hsr_slave_0: entered promiscuous mode [ 1085.199445][T17196] hsr_slave_1: entered promiscuous mode [ 1085.640994][T17196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.115067][T17398] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1086.123400][T17398] vhci_hcd: invalid port number 9 [ 1086.128807][T17398] vhci_hcd: invalid port number 9 [ 1087.640736][T17196] Cannot create hsr debugfs directory [ 1088.174896][ T2825] IPVS: stop unused estimator thread 0... [ 1088.230151][T17405] ip6gretap0: entered allmulticast mode [ 1088.490795][T17408] futex_wake_op: syz.3.3233 tries to shift op by 144; fix this program [ 1088.928495][T17016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.770419][ T29] audit: type=1400 audit(1721121641.671:1293): avc: denied { bind } for pid=17413 comm="syz.3.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1090.099937][T17016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.130538][ T29] audit: type=1400 audit(1721121641.691:1294): avc: denied { name_bind } for pid=17413 comm="syz.3.3237" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1090.307760][T17421] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1090.312019][ T29] audit: type=1400 audit(1721121641.711:1295): avc: denied { node_bind } for pid=17413 comm="syz.3.3237" saddr=::1 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1090.462343][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.469545][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.532598][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.539848][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.202407][T17196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1091.260989][T17196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1091.275723][T17196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1091.289605][T17196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1091.391629][T17016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.627247][T17016] veth0_vlan: entered promiscuous mode [ 1091.698561][T17016] veth1_vlan: entered promiscuous mode [ 1091.855028][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.899621][T17016] veth0_macvtap: entered promiscuous mode [ 1091.931154][T17462] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1091.982223][T17016] veth1_macvtap: entered promiscuous mode [ 1092.013292][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.059131][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.066500][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.137762][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.145042][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.215130][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.241678][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.263537][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.289606][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.311237][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.360573][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.401094][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.420387][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.445816][T17016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.533679][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.564453][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.591560][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.627388][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.660583][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.679191][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.698353][T17016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.729819][T17016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.752345][T17016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.808252][T17016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.828481][T17016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.849686][T17016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.858556][T17016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.950567][T17481] program syz.0.3260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.993760][T17481] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1093.196464][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.208806][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.373543][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.404593][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.460667][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.406295][ T2866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.659419][ T2866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.704920][T17196] veth0_vlan: entered promiscuous mode [ 1096.795265][ T2866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.841066][T17196] veth1_vlan: entered promiscuous mode [ 1096.974163][ T2866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.107355][T17196] veth0_macvtap: entered promiscuous mode [ 1097.172508][T17196] veth1_macvtap: entered promiscuous mode [ 1097.269878][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.318729][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.343733][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.370490][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.399605][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.429811][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.449156][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.486813][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.517350][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.536669][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.550857][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.562361][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.573021][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.583574][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.608160][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.619169][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.636650][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1097.662420][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1097.662814][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.679775][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1097.691160][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1097.699880][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1097.707441][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1097.753769][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.777948][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.794914][T17196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.808438][T17196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.841177][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.963313][T17196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.001074][T17196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.023898][T17196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.043399][T17196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.401026][ T2866] bridge_slave_1: left allmulticast mode [ 1099.406760][ T2866] bridge_slave_1: left promiscuous mode [ 1099.428712][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.444646][ T2866] bridge_slave_0: left allmulticast mode [ 1099.450596][ T2866] bridge_slave_0: left promiscuous mode [ 1099.456494][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.803889][ T5100] Bluetooth: hci4: command tx timeout [ 1104.549931][ T5100] Bluetooth: hci4: command tx timeout [ 1104.758866][T17570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1105.553478][ T2866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.577728][ T2866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.608176][ T2866] bond0 (unregistering): Released all slaves [ 1106.600637][ T5100] Bluetooth: hci4: command tx timeout [ 1107.255480][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.304939][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.483664][ T2866] hsr_slave_0: left promiscuous mode [ 1107.497836][ T2866] hsr_slave_1: left promiscuous mode [ 1107.506299][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.516426][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.195211][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.230543][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.397286][ T2866] veth1_macvtap: left promiscuous mode [ 1108.412119][ T2866] veth0_macvtap: left promiscuous mode [ 1108.417984][ T2866] veth1_vlan: left promiscuous mode [ 1108.428454][ T2866] veth0_vlan: left promiscuous mode [ 1108.607817][T17621] kernel read not supported for file /eth0 (pid: 17621 comm: syz.0.3303) [ 1108.633991][ T29] audit: type=1400 audit(1721121660.641:1296): avc: denied { ioctl } for pid=17615 comm="syz.3.3301" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1108.658814][T17628] random: crng reseeded on system resumption [ 1108.680496][ T5100] Bluetooth: hci4: command tx timeout [ 1108.710541][ T29] audit: type=1800 audit(1721121660.681:1297): pid=17621 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3303" name="eth0" dev="mqueue" ino=69523 res=0 errno=0 [ 1109.317370][T17622] Falling back ldisc for ptm0. [ 1109.873887][ T5136] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1110.072658][ T5136] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1110.105726][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.121771][ T5136] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1110.147564][ T5136] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1110.157175][ T5136] usb 4-1: Manufacturer: syz [ 1110.191946][ T5136] usb 4-1: config 0 descriptor?? [ 1110.259131][ T2866] team0 (unregistering): Port device team_slave_1 removed [ 1110.335814][ T5136] rc_core: IR keymap rc-hauppauge not found [ 1110.345838][ T5136] Registered IR keymap rc-empty [ 1110.355976][ T5136] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1110.376614][ T5136] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 1110.409104][ T2866] team0 (unregistering): Port device team_slave_0 removed [ 1110.608181][T17642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.635481][T17642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.712603][T17647] program syz.0.3309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1110.726187][T17647] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1110.816007][T17642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.828741][T17642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.204347][ T9] usb 4-1: USB disconnect, device number 19 [ 1112.163085][ T2815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.180769][ T2815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.399191][T17666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1112.476488][T17532] chnl_net:caif_netlink_parms(): no params data found [ 1112.766708][ T5142] kernel read not supported for file /slabinfo (pid: 5142 comm: kworker/1:6) [ 1113.005751][T17532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.057179][T17532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.133912][T17532] bridge_slave_0: entered allmulticast mode [ 1113.168150][T17532] bridge_slave_0: entered promiscuous mode [ 1113.224012][T17532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.287815][T17532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.320180][T17532] bridge_slave_1: entered allmulticast mode [ 1113.322064][T17532] bridge_slave_1: entered promiscuous mode [ 1113.524674][T17532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.553847][T17697] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 1113.574340][T17697] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3325'. [ 1113.595143][T17532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.773104][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1113.792909][T17532] team0: Port device team_slave_0 added [ 1113.814372][T17532] team0: Port device team_slave_1 added [ 1113.885301][T17700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3326'. [ 1113.919004][T17696] [U] [ 1113.922405][T17696] [U] [ 1113.925090][T17696] [U] [ 1113.927788][T17696] [U] [ 1113.931554][T17696] [U] [ 1113.934265][T17696] [U] [ 1113.936944][T17696] [U] [ 1113.939626][T17696] [U] [ 1113.942644][T17696] [U] [ 1113.945343][T17696] [U] [ 1113.948019][T17696] [U] [ 1114.009878][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1114.057285][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.095988][ T5142] IPVS: starting estimator thread 0... [ 1114.102080][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1114.112253][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1114.148306][T17532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.169352][ T9] usb 2-1: Manufacturer: syz [ 1114.206902][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.232919][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.251502][ T9] usb 2-1: config 0 descriptor?? [ 1114.256713][T17701] IPVS: using max 31 ests per chain, 74400 per kthread [ 1114.380143][T17532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.388224][T17692] [U] [ 1114.427359][T17532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.437324][T17532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.464538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1114.572214][T17532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.583376][ T9] rc_core: IR keymap rc-hauppauge not found [ 1114.589387][ T9] Registered IR keymap rc-empty [ 1114.610105][T17694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.621797][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1114.659871][T17694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.670571][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43 [ 1114.721618][T17694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.742311][T17694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.943910][T17532] hsr_slave_0: entered promiscuous mode [ 1114.976317][T17532] hsr_slave_1: entered promiscuous mode [ 1115.001961][T17532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.020042][T17532] Cannot create hsr debugfs directory [ 1115.286463][ T5140] usb 2-1: USB disconnect, device number 16 [ 1116.570372][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.576686][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.799355][ T5100] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 1118.418492][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1118.443967][T17742] xt_time: unknown flags 0x4 [ 1118.487960][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1118.491069][ T29] audit: type=1400 audit(1721121670.491:1298): avc: denied { audit_read } for pid=17726 comm="syz.0.3334" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1118.705079][ T29] audit: type=1400 audit(1721121670.711:1299): avc: denied { wake_alarm } for pid=17745 comm="syz.1.3339" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1118.754315][ T29] audit: type=1400 audit(1721121670.711:1300): avc: denied { create } for pid=17745 comm="syz.1.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1118.800385][ T5100] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 1118.809568][ T5100] Bluetooth: hci2: link tx timeout [ 1118.816420][ T5100] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1118.836461][ T5100] Bluetooth: hci2: link tx timeout [ 1118.842480][ T5100] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1118.936146][ T29] audit: type=1400 audit(1721121670.711:1301): avc: denied { getopt } for pid=17745 comm="syz.1.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1119.061689][ T29] audit: type=1400 audit(1721121670.811:1302): avc: denied { connect } for pid=17745 comm="syz.1.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1120.920865][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 1121.032883][T17532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1121.135600][T17532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1121.169291][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1121.246229][T17532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1121.296469][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 1121.335299][T17532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1121.480395][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1121.696392][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1121.725309][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.776858][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1121.801003][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1121.801239][ T5100] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1121.820172][ T5100] Bluetooth: hci3: Injecting HCI hardware error event [ 1121.823132][T17532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.830792][ T54] Bluetooth: hci3: hardware error 0x00 [ 1121.855994][ T9] usb 4-1: Manufacturer: syz [ 1121.887604][ T9] usb 4-1: config 0 descriptor?? [ 1121.928204][T17532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.010613][ T9] rc_core: IR keymap rc-hauppauge not found [ 1122.035343][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.042914][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.052465][ T9] Registered IR keymap rc-empty [ 1122.078279][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1122.086691][T17777] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1122.097641][T17777] overlayfs: missing 'lowerdir' [ 1122.151211][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3349'. [ 1122.160721][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input44 [ 1122.185074][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.214291][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.221568][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.251851][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.620163][T17763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.641981][T17763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.010911][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 1123.395506][T15410] usb 4-1: USB disconnect, device number 20 [ 1123.418778][T17532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.635842][T17532] veth0_vlan: entered promiscuous mode [ 1123.675772][T17532] veth1_vlan: entered promiscuous mode [ 1123.730566][ T29] audit: type=1400 audit(1721121675.730:1303): avc: denied { setopt } for pid=17802 comm="syz.0.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1123.788397][ T29] audit: type=1400 audit(1721121675.730:1304): avc: denied { bind } for pid=17802 comm="syz.0.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1123.792825][T17532] veth0_macvtap: entered promiscuous mode [ 1123.853715][ T29] audit: type=1400 audit(1721121675.740:1305): avc: denied { write } for pid=17802 comm="syz.0.3359" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1123.869738][T17532] veth1_macvtap: entered promiscuous mode [ 1123.896593][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1123.957790][ T29] audit: type=1326 audit(1721121675.920:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17802 comm="syz.0.3359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x0 [ 1123.998585][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.027316][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.056179][ T29] audit: type=1400 audit(1721121675.980:1307): avc: denied { connect } for pid=17809 comm="syz.4.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1124.079964][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.091418][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.111330][ T29] audit: type=1400 audit(1721121675.980:1308): avc: denied { read } for pid=17809 comm="syz.4.3362" path="socket:[70911]" dev="sockfs" ino=70911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1124.135037][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.135063][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.135084][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.135100][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.135120][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.135137][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.137310][T17532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.234831][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.238096][ T29] audit: type=1400 audit(1721121676.090:1309): avc: denied { write } for pid=17809 comm="syz.4.3362" path="socket:[70912]" dev="sockfs" ino=70912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1124.277028][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.287851][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.299380][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.310468][T17817] virtio-fs: tag <(null)> not found [ 1124.316241][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.332055][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.342387][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.364279][ T29] audit: type=1400 audit(1721121676.370:1310): avc: denied { ioctl } for pid=17816 comm="syz.1.3363" path="socket:[70985]" dev="sockfs" ino=70985 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1124.402975][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.419644][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.435707][T17818] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1124.442268][T17818] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1124.452848][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.487443][T17818] vhci_hcd vhci_hcd.0: Device attached [ 1124.504874][T17532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.548774][T17532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.615584][T17532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.628872][T17515] Bluetooth: hci6: Frame reassembly failed (-84) [ 1124.650338][T17532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.671220][T17532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.682110][T15410] vhci_hcd: vhci_device speed not set [ 1124.770639][T15410] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 1125.056098][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.111046][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.135086][T17830] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1125.166817][T17830] overlayfs: missing 'lowerdir' [ 1125.246579][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.286734][T17819] vhci_hcd: connection reset by peer [ 1125.292949][ T29] audit: type=1804 audit(1721121677.290:1311): pid=17831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.3367" name="/newroot/92/file0" dev="fuse" ino=1 res=1 errno=0 [ 1125.302304][ T2866] vhci_hcd: stop threads [ 1125.317873][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.385701][ T2866] vhci_hcd: release socket [ 1125.408489][ T2866] vhci_hcd: disconnect device [ 1125.854278][T17834] Bluetooth: MGMT ver 1.22 [ 1126.725214][ T5095] Bluetooth: hci6: command 0x1003 tx timeout [ 1126.747627][ T54] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1128.268774][ T29] audit: type=1400 audit(1721121680.274:1312): avc: denied { ioctl } for pid=17853 comm="syz.4.3374" path="socket:[71226]" dev="sockfs" ino=71226 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1128.468392][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.770204][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.063397][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.301594][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.591101][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1129.666824][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1129.675797][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1129.686562][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1129.695319][ T5095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1129.706477][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1130.981079][ T77] bridge_slave_1: left allmulticast mode [ 1131.057877][ T77] bridge_slave_1: left promiscuous mode [ 1131.086715][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.116392][ T77] bridge_slave_0: left allmulticast mode [ 1131.150347][ T77] bridge_slave_0: left promiscuous mode [ 1131.180570][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.580388][T15410] vhci_hcd: vhci_device speed not set [ 1132.268031][ T5095] Bluetooth: hci4: command tx timeout [ 1132.542894][T17884] virtio-fs: tag <(null)> not found [ 1132.646772][T17887] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1132.653364][T17887] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1132.744252][T17887] vhci_hcd vhci_hcd.0: Device attached [ 1132.787847][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1132.787867][ T29] audit: type=1326 audit(1721121684.774:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.164017][ T29] audit: type=1326 audit(1721121684.774:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.201574][ T29] audit: type=1326 audit(1721121684.774:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.326643][ T784] vhci_hcd: vhci_device speed not set [ 1133.336836][ T29] audit: type=1326 audit(1721121684.774:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.394190][ T29] audit: type=1326 audit(1721121684.774:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.440932][ T784] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 1133.467664][T17888] vhci_hcd: connection reset by peer [ 1133.477926][T17515] vhci_hcd: stop threads [ 1133.522755][T17515] vhci_hcd: release socket [ 1133.531545][ T29] audit: type=1326 audit(1721121684.784:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.566693][T17515] vhci_hcd: disconnect device [ 1133.593471][ T29] audit: type=1326 audit(1721121684.784:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.658127][ T29] audit: type=1326 audit(1721121684.784:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.712291][ T29] audit: type=1326 audit(1721121684.784:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1133.808741][ T29] audit: type=1326 audit(1721121684.784:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.0.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1134.336112][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.355001][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.375178][ T77] bond0 (unregistering): Released all slaves [ 1134.442120][ T5095] Bluetooth: hci4: command tx timeout [ 1134.972073][T17898] ALSA: seq fatal error: cannot create timer (-22) [ 1135.208351][T17898] ALSA: seq fatal error: cannot create timer (-22) [ 1135.212599][T17873] chnl_net:caif_netlink_parms(): no params data found [ 1135.303677][ T77] hsr_slave_0: left promiscuous mode [ 1135.321758][ T77] hsr_slave_1: left promiscuous mode [ 1135.343344][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.367135][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.391366][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.412626][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.476367][ T77] veth1_macvtap: left promiscuous mode [ 1135.491893][ T77] veth0_macvtap: left promiscuous mode [ 1135.498052][ T77] veth1_vlan: left promiscuous mode [ 1135.508237][ T77] veth0_vlan: left promiscuous mode [ 1136.524880][ T5095] Bluetooth: hci4: command tx timeout [ 1138.464241][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1138.578842][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1138.592868][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1138.600472][ T5100] Bluetooth: hci4: command tx timeout [ 1138.601037][ T784] vhci_hcd: vhci_device speed not set [ 1138.630076][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1138.651666][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1138.659199][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1138.667016][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1138.677295][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1138.749827][T17924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1140.086158][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3394'. [ 1140.164054][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1140.164078][ T29] audit: type=1400 audit(1721121692.144:1340): avc: denied { create } for pid=17930 comm="syz.3.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1140.318918][T17873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.344232][T17873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.374872][T17873] bridge_slave_0: entered allmulticast mode [ 1140.402089][T17873] bridge_slave_0: entered promiscuous mode [ 1140.446419][T17873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.728695][T17873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.777578][ T54] Bluetooth: hci2: command tx timeout [ 1141.019885][T17873] bridge_slave_1: entered allmulticast mode [ 1141.069827][T17873] bridge_slave_1: entered promiscuous mode [ 1141.327705][T17873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.386409][T17873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.571727][T17873] team0: Port device team_slave_0 added [ 1141.602212][T17873] team0: Port device team_slave_1 added [ 1142.634411][ T29] audit: type=1326 audit(1721121694.014:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1142.660767][ T29] audit: type=1326 audit(1721121694.014:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1142.736157][ T29] audit: type=1326 audit(1721121694.014:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1142.816173][ T29] audit: type=1326 audit(1721121694.014:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1142.843701][ T29] audit: type=1326 audit(1721121694.014:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1142.856967][ T54] Bluetooth: hci2: command tx timeout [ 1142.979196][ T29] audit: type=1326 audit(1721121694.014:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1143.082339][ T29] audit: type=1326 audit(1721121694.014:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1143.083702][T17873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.150461][ T29] audit: type=1326 audit(1721121694.014:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1143.156364][T17873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.220458][T17873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.248579][ T29] audit: type=1326 audit(1721121694.024:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17941 comm="syz.0.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f206d175bd9 code=0x7ffc0000 [ 1143.289071][T17873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.297786][T17873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.341789][T17873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.465545][ T77] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.674347][T17921] chnl_net:caif_netlink_parms(): no params data found [ 1143.718337][ T77] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.761394][T17873] hsr_slave_0: entered promiscuous mode [ 1143.762527][T17958] , [ 1143.775669][T17873] hsr_slave_1: entered promiscuous mode [ 1143.833152][T17873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1143.866997][T17873] Cannot create hsr debugfs directory [ 1143.957169][ T77] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.920919][ T54] Bluetooth: hci2: command tx timeout [ 1146.026825][ T77] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.434904][T17968] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 1146.478148][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.486531][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.496164][T17921] bridge_slave_0: entered allmulticast mode [ 1146.506892][T17921] bridge_slave_0: entered promiscuous mode [ 1146.519451][T17968] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1146.565535][T17921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.591000][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.609652][T17921] bridge_slave_1: entered allmulticast mode [ 1146.616038][T17968] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1146.652453][T17921] bridge_slave_1: entered promiscuous mode [ 1146.911666][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1146.923852][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1146.942777][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1146.968516][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1146.979075][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1146.986857][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1147.033087][T17921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.113623][T17921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.369639][T17921] team0: Port device team_slave_0 added [ 1147.673497][T17921] team0: Port device team_slave_1 added [ 1147.679957][ T77] bridge_slave_1: left allmulticast mode [ 1147.690309][ T77] bridge_slave_1: left promiscuous mode [ 1147.696144][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.771869][ T77] bridge_slave_0: left allmulticast mode [ 1147.777634][ T77] bridge_slave_0: left promiscuous mode [ 1147.789597][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.960844][ T5095] Bluetooth: hci2: command tx timeout [ 1148.116408][ T77] ip6gretap0 (unregistering): left allmulticast mode [ 1148.453207][ T77] dvmrp5 (unregistering): left allmulticast mode [ 1148.704234][T17997] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 1148.721245][T17997] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1148.739579][T17997] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1149.084642][ T5095] Bluetooth: hci0: command tx timeout [ 1149.796008][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.815807][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.828434][ T77] bond0 (unregistering): Released all slaves [ 1150.165562][T17921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.183766][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.240482][T17921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.408582][T17921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.418980][T17921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1150.447415][T17921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.575776][T18012] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3420'. [ 1150.798346][ T77] hsr_slave_0: left promiscuous mode [ 1150.804846][ T77] hsr_slave_1: left promiscuous mode [ 1150.816763][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.824883][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1150.861926][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.869413][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1150.911336][T18019] ALSA: seq fatal error: cannot create timer (-22) [ 1150.926829][T18019] ALSA: seq fatal error: cannot create timer (-22) [ 1150.961000][ T77] veth1_macvtap: left promiscuous mode [ 1150.966901][ T77] veth0_macvtap: left promiscuous mode [ 1150.980606][ T77] veth1_vlan: left promiscuous mode [ 1150.987307][ T77] veth0_vlan: left promiscuous mode [ 1151.163261][ T5095] Bluetooth: hci0: command tx timeout [ 1152.916764][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1152.997114][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1153.248392][ T5095] Bluetooth: hci0: command tx timeout [ 1153.945388][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1153.973571][T18015] ip6gretap0: entered promiscuous mode [ 1153.980209][T18015] macvtap1: entered promiscuous mode [ 1153.992081][T18015] macvtap1: entered allmulticast mode [ 1154.003800][T18015] ip6gretap0: entered allmulticast mode [ 1154.017029][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1154.031272][T18020] ip6gretap0: left allmulticast mode [ 1154.037047][T18020] ip6gretap0: left promiscuous mode [ 1154.050946][T18020] macvtap1: left promiscuous mode [ 1154.056011][T18020] macvtap1: left allmulticast mode [ 1154.106190][T17921] hsr_slave_0: entered promiscuous mode [ 1154.127165][T17921] hsr_slave_1: entered promiscuous mode [ 1154.139240][T17921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1154.153205][T17921] Cannot create hsr debugfs directory [ 1154.467474][T17873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1154.505198][T17873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1154.686888][T18033] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1154.710979][T17873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1154.837360][T18040] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3431'. [ 1154.930549][T17873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1155.078934][T18044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 1155.137965][T18043] , [ 1155.233344][T17973] chnl_net:caif_netlink_parms(): no params data found [ 1155.321886][ T5095] Bluetooth: hci0: command tx timeout [ 1155.437693][ T77] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.763897][ T77] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.860061][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 1156.882771][ T77] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.399936][ T77] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.757893][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.776712][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.787723][T17973] bridge_slave_0: entered allmulticast mode [ 1157.807068][T17973] bridge_slave_0: entered promiscuous mode [ 1157.887915][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.906560][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.924106][T17973] bridge_slave_1: entered allmulticast mode [ 1157.936685][T17973] bridge_slave_1: entered promiscuous mode [ 1158.103703][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.146278][ T77] bridge_slave_1: left allmulticast mode [ 1158.154122][ T77] bridge_slave_1: left promiscuous mode [ 1158.160068][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.176604][ T77] bridge_slave_0: left allmulticast mode [ 1158.182930][ T77] bridge_slave_0: left promiscuous mode [ 1158.188885][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.012833][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1159.012852][ T29] audit: type=1400 audit(1721121711.024:1369): avc: denied { shutdown } for pid=18113 comm="syz.0.3440" laddr=::1 lport=20003 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1159.068459][ T29] audit: type=1400 audit(1721121711.064:1370): avc: denied { read } for pid=18113 comm="syz.0.3440" laddr=::1 lport=20003 faddr=::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1159.298319][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.320299][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.335393][ T77] bond0 (unregistering): Released all slaves [ 1159.354732][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.429037][T17873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.577045][T17973] team0: Port device team_slave_0 added [ 1159.589999][T17973] team0: Port device team_slave_1 added [ 1159.850794][T18121] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3442'. [ 1160.595737][T17873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.731056][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.758414][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.839485][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.954923][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.981198][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.024371][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.177538][T18126] netlink: 'syz.0.3443': attribute type 10 has an invalid length. [ 1161.280751][T18126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.395141][T18126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.447608][T18126] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1161.469387][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.476666][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.607982][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.615245][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.697705][ T77] hsr_slave_0: left promiscuous mode [ 1161.719481][ T77] hsr_slave_1: left promiscuous mode [ 1161.738642][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.750392][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.769053][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.790388][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.858425][ T77] veth1_macvtap: left promiscuous mode [ 1161.868600][ T77] veth0_macvtap: left promiscuous mode [ 1161.909746][ T77] veth1_vlan: left promiscuous mode [ 1161.915262][ T77] veth0_vlan: left promiscuous mode [ 1161.926889][ T29] audit: type=1400 audit(1721121713.914:1371): avc: denied { setopt } for pid=18135 comm="syz.3.3445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1163.738288][T18147] ALSA: mixer_oss: invalid OSS volume '' [ 1164.015141][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1164.107721][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1164.947664][T17921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1164.991942][T17973] hsr_slave_0: entered promiscuous mode [ 1164.999425][T17973] hsr_slave_1: entered promiscuous mode [ 1165.017651][T17973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1165.040323][T17973] Cannot create hsr debugfs directory [ 1165.053026][T18149] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 1165.070430][T18149] netlink: 'syz.0.3450': attribute type 4 has an invalid length. [ 1165.078293][T18149] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.3450'. [ 1165.099217][T17921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1165.119606][T17921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1165.200898][T17921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1165.508236][T18155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1165.864235][ T77] IPVS: stop unused estimator thread 0... [ 1165.973416][T17921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.100912][T17921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.213623][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.220884][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.258452][T17873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.302336][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.309552][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.464977][T18168] netlink: 'syz.3.3456': attribute type 10 has an invalid length. [ 1166.484512][T18168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.581871][T18168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.625249][T18168] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1166.700208][T18174] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1167.009310][T17973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1167.027536][T17973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1167.083055][T17873] veth0_vlan: entered promiscuous mode [ 1167.116474][T17973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1167.159917][T17973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1167.253300][T17873] veth1_vlan: entered promiscuous mode [ 1167.464063][T17873] veth0_macvtap: entered promiscuous mode [ 1167.646650][T17873] veth1_macvtap: entered promiscuous mode [ 1167.819424][T17921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.044023][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.154779][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.289433][T17873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.696190][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.726470][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.737609][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.748168][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.760322][T17873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.780403][T17873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.795300][T17873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.865523][T17873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.884231][T17873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.894080][T17873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.906986][T17873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.968478][T17973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.058212][T17973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.085446][T18194] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 1169.166952][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.174234][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.209495][T18191] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 1169.252963][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.260170][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.304320][T17921] veth0_vlan: entered promiscuous mode [ 1169.412834][T17921] veth1_vlan: entered promiscuous mode [ 1169.449901][ T2815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.511165][ T2815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.638340][T18203] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1169.726862][T17973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.777616][ T2815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.787645][T17921] veth0_macvtap: entered promiscuous mode [ 1169.810390][ T2815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.853178][T17921] veth1_macvtap: entered promiscuous mode [ 1169.946229][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.985533][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.998129][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1170.028792][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.081938][T17921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.209939][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.277035][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.287354][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.299709][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.310104][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.328984][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.340090][T17921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.361606][T17921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.388476][T17921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.434623][T17921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.476765][T17921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.514358][T17921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.535443][T17921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.584027][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.640559][T18218] netlink: 'syz.3.3470': attribute type 10 has an invalid length. [ 1171.075390][ T77] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.295834][ T77] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.442132][ T77] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.528523][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.570440][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.664081][ T77] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.920440][T18090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.928307][T18090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.135280][T17973] veth0_vlan: entered promiscuous mode [ 1172.247922][T17973] veth1_vlan: entered promiscuous mode [ 1172.284609][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1172.299746][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1172.314744][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1172.326097][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1172.335180][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1172.343369][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1172.418059][ T77] bridge_slave_1: left allmulticast mode [ 1172.441649][ T77] bridge_slave_1: left promiscuous mode [ 1172.447419][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.479528][ T77] bridge_slave_0: left allmulticast mode [ 1172.514442][ T77] bridge_slave_0: left promiscuous mode [ 1172.541394][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.913974][ T5140] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1173.164759][ T5140] usb 1-1: Using ep0 maxpacket: 8 [ 1173.193383][ T5140] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1173.266898][ T5140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.290560][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1173.333240][ T5140] usb 1-1: SerialNumber: syz [ 1173.379943][ T5140] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1173.812177][T18236] raw-gadget.0 gadget.0: fail, usb_ep_set_halt returned -11 [ 1173.838589][ T5140] usb 1-1: USB disconnect, device number 25 [ 1174.655001][ T5095] Bluetooth: hci4: command tx timeout [ 1175.078898][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.121925][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.146581][ T77] bond0 (unregistering): Released all slaves [ 1176.236807][T18259] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3479'. [ 1176.251864][T17973] veth0_macvtap: entered promiscuous mode [ 1176.631458][ T77] hsr_slave_0: left promiscuous mode [ 1176.651480][ T77] hsr_slave_1: left promiscuous mode [ 1176.673439][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.686459][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.711230][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.720219][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.783332][ T77] veth1_macvtap: left promiscuous mode [ 1176.788949][ T77] veth0_macvtap: left promiscuous mode [ 1176.796889][ T77] veth1_vlan: left promiscuous mode [ 1176.810887][ T77] veth0_vlan: left promiscuous mode [ 1176.840516][ T5095] Bluetooth: hci4: command tx timeout [ 1177.884970][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.894387][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.085840][ T77] team0 (unregistering): Port device team_slave_1 removed [ 1178.168305][ T77] team0 (unregistering): Port device team_slave_0 removed [ 1178.920497][ T5095] Bluetooth: hci4: command tx timeout [ 1179.316479][T17973] veth1_macvtap: entered promiscuous mode [ 1179.345590][T18270] netlink: 'syz.0.3482': attribute type 10 has an invalid length. [ 1179.428337][T18267] netlink: 'syz.3.3483': attribute type 1 has an invalid length. [ 1179.440288][T18267] netlink: 'syz.3.3483': attribute type 4 has an invalid length. [ 1179.448052][T18267] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.3483'. [ 1179.475534][T18276] netlink: 'syz.1.3485': attribute type 4 has an invalid length. [ 1179.522099][T18277] netlink: 'syz.1.3485': attribute type 4 has an invalid length. [ 1179.739019][T17973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.776794][T17973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.792628][T17973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.808828][T17973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.838893][T17973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.890664][T17973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.959350][T17973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.987666][T17973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.020337][T17973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.050426][T17973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.083641][T17973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.122872][T17973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.147824][T17973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.192441][T17973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.469184][T17973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.522698][T17973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.550378][T17973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.591767][T18295] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3491'. [ 1180.604393][T17973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.935580][T18232] chnl_net:caif_netlink_parms(): no params data found [ 1181.002022][ T5095] Bluetooth: hci4: command tx timeout [ 1183.459641][ T29] audit: type=1400 audit(1721121735.454:1372): avc: denied { mounton } for pid=18318 comm="syz.1.3495" path="/9/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1183.515599][ T29] audit: type=1400 audit(1721121735.464:1373): avc: denied { getattr } for pid=18318 comm="syz.1.3495" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1183.590626][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.646744][T18232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.661095][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.750557][T18232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.761981][T18232] bridge_slave_0: entered allmulticast mode [ 1183.784543][T18232] bridge_slave_0: entered promiscuous mode [ 1183.942569][T18232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.943020][ T2815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.958197][T18232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.968411][T18232] bridge_slave_1: entered allmulticast mode [ 1184.025199][T18232] bridge_slave_1: entered promiscuous mode [ 1184.558904][ T2815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.765345][T18232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.791650][ T29] audit: type=1400 audit(1721121738.804:1374): avc: denied { unmount } for pid=17921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1186.826825][T18232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.919546][ T29] audit: type=1326 audit(1721121738.924:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.1.3499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc579975bd9 code=0x0 [ 1187.234555][ T29] audit: type=1400 audit(1721121739.244:1376): avc: denied { read } for pid=18335 comm="syz.4.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1187.254862][ C1] vkms_vblank_simulate: vblank timer overrun [ 1188.124872][T18232] team0: Port device team_slave_0 added [ 1188.337622][T18232] team0: Port device team_slave_1 added [ 1188.351187][T18343] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3502'. [ 1188.462842][T18232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.469980][T18232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.530567][T18232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.544521][T18341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1188.586441][T18232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.604636][T18232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.721005][T18232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.797313][T18346] netlink: 'syz.0.3503': attribute type 10 has an invalid length. [ 1189.080411][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 1189.232088][T18232] hsr_slave_0: entered promiscuous mode [ 1189.256605][T18232] hsr_slave_1: entered promiscuous mode [ 1189.269459][T18232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1189.286693][T18232] Cannot create hsr debugfs directory [ 1190.281001][ T5095] Bluetooth: hci2: command tx timeout [ 1190.470651][ T784] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1191.350417][ T784] usb 5-1: Using ep0 maxpacket: 8 [ 1191.379361][ T784] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1191.465003][ T784] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1191.492126][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1191.508533][ T784] usb 5-1: SerialNumber: syz [ 1191.533324][ T784] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1191.606164][T18232] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1191.613912][ T29] audit: type=1400 audit(1721121743.624:1377): avc: denied { sqpoll } for pid=18374 comm="syz.1.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1191.671147][T18232] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1191.720193][T18232] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1191.761162][T18232] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1191.866862][ T29] audit: type=1326 audit(1721121743.874:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18379 comm="syz.0.3512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206d175bd9 code=0x0 [ 1192.186306][T18232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.255716][T18365] raw-gadget.0 gadget.4: fail, usb_ep_set_halt returned -11 [ 1192.269019][T18232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.361119][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 1192.381101][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.388402][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.428688][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.436010][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.466015][ T784] usb 5-1: USB disconnect, device number 18 [ 1193.382082][T18232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.450683][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1194.140473][ T5136] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1194.193876][T18232] veth0_vlan: entered promiscuous mode [ 1194.215718][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1194.248390][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1194.269942][T18232] veth1_vlan: entered promiscuous mode [ 1194.284649][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1194.334206][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1194.355201][ T5136] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.363704][T18232] veth0_macvtap: entered promiscuous mode [ 1194.377782][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1194.394027][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.405433][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1194.409282][T18232] veth1_macvtap: entered promiscuous mode [ 1194.455546][ T9] usb 1-1: config 0 descriptor?? [ 1194.456825][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 770, setting to 64 [ 1194.473320][T18390] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1194.500160][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1194.519107][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.562199][ T5136] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1194.566125][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.590428][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.608864][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.608890][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.608937][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1194.608956][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1194.612711][T18232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.637132][ T5136] usb 4-1: config 0 descriptor?? [ 1194.714777][T18410] netlink: 'syz.1.3519': attribute type 4 has an invalid length. [ 1194.729116][T18394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1194.930409][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 1195.119094][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.144759][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.173243][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.228976][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.267467][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.710636][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.741661][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.770958][ T5136] ntrig 0003:1B96:000A.0011: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 1195.791110][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.822935][T18232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.864470][T18232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.876731][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1195.901497][ T9] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 1195.911697][T18232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.919104][T18412] netlink: 'syz.1.3519': attribute type 4 has an invalid length. [ 1196.019756][T18232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.042542][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1196.070537][T18232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.094496][T18232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.113703][T18232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.141775][ T29] audit: type=1400 audit(1721121748.154:1379): avc: denied { read } for pid=18387 comm="syz.0.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1196.493754][T17515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.527951][T17515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.681508][T18086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.697837][T18086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.833228][T17515] Bluetooth: hci6: Frame reassembly failed (-84) [ 1196.905097][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3522'. [ 1196.921367][T18422] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 1196.953540][T18422] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 1197.300030][ T29] audit: type=1400 audit(1721121749.307:1380): avc: denied { getopt } for pid=18387 comm="syz.0.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1197.467035][ T29] audit: type=1400 audit(1721121749.477:1381): avc: denied { create } for pid=18427 comm="syz.4.3524" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1197.520715][ T29] audit: type=1400 audit(1721121749.517:1382): avc: denied { read } for pid=18427 comm="syz.4.3524" name="file1" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1197.650437][ T5179] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 1197.993441][T18088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.279850][T18088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.485709][T18088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.655773][T18088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.840664][ T54] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1198.841616][ T5095] Bluetooth: hci6: command 0xfc11 tx timeout [ 1199.155499][T18088] bridge_slave_1: left allmulticast mode [ 1199.177754][T18088] bridge_slave_1: left promiscuous mode [ 1199.205494][T18088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.256601][T18088] bridge_slave_0: left allmulticast mode [ 1199.285304][T18088] bridge_slave_0: left promiscuous mode [ 1199.305963][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.620533][T15410] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1199.630245][ C1] hrtimer: interrupt took 50937 ns [ 1199.850925][T15410] usb 2-1: Using ep0 maxpacket: 8 [ 1199.869454][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1199.883093][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1199.883238][T15410] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1199.912658][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1199.930999][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1199.953995][ T5095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1199.963420][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1199.984036][T15410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1200.030175][T15410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1200.039392][T15410] usb 2-1: SerialNumber: syz [ 1200.146780][T15410] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1200.790914][T18437] raw-gadget.2 gadget.1: fail, usb_ep_set_halt returned -11 [ 1201.052400][ T5140] usb 2-1: USB disconnect, device number 17 [ 1201.082393][T18446] usb 4-1: USB disconnect, device number 21 [ 1201.300403][ T5136] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1201.534462][ T5136] usb 5-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.60 [ 1201.550599][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.580979][ T5136] usb 5-1: config 0 descriptor?? [ 1201.603687][ T5136] ums-cypress 5-1:0.0: USB Mass Storage device detected [ 1201.985432][T18088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.041400][ T5095] Bluetooth: hci4: command tx timeout [ 1202.072970][T18088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.213692][T18088] bond0 (unregistering): Released all slaves [ 1307.250261][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1307.257240][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12736/1:b..l P18388/1:b..l [ 1307.267095][ C1] rcu: (detected by 1, t=10502 jiffies, g=126141, q=513 ncpus=2) [ 1307.274883][ C1] task:syz.0.3514 state:R running task stack:25968 pid:18388 tgid:18387 ppid:16136 flags:0x00004006 [ 1307.287990][ C1] Call Trace: [ 1307.291266][ C1] [ 1307.294185][ C1] __schedule+0xf27/0x5d10 [ 1307.298600][ C1] ? hlock_class+0x4e/0x130 [ 1307.303098][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1307.307872][ C1] ? __pfx___schedule+0x10/0x10 [ 1307.312744][ C1] ? mark_held_locks+0x9f/0xe0 [ 1307.317515][ C1] preempt_schedule_irq+0x51/0x90 [ 1307.322532][ C1] irqentry_exit+0x36/0x90 [ 1307.326939][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1307.332922][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x4/0x40 [ 1307.339067][ C1] Code: b6 e8 40 fa ff ff eb b6 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <8b> 05 6a 00 fd 04 85 c0 74 20 8b 05 64 32 fd 04 85 c0 74 16 65 48 [ 1307.358672][ C1] RSP: 0018:ffffc90003387ac8 EFLAGS: 00000246 [ 1307.364734][ C1] RAX: 1ffff1100f3c1271 RBX: ffff888079e09340 RCX: ffffc9000dbfa000 [ 1307.372712][ C1] RDX: 0000000000040000 RSI: ffffffff8ad42b51 RDI: ffff888079e09388 [ 1307.380693][ C1] RBP: ffff8880291cec1e R08: 0000000000000005 R09: 0000000000000001 [ 1307.388652][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1307.396614][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 1307.404575][ C1] ? mtree_load+0x171/0xa30 [ 1307.409079][ C1] mtree_load+0x19d/0xa30 [ 1307.413401][ C1] ? __pfx___might_resched+0x10/0x10 [ 1307.418766][ C1] ? __pfx_mtree_load+0x10/0x10 [ 1307.423613][ C1] do_pages_stat+0x47c/0x8e0 [ 1307.428201][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1307.433410][ C1] ? __pfx_do_pages_stat+0x10/0x10 [ 1307.438518][ C1] ? cpuset_mems_allowed+0x1d9/0x480 [ 1307.443805][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1307.449610][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1307.454806][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1307.460609][ C1] kernel_move_pages+0x1064/0x19b0 [ 1307.465732][ C1] ? __pfx_kernel_move_pages+0x10/0x10 [ 1307.471211][ C1] ? xfd_validate_state+0x5d/0x180 [ 1307.476339][ C1] __x64_sys_move_pages+0xe0/0x1c0 [ 1307.481545][ C1] ? do_syscall_64+0x91/0x250 [ 1307.486227][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1307.491433][ C1] do_syscall_64+0xcd/0x250 [ 1307.495942][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.501947][ C1] RIP: 0033:0x7f206d175bd9 [ 1307.506364][ C1] RSP: 002b:00007f206df31048 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1307.514778][ C1] RAX: ffffffffffffffda RBX: 00007f206d303f60 RCX: 00007f206d175bd9 [ 1307.522743][ C1] RDX: 0000000020000040 RSI: 1ffffffffffffd15 RDI: 0000000000000000 [ 1307.530707][ C1] RBP: 00007f206d1e4e60 R08: 0000000020000040 R09: 0000000000000000 [ 1307.538686][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.546657][ C1] R13: 000000000000000b R14: 00007f206d303f60 R15: 00007ffd21a4bd68 [ 1307.554619][ C1] [ 1307.557623][ C1] task:syz-executor state:R running task stack:24544 pid:12736 tgid:12736 ppid:12713 flags:0x00000000 [ 1307.569368][ C1] Call Trace: [ 1307.572660][ C1] [ 1307.575578][ C1] __schedule+0xf27/0x5d10 [ 1307.579991][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1307.584748][ C1] ? __pfx___schedule+0x10/0x10 [ 1307.589587][ C1] ? irqentry_exit+0x3b/0x90 [ 1307.594170][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1307.599361][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1307.604723][ C1] preempt_schedule_common+0x44/0xc0 [ 1307.610000][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1307.615184][ C1] _raw_spin_unlock+0x3e/0x50 [ 1307.619875][ C1] do_wp_page+0x1852/0x3290 [ 1307.624374][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1307.629408][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 1307.634255][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1307.639289][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1307.644654][ C1] __handle_mm_fault+0x2311/0x53d0 [ 1307.649774][ C1] ? down_read_trylock+0x1ed/0x3f0 [ 1307.654877][ C1] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 1307.660073][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1307.665526][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1307.671082][ C1] ? do_user_addr_fault+0xe50/0x13f0 [ 1307.676392][ C1] handle_mm_fault+0x476/0xa00 [ 1307.681150][ C1] ? __pkru_allows_pkey+0x52/0xb0 [ 1307.686162][ C1] do_user_addr_fault+0x60d/0x13f0 [ 1307.691270][ C1] exc_page_fault+0x5c/0xc0 [ 1307.695769][ C1] asm_exc_page_fault+0x26/0x30 [ 1307.700621][ C1] RIP: 0033:0x7f353172b639 [ 1307.705037][ C1] RSP: 002b:00007ffc42fdf0d8 EFLAGS: 00010246 [ 1307.711089][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f353176c4d3 [ 1307.719072][ C1] RDX: 0000000000000492 RSI: 0000000000000000 RDI: 0000000001200011 [ 1307.727116][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1307.735075][ C1] R10: 0000555590c767d0 R11: 0000000000000246 R12: 0000000000000492 [ 1307.743043][ C1] R13: ffffffffffffffa8 R14: 0000000000000006 R15: 0000000000000000 [ 1307.751003][ C1] [ 1307.754009][ C1] rcu: rcu_preempt kthread starved for 10552 jiffies! g126141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1307.765278][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1307.775267][ C1] rcu: RCU grace-period kthread stack dump: [ 1307.781135][ C1] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1307.792860][ C1] Call Trace: [ 1307.796129][ C1] [ 1307.799048][ C1] __schedule+0xf27/0x5d10 [ 1307.803489][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1307.808698][ C1] ? __pfx___schedule+0x10/0x10 [ 1307.813556][ C1] ? schedule+0x298/0x350 [ 1307.817898][ C1] ? __pfx_lock_release+0x10/0x10 [ 1307.822936][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1307.827861][ C1] ? lock_acquire+0x1b1/0x560 [ 1307.832533][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1307.837987][ C1] schedule+0xe7/0x350 [ 1307.842050][ C1] schedule_timeout+0x136/0x2a0 [ 1307.846895][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1307.852277][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1307.857559][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1307.863376][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1307.868828][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1307.873613][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1307.878921][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1307.883593][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1307.888811][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1307.894615][ C1] rcu_gp_kthread+0x271/0x380 [ 1307.899286][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1307.904483][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1307.909676][ C1] ? __kthread_parkme+0x148/0x220 [ 1307.914693][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1307.919879][ C1] kthread+0x2c1/0x3a0 [ 1307.923939][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1307.929127][ C1] ? __pfx_kthread+0x10/0x10 [ 1307.933710][ C1] ret_from_fork+0x45/0x80 [ 1307.938116][ C1] ? __pfx_kthread+0x10/0x10 [ 1307.942696][ C1] ret_from_fork_asm+0x1a/0x30 [ 1307.947479][ C1] [ 1307.950499][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1307.956836][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1307.962074][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20