last executing test programs: 16.152579281s ago: executing program 1 (id=292): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000004c0)={0x1, 0x80000000, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5, 0xefff, {0x0, 0x0, 0x1}}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000440)={&(0x7f0000000140), 0x18, &(0x7f0000000180)={&(0x7f0000000340)="aed76e2e", 0x4}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000380), 0x8) 10.875430467s ago: executing program 1 (id=301): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) fchdir(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='nmi_noise\x00', r2}, 0x10) mkdir(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1918, &(0x7f0000215000/0x3000)=nil) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x40, &(0x7f0000000bc0)='d', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) ioctl$USBDEVFS_DISCARDURB(r7, 0x550b, 0x0) 10.725749294s ago: executing program 4 (id=302): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xe, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d000000", @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "a1ad73af353786b6b599f9a9ecbb88735331fa83193b163b37bad1118b4f0b59e0498892cb47c459f6cd0c10f46ee2bc2dd6fa96df8c85e2fdfb0dd0520e1d27fc1fb951d6"}, 0x50) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file1\x00', &(0x7f0000000180)='./file1/file0\x00', 0x0, 0x2400, 0x0) socket(0x2, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffcf, &(0x7f00000008c0)}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r2, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xffffffffffffff66) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2885800, 0x0) bind$unix(r0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001e40), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r4, 0x4542}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000400)={[0x100000000]}, 0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000001f40)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000b00)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x3f, 0x4, 0xd1, 0x6, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x940a20b6a0803259, 0x8, 0xffffffff, 0x401}}) 9.607663695s ago: executing program 4 (id=305): setns(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x139400, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x10001, 0x3, 0x0, 0x400, 0xda3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}}, 0x0) tkill(r2, 0xb) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 8.729114094s ago: executing program 0 (id=308): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) getgroups(0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a}}], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', '', [], 0xa, "a35f0ca730c05c4c16b15b5ad577e343f525ddcc22c28cd8538f72ed77de01a3e882cd32999b31b48c8dbbbd97e15a833ad54adfd506be9ca1019b9e92255f73d0bede6ee18e69a00f1a430503a3d0e23b45e38ee2efc9483c4f279a694b84cd506b"}, 0x66) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2445]}, 0xa05) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000104", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000100000005000c0001000000140003"], 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f00000007c0)="c109a30b00000000001dfe040e7126", 0xf}], 0x1}, 0x0) 7.84331723s ago: executing program 1 (id=309): setns(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x139400, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x10001, 0x3, 0x0, 0x400, 0xda3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x2c, r2, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}}, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.664878468s ago: executing program 0 (id=310): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002180)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r3, @ANYBLOB="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"], 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigpending(0x0, 0x1000000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x10d21, 0x301100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000380)={0x0, r7, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002380)=ANY=[@ANYBLOB="d62fd5c0da06f68cf79f80be5f4262a3e2c7511cc09f68f39ec24c22a3ef6c9fdf001e7f56893b450733b17879ff69ebd2886bd0bb531c252926e75fbc3c7a33cff4b7276159f95e94c112075d62b118c23c6ff1245c4c5ef44c2911eb8f10e85634558c8e9cc08ab1cd2ba5dc05ee2524c6b1324f3e51377e07a4ce904781d020e86aabe063c018443a5b3e75934f2bc7cd83925b55ca89cb9f4d3eb871a2221378f9fa6e66c762c1957492055bfb8ff21fe9e3bad16ae8fa0868442ff4b820", @ANYRESOCT=r4, @ANYRES32=r9, @ANYBLOB="ffffffff00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000"], 0x184}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="183000000000000000000000030000001801000020696c2500000000002020207b1a1b0001000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa040000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000000f6d00000100ffffa553010000000000850000003500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r12 = socket(0x25, 0x1, 0x0) recvfrom$packet(r12, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000240)={r11, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x3f], [0x0, 0x0, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r13, 0x0, 0xffffffffffffffff}) r15 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002300), 0x8000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r14, 0xc00c642e, &(0x7f0000002340)={0x0, 0x0, r15}) close_range(r1, 0xffffffffffffffff, 0x0) 7.639652257s ago: executing program 3 (id=311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40187013, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000001940)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x264e33, 0x0) setresuid(0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc}) 6.828488698s ago: executing program 4 (id=312): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @multicast2}, {0x6}, 0x834b35c30ad7ca36, {0x2, 0x4e21, @multicast2}, 'veth1_virt_wifi\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24f9, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x6820, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0x5ddc, &(0x7f0000000640), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @remote}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x322, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.636605332s ago: executing program 3 (id=313): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) (fail_nth: 3) 6.583851561s ago: executing program 2 (id=314): r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 6.320880572s ago: executing program 2 (id=315): syz_emit_vhci(0x0, 0x11) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018450000fcffffff0000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="000000751c9fc3c204543c5527fd0000b703000000000000850000000c000000b7000000000000003022fcff0100000085100000", @ANYBLOB="2c434e21405676f39f238a1e9f6db0436184b211e32a00f85ef568dd5b59671ecfc76e567603e5ab466390d0099996b9f2b663246d5e923813eb8a27ac7540a21c68f2bf86718f587d", @ANYRESDEC=0x0], &(0x7f00000009c0)='syzkaller\x00', 0x3, 0x3b, &(0x7f0000000a00)=""/59, 0x41000, 0x27, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x4, 0x10000, 0xffff}, 0x10, 0x1b44c, 0xffffffffffffffff, 0x0, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000cc0), 0x10, 0x80000001}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000008c0)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r0, 0x4, r4}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r3, r0, 0x4, r4}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) syz_emit_vhci(0x0, 0x0) (async) syz_emit_vhci(0x0, 0x0) io_cancel(0x0, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket$inet6_sctp(0xa, 0x0, 0x84) 5.843377552s ago: executing program 4 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) pivot_root(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) sendto$inet6(r4, &(0x7f0000000140)="11", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000300), 0x8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0xc090) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)) fchdir(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d09, &(0x7f00000002c0)=0x4a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x0, 0x3}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5.700754336s ago: executing program 3 (id=317): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000700)) 4.913938666s ago: executing program 0 (id=318): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x5, 0x6}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000000000001000013000000000000000002000000000000000000000055f95095302c4834b2902d40fd2d9e09b800000000000000073e15e62ab0b06c59e49bcc4e9db9de45071673f06bd9b88bd725ae07a538dfbd3325a980f4d13c6b52c9"], 0x0, 0x34}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.816469766s ago: executing program 3 (id=319): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) getgroups(0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a}}], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', '', [], 0xa, "a35f0ca730c05c4c16b15b5ad577e343f525ddcc22c28cd8538f72ed77de01a3e882cd32999b31b48c8dbbbd97e15a833ad54adfd506be9ca1019b9e92255f73d0bede6ee18e69a00f1a430503a3d0e23b45e38ee2efc9483c4f279a694b84cd506b"}, 0x66) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2445]}, 0xa05) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000100000005000c0001000000140003"], 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f00000007c0)="c109a30b00000000001dfe040e7126", 0xf}], 0x1}, 0x0) 4.736067236s ago: executing program 2 (id=320): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockname$tipc(r0, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) fchdir(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='nmi_noise\x00', r2}, 0x10) mkdir(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x1918, &(0x7f0000215000/0x3000)=nil) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000000c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x40, &(0x7f0000000bc0)='d', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 4.735588336s ago: executing program 4 (id=321): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x48044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x0) getgroups(0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x11a}}], 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', '', [], 0xa, "a35f0ca730c05c4c16b15b5ad577e343f525ddcc22c28cd8538f72ed77de01a3e882cd32999b31b48c8dbbbd97e15a833ad54adfd506be9ca1019b9e92255f73d0bede6ee18e69a00f1a430503a3d0e23b45e38ee2efc9483c4f279a694b84cd506b"}, 0x66) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2445]}, 0xa05) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000104", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280080001000100000005000c0001000000140003"], 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000640)=[{&(0x7f00000007c0)="c109a30b00000000001dfe040e7126", 0xf}], 0x1}, 0x0) 4.689926688s ago: executing program 1 (id=322): setns(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x139400, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x10001, 0x3, 0x0, 0x400, 0xda3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}}, 0x0) tkill(r2, 0xb) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3.582024974s ago: executing program 2 (id=323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40187013, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x200000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r7, 0x0) r8 = io_uring_setup(0x30d5, &(0x7f00000000c0)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r10}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ff7000/0x1000)=nil, 0x1000}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34325842}}) 2.269399038s ago: executing program 2 (id=324): socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sync() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xf}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x8}, 0x0) 2.166017244s ago: executing program 0 (id=325): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40187013, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000001940)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x264e33, 0x0) setresuid(0x0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc}) 2.130505392s ago: executing program 3 (id=326): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e20, @multicast2}, {0x6}, 0x834b35c30ad7ca36, {0x2, 0x4e21, @multicast2}, 'veth1_virt_wifi\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24f9, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x6820, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0x5ddc, &(0x7f0000000640), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @remote}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_io_uring_setup(0x322, &(0x7f0000000540), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 991.74357ms ago: executing program 0 (id=327): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) (fail_nth: 3) 968.244241ms ago: executing program 4 (id=328): setns(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x139400, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x10001, 0x3, 0x0, 0x400, 0xda3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}}, 0x0) tkill(r2, 0xb) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 666.456406ms ago: executing program 3 (id=329): setns(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x139400, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x10001, 0x3, 0x0, 0x400, 0xda3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x2c, r2, 0x1, 0x0, 0x0, {0x22}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}}, 0x0) tkill(0x0, 0xb) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 536.544853ms ago: executing program 0 (id=330): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000004c0)={0x1, 0x80000000, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5, 0xefff, {0x0, 0x0, 0x1}}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000440)={&(0x7f0000000140), 0x18, &(0x7f0000000180)={&(0x7f0000000340)="aed76e2e", 0x4}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000100)={0x0, 0xfffffb06}, 0x8) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000380), 0x8) 318.738855ms ago: executing program 1 (id=331): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 102.342944ms ago: executing program 2 (id=332): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xec, 0xb3, 0x4d, 0x20, 0xb95, 0x2791, 0xd2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x23, 0x86}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x1, 0x2, 0x82e4, 0x2120, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x24000, 0x104) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) r2 = socket(0xc3fcb09363277377, 0x3, 0x0) io_uring_setup(0x12e1, &(0x7f0000000180)={0x0, 0x8b94, 0x8, 0x0, 0x0, 0x0, r1}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66cc7ce6333164022b522c7b19fe87893b0ba5c75f11ff7ebe4fde3d", @ANYRESHEX=0x0]) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f, 0x1}, 0xe) chdir(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x8000001) fallocate(r4, 0x39, 0x2000, 0x9) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000cee0202001a000000", 0x33a) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) 0s ago: executing program 1 (id=333): setns(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x139400, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x7, 0x3, 0x10001, 0x3, 0x0, 0x400, 0xda3}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x7f}, 0x2e, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5b}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) tkill(r2, 0xb) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='zonefs\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) kernel console output (not intermixed with test programs): ed state [ 251.954783][ T5977] team0: entered allmulticast mode [ 251.976448][ T5977] team_slave_0: entered allmulticast mode [ 252.045530][ T5977] team_slave_1: entered allmulticast mode [ 252.100587][ T4612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 252.135023][ T5226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 252.177965][ T5977] team0: entered promiscuous mode [ 252.180583][ T4612] Bluetooth: hci3: command tx timeout [ 252.227231][ T5977] team_slave_0: entered promiscuous mode [ 252.258342][ T29] audit: type=1400 audit(1723314654.416:243): avc: denied { accept } for pid=5990 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.286630][ T5977] team_slave_1: entered promiscuous mode [ 252.314486][ T5977] bridge0: port 3(team0) entered blocking state [ 252.320841][ T5977] bridge0: port 3(team0) entered forwarding state [ 252.384677][ T5226] usb 4-1: device descriptor read/64, error -71 [ 252.487338][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.632444][ T5226] usb usb4-port1: attempt power cycle [ 252.646308][ T29] audit: type=1400 audit(1723314654.416:244): avc: denied { setopt } for pid=5990 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.770148][ T29] audit: type=1400 audit(1723314654.416:245): avc: denied { name_bind } for pid=5990 comm="syz.2.84" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 252.794605][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.844713][ T29] audit: type=1400 audit(1723314654.446:246): avc: denied { read } for pid=5990 comm="syz.2.84" path="socket:[12495]" dev="sockfs" ino=12495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 252.889394][ T29] audit: type=1400 audit(1723314654.496:247): avc: denied { write } for pid=5990 comm="syz.2.84" path="socket:[12495]" dev="sockfs" ino=12495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 253.031553][ T29] audit: type=1400 audit(1723314654.556:248): avc: denied { ioctl } for pid=5990 comm="syz.2.84" path="socket:[12491]" dev="sockfs" ino=12491 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.063058][ T4612] Bluetooth: hci6: command 0x0406 tx timeout [ 253.149031][ T5226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 253.174620][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.322723][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 253.332266][ T5226] usb 4-1: device descriptor read/8, error -71 [ 253.705292][ T5226] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 254.150921][ T5226] usb 4-1: device descriptor read/8, error -71 [ 254.226761][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.262466][ T5227] Bluetooth: hci3: command tx timeout [ 254.300842][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.358631][ T5948] bridge_slave_0: entered allmulticast mode [ 254.371390][ T5226] usb usb4-port1: unable to enumerate USB device [ 254.411845][ T5948] bridge_slave_0: entered promiscuous mode [ 254.600863][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.608000][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.672822][ T5948] bridge_slave_1: entered allmulticast mode [ 254.710170][ T5948] bridge_slave_1: entered promiscuous mode [ 254.757633][ T6015] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 254.835522][ T6014] CUSE: DEVNAME unspecified [ 255.021248][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.140088][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.667975][ T35] bridge_slave_1: left allmulticast mode [ 255.678669][ T35] bridge_slave_1: left promiscuous mode [ 255.690696][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.788708][ T35] bridge_slave_0: left allmulticast mode [ 255.808229][ T35] bridge_slave_0: left promiscuous mode [ 255.841399][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.347370][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.367106][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.962984][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.978864][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.016731][ T35] bond0 (unregistering): Released all slaves [ 257.038405][ T5948] team0: Port device team_slave_0 added [ 257.046909][ T6027] all: renamed from bridge_slave_0 (while UP) [ 257.143900][ T5948] team0: Port device team_slave_1 added [ 257.312572][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.325522][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.354486][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.384411][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.423117][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.596568][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.818766][ T6067] CUSE: DEVNAME unspecified [ 259.150108][ T6057] netlink: 9 bytes leftover after parsing attributes in process `syz.4.92'. [ 259.188425][ T6057] 1·: renamed from c0· (while UP) [ 259.219910][ T6057] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 259.293788][ T29] audit: type=1400 audit(1723314661.456:249): avc: denied { write } for pid=6071 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.317205][ T5948] hsr_slave_0: entered promiscuous mode [ 259.346909][ T5948] hsr_slave_1: entered promiscuous mode [ 259.357255][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.366144][ T5948] Cannot create hsr debugfs directory [ 259.628646][ T35] hsr_slave_0: left promiscuous mode [ 259.740655][ T35] hsr_slave_1: left promiscuous mode [ 259.787100][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.795517][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.839291][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.851313][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.894110][ T35] veth1_macvtap: left promiscuous mode [ 259.914602][ T35] veth0_macvtap: left promiscuous mode [ 259.939012][ T35] veth1_vlan: left promiscuous mode [ 259.963102][ T35] veth0_vlan: left promiscuous mode [ 260.222005][ T5332] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 260.422964][ T5332] usb 3-1: device descriptor read/64, error -71 [ 260.803370][ T5332] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 260.907933][ T29] audit: type=1400 audit(1723314663.056:250): avc: denied { write } for pid=6079 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.670456][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 261.795672][ T5332] usb 3-1: device descriptor read/64, error -71 [ 261.969922][ T5332] usb usb3-port1: attempt power cycle [ 262.426684][ T35] team0 (unregistering): Port device team_slave_1 removed [ 262.504441][ T35] team0 (unregistering): Port device team_slave_0 removed [ 262.552070][ T5332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 263.129891][ T6095] input: syz0 as /devices/virtual/input/input5 [ 263.179369][ T29] audit: type=1400 audit(1723314665.336:251): avc: denied { read } for pid=4659 comm="acpid" name="event4" dev="devtmpfs" ino=2332 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.280095][ T29] audit: type=1400 audit(1723314665.336:252): avc: denied { open } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2332 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.308678][ T29] audit: type=1400 audit(1723314665.336:253): avc: denied { ioctl } for pid=4659 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2332 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.507535][ T5332] usb 3-1: device descriptor read/8, error -71 [ 263.918754][ T29] audit: type=1400 audit(1723314666.006:254): avc: denied { getopt } for pid=6100 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.504939][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.430356][ T29] audit: type=1400 audit(1723314667.146:255): avc: denied { read write } for pid=6111 comm="syz.2.105" name="uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 265.467092][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.475900][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.524041][ T29] audit: type=1400 audit(1723314667.146:256): avc: denied { open } for pid=6111 comm="syz.2.105" path="/dev/uhid" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 265.563303][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.590832][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.600038][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.614529][ T29] audit: type=1400 audit(1723314667.486:257): avc: denied { nlmsg_read } for pid=6111 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 265.635643][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.648798][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.659444][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.671302][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.728649][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.792088][ T5279] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 265.915432][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 265.994921][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.099528][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.110014][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 266.173381][ T5279] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.184791][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.198696][ T5279] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.209581][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.230826][ T5279] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 266.242265][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.259654][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.290506][ T5279] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 266.312840][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.345423][ T5279] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.358870][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.387324][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.402940][ T5279] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.421450][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.429810][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.442619][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.459525][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.478501][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.494500][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.571711][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.729336][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.739222][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.772427][ T5279] usb 5-1: GET_CAPABILITIES returned 0 [ 266.782888][ T5279] usbtmc 5-1:16.0: can't read capabilities [ 266.790401][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.799404][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.814451][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.824781][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.837667][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.845590][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 266.872560][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.897442][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.945544][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.979486][ T6118] FAULT_INJECTION: forcing a failure. [ 266.979486][ T6118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.060968][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.4.106 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 267.071623][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 267.081704][ T6118] Call Trace: [ 267.085007][ T6118] [ 267.087955][ T6118] dump_stack_lvl+0x16c/0x1f0 [ 267.092672][ T6118] should_fail_ex+0x497/0x5b0 [ 267.097392][ T6118] _copy_from_user+0x30/0xf0 [ 267.102023][ T6118] kstrtouint_from_user+0xd7/0x1c0 [ 267.107198][ T6118] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 267.112954][ T6118] ? __pfx_lock_acquire+0x10/0x10 [ 267.118014][ T6118] proc_fail_nth_write+0x84/0x270 [ 267.123069][ T6118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.128733][ T6118] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 267.134396][ T6118] vfs_write+0x29a/0x1140 [ 267.138751][ T6118] ? __fdget_pos+0xeb/0x180 [ 267.143281][ T6118] ? __pfx_vfs_write+0x10/0x10 [ 267.148071][ T6118] ? __pfx___mutex_lock+0x10/0x10 [ 267.153130][ T6118] ? __fget_files+0x256/0x400 [ 267.157851][ T6118] ksys_write+0x12f/0x260 [ 267.162296][ T6118] ? __pfx_ksys_write+0x10/0x10 [ 267.167192][ T6118] do_syscall_64+0xcd/0x250 [ 267.171731][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.177666][ T6118] RIP: 0033:0x7ffb25b764df [ 267.182128][ T6118] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 267.201766][ T6118] RSP: 002b:00007ffb268af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 267.210185][ T6118] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb25b764df [ 267.218245][ T6118] RDX: 0000000000000001 RSI: 00007ffb268af0a0 RDI: 0000000000000004 [ 267.226215][ T6118] RBP: 00007ffb268af090 R08: 0000000000000000 R09: 0000000000000000 [ 267.234185][ T6118] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 267.242159][ T6118] R13: 0000000000000000 R14: 00007ffb25d05f80 R15: 00007ffde7d949c8 [ 267.250218][ T6118] [ 267.291656][ T9] usb 5-1: USB disconnect, device number 2 [ 267.493100][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.504991][ T6131] CUSE: DEVNAME unspecified [ 267.586455][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.656847][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.664030][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.748338][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.755491][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.874595][ T6136] CUSE: DEVNAME unspecified [ 268.360163][ T6145] FAULT_INJECTION: forcing a failure. [ 268.360163][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.386981][ T29] audit: type=1400 audit(1723314670.546:258): avc: denied { read } for pid=6142 comm="syz.0.110" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.500727][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.4.111 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 268.511338][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 268.521478][ T6145] Call Trace: [ 268.524744][ T6145] [ 268.527660][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 268.532336][ T6145] should_fail_ex+0x497/0x5b0 [ 268.537033][ T6145] _copy_from_user+0x30/0xf0 [ 268.541637][ T6145] kstrtouint_from_user+0xd7/0x1c0 [ 268.546837][ T6145] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 268.552570][ T6145] ? __pfx_lock_acquire+0x10/0x10 [ 268.557615][ T6145] proc_fail_nth_write+0x84/0x270 [ 268.562633][ T6145] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.568284][ T6145] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.573910][ T6145] vfs_write+0x29a/0x1140 [ 268.578226][ T6145] ? __fdget_pos+0xeb/0x180 [ 268.582749][ T6145] ? __pfx_vfs_write+0x10/0x10 [ 268.587525][ T6145] ? __pfx___mutex_lock+0x10/0x10 [ 268.592539][ T6145] ? __fget_files+0x256/0x400 [ 268.597209][ T6145] ksys_write+0x12f/0x260 [ 268.601537][ T6145] ? __pfx_ksys_write+0x10/0x10 [ 268.606399][ T6145] do_syscall_64+0xcd/0x250 [ 268.610907][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.616814][ T6145] RIP: 0033:0x7ffb25b764df [ 268.621220][ T6145] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 268.640825][ T6145] RSP: 002b:00007ffb2688e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 268.649225][ T6145] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffb25b764df [ 268.657185][ T6145] RDX: 0000000000000001 RSI: 00007ffb2688e0a0 RDI: 0000000000000005 [ 268.665142][ T6145] RBP: 00007ffb2688e090 R08: 0000000000000000 R09: 0000000000000000 [ 268.673097][ T6145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 268.681051][ T6145] R13: 0000000000000000 R14: 00007ffb25d06058 R15: 00007ffde7d949c8 [ 268.689010][ T6145] [ 268.829987][ T29] audit: type=1400 audit(1723314670.976:259): avc: denied { mount } for pid=6142 comm="syz.0.110" name="/" dev="rpc_pipefs" ino=13845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 269.139460][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.525930][ T6162] CUSE: DEVNAME unspecified [ 270.417400][ T5948] veth0_vlan: entered promiscuous mode [ 270.638563][ T5948] veth1_vlan: entered promiscuous mode [ 270.931248][ T6183] FAULT_INJECTION: forcing a failure. [ 270.931248][ T6183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.970418][ T6183] CPU: 1 UID: 0 PID: 6183 Comm: syz.0.117 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 270.982028][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 270.992115][ T6183] Call Trace: [ 270.995410][ T6183] [ 270.998363][ T6183] dump_stack_lvl+0x16c/0x1f0 [ 271.003099][ T6183] should_fail_ex+0x497/0x5b0 [ 271.007811][ T6183] _copy_from_iter+0x2a1/0x1150 [ 271.012697][ T6183] ? __pfx__copy_from_iter+0x10/0x10 [ 271.018015][ T6183] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 271.024031][ T6183] ? tun_build_skb.constprop.0+0x1b8/0x1390 [ 271.029963][ T6183] ? __pfx_lock_release+0x10/0x10 [ 271.035017][ T6183] copy_page_from_iter+0xa5/0x120 [ 271.040078][ T6183] tun_build_skb.constprop.0+0x294/0x1390 [ 271.045836][ T6183] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 271.052024][ T6183] ? __pfx___lock_acquire+0x10/0x10 [ 271.057247][ T6183] ? __pfx_mark_lock+0x10/0x10 [ 271.062040][ T6183] tun_get_user+0x888/0x3c30 [ 271.066768][ T6183] ? __pfx_tun_get_user+0x10/0x10 [ 271.071823][ T6183] ? find_held_lock+0x2d/0x110 [ 271.076630][ T6183] ? __pfx_lock_release+0x10/0x10 [ 271.082038][ T6183] tun_chr_write_iter+0xe8/0x210 [ 271.087014][ T6183] vfs_write+0x6b6/0x1140 [ 271.091370][ T6183] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 271.096958][ T6183] ? __pfx_vfs_write+0x10/0x10 [ 271.101748][ T6183] ? __fget_files+0x256/0x400 [ 271.106467][ T6183] ? __fget_light+0x173/0x210 [ 271.111175][ T6183] ksys_write+0x12f/0x260 [ 271.115526][ T6183] ? __pfx_ksys_write+0x10/0x10 [ 271.120406][ T6183] do_syscall_64+0xcd/0x250 [ 271.124945][ T6183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.130871][ T6183] RIP: 0033:0x7f7ec11764df [ 271.135299][ T6183] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 271.154927][ T6183] RSP: 002b:00007f7ec1fad000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 271.163374][ T6183] RAX: ffffffffffffffda RBX: 00007f7ec1305f80 RCX: 00007f7ec11764df [ 271.171464][ T6183] RDX: 0000000000000036 RSI: 0000000020000000 RDI: 00000000000000c8 [ 271.179438][ T6183] RBP: 00007f7ec1fad090 R08: 0000000000000000 R09: 0000000000000000 [ 271.187409][ T6183] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 271.195382][ T6183] R13: 0000000000000001 R14: 00007f7ec1305f80 R15: 00007ffebdd0d5f8 [ 271.203365][ T6183] [ 271.403443][ T6187] mmap: syz.3.118 (6187) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 271.457159][ T5948] veth0_macvtap: entered promiscuous mode [ 271.526471][ T5948] veth1_macvtap: entered promiscuous mode [ 271.665550][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.685255][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.723406][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.762098][ T29] audit: type=1326 audit(1723314673.926:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.3.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2fb5779f9 code=0x0 [ 271.817118][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.876404][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.895473][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.913528][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.975469][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.002669][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.021887][ T29] audit: type=1400 audit(1723314674.056:261): avc: denied { name_bind } for pid=6185 comm="syz.3.118" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 272.130523][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.151028][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.173672][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.284475][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.315672][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.442490][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.546421][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.742958][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.755596][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.134680][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.153557][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.168893][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.180051][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.017862][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.062135][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.227871][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.282012][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.523809][ T6228] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.72'. [ 274.869604][ T29] audit: type=1400 audit(1723314677.016:262): avc: denied { create } for pid=6224 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 275.608309][ T29] audit: type=1400 audit(1723314677.026:263): avc: denied { read } for pid=6224 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.269714][ T6249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 276.391567][ T6252] CUSE: DEVNAME unspecified [ 276.414446][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.130'. [ 276.710590][ T29] audit: type=1400 audit(1723314678.866:264): avc: denied { map } for pid=6260 comm="syz.4.132" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 277.133893][ T6264] usb usb8: usbfs: process 6264 (syz.2.131) did not claim interface 0 before use [ 277.756081][ T29] audit: type=1400 audit(1723314679.246:265): avc: denied { write } for pid=6256 comm="syz.2.131" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.917607][ T29] audit: type=1400 audit(1723314679.876:266): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 281.232567][ T6302] netlink: 9 bytes leftover after parsing attributes in process `syz.1.135'. [ 281.242860][ T6302] 0·: renamed from hsr_slave_1 (while UP) [ 281.459567][ T6302] 0·: entered allmulticast mode [ 281.467042][ T6302] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 288.470007][ T6319] CUSE: DEVNAME unspecified [ 288.734966][ T29] audit: type=1400 audit(1723314690.896:267): avc: denied { bind } for pid=6323 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 288.944428][ T29] audit: type=1400 audit(1723314691.106:268): avc: denied { write } for pid=6323 comm="syz.1.141" path="socket:[13163]" dev="sockfs" ino=13163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 289.741108][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 289.751227][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 289.759611][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 289.769426][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 289.780682][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 289.789388][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.100488][ T29] audit: type=1400 audit(1723314692.246:269): avc: denied { bind } for pid=6337 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.732966][ T4612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.764655][ T4612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.779179][ T4612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.788633][ T4612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.796312][ T29] audit: type=1400 audit(1723314692.246:270): avc: denied { setopt } for pid=6337 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.841197][ T4612] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 290.853654][ T4612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.861513][ T4612] Bluetooth: hci4: command tx timeout [ 292.703921][ T29] audit: type=1400 audit(1723314694.856:271): avc: denied { ioctl } for pid=6359 comm="syz.1.146" path="pid:[4026532873]" dev="nsfs" ino=4026532873 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.779624][ T4612] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 292.779731][ T4612] Bluetooth: hci3: link tx timeout [ 292.796821][ T4612] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.027205][ T6366] CUSE: DEVNAME unspecified [ 293.118441][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.149453][ T4612] Bluetooth: hci5: command tx timeout [ 294.011805][ T4612] Bluetooth: hci4: command tx timeout [ 294.141601][ T6371] CUSE: DEVNAME unspecified [ 294.177300][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.451937][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.848004][ T4612] Bluetooth: hci3: command 0x0406 tx timeout [ 294.913461][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.163229][ T29] audit: type=1400 audit(1723314697.256:272): avc: denied { read } for pid=6379 comm="syz.1.151" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 295.186236][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.648583][ T4612] Bluetooth: hci5: command tx timeout [ 295.691244][ T29] audit: type=1400 audit(1723314697.256:273): avc: denied { open } for pid=6379 comm="syz.1.151" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 295.730868][ T29] audit: type=1400 audit(1723314697.256:274): avc: denied { ioctl } for pid=6379 comm="syz.1.151" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 295.978357][ T6342] chnl_net:caif_netlink_parms(): no params data found [ 296.024326][ T4612] Bluetooth: hci4: command tx timeout [ 296.101055][ T5306] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.385311][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.779576][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 297.128173][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.277172][ T5306] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.345040][ T5306] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.402022][ T5306] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.460702][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.468763][ T5306] usb 2-1: SerialNumber: syz [ 297.569577][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.710815][ T4612] Bluetooth: hci5: command tx timeout [ 297.729085][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.766669][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.768775][ T5306] usb 2-1: 0:2 : does not exist [ 297.797564][ T5306] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 297.812073][ T6420] CUSE: DEVNAME unspecified [ 297.830041][ T6342] bridge_slave_0: entered allmulticast mode [ 297.879208][ T6342] bridge_slave_0: entered promiscuous mode [ 297.933936][ T5306] usb 2-1: USB disconnect, device number 6 [ 297.946684][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.998100][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.035962][ T6342] bridge_slave_1: entered allmulticast mode [ 298.059179][ T6342] bridge_slave_1: entered promiscuous mode [ 298.110578][ T4612] Bluetooth: hci4: command tx timeout [ 298.144763][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.321970][ T1168] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 298.331570][ T6314] udevd[6314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.551025][ T1168] usb 1-1: Using ep0 maxpacket: 16 [ 298.564894][ T1168] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 298.574760][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.618280][ T1168] usb 1-1: config 0 descriptor?? [ 298.636698][ T1168] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 298.709542][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.764041][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.791629][ T6345] bridge_slave_0: entered allmulticast mode [ 298.810092][ T6345] bridge_slave_0: entered promiscuous mode [ 298.843837][ T4612] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 298.844058][ T1168] gspca_sonixj: reg_r err -32 [ 298.850408][ T29] audit: type=1400 audit(1723314701.006:275): avc: denied { write } for pid=6424 comm="syz.0.158" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 298.858874][ T1168] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 298.883284][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.950733][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.980450][ T29] audit: type=1400 audit(1723314701.106:276): avc: denied { bind } for pid=6424 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.004315][ T6345] bridge_slave_1: entered allmulticast mode [ 299.020966][ T29] audit: type=1400 audit(1723314701.106:277): avc: denied { name_bind } for pid=6424 comm="syz.0.158" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 299.047430][ T6345] bridge_slave_1: entered promiscuous mode [ 299.053531][ T29] audit: type=1400 audit(1723314701.106:278): avc: denied { node_bind } for pid=6424 comm="syz.0.158" saddr=172.20.20.187 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 299.053600][ T29] audit: type=1400 audit(1723314701.106:279): avc: denied { create } for pid=6424 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 299.118764][ T6342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.129595][ T5279] usb 1-1: USB disconnect, device number 7 [ 299.184531][ T6342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.810583][ T4612] Bluetooth: hci5: command tx timeout [ 300.464169][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.499914][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.537206][ T6342] team0: Port device team_slave_0 added [ 300.812258][ T6342] team0: Port device team_slave_1 added [ 300.882934][ T6444] all: renamed from bridge_slave_0 (while UP) [ 300.990045][ T6345] team0: Port device team_slave_0 added [ 301.061366][ T6345] team0: Port device team_slave_1 added [ 302.090586][ T6449] CUSE: DEVNAME unspecified [ 302.204488][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.254689][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.296440][ T6342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.571664][ T6342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.578658][ T6342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.604703][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.634615][ T6342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.696323][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.769839][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.843430][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.918010][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.950296][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.976586][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.079665][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.124870][ T35] bridge_slave_1: left allmulticast mode [ 303.148687][ T6471] CUSE: DEVNAME unspecified [ 303.160302][ T35] bridge_slave_1: left promiscuous mode [ 303.179127][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.221245][ T35] bridge_slave_0: left allmulticast mode [ 303.260936][ T35] bridge_slave_0: left promiscuous mode [ 303.301573][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.362303][ T35] team0: left allmulticast mode [ 303.373792][ T35] team_slave_0: left allmulticast mode [ 303.393965][ T35] team_slave_1: left allmulticast mode [ 303.405611][ T35] team0: left promiscuous mode [ 303.434221][ T35] team_slave_0: left promiscuous mode [ 303.455274][ T35] team_slave_1: left promiscuous mode [ 303.476046][ T35] bridge0: port 3(team0) entered disabled state [ 303.532524][ T35] bridge_slave_1: left allmulticast mode [ 303.551644][ T35] bridge_slave_1: left promiscuous mode [ 303.567891][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.589789][ T35] bridge_slave_0: left allmulticast mode [ 303.615832][ T35] bridge_slave_0: left promiscuous mode [ 303.638604][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.922390][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.949806][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.969056][ T35] bond0 (unregistering): Released all slaves [ 305.246122][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.266777][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.294013][ T35] bond0 (unregistering): Released all slaves [ 305.461338][ T6465] all: renamed from bridge_slave_0 (while UP) [ 305.473740][ T6476] all: renamed from bridge_slave_0 (while UP) [ 305.675835][ T6484] ebt_among: dst integrity fail: 101 [ 306.656901][ T6342] hsr_slave_0: entered promiscuous mode [ 306.702853][ T6342] hsr_slave_1: entered promiscuous mode [ 306.807716][ T6342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.816702][ T6342] Cannot create hsr debugfs directory [ 306.821419][ T6494] CUSE: DEVNAME unspecified [ 306.834958][ T29] audit: type=1400 audit(1723314708.986:280): avc: denied { write } for pid=6491 comm="syz.1.172" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 307.601265][ T6498] 9pnet_fd: Insufficient options for proto=fd [ 308.972821][ T29] audit: type=1400 audit(1723314711.136:281): avc: denied { setopt } for pid=6507 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 309.004770][ T6345] hsr_slave_0: entered promiscuous mode [ 309.026996][ T6345] hsr_slave_1: entered promiscuous mode [ 309.037837][ T6345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.062184][ T6345] Cannot create hsr debugfs directory [ 310.406386][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 311.045180][ T35] hsr_slave_0: left promiscuous mode [ 311.107858][ T35] hsr_slave_1: left promiscuous mode [ 311.128673][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.134916][ T6524] CUSE: DEVNAME unspecified [ 311.153685][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.211282][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.229395][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.289867][ T35] hsr_slave_0: left promiscuous mode [ 311.343053][ T35] 1·: left promiscuous mode [ 311.354970][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.384390][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.438669][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.465042][ T29] audit: type=1400 audit(1723314713.626:282): avc: denied { write } for pid=6532 comm="syz.1.179" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 311.465864][ T6534] random: crng reseeded on system resumption [ 311.496893][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.590499][ T29] audit: type=1400 audit(1723314713.626:283): avc: denied { open } for pid=6532 comm="syz.1.179" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 311.683802][ T29] audit: type=1400 audit(1723314713.756:284): avc: denied { read write } for pid=6532 comm="syz.1.179" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.723813][ T29] audit: type=1400 audit(1723314713.756:285): avc: denied { open } for pid=6532 comm="syz.1.179" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 311.783998][ T35] veth1_macvtap: left promiscuous mode [ 311.816578][ T35] veth0_macvtap: left promiscuous mode [ 311.842189][ T35] veth1_vlan: left promiscuous mode [ 311.870565][ T35] veth0_vlan: left promiscuous mode [ 311.907783][ T35] veth1_macvtap: left promiscuous mode [ 311.958587][ T35] veth0_macvtap: left promiscuous mode [ 312.001183][ T35] veth1_vlan: left promiscuous mode [ 312.030843][ T35] veth0_vlan: left promiscuous mode [ 313.370366][ T29] audit: type=1400 audit(1723314714.706:286): avc: denied { ioctl } for pid=6532 comm="syz.1.179" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.478028][ T29] audit: type=1400 audit(1723314714.996:287): avc: denied { create } for pid=6532 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.692622][ T29] audit: type=1400 audit(1723314714.996:288): avc: denied { create } for pid=6540 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 315.241270][ T29] audit: type=1400 audit(1723314717.386:289): avc: denied { setopt } for pid=6558 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 315.293587][ T6556] CUSE: DEVNAME unspecified [ 316.402044][ T6567] CUSE: DEVNAME unspecified [ 316.417556][ T6566] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.187'. [ 316.643167][ T6570] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 316.708316][ T29] audit: type=1400 audit(1723314718.856:290): avc: denied { create } for pid=6568 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 316.844266][ T29] audit: type=1400 audit(1723314718.866:291): avc: denied { ioctl } for pid=6568 comm="syz.0.189" path="socket:[14920]" dev="sockfs" ino=14920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 316.994775][ T35] team0 (unregistering): Port device team_slave_1 removed [ 317.167262][ T35] team0 (unregistering): Port device team_slave_0 removed [ 317.370408][ T5276] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 317.570558][ T5276] usb 3-1: device descriptor read/64, error -71 [ 317.790409][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.796768][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.883666][ T5276] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 318.170581][ T5276] usb 3-1: device descriptor read/64, error -71 [ 318.312313][ T5276] usb usb3-port1: attempt power cycle [ 318.722074][ T5332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 318.780897][ T5276] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 318.821400][ T5276] usb 3-1: device descriptor read/8, error -71 [ 318.932798][ T5332] usb 2-1: Using ep0 maxpacket: 32 [ 318.944735][ T5332] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 318.978736][ T5332] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 318.994093][ T5332] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.019779][ T5332] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 319.030188][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 319.048595][ T5332] usb 2-1: Product: syz [ 319.053218][ T5332] usb 2-1: Manufacturer: syz [ 319.058029][ T5332] usb 2-1: SerialNumber: syz [ 319.084440][ T6577] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 319.131594][ T5276] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 319.178729][ T5332] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 319.191342][ T5276] usb 3-1: device descriptor read/8, error -71 [ 319.217290][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 319.294378][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 319.320934][ T5276] usb usb3-port1: unable to enumerate USB device [ 319.342192][ T35] team0 (unregistering): Port device team_slave_1 removed [ 319.584750][ T35] team0 (unregistering): Port device team_slave_0 removed [ 319.609495][ T5276] usb 2-1: USB disconnect, device number 7 [ 319.674702][ T5276] appletouch 2-1:1.0: input: appletouch disconnected [ 320.146523][ T6570] netlink: 'syz.0.189': attribute type 10 has an invalid length. [ 320.169047][ T6570] bridge0: port 3(team0) entered blocking state [ 320.182662][ T6570] bridge0: port 3(team0) entered disabled state [ 320.189231][ T6570] team0: entered allmulticast mode [ 320.195264][ T6570] team_slave_0: entered allmulticast mode [ 320.201484][ T6570] team_slave_1: entered allmulticast mode [ 320.208681][ T6570] team0: entered promiscuous mode [ 320.215004][ T6570] team_slave_0: entered promiscuous mode [ 320.221243][ T6570] team_slave_1: entered promiscuous mode [ 320.227988][ T6570] bridge0: port 3(team0) entered blocking state [ 320.234353][ T6570] bridge0: port 3(team0) entered forwarding state [ 321.741079][ T6593] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 322.125745][ T6593] zonefs (nbd1) ERROR: Not a zoned block device [ 322.652893][ T6342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.909033][ T6342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.029538][ T6342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.247845][ T6342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.381096][ T6613] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.198'. [ 324.732441][ T29] audit: type=1400 audit(1723314726.886:292): avc: denied { unlink } for pid=6615 comm="syz.0.199" name="#1" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 324.823177][ T29] audit: type=1400 audit(1723314726.906:293): avc: denied { mount } for pid=6615 comm="syz.0.199" name="/" dev="overlay" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 324.907043][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.200'. [ 327.060177][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.179818][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.303993][ T6635] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 329.503822][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.321754][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.557009][ T6635] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 330.668157][ T6342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.694320][ T29] audit: type=1400 audit(1723314732.856:294): avc: denied { write } for pid=6644 comm="syz.2.205" name="ip_vs" dev="proc" ino=4026534475 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 330.728464][ T6646] FAULT_INJECTION: forcing a failure. [ 330.728464][ T6646] name failslab, interval 1, probability 0, space 0, times 0 [ 330.771042][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.2.205 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 330.781690][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 330.791773][ T6646] Call Trace: [ 330.794538][ T29] audit: type=1400 audit(1723314732.866:295): avc: denied { lock } for pid=6642 comm="syz.1.204" path="socket:[15137]" dev="sockfs" ino=15137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 330.795052][ T6646] [ 330.822318][ T6646] dump_stack_lvl+0x16c/0x1f0 [ 330.827042][ T6646] should_fail_ex+0x497/0x5b0 [ 330.831795][ T6646] ? fs_reclaim_acquire+0xae/0x160 [ 330.836932][ T6646] should_failslab+0xc2/0x120 [ 330.841727][ T6646] __kmalloc_node_noprof+0xd1/0x430 [ 330.846957][ T6646] ? seq_lseek+0x5c/0x450 [ 330.851316][ T6646] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 330.856808][ T6646] __kvmalloc_node_noprof+0x9d/0x1a0 [ 330.862129][ T6646] traverse.part.0.constprop.0+0x392/0x640 [ 330.867975][ T6646] ? __pfx___mutex_lock+0x10/0x10 [ 330.873035][ T6646] seq_lseek+0x2ba/0x450 [ 330.877315][ T6646] proc_reg_llseek+0x20b/0x2f0 [ 330.882109][ T6646] ksys_lseek+0x13e/0x1a0 [ 330.886478][ T6646] do_syscall_64+0xcd/0x250 [ 330.891022][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.896952][ T6646] RIP: 0033:0x7f4a1a5779f9 [ 330.901382][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.920993][ T6646] RSP: 002b:00007f4a1b3d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 330.929416][ T6646] RAX: ffffffffffffffda RBX: 00007f4a1a705f80 RCX: 00007f4a1a5779f9 [ 330.937392][ T6646] RDX: 0000000000000000 RSI: 00000000000000d7 RDI: 0000000000000003 [ 330.945364][ T6646] RBP: 00007f4a1b3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 330.953333][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.961301][ T6646] R13: 0000000000000000 R14: 00007f4a1a705f80 R15: 00007ffebbb05298 [ 330.969272][ T6646] [ 331.137070][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.185996][ T6342] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.292848][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.300133][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.400583][ T6648] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 331.513457][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.609002][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.616308][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.711000][ T6648] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 331.891923][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.899076][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.972803][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.980123][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.169210][ T6342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.203909][ T6342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.317365][ T6655] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.984307][ T29] audit: type=1400 audit(1723314734.436:296): avc: denied { create } for pid=6652 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.071068][ T29] audit: type=1400 audit(1723314734.476:297): avc: denied { write } for pid=6652 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.172890][ T29] audit: type=1400 audit(1723314734.706:298): avc: denied { block_suspend } for pid=6652 comm="syz.1.207" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 333.201000][ T29] audit: type=1400 audit(1723314734.896:299): avc: denied { write } for pid=6652 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 335.072221][ T6342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.220566][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 335.221188][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 335.387639][ T6692] CUSE: DEVNAME unspecified [ 335.524594][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.541554][ T6342] veth0_vlan: entered promiscuous mode [ 335.557913][ T6342] veth1_vlan: entered promiscuous mode [ 335.798047][ T6342] veth0_macvtap: entered promiscuous mode [ 335.868495][ T6342] veth1_macvtap: entered promiscuous mode [ 335.953710][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.981367][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.999203][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.014972][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.047903][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.065848][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.095099][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.126449][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.164573][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.193749][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.226338][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.247488][ T6342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.263587][ T6342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.277185][ T6342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.335022][ T6342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.369782][ T6342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.394993][ T6342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.421861][ T6342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.672119][ T6345] veth0_vlan: entered promiscuous mode [ 336.814825][ T6345] veth1_vlan: entered promiscuous mode [ 337.019680][ T6345] veth0_macvtap: entered promiscuous mode [ 337.172783][ T6345] veth1_macvtap: entered promiscuous mode [ 337.186610][ T6718] syz.2.213: attempt to access beyond end of device [ 337.186610][ T6718] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 337.206233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.272103][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.455133][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.490383][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.512300][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.524476][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.543175][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.558775][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.570016][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.597949][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.619457][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.652055][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.679197][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.691670][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.711036][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.750893][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.777861][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.807862][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.842013][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.866013][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.879665][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.939874][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.064603][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.098775][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.144445][ T6345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.188593][ T29] audit: type=1326 audit(1723314740.346:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.2.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a5779f9 code=0x0 [ 338.219363][ T6345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.623466][ T29] audit: type=1400 audit(1723314741.776:301): avc: denied { create } for pid=6751 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 339.664491][ T6748] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 340.198622][ T6758] capability: warning: `syz.0.219' uses deprecated v2 capabilities in a way that may be insecure [ 340.200678][ T29] audit: type=1400 audit(1723314742.356:302): avc: denied { bind } for pid=6751 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 340.882178][ T6748] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 340.899873][ T6748] bridge0: port 3(team0) entered blocking state [ 340.909357][ T6748] bridge0: port 3(team0) entered disabled state [ 341.095890][ T6748] team0: entered allmulticast mode [ 341.101202][ T6748] team_slave_0: entered allmulticast mode [ 341.130507][ T6748] team_slave_1: entered allmulticast mode [ 341.651260][ T6748] team0: entered promiscuous mode [ 341.656470][ T6748] team_slave_0: entered promiscuous mode [ 341.665417][ T6748] team_slave_1: entered promiscuous mode [ 341.675244][ T6748] bridge0: port 3(team0) entered blocking state [ 341.681822][ T6748] bridge0: port 3(team0) entered forwarding state [ 341.886686][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.912173][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.395892][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.157646][ T6783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.606237][ T6786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.333737][ T29] audit: type=1400 audit(1723314750.476:303): avc: denied { create } for pid=6777 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.444033][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.531200][ T29] audit: type=1400 audit(1723314750.486:304): avc: denied { search } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.760379][ T29] audit: type=1400 audit(1723314751.906:305): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 349.973416][ T4612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.990498][ T4612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.999936][ T4612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.009627][ T4612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.017846][ T4612] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.025756][ T4612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.249594][ T6813] CUSE: DEVNAME unspecified [ 350.524183][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.666259][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.687406][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.711170][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.719368][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.731441][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.740072][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.115438][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.235019][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.419438][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.799582][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 352.103610][ T5227] Bluetooth: hci0: command tx timeout [ 352.409542][ T6843] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 352.546029][ T6843] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 352.822225][ T5227] Bluetooth: hci5: command tx timeout [ 352.982117][ T6807] chnl_net:caif_netlink_parms(): no params data found [ 353.017671][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.063224][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.098897][ T6817] bridge_slave_0: entered allmulticast mode [ 353.134434][ T6817] bridge_slave_0: entered promiscuous mode [ 353.170042][ T35] bridge_slave_1: left allmulticast mode [ 353.186463][ T35] bridge_slave_1: left promiscuous mode [ 353.213230][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.258111][ T35] bridge_slave_0: left allmulticast mode [ 353.270999][ T35] bridge_slave_0: left promiscuous mode [ 353.290698][ T6867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 353.307839][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.978557][ T6865] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 354.282571][ T5227] Bluetooth: hci0: command tx timeout [ 354.910717][ T5227] Bluetooth: hci5: command tx timeout [ 355.913498][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.999909][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.067926][ T35] bond0 (unregistering): Released all slaves [ 356.358046][ T5227] Bluetooth: hci0: command tx timeout [ 356.370991][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.399428][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.438327][ T6817] bridge_slave_1: entered allmulticast mode [ 356.500856][ T6817] bridge_slave_1: entered promiscuous mode [ 356.553350][ T6865] netlink: 'syz.2.233': attribute type 10 has an invalid length. [ 356.980357][ T5227] Bluetooth: hci5: command tx timeout [ 357.016045][ T29] audit: type=1400 audit(1723314759.166:306): avc: denied { create } for pid=6909 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 357.355368][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.481200][ T5227] Bluetooth: hci0: command tx timeout [ 359.284387][ T5227] Bluetooth: hci5: command tx timeout [ 360.106497][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.850001][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.447147][ T6932] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 364.472999][ T35] hsr_slave_0: left promiscuous mode [ 364.527684][ T35] hsr_slave_1: left promiscuous mode [ 364.567151][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.714595][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.802813][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.813535][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.864130][ T35] veth1_macvtap: left promiscuous mode [ 364.869711][ T35] veth0_macvtap: left promiscuous mode [ 364.882617][ T35] veth1_vlan: left promiscuous mode [ 364.889989][ T35] veth0_vlan: left promiscuous mode [ 372.457149][ T5227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.476493][ T5227] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.485798][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.506257][ T5227] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.517248][ T5227] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 372.525647][ T5227] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.308175][ T35] team0 (unregistering): Port device team_slave_1 removed [ 373.346625][ T35] team0 (unregistering): Port device team_slave_0 removed [ 373.757121][ T6807] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.770127][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.777440][ T6807] bridge_slave_0: entered allmulticast mode [ 373.785908][ T6807] bridge_slave_0: entered promiscuous mode [ 373.797445][ T6807] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.804791][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.815764][ T6807] bridge_slave_1: entered allmulticast mode [ 373.832670][ T6807] bridge_slave_1: entered promiscuous mode [ 373.858686][ T6817] team0: Port device team_slave_0 added [ 373.875918][ T6817] team0: Port device team_slave_1 added [ 373.886967][ T6932] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 373.972535][ T6940] netlink: 9 bytes leftover after parsing attributes in process `syz.2.242'. [ 374.012705][ T6940] 0·: renamed from hsr_slave_1 (while UP) [ 374.067503][ T6940] 0·: entered allmulticast mode [ 374.095218][ T6940] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 374.665192][ T5227] Bluetooth: hci4: command tx timeout [ 374.682386][ T6807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.695696][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.703668][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.732949][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.748806][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.756029][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.784964][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.892454][ T4612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.903808][ T4612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.912850][ T4612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.927679][ T4612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.940179][ T4612] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.948107][ T4612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.994714][ T6807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.164281][ T6807] team0: Port device team_slave_0 added [ 375.273201][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.283897][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.294864][ T6807] team0: Port device team_slave_1 added [ 375.305292][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.327589][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.338161][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 375.348710][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.351442][ T6817] hsr_slave_0: entered promiscuous mode [ 375.364050][ T6817] hsr_slave_1: entered promiscuous mode [ 375.573629][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.581061][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.608303][ T6807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.675885][ T6807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.683022][ T6807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.710048][ T6807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.084098][ T6807] hsr_slave_0: entered promiscuous mode [ 376.098845][ T6807] hsr_slave_1: entered promiscuous mode [ 376.105713][ T6807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.117523][ T6807] Cannot create hsr debugfs directory [ 376.223205][ T2898] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.587839][ T2898] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.740968][ T4612] Bluetooth: hci4: command tx timeout [ 376.788204][ T2898] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.922432][ T2898] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.033373][ T6944] chnl_net:caif_netlink_parms(): no params data found [ 377.060605][ T5227] Bluetooth: hci1: command tx timeout [ 377.245485][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 377.381166][ T5227] Bluetooth: hci3: command tx timeout [ 377.687357][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.695061][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.703166][ T6944] bridge_slave_0: entered allmulticast mode [ 377.710815][ T6944] bridge_slave_0: entered promiscuous mode [ 377.719342][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.727191][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.736079][ T6944] bridge_slave_1: entered allmulticast mode [ 377.745033][ T6944] bridge_slave_1: entered promiscuous mode [ 377.774090][ T2898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.797230][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 378.034991][ T2898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.157767][ T2898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.203024][ T6944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.317094][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.328294][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.336971][ T6962] bridge_slave_0: entered allmulticast mode [ 378.345744][ T6962] bridge_slave_0: entered promiscuous mode [ 378.375477][ T2898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.396365][ T6944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.516993][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.524455][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.532477][ T6962] bridge_slave_1: entered allmulticast mode [ 378.540513][ T6962] bridge_slave_1: entered promiscuous mode [ 378.579569][ T6817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 378.592498][ T6817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 378.637938][ T6807] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.713424][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.729780][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.741453][ T6817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 378.757355][ T6944] team0: Port device team_slave_0 added [ 378.767658][ T6817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 378.811498][ T6807] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.823307][ T5227] Bluetooth: hci4: command tx timeout [ 378.857883][ T6944] team0: Port device team_slave_1 added [ 378.880909][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.888116][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.896765][ T6967] bridge_slave_0: entered allmulticast mode [ 378.905730][ T6967] bridge_slave_0: entered promiscuous mode [ 378.921920][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.929098][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.939979][ T6967] bridge_slave_1: entered allmulticast mode [ 378.947443][ T6967] bridge_slave_1: entered promiscuous mode [ 378.991133][ T6807] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.117448][ T6962] team0: Port device team_slave_0 added [ 379.128695][ T6962] team0: Port device team_slave_1 added [ 379.142866][ T5227] Bluetooth: hci1: command tx timeout [ 379.153380][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.164770][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.193235][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.224158][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.235157][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.235790][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.244533][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.279745][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.354756][ T6807] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.403902][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.427148][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.460859][ T5227] Bluetooth: hci3: command tx timeout [ 379.517354][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.532693][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.566736][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.685954][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.700688][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.729820][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.849290][ T6967] team0: Port device team_slave_0 added [ 379.859607][ T6967] team0: Port device team_slave_1 added [ 379.925444][ T2898] team0: left allmulticast mode [ 379.931928][ T2898] team_slave_0: left allmulticast mode [ 379.937420][ T2898] team_slave_1: left allmulticast mode [ 379.944794][ T2898] team0: left promiscuous mode [ 379.949575][ T2898] team_slave_0: left promiscuous mode [ 379.955648][ T2898] team_slave_1: left promiscuous mode [ 379.962304][ T2898] bridge0: port 3(team0) entered disabled state [ 379.971118][ T2898] bridge_slave_1: left allmulticast mode [ 379.976798][ T2898] bridge_slave_1: left promiscuous mode [ 379.983270][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.993854][ T2898] bridge_slave_0: left allmulticast mode [ 379.999518][ T2898] bridge_slave_0: left promiscuous mode [ 380.006202][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.020111][ T2898] team0: left allmulticast mode [ 380.025640][ T2898] team_slave_0: left allmulticast mode [ 380.031499][ T2898] team_slave_1: left allmulticast mode [ 380.040631][ T2898] team0: left promiscuous mode [ 380.045424][ T2898] team_slave_0: left promiscuous mode [ 380.053273][ T2898] team_slave_1: left promiscuous mode [ 380.058904][ T2898] bridge0: port 3(team0) entered disabled state [ 380.067849][ T2898] bridge_slave_1: left allmulticast mode [ 380.074173][ T2898] bridge_slave_1: left promiscuous mode [ 380.080016][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.089480][ T2898] bridge_slave_0: left allmulticast mode [ 380.095870][ T2898] bridge_slave_0: left promiscuous mode [ 380.101835][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.116456][ T2898] bridge_slave_1: left allmulticast mode [ 380.124765][ T2898] bridge_slave_1: left promiscuous mode [ 380.131391][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.145713][ T2898] bridge_slave_0: left allmulticast mode [ 380.152040][ T2898] bridge_slave_0: left promiscuous mode [ 380.157723][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.904076][ T5227] Bluetooth: hci4: command tx timeout [ 381.191688][ T2898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.203146][ T2898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.220537][ T5227] Bluetooth: hci1: command tx timeout [ 381.222053][ T2898] bond0 (unregistering): Released all slaves [ 381.339759][ T2898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.351764][ T2898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.362404][ T2898] bond0 (unregistering): Released all slaves [ 381.474025][ T2898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.486294][ T2898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.499479][ T2898] bond0 (unregistering): Released all slaves [ 381.541066][ T5227] Bluetooth: hci3: command tx timeout [ 381.644709][ T6962] hsr_slave_0: entered promiscuous mode [ 381.658404][ T6962] hsr_slave_1: entered promiscuous mode [ 381.667560][ T6962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.677187][ T6962] Cannot create hsr debugfs directory [ 381.691839][ T6944] hsr_slave_0: entered promiscuous mode [ 381.699496][ T6944] hsr_slave_1: entered promiscuous mode [ 381.714073][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.721834][ T6944] Cannot create hsr debugfs directory [ 381.799988][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.814621][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.841659][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.856023][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.863844][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.894895][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.094981][ T6967] hsr_slave_0: entered promiscuous mode [ 382.102226][ T6967] hsr_slave_1: entered promiscuous mode [ 382.108529][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.119614][ T6967] Cannot create hsr debugfs directory [ 382.565644][ T6807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.706107][ T6807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.875042][ T6807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.899675][ T6807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.162508][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.264009][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.301000][ T5227] Bluetooth: hci1: command tx timeout [ 383.401009][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.408255][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.420573][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.427802][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.478865][ T2898] hsr_slave_0: left promiscuous mode [ 383.485101][ T2898] 0·: left promiscuous mode [ 383.495495][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.503643][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.512368][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.519831][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.533934][ T2898] hsr_slave_0: left promiscuous mode [ 383.540019][ T2898] hsr_slave_1: left promiscuous mode [ 383.548488][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.557169][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.565723][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.573339][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.587594][ T2898] hsr_slave_0: left promiscuous mode [ 383.594550][ T2898] hsr_slave_1: left promiscuous mode [ 383.603521][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.611089][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.619878][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.629517][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.630722][ T5227] Bluetooth: hci3: command tx timeout [ 383.695224][ T2898] veth1_macvtap: left promiscuous mode [ 383.701216][ T2898] veth0_macvtap: left promiscuous mode [ 383.706841][ T2898] veth1_vlan: left promiscuous mode [ 383.713999][ T2898] veth0_vlan: left promiscuous mode [ 383.721995][ T2898] veth1_macvtap: left promiscuous mode [ 383.727557][ T2898] veth0_macvtap: left promiscuous mode [ 383.733711][ T2898] veth1_vlan: left promiscuous mode [ 383.739096][ T2898] veth0_vlan: left promiscuous mode [ 383.746474][ T2898] veth1_macvtap: left promiscuous mode [ 383.752804][ T2898] veth0_macvtap: left promiscuous mode [ 383.758527][ T2898] veth1_vlan: left promiscuous mode [ 383.764784][ T2898] veth0_vlan: left promiscuous mode [ 384.529622][ T2898] team0 (unregistering): Port device team_slave_1 removed [ 384.568905][ T2898] team0 (unregistering): Port device team_slave_0 removed [ 385.325084][ T2898] team0 (unregistering): Port device team_slave_1 removed [ 385.371081][ T2898] team0 (unregistering): Port device team_slave_0 removed [ 386.158143][ T2898] team0 (unregistering): Port device team_slave_1 removed [ 386.201366][ T2898] team0 (unregistering): Port device team_slave_0 removed [ 387.085565][ T6944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.256294][ T6944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.286542][ T6807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.312804][ T6944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.338361][ T6944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.569292][ T6807] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.606234][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.613479][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.706029][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.773261][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.780522][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.459628][ T6962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.485488][ T6962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.569451][ T6967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.601885][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.631676][ T6962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.674040][ T6962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.817203][ T6967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.886287][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.976229][ T6967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.004555][ T3025] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.011822][ T3025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.060023][ T3025] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.067287][ T3025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.136788][ T6967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.166939][ T6817] veth0_vlan: entered promiscuous mode [ 389.218800][ T6817] veth1_vlan: entered promiscuous mode [ 389.285280][ T6807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.418712][ T2898] team0: left allmulticast mode [ 389.428331][ T2898] team_slave_0: left allmulticast mode [ 389.437584][ T2898] team_slave_1: left allmulticast mode [ 389.443833][ T2898] team0: left promiscuous mode [ 389.448637][ T2898] team_slave_0: left promiscuous mode [ 389.468727][ T2898] team_slave_1: left promiscuous mode [ 389.475054][ T2898] bridge0: port 3(team0) entered disabled state [ 389.487542][ T2898] bridge_slave_1: left allmulticast mode [ 389.495803][ T2898] bridge_slave_1: left promiscuous mode [ 389.502093][ T2898] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.517410][ T2898] bridge_slave_0: left allmulticast mode [ 389.533098][ T2898] bridge_slave_0: left promiscuous mode [ 389.538973][ T2898] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.432080][ T2898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.464512][ T2898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.476904][ T2898] bond0 (unregistering): Released all slaves [ 390.984563][ T6817] veth0_macvtap: entered promiscuous mode [ 391.037115][ T6807] veth0_vlan: entered promiscuous mode [ 391.044911][ T6967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.068721][ T6967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.123958][ T2898] hsr_slave_0: left promiscuous mode [ 391.152131][ T2898] 0·: left promiscuous mode [ 391.167489][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.184102][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.199944][ T2898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.207983][ T2898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.255092][ T2898] veth1_macvtap: left promiscuous mode [ 391.261199][ T2898] veth0_macvtap: left promiscuous mode [ 391.266937][ T2898] veth1_vlan: left promiscuous mode [ 391.273042][ T2898] veth0_vlan: left promiscuous mode [ 392.106870][ T2898] team0 (unregistering): Port device team_slave_1 removed [ 392.156083][ T2898] team0 (unregistering): Port device team_slave_0 removed [ 392.566776][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.583460][ T6967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.595963][ T6967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.646522][ T6817] veth1_macvtap: entered promiscuous mode [ 392.682037][ T6807] veth1_vlan: entered promiscuous mode [ 392.738761][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.808992][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.848022][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.855177][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.896444][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.916114][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.923355][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.938687][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.968047][ T6817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.977153][ T6817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.987742][ T6817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.996913][ T6817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.047197][ T6807] veth0_macvtap: entered promiscuous mode [ 393.133336][ T6807] veth1_macvtap: entered promiscuous mode [ 393.205363][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.216224][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.225030][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.235132][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.247545][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.291991][ T6807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.308208][ T6807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.320038][ T6807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.369110][ T6807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.378099][ T6807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.387472][ T6807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.397311][ T6807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.434048][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.453162][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.496301][ T6944] veth0_vlan: entered promiscuous mode [ 393.599439][ T6944] veth1_vlan: entered promiscuous mode [ 393.615358][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'. [ 393.702350][ T7158] wg2: entered promiscuous mode [ 393.759200][ T6944] veth0_macvtap: entered promiscuous mode [ 393.789783][ T6944] veth1_macvtap: entered promiscuous mode [ 393.827031][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.939979][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.958750][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.971982][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.989735][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.015304][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.051006][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.105598][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.112743][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.140168][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.153615][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.165986][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.177225][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.196633][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.227936][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.235197][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.255451][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.269021][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.278669][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.327336][ T6944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.337558][ T6944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.361972][ T6944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.377163][ T6944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.626381][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.635073][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.707489][ T29] audit: type=1400 audit(1723314796.866:307): avc: denied { getopt } for pid=7166 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.836742][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.860817][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.966250][ T6962] veth0_vlan: entered promiscuous mode [ 395.004766][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.028698][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.038827][ T6962] veth1_vlan: entered promiscuous mode [ 395.210059][ T6962] veth0_macvtap: entered promiscuous mode [ 395.232001][ T29] audit: type=1400 audit(1723314797.396:308): avc: denied { ioctl } for pid=7171 comm="syz.3.225" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 395.329794][ T6962] veth1_macvtap: entered promiscuous mode [ 395.439492][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.459947][ T29] audit: type=1400 audit(1723314797.616:309): avc: denied { create } for pid=7171 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 395.511174][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.537697][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.573090][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.608830][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.641004][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.667910][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.715380][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.826268][ T7175] Zero length message leads to an empty skb [ 395.898483][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.954670][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.959935][ T7175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.966665][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.988553][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.004695][ T6962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.021586][ T6962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.060051][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.091117][ T7187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.326174][ T6967] veth0_vlan: entered promiscuous mode [ 396.565293][ T29] audit: type=1400 audit(1723314798.696:310): avc: denied { bind } for pid=7183 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 396.607934][ T29] audit: type=1400 audit(1723314798.696:311): avc: denied { name_bind } for pid=7183 comm="syz.0.249" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 401.446066][ T6962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.525470][ T29] audit: type=1400 audit(1723314798.696:312): avc: denied { node_bind } for pid=7183 comm="syz.0.249" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 401.540303][ T6962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.568526][ T29] audit: type=1400 audit(1723314798.696:313): avc: denied { write } for pid=7183 comm="syz.0.249" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.618847][ T6962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.656755][ T6962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.661490][ T29] audit: type=1400 audit(1723314798.706:314): avc: denied { connect } for pid=7183 comm="syz.0.249" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.718669][ T7192] netlink: 9 bytes leftover after parsing attributes in process `syz.4.250'. [ 401.739372][ T7192] 0·: renamed from hsr_slave_1 (while UP) [ 401.769285][ T7192] 0·: entered allmulticast mode [ 401.772745][ T29] audit: type=1400 audit(1723314798.706:315): avc: denied { name_connect } for pid=7183 comm="syz.0.249" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 401.807795][ T7192] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 401.874070][ T6967] veth1_vlan: entered promiscuous mode [ 402.269045][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.280273][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.320262][ T6967] veth0_macvtap: entered promiscuous mode [ 402.418007][ T6967] veth1_macvtap: entered promiscuous mode [ 402.543474][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.582524][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.600037][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.618224][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.618369][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.636929][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.671187][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.703910][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.718749][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.744197][ T29] audit: type=1400 audit(1723314804.906:316): avc: denied { nlmsg_write } for pid=7205 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 402.772548][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.805954][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.977299][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.191277][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.213184][ T7211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.252173][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.426645][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.507232][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.543926][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.604208][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.658968][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.812010][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.965755][ T6967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.024508][ T6967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.061620][ T6967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.084158][ T6967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.277967][ T29] audit: type=1400 audit(1723314806.436:317): avc: denied { read } for pid=7220 comm="syz.0.257" name="btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 404.301629][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.433905][ T29] audit: type=1400 audit(1723314806.476:318): avc: denied { open } for pid=7220 comm="syz.0.257" path="/dev/btrfs-control" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 405.246545][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.500450][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.696702][ T7246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.669222][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.692769][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.737491][ T29] audit: type=1400 audit(1723314809.896:319): avc: denied { shutdown } for pid=7247 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 407.845373][ T29] audit: type=1400 audit(1723314809.926:320): avc: denied { name_connect } for pid=7247 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 408.263213][ T7260] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 408.360707][ T7203] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 408.695936][ T7203] usb 3-1: device descriptor read/64, error -71 [ 408.926426][ T7266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.720343][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 409.732174][ T7203] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 409.788037][ T7262] zonefs (nbd1) ERROR: Not a zoned block device [ 410.032803][ T7271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.050723][ T7203] usb 3-1: device descriptor read/64, error -71 [ 410.070323][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 410.100773][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.264069][ T7203] usb usb3-port1: attempt power cycle [ 410.270870][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.285846][ T29] audit: type=1400 audit(1723314812.446:321): avc: denied { write } for pid=4656 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.310401][ T8] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 410.367462][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.370306][ T29] audit: type=1400 audit(1723314812.446:322): avc: denied { remove_name } for pid=4656 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.445199][ T8] usb 4-1: config 0 descriptor?? [ 410.462319][ T29] audit: type=1400 audit(1723314812.446:323): avc: denied { add_name } for pid=4656 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.731081][ T7203] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 410.786058][ T7203] usb 3-1: device descriptor read/8, error -71 [ 411.019136][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.027070][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x6 [ 411.051950][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x5 [ 411.066124][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x4 [ 411.088645][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.173989][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.181241][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.188197][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.195745][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.204587][ T8] cherry 0003:046A:0027.0002: unknown main item tag 0x0 [ 411.223873][ T8] cherry 0003:046A:0027.0002: unknown global tag 0xd [ 411.240418][ T5277] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 411.248260][ T8] cherry 0003:046A:0027.0002: item 0 4 1 13 parsing failed [ 411.336770][ T8] cherry 0003:046A:0027.0002: probe with driver cherry failed with error -22 [ 411.393365][ T7276] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 411.396011][ T7279] CUSE: DEVNAME unspecified [ 411.419621][ T8] usb 4-1: USB disconnect, device number 7 [ 411.507960][ T5277] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 411.575531][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.621602][ T5277] usb 1-1: Product: syz [ 411.627731][ T5277] usb 1-1: Manufacturer: syz [ 411.635298][ T5277] usb 1-1: SerialNumber: syz [ 411.648677][ T5277] usb 1-1: config 0 descriptor?? [ 411.663497][ T5277] ch341 1-1:0.0: ch341-uart converter detected [ 412.978953][ T7289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.089913][ T7273] overlayfs: conflicting lowerdir path [ 413.220592][ T5277] usb 1-1: failed to send control message: -110 [ 413.233269][ T5277] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 413.500995][ T7286] ax25_connect(): syz.0.267 uses autobind, please contact jreuter@yaina.de [ 413.531704][ T29] audit: type=1400 audit(1723314815.656:324): avc: denied { setopt } for pid=7272 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 413.672386][ T29] audit: type=1400 audit(1723314815.666:325): avc: denied { connect } for pid=7272 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 413.954803][ T7297] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 414.086721][ T7299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.569531][ T5276] usb 1-1: USB disconnect, device number 8 [ 415.641311][ T7307] usb usb8: usbfs: process 7307 (syz.3.274) did not claim interface 0 before use [ 416.376662][ T5276] ch341 1-1:0.0: device disconnected [ 416.532278][ T7297] zonefs (nbd4) ERROR: Not a zoned block device [ 417.244753][ T5276] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 417.297414][ T7321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.380443][ T5227] Bluetooth: hci1: command 0x0406 tx timeout [ 417.440333][ T5276] usb 2-1: device descriptor read/64, error -71 [ 417.731438][ T7318] CUSE: DEVNAME unspecified [ 417.790342][ T5276] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 418.034333][ T5276] usb 2-1: device descriptor read/64, error -71 [ 418.191153][ T5276] usb usb2-port1: attempt power cycle [ 418.446028][ T7331] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 418.692075][ T7335] tmpfs: Unknown parameter 'usrquotap' [ 418.849120][ T7331] zonefs (nbd3) ERROR: Not a zoned block device [ 418.870495][ T5305] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 419.180350][ T5305] usb 3-1: device descriptor read/64, error -71 [ 419.300352][ T7342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.780273][ T5305] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 419.990405][ T5305] usb 3-1: device descriptor read/64, error -71 [ 420.143635][ T5305] usb usb3-port1: attempt power cycle [ 420.351283][ T4612] Bluetooth: hci3: command 0x0406 tx timeout [ 420.569274][ T7347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.770354][ T5305] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 421.466989][ T5305] usb 3-1: device descriptor read/8, error -71 [ 421.572684][ T29] audit: type=1400 audit(1723314823.736:326): avc: denied { execute } for pid=7349 comm="syz.1.286" path="/9/cpu.stat" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 422.005124][ T7355] usb usb8: usbfs: process 7355 (syz.2.287) did not claim interface 0 before use [ 422.692677][ T7351] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 423.234810][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 423.319222][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 424.240874][ T7367] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 424.249508][ T7367] bridge0: port 3(team0) entered blocking state [ 424.257149][ T7367] bridge0: port 3(team0) entered disabled state [ 424.272866][ T7367] team0: entered allmulticast mode [ 424.278497][ T7367] team_slave_0: entered allmulticast mode [ 424.294497][ T7367] team_slave_1: entered allmulticast mode [ 424.330331][ T7367] team0: entered promiscuous mode [ 424.348507][ T7367] team_slave_0: entered promiscuous mode [ 424.436261][ T7367] team_slave_1: entered promiscuous mode [ 424.472893][ T7367] bridge0: port 3(team0) entered blocking state [ 424.479340][ T7367] bridge0: port 3(team0) entered forwarding state [ 424.487249][ T7375] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 424.561891][ T7375] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 424.593550][ T7375] bridge0: port 3(team0) entered blocking state [ 424.665703][ T29] audit: type=1400 audit(1723314826.826:327): avc: denied { ioctl } for pid=7376 comm="syz.4.293" path="socket:[22162]" dev="sockfs" ino=22162 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.696259][ T7375] bridge0: port 3(team0) entered disabled state [ 424.710590][ T7375] team0: entered allmulticast mode [ 424.721696][ T7375] team_slave_0: entered allmulticast mode [ 424.767962][ T7375] team_slave_1: entered allmulticast mode [ 424.777788][ T29] audit: type=1326 audit(1723314826.876:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95a71779f9 code=0x0 [ 424.859775][ T7375] team0: entered promiscuous mode [ 424.866030][ T29] audit: type=1326 audit(1723314827.026:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7376 comm="syz.4.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95a71779f9 code=0x0 [ 424.891414][ T7375] team_slave_0: entered promiscuous mode [ 424.910050][ T7375] team_slave_1: entered promiscuous mode [ 424.950738][ T7375] bridge0: port 3(team0) entered blocking state [ 424.957116][ T7375] bridge0: port 3(team0) entered forwarding state [ 425.700566][ T7385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.294'. [ 427.067031][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.938377][ T7403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.718338][ T7415] usb usb8: usbfs: process 7415 (syz.1.301) did not claim interface 0 before use [ 429.737709][ T7416] process 'syz.4.302' launched './file0' with NULL argv: empty string added [ 429.787752][ T29] audit: type=1400 audit(1723314831.946:330): avc: denied { execute_no_trans } for pid=7414 comm="syz.4.302" path="/16/file0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 430.618108][ T7424] syz.0.304: attempt to access beyond end of device [ 430.618108][ T7424] nbd0: rw=0, sector=16, nr_sectors = 8 limit=0 [ 430.620219][ T29] audit: type=1400 audit(1723314832.756:331): avc: denied { write } for pid=7423 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 430.773560][ T7424] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 2, size 4096) [ 430.807626][ T7424] syz.0.304: attempt to access beyond end of device [ 430.807626][ T7424] nbd0: rw=0, sector=128, nr_sectors = 8 limit=0 [ 430.857741][ T7424] REISERFS warning (device nbd0): sh-2006 read_super_block: bread failed (dev nbd0, block 16, size 4096) [ 430.890348][ T7424] REISERFS warning (device nbd0): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd0 [ 430.921481][ T7431] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 431.007114][ T7431] zonefs (nbd4) ERROR: Not a zoned block device [ 431.732786][ T7446] all: renamed from bridge_slave_0 (while UP) [ 431.987906][ T7445] netlink: 56 bytes leftover after parsing attributes in process `syz.0.308'. [ 432.765544][ T7456] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 432.831748][ T7458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.208935][ T7459] CUSE: DEVNAME unspecified [ 433.701110][ T29] audit: type=1400 audit(1723314835.836:332): avc: denied { create } for pid=7462 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 433.718783][ T7456] zonefs (nbd1) ERROR: Not a zoned block device [ 433.795948][ T7468] FAULT_INJECTION: forcing a failure. [ 433.795948][ T7468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.854435][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.3.313 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 433.865074][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 433.875164][ T7468] Call Trace: [ 433.878428][ T7468] [ 433.881344][ T7468] dump_stack_lvl+0x16c/0x1f0 [ 433.886020][ T7468] should_fail_ex+0x497/0x5b0 [ 433.890690][ T7468] _copy_from_user+0x30/0xf0 [ 433.895277][ T7468] get_user_ifreq+0xf1/0x250 [ 433.900235][ T7468] sock_do_ioctl+0x16c/0x280 [ 433.904857][ T7468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 433.910000][ T7468] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 433.916521][ T7468] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 433.923363][ T7468] sock_ioctl+0x22e/0x6c0 [ 433.927684][ T7468] ? __pfx_sock_ioctl+0x10/0x10 [ 433.932522][ T7468] ? selinux_file_ioctl+0x180/0x270 [ 433.937702][ T7468] ? selinux_file_ioctl+0xb4/0x270 [ 433.942847][ T7468] ? __pfx_sock_ioctl+0x10/0x10 [ 433.947684][ T7468] __x64_sys_ioctl+0x193/0x220 [ 433.952440][ T7468] do_syscall_64+0xcd/0x250 [ 433.956936][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.962846][ T7468] RIP: 0033:0x7f51c15779f9 [ 433.967249][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.986841][ T7468] RSP: 002b:00007f51c234d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.995238][ T7468] RAX: ffffffffffffffda RBX: 00007f51c1706058 RCX: 00007f51c15779f9 [ 434.003206][ T7468] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000003 [ 434.011164][ T7468] RBP: 00007f51c234d090 R08: 0000000000000000 R09: 0000000000000000 [ 434.019118][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.027076][ T7468] R13: 0000000000000001 R14: 00007f51c1706058 R15: 00007fff7ac480c8 [ 434.035035][ T7468] [ 434.068430][ T29] audit: type=1400 audit(1723314835.856:333): avc: denied { listen } for pid=7462 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 434.125602][ T29] audit: type=1400 audit(1723314835.906:334): avc: denied { ioctl } for pid=7462 comm="syz.2.314" path="socket:[22297]" dev="sockfs" ino=22297 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 434.664619][ T29] audit: type=1400 audit(1723314836.816:335): avc: denied { read } for pid=7475 comm="syz.4.316" name="sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 434.710960][ T29] audit: type=1400 audit(1723314836.816:336): avc: denied { open } for pid=7475 comm="syz.4.316" path="/dev/sg0" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 434.962625][ T29] audit: type=1400 audit(1723314836.816:337): avc: denied { ioctl } for pid=7475 comm="syz.4.316" path="/dev/sg0" dev="devtmpfs" ino=703 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 435.758112][ T7492] usb usb8: usbfs: process 7492 (syz.2.320) did not claim interface 0 before use [ 437.626773][ T7504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.853456][ T7503] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 437.917529][ T7497] netlink: 56 bytes leftover after parsing attributes in process `syz.4.321'. [ 438.421513][ T7516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.608439][ T7503] zonefs (nbd1) ERROR: Not a zoned block device [ 438.860760][ T7517] all: renamed from bridge_slave_0 (while UP) [ 439.210819][ T7521] FAULT_INJECTION: forcing a failure. [ 439.210819][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.256552][ T7521] CPU: 0 UID: 0 PID: 7521 Comm: syz.0.327 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 439.267211][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 439.277295][ T7521] Call Trace: [ 439.280597][ T7521] [ 439.283549][ T7521] dump_stack_lvl+0x16c/0x1f0 [ 439.288264][ T7521] should_fail_ex+0x497/0x5b0 [ 439.292961][ T7521] _copy_from_user+0x30/0xf0 [ 439.297598][ T7521] snd_ctl_elem_add_user+0x9c/0x170 [ 439.302834][ T7521] ? __pfx_snd_ctl_elem_add_user+0x10/0x10 [ 439.308674][ T7521] ? kfree+0x12a/0x3b0 [ 439.312775][ T7521] snd_ctl_ioctl+0xbed/0x1150 [ 439.317923][ T7521] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 439.323066][ T7521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.329172][ T7521] ? selinux_file_ioctl+0x180/0x270 [ 439.334403][ T7521] ? selinux_file_ioctl+0xb4/0x270 [ 439.339539][ T7521] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 439.344683][ T7521] __x64_sys_ioctl+0x193/0x220 [ 439.349477][ T7521] do_syscall_64+0xcd/0x250 [ 439.354072][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.359964][ T7521] RIP: 0033:0x7f8d06b779f9 [ 439.364378][ T7521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.384161][ T7521] RSP: 002b:00007f8d07a2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.392570][ T7521] RAX: ffffffffffffffda RBX: 00007f8d06d05f80 RCX: 00007f8d06b779f9 [ 439.400538][ T7521] RDX: 0000000000000000 RSI: 00000000c1105517 RDI: 0000000000000003 [ 439.408500][ T7521] RBP: 00007f8d07a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 439.416471][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.424434][ T7521] R13: 0000000000000000 R14: 00007f8d06d05f80 R15: 00007ffee4d69378 [ 439.426864][ T7524] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 439.432392][ T7521] [ 439.694731][ T7528] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 439.788970][ T7524] zonefs (nbd4) ERROR: Not a zoned block device [ 440.171853][ T7528] zonefs (nbd3) ERROR: Not a zoned block device [ 440.446682][ T7530] vxcan0: tx drop: invalid sa for name 0x000000000000efff [ 440.500566][ T1168] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 440.511756][ T7539] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 440.536305][ T7530] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 440.572749][ T7539] ================================================================== [ 440.580844][ T7539] BUG: KASAN: slab-use-after-free in key_put+0x2ab/0x2b0 [ 440.587859][ T7539] Read of size 8 at addr ffff88801769bb00 by task syz.1.333/7539 [ 440.595565][ T7539] [ 440.597873][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.1.333 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 440.608443][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 440.618513][ T7539] Call Trace: [ 440.621780][ T7539] [ 440.624702][ T7539] dump_stack_lvl+0x116/0x1f0 [ 440.629377][ T7539] print_report+0xc3/0x620 [ 440.633796][ T7539] ? __virt_addr_valid+0x5e/0x590 [ 440.638825][ T7539] ? __phys_addr+0xc6/0x150 [ 440.643331][ T7539] kasan_report+0xd9/0x110 [ 440.647750][ T7539] ? key_put+0x2ab/0x2b0 [ 440.651991][ T7539] ? key_put+0x2ab/0x2b0 [ 440.656236][ T7539] key_put+0x2ab/0x2b0 [ 440.660306][ T7539] __key_create_or_update+0x92b/0xe10 [ 440.665696][ T7539] ? __pfx___key_create_or_update+0x10/0x10 [ 440.671591][ T7539] ? lookup_user_key+0x2ca/0x12f0 [ 440.676625][ T7539] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 440.682791][ T7539] key_create_or_update+0x42/0x60 [ 440.687812][ T7539] __do_sys_add_key+0x29c/0x460 [ 440.692666][ T7539] ? __pfx___do_sys_add_key+0x10/0x10 [ 440.698039][ T7539] do_syscall_64+0xcd/0x250 [ 440.702547][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.708447][ T7539] RIP: 0033:0x7faff89779f9 [ 440.712856][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.732457][ T7539] RSP: 002b:00007faff972c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 440.740879][ T7539] RAX: ffffffffffffffda RBX: 00007faff8b06058 RCX: 00007faff89779f9 [ 440.748861][ T7539] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 440.756840][ T7539] RBP: 00007faff89e58ee R08: fffffffffffffffe R09: 0000000000000000 [ 440.764833][ T7539] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000000 [ 440.772900][ T7539] R13: 0000000000000000 R14: 00007faff8b06058 R15: 00007ffd57cebcc8 [ 440.780880][ T7539] [ 440.783903][ T7539] [ 440.786217][ T7539] Allocated by task 7539: [ 440.790531][ T7539] kasan_save_stack+0x33/0x60 [ 440.795211][ T7539] kasan_save_track+0x14/0x30 [ 440.799886][ T7539] __kasan_slab_alloc+0x89/0x90 [ 440.804742][ T7539] kmem_cache_alloc_noprof+0x121/0x2f0 [ 440.810204][ T7539] key_alloc+0x3e3/0x13a0 [ 440.814527][ T7539] __key_create_or_update+0x71f/0xe10 [ 440.819981][ T7539] key_create_or_update+0x42/0x60 [ 440.824999][ T7539] __do_sys_add_key+0x29c/0x460 [ 440.829845][ T7539] do_syscall_64+0xcd/0x250 [ 440.834348][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.840245][ T7539] [ 440.842558][ T7539] Freed by task 7203: [ 440.846528][ T7539] kasan_save_stack+0x33/0x60 [ 440.851200][ T7539] kasan_save_track+0x14/0x30 [ 440.855871][ T7539] kasan_save_free_info+0x3b/0x60 [ 440.860906][ T7539] poison_slab_object+0xf7/0x160 [ 440.865853][ T7539] __kasan_slab_free+0x32/0x50 [ 440.870615][ T7539] kmem_cache_free+0x12f/0x3a0 [ 440.875374][ T7539] key_gc_unused_keys.constprop.0+0x134/0x480 [ 440.881449][ T7539] key_garbage_collector+0x432/0x990 [ 440.886739][ T7539] process_one_work+0x9c5/0x1b40 [ 440.891685][ T7539] worker_thread+0x6c8/0xf20 [ 440.896271][ T7539] kthread+0x2c1/0x3a0 [ 440.900332][ T7539] ret_from_fork+0x45/0x80 [ 440.904762][ T7539] ret_from_fork_asm+0x1a/0x30 [ 440.909537][ T7539] [ 440.911855][ T7539] The buggy address belongs to the object at ffff88801769ba40 [ 440.911855][ T7539] which belongs to the cache key_jar of size 336 [ 440.925551][ T7539] The buggy address is located 192 bytes inside of [ 440.925551][ T7539] freed 336-byte region [ffff88801769ba40, ffff88801769bb90) [ 440.939338][ T7539] [ 440.941655][ T7539] The buggy address belongs to the physical page: [ 440.948065][ T7539] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801769ae00 pfn:0x1769a [ 440.959350][ T7539] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.967855][ T7539] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 440.975411][ T7539] page_type: 0xfdffffff(slab) [ 440.980093][ T7539] raw: 00fff00000000040 ffff8880166fe140 dead000000000122 0000000000000000 [ 440.988938][ T7539] raw: ffff88801769ae00 0000000080120011 00000001fdffffff 0000000000000000 [ 440.997518][ T7539] head: 00fff00000000040 ffff8880166fe140 dead000000000122 0000000000000000 [ 441.006306][ T7539] head: ffff88801769ae00 0000000080120011 00000001fdffffff 0000000000000000 [ 441.015076][ T7539] head: 00fff00000000001 ffffea00005da681 ffffffffffffffff 0000000000000000 [ 441.023809][ T7539] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 441.032556][ T7539] page dumped because: kasan: bad access detected [ 441.038964][ T7539] page_owner tracks the page as allocated [ 441.044679][ T7539] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8226942589, free_ts 0 [ 441.064485][ T7539] post_alloc_hook+0x2d1/0x350 [ 441.069514][ T7539] get_page_from_freelist+0x1351/0x2e50 [ 441.075064][ T7539] __alloc_pages_noprof+0x22b/0x2460 [ 441.080350][ T7539] alloc_slab_page+0x4e/0xf0 [ 441.084954][ T7539] new_slab+0x84/0x260 [ 441.089018][ T7539] ___slab_alloc+0xdac/0x1870 [ 441.093687][ T7539] __slab_alloc.constprop.0+0x56/0xb0 [ 441.099054][ T7539] kmem_cache_alloc_noprof+0x2a7/0x2f0 [ 441.104510][ T7539] key_alloc+0xc48/0x13a0 [ 441.108831][ T7539] keyring_alloc+0x44/0xc0 [ 441.113344][ T7539] nfs_idmap_init+0x60/0x1e0 [ 441.117980][ T7539] init_nfs_v4+0xf/0xa0 [ 441.122144][ T7539] do_one_initcall+0x128/0x700 [ 441.126916][ T7539] kernel_init_freeable+0x69d/0xca0 [ 441.132113][ T7539] kernel_init+0x1c/0x2b0 [ 441.136455][ T7539] ret_from_fork+0x45/0x80 [ 441.140878][ T7539] page_owner free stack trace missing [ 441.146232][ T7539] [ 441.148543][ T7539] Memory state around the buggy address: [ 441.154160][ T7539] ffff88801769ba00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 441.162299][ T7539] ffff88801769ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.170358][ T7539] >ffff88801769bb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 441.178415][ T7539] ^ [ 441.182473][ T7539] ffff88801769bb80: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 441.190612][ T7539] ffff88801769bc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 441.198663][ T7539] ================================================================== [ 441.235854][ T7539] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 441.243092][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.1.333 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 441.253711][ T7539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 441.263871][ T7539] Call Trace: [ 441.267161][ T7539] [ 441.270103][ T7539] dump_stack_lvl+0x3d/0x1f0 [ 441.274743][ T7539] panic+0x6f5/0x7a0 [ 441.278663][ T7539] ? __pfx_panic+0x10/0x10 [ 441.283100][ T7539] ? preempt_schedule_thunk+0x1a/0x30 [ 441.288484][ T7539] ? preempt_schedule_common+0x44/0xc0 [ 441.293963][ T7539] check_panic_on_warn+0xab/0xb0 [ 441.298927][ T7539] end_report+0x117/0x180 [ 441.303280][ T7539] kasan_report+0xe9/0x110 [ 441.307725][ T7539] ? key_put+0x2ab/0x2b0 [ 441.311987][ T7539] ? key_put+0x2ab/0x2b0 [ 441.316246][ T7539] key_put+0x2ab/0x2b0 [ 441.320317][ T7539] __key_create_or_update+0x92b/0xe10 [ 441.325698][ T7539] ? __pfx___key_create_or_update+0x10/0x10 [ 441.331598][ T7539] ? lookup_user_key+0x2ca/0x12f0 [ 441.336629][ T7539] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 441.342789][ T7539] key_create_or_update+0x42/0x60 [ 441.347833][ T7539] __do_sys_add_key+0x29c/0x460 [ 441.352685][ T7539] ? __pfx___do_sys_add_key+0x10/0x10 [ 441.358152][ T7539] do_syscall_64+0xcd/0x250 [ 441.362662][ T7539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.368563][ T7539] RIP: 0033:0x7faff89779f9 [ 441.372971][ T7539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.392580][ T7539] RSP: 002b:00007faff972c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 441.400993][ T7539] RAX: ffffffffffffffda RBX: 00007faff8b06058 RCX: 00007faff89779f9 [ 441.409046][ T7539] RDX: 0000000020000100 RSI: 0000000020000180 RDI: 0000000020000140 [ 441.417010][ T7539] RBP: 00007faff89e58ee R08: fffffffffffffffe R09: 0000000000000000 [ 441.424975][ T7539] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000000 [ 441.432943][ T7539] R13: 0000000000000000 R14: 00007faff8b06058 R15: 00007ffd57cebcc8 [ 441.440913][ T7539] [ 441.444142][ T7539] Kernel Offset: disabled [ 441.448571][ T7539] Rebooting in 86400 seconds..