last executing test programs: 13.068287919s ago: executing program 3 (id=6256): syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'caif0\x00'}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r5, 0xfffffffd) write$tun(r1, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x17, 0x65, 0x200, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}, {[@noop]}}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x5, 0x0, 0x1}, {"108927ee972103827d9d1fa076ede0e0d1eda847bb9655b53c292791cbabaee7c63954ae0087d41cc48d067d5c848a5d269dbdbef5025c1d16"}}}}, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24020400) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000001c40)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x30000, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 4.659459s ago: executing program 2 (id=6324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000010000d0431e700"/20, @ANYRES32=0x0, @ANYBLOB="a4000600400000003c0012800c0001006d6163766c616e002c000280060002000000000008000100100000000800030003000000100005800a000400aaaaaaaaaaaa0000140035006d6163766c616e30"], 0x70}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) 4.574301374s ago: executing program 0 (id=6326): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.539935188s ago: executing program 1 (id=6327): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/160, 0xa0}], 0x1}, 0x40012042) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) 4.479028374s ago: executing program 2 (id=6329): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.456165271s ago: executing program 0 (id=6330): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4.430191676s ago: executing program 2 (id=6331): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r0, 0x215ec000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000300)=""/110, 0x6e}], 0x2, &(0x7f0000002300)=""/4096, 0x1000}, 0x0) 4.384071614s ago: executing program 1 (id=6333): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500000082", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x8}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) close(r1) 4.270966635s ago: executing program 0 (id=6334): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) close(0xffffffffffffffff) 4.165168032s ago: executing program 0 (id=6336): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.077073651s ago: executing program 1 (id=6337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000007c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xf1, 0x100}}}}}, 0x32) 3.881061031s ago: executing program 0 (id=6338): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 3.783250725s ago: executing program 0 (id=6339): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.409798224s ago: executing program 2 (id=6340): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.317339785s ago: executing program 2 (id=6341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x1b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c002400000000ff840000000200000003125ce882cbf490d908f1523f0000", 0x2a}, {&(0x7f0000002680)="76e69c01", 0x4}], 0x2}, 0x4005) 2.468295052s ago: executing program 3 (id=6267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae", 0x6b}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b", 0x7f9}], 0x3, &(0x7f0000002400)=[{0x630, 0x1, 0x8, "244df5680b8203b6b985638f2545f2ac042a9aee660edf5459c22ed1ed6026739f79e286a1f42ab62b2270f719c0ea01f4cfde2afa600b46d7d34e10f60c895126a9adf4a9885156ee2178974a935091e8c514514f31db8fcb6395a59a1710c7cff57d7f512eb909c22710e93086e706d2a3e4c1a121465944394844b45ed609c9fabb4edaf37a3df4d37a5ea7e027b1c5b22dd328957ae0b6f90667ae9f43322d694eebddddf7f23f1943855002a99e58c8402393d5a7dfd8d88cd1fcb86fe7aac690f8fcffa5b9dc3fdbb4822e588b7773ff35873a5ea7cc83b006d00e70987f313f1b9ba1b1b93ed3eb0362a138f2fba123982919b7aa914be8ba9c71a8d76f7045daafabfb4a50993005e0686440e9f97cc259b5350c86a0effdea17facf052b6772c96ea5fedb6b9497e591f51bd0e02ac86402d6f3fe7d0e856a69c6e3d49d89ba91e2fe519d5ac2186091766c178f274e81493af54a02f7e0b3e47c0a862bd7af9712e65f74595e8c63c91a45ebd081ad910d95f26192ead1daf401b015eb772f4b91bbacf26157d5d6d626eff439e238a6dd9ebce65fb960ae90ec490d5014589a24d107c8b66a587166ce85e9bffd332defeee0c3333d15ed629874fb3259217911d50a1eec22b3c205b3c2068bdbe9d0145de5536049af47bea81d4cffdc45b277e8c06249510d2d429cb3e606d27f40918bd250818d0a09512ed8a2727c81a38e44366deb7ca5e30556b03305ae54b19cc17f6a543a9d397676d1d18c873c30f02a873c6fe6cb1c21d0ebf78c1bc732ef62cbc92e71d461886c9fa5f04d28dc4c7e3b3ed55fb39603c041d27017322610ac1a16c63c91ed376d9bba0df833d185fff47bad911c26a5918034211a3dbe77663f21a22b4bed8a3cbabfcd5622a1bbc3c015d1890391c5f5f57ff316718f57d7927f41724ee25f274c98a22d8cc1f7348cdd5ff604f4fe21d50f21a1638a75b39c6a5e5c0470812e9e7a663f4f61e6f8b008d31c6e9bd4686a17e0f4fb42c06a19436731d612990f7dbdc2d9b6dd4a5152b8cdbef0906e6f6dd07ad305da2d579fb968b000ad7075c91d35f1af5c3783cbeb9306de0cb3f086a0e2950f564b6e1d0ff9bc785d53ed0176c3feaa5356559ebf4508bccc9202ee45d1c20f768f98f60aed75b7da8dba4f1c36a8b668e3a9a19eb431d4759a7b6840c888774194f60f872790fb243fdb2fb1184bc6dd225bfdb447cc1cfa5277569536d051e8069185956aaa7c34217597ab9c93e3ac647542aab63a11dce2a50d9ae996bb2477afc23d2456f36c58a8ca9308aea7548ea875ed4159d2df58cc3edcc0f1afd5fbed7e8fd540a9e97009a801e6d1397670d528f6c8ebbfce8ac7196efb13d05df6d95942f3a5f7629c857e558f0f408cfe6c5d7b9b3c07ac388904b79ffa7f947c0738b1722e6c817cb87cbee4d26d29ac34205523c121677cf55e891a681e9e4a1847ff29a8f440a427ebb9fa040f212b558c0932ad7f7e1115f48c52adcfbfb13ca9fe08f5507a74b04fee211674865f4ffa3f5cfba2fa7640a055efb6e848f4b6f9222bbe3b26a3721ddabc492c0586ca63fb03cc73007bef0e35606cfc629fa1c551eee50593712449e31c730042128ecdf57b35c79d040c6c23c663c5d30e2f3e711c8a9b9949814afee7117207a2b3ee989dd8edf72d997b3baa3ad5b700a8bf3c29d347094df4864bd4f4c234d5ef682b20f2664f7af13ec91c2490b0ddaff7cb2214d84a0a4486e6c51db48c21b6ef2bccf637bd589204716b019f976491ec9eedea1e67d48521a6e42cbc77c808e597a876226ba352c79e5f485ce3dd499f7eb22831a3951b70c5c869c90596fa211a1b9844c8a80e3fccaef546d08c4599f43b08bf198d8ed3b666088b191103f477bcf885bee9e280c9c126f1a2ddff0963ef5da8136f405dd5479e121fccbfa18c290acbee162a13006fcca07773a3da5db87b29c6ee7d66d2340bc053b83d600b5aaab198965f691aa52be98fda0998bb6a330f54575429a3cb7dcca97db0cdf3a2f1003514b1c213875e5306feb23a152898fd2cd25d4b93867018f713fd5d070846cd9981a489bd1b26ddc9c55a84d2d69d2687c5119cda5dffd0f425205aad0533f1bbef18df707d80422c3ce3f41382bf63906622250d2013552d40d97f2ef8bfca77331262e2989401b7644797bad8"}], 0x630}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.457391653s ago: executing program 4 (id=6342): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 2.385106725s ago: executing program 4 (id=6344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8aaaaaaabb08004500001c000000000002907800000000e000030011009078000000004ef7d041b6eaaa19a0acc66ed5996ff252e69dcaeb935f1a44846f1e5f140a90cbb1abd1a51ac09b56c50e93dd080c14399de71d9113b875b3fe5c02491934411c569fea7f4cc897719dd34e8c8a"], 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) unshare(0x2a020400) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x3c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x45, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x648}, @IFA_FLAGS={0x8, 0x8, 0x102}]}, 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000380)) 2.218057275s ago: executing program 1 (id=6345): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) close(0xffffffffffffffff) 721.819791ms ago: executing program 3 (id=6346): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 712.083549ms ago: executing program 4 (id=6347): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 710.179844ms ago: executing program 1 (id=6348): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0xb4}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 573.65703ms ago: executing program 2 (id=6349): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, r0, 0x215ec000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000300)=""/110, 0x6e}, {0x0}], 0x3, &(0x7f0000002300)=""/4096, 0x1000}, 0x0) 573.373231ms ago: executing program 3 (id=6350): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000240000085000000530000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff030000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) socket(0x40000000015, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, @hci={0x1f, 0x0, 0x3}, @nl=@unspec, 0x479, 0x0, 0x0, 0x0, 0x2, 0x0, 0x52c8, 0x8, 0x3ff}) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r2], 0x1000f) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300000400028008000500", @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 573.190305ms ago: executing program 4 (id=6351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 431.652362ms ago: executing program 1 (id=6352): recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 301.366558ms ago: executing program 4 (id=6353): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) 247.243314ms ago: executing program 3 (id=6354): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffe, 0x1004, @mcast2={0xff, 0x3}}, 0xffffffffffffffb2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6105073801"], 0x13) 141.32204ms ago: executing program 4 (id=6355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae", 0x6b}, {&(0x7f0000001400)="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", 0xbf5}], 0x3, &(0x7f0000002400)=[{0x630, 0x1, 0x8, "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"}], 0x630}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 3 (id=6356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): 2261] fuse: Unknown parameter 'euid<00000000000000000000' [ 1516.299313][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1516.301076][T22089] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1516.318781][ T5818] usb 5-1: Product: syz [ 1516.323055][ T5818] usb 5-1: Manufacturer: syz [ 1516.329154][ T5818] usb 5-1: SerialNumber: syz [ 1516.343086][T22249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1516.352493][T22249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1516.597835][T22089] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b0:5e:ab:34:be:7e [ 1516.799556][T22249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1516.845359][T22249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1517.304074][ T5818] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1517.588243][T22291] 9p: Bad value for 'rfdno' [ 1517.593943][ T5473] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -71 [ 1517.616736][ T5816] usb 4-1: USB disconnect, device number 40 [ 1517.625311][ T5473] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 1517.660888][ T5473] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 1517.669139][ T5473] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 1517.680163][ T5473] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 1517.689781][ T5473] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 1517.700021][ T5473] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 1517.708676][ T5473] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 1517.721314][ T5473] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 1517.730049][ T5473] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 1517.919434][ T5816] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1517.965479][ T5818] aqc111 5-1:1.105 eth2: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b0:5e:ab:34:be:7e [ 1517.984004][ T5816] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 1517.992281][ T5816] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 1518.006617][ T5816] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 1518.023658][ T5816] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 1518.120960][ T5816] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1518.130819][ T5816] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1518.140606][ T5816] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1519.006687][ T5860] usb 5-1: USB disconnect, device number 46 [ 1519.075538][ T5860] aqc111 5-1:1.105 eth2: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1519.102604][T22336] fuse: Unknown parameter 'euid<00000000000000000000' [ 1520.519784][ T5860] aqc111 5-1:1.105 eth2 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1520.629327][ T5860] aqc111 5-1:1.105 eth2 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1520.742625][ T5860] aqc111 5-1:1.105 eth2 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1523.409227][ T5956] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1523.615096][ T5956] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1523.644389][ T5956] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1523.720753][ T5956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1523.772599][ T5956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1523.800530][ T5956] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1523.846586][ T5956] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1523.864079][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1523.897359][ T5956] usb 1-1: Product: syz [ 1523.953024][ T5956] usb 1-1: Manufacturer: syz [ 1523.979422][ T5956] cdc_wdm 1-1:1.0: skipping garbage [ 1524.000860][ T5956] cdc_wdm 1-1:1.0: skipping garbage [ 1524.027353][ T5956] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1524.035975][ T5956] cdc_wdm 1-1:1.0: Unknown control protocol [ 1525.199093][T22089] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1525.443681][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1525.443982][ T5860] usb 1-1: USB disconnect, device number 6 [ 1525.450311][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1525.450331][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1525.488004][T22089] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1525.504521][T22089] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1525.516734][T22089] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1525.542090][T22089] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1525.565096][T22089] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1525.580543][T22089] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1525.595132][T22089] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1525.605629][T22089] usb 4-1: Product: syz [ 1525.609866][T22089] usb 4-1: Manufacturer: syz [ 1525.667350][T22089] cdc_wdm 4-1:1.0: skipping garbage [ 1525.906386][T22089] cdc_wdm 4-1:1.0: skipping garbage [ 1525.956722][T22089] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1525.962680][T22089] cdc_wdm 4-1:1.0: Unknown control protocol [ 1525.976644][T22089] usb 4-1: USB disconnect, device number 41 [ 1526.152064][ T30] audit: type=1400 audit(1773014513.080:863): avc: denied { nlmsg_read } for pid=22427 comm="syz.4.4066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1527.493324][T22450] fuse: Unknown parameter 'euid<00000000000000000000' [ 1528.506486][T22089] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1529.660583][T22089] usb 5-1: Using ep0 maxpacket: 16 [ 1529.791757][T22089] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1529.802096][T22089] usb 5-1: config 1 has no interface number 0 [ 1529.817438][T22089] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1529.831413][T22089] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1529.854535][T22089] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1529.863358][T22089] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1529.884998][T22089] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1529.919793][T22089] usb 5-1: Product: syz [ 1529.933388][T22089] usb 5-1: Manufacturer: syz [ 1529.938517][T22089] usb 5-1: SerialNumber: syz [ 1530.448619][T22458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1530.473506][T22458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1530.814689][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1531.050860][T22458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1531.297199][T22458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1531.321384][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1531.363634][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1531.405193][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.497144][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1531.536578][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.577898][ T9] usb 1-1: config 0 descriptor?? [ 1531.678408][T22089] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1531.928261][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1531.937929][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1532.927988][T22089] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b0:5e:ab:34:be:7e [ 1532.954442][ T9] usb 1-1: USB disconnect, device number 7 [ 1534.143802][ T5818] usb 5-1: USB disconnect, device number 47 [ 1534.185178][ T5818] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1534.401320][ T5818] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1534.433271][ T5818] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1534.479495][ T5818] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1535.150586][T22539] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1535.310340][T22541] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1536.606602][ T5956] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1537.134031][ T5956] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1537.154002][ T5956] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1537.164637][ T5956] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1538.101310][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1538.137724][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1538.452547][T17897] Bluetooth: hci4: command 0x0406 tx timeout [ 1538.475154][T22572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4094'. [ 1538.496776][ T5956] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1538.508765][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1538.518754][ T5956] usb 4-1: Product: syz [ 1538.528573][ T5956] usb 4-1: Manufacturer: syz [ 1539.604217][ T5956] usb 4-1: can't set config #1, error -71 [ 1539.641697][ T5956] usb 4-1: USB disconnect, device number 42 [ 1539.818967][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1540.093095][ T5956] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1540.123181][T22089] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1540.271790][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 1540.327644][T22089] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1540.428692][ T5956] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1540.437458][ T5956] usb 4-1: config 1 has no interface number 0 [ 1540.444105][ T5956] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1540.446101][T22089] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.454163][ T5956] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1540.484211][ T5956] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1540.498988][ T5956] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1540.831360][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1540.869698][ T5956] usb 4-1: Product: syz [ 1540.890290][ T5956] usb 4-1: Manufacturer: syz [ 1540.921828][ T5956] usb 4-1: SerialNumber: syz [ 1541.040036][T22591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1541.080704][T22591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1541.473775][T22089] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1541.482898][T22089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.610515][T22591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1542.701178][T22591] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1542.784248][T22089] usb 5-1: usb_control_msg returned -32 [ 1542.789858][T22089] usbtmc 5-1:16.0: can't read capabilities [ 1543.067564][T22621] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1543.326078][ T5956] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1543.454963][T22623] fuse: Unknown parameter 'euid<00000000000000000000' [ 1543.668459][ T5956] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b0:5e:ab:34:be:7e [ 1545.401534][T15469] usb 5-1: USB disconnect, device number 48 [ 1545.435524][ T5818] usb 4-1: USB disconnect, device number 43 [ 1545.443346][ T5818] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1546.332323][ T5818] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1546.354582][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 1546.409926][ T5818] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1546.468465][ T5818] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1548.336343][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 1549.581242][T22697] fuse: Unknown parameter 'euid<00000000000000000000' [ 1549.625401][T22089] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1549.795635][T22089] usb 1-1: Using ep0 maxpacket: 32 [ 1549.802596][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.821039][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.850284][T22089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1549.885612][T22089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.915001][T22089] usb 1-1: config 0 descriptor?? [ 1549.935183][T22089] hub 1-1:0.0: USB hub found [ 1550.148771][T22089] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1550.471356][T22089] usbhid 1-1:0.0: can't add hid device: -71 [ 1550.477451][T22089] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1550.569897][T22089] usb 1-1: USB disconnect, device number 8 [ 1550.618689][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4128'. [ 1552.917631][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1553.239215][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1553.261123][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1553.865123][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1553.876289][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.886194][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1553.895288][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.116242][T22749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1554.301497][ T9] usb 1-1: config 0 descriptor?? [ 1554.676693][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1554.682671][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1554.696739][ T9] usb 1-1: USB disconnect, device number 9 [ 1554.739365][T22755] cgroup: Invalid name [ 1555.136113][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1555.456770][ T30] audit: type=1400 audit(1773014539.909:864): avc: denied { watch } for pid=22754 comm="syz.4.4137" path="/225/file0" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1555.457655][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1555.627539][ T30] audit: type=1400 audit(1773014539.909:865): avc: denied { watch_sb watch_reads } for pid=22754 comm="syz.4.4137" path="/225/file0" dev="tmpfs" ino=1231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1557.005305][ T9] usb 5-1: device descriptor read/64, error -32 [ 1557.138991][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4141'. [ 1557.182389][T22768] cgroup: Invalid name [ 1557.354732][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1558.260558][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.374202][T22089] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1558.559414][T22784] tmpfs: Unknown parameter '»Œ„rðÍ"PŽÆD–”\K˜‚jøC2¥¤çîq‡G‡²¸²ö΀¶¬J;3 ðHP½ú|Õ_BBEYfÝÖôn—Jî8âÈ’ÏÖ^õvÂ̸Ihú–›¥5ÙêZY<(Î&)8ßqŸ?ŒÑà0Ôü @Èò[Ýn¶IJ²VT´·6h¨ _bŠÝÉÕ8ŽOe±˜´ý¯†v$Ý'Xû “.ÇÐ' [ 1558.586987][T22089] usb 1-1: Using ep0 maxpacket: 16 [ 1558.600071][T22089] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1558.631308][T22089] usb 1-1: config 1 has no interface number 0 [ 1558.650940][T22089] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1558.735660][T22787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1558.775797][T22787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1559.314685][T22791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4148'. [ 1559.807210][T22089] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1559.817296][T22089] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1559.842543][T22794] cgroup: Invalid name [ 1559.846796][T22089] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1559.885219][T22089] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1559.893392][T22089] usb 1-1: Product: syz [ 1559.897562][T22089] usb 1-1: Manufacturer: syz [ 1559.902178][T22089] usb 1-1: SerialNumber: syz [ 1560.468477][T22089] usb 1-1: can't set config #1, error -71 [ 1560.512322][T22089] usb 1-1: USB disconnect, device number 10 [ 1560.761965][T22804] fuse: Unknown parameter 'euid<00000000000000000000' [ 1562.222378][ T5956] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1562.483001][ T5956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1562.493558][ T5956] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1562.504895][ T5956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1562.531845][ T5956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1562.540957][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.824060][T22089] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1562.882214][ T5956] usbtmc 4-1:16.0: bulk endpoints not found [ 1562.984513][T22822] fuse: Bad value for 'group_id' [ 1562.991539][T22089] usb 1-1: Using ep0 maxpacket: 32 [ 1563.000399][T22822] fuse: Bad value for 'group_id' [ 1563.017001][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.127359][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.157327][T22089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1563.658605][T22089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.672981][T22089] usb 1-1: config 0 descriptor?? [ 1563.679789][T22089] hub 1-1:0.0: USB hub found [ 1563.892088][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1563.927235][T22089] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1564.321545][T22829] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1565.032408][T22089] usbhid 1-1:0.0: can't add hid device: -71 [ 1565.038521][T22089] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1565.085939][T22089] usb 1-1: USB disconnect, device number 11 [ 1565.791553][ T5887] usb 4-1: USB disconnect, device number 44 [ 1566.047075][T22847] cgroup: Invalid name [ 1566.606796][T22845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4160'. [ 1567.732788][T22861] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1568.755423][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1568.765917][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1568.848453][T22089] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1569.084586][T22089] usb 2-1: Using ep0 maxpacket: 32 [ 1569.139564][T22089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.241870][T22089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.329117][T22089] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1569.406473][T22089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.607216][T22089] usb 2-1: config 0 descriptor?? [ 1569.706721][T22089] hub 2-1:0.0: USB hub found [ 1569.892099][T22089] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1569.917230][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4171'. [ 1570.068940][T22883] fuse: Bad value for 'group_id' [ 1570.073905][T22883] fuse: Bad value for 'group_id' [ 1570.108599][T22089] usbhid 2-1:0.0: can't add hid device: -71 [ 1570.114694][T22089] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1572.152390][T22089] usb 2-1: USB disconnect, device number 41 [ 1572.199076][T22894] fuse: Unknown parameter 'euid<00000000000000000000' [ 1572.447882][ T5818] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1572.609284][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 1572.616528][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1572.637108][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1572.664455][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1572.688831][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1572.710389][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1572.762278][ T5818] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1572.821641][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.832228][ T5887] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1572.949892][ T5818] usb 4-1: Product: syz [ 1572.957624][ T5818] usb 4-1: Manufacturer: syz [ 1572.964212][ T5818] usb 4-1: SerialNumber: syz [ 1572.973661][ T5818] usb 4-1: config 0 descriptor?? [ 1573.001052][ T5887] usb 2-1: device descriptor read/64, error -71 [ 1574.670553][ T5887] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1574.682643][T22213] Bluetooth: hci4: command 0x0406 tx timeout [ 1574.733241][T22911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1574.937816][ T5887] usb 2-1: device descriptor read/64, error -71 [ 1575.022446][T22918] ªªªªªª: renamed from vlan0 (while UP) [ 1575.098935][ T5887] usb usb2-port1: attempt power cycle [ 1575.667114][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 1575.686062][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1575.693370][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1575.706978][T22924] FAULT_INJECTION: forcing a failure. [ 1575.706978][T22924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.728115][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1575.737683][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1575.755783][ T5887] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1575.769556][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1575.786547][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1575.795965][T22924] CPU: 1 UID: 0 PID: 22924 Comm: syz.4.4182 Tainted: G L syzkaller #0 PREEMPT(full) [ 1575.795993][T22924] Tainted: [L]=SOFTLOCKUP [ 1575.795999][T22924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1575.796008][T22924] Call Trace: [ 1575.796015][T22924] [ 1575.796022][T22924] dump_stack_lvl+0x100/0x190 [ 1575.796055][T22924] should_fail_ex.cold+0x5/0xa [ 1575.796078][T22924] core_sys_select+0x5d1/0xbb0 [ 1575.796102][T22924] ? __pfx_core_sys_select+0x10/0x10 [ 1575.796118][T22924] ? find_held_lock+0x2b/0x80 [ 1575.796139][T22924] ? get_pid_task+0xfc/0x250 [ 1575.796187][T22924] ? __pfx_set_user_sigmask+0x10/0x10 [ 1575.796208][T22924] ? read_tsc+0x9/0x20 [ 1575.796228][T22924] ? ktime_get_ts64+0x256/0x3f0 [ 1575.796255][T22924] do_pselect.constprop.0+0x238/0x270 [ 1575.796275][T22924] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1575.796296][T22924] ? ksys_write+0x1ac/0x250 [ 1575.796324][T22924] __x64_sys_pselect6+0x149/0x1c0 [ 1575.796345][T22924] do_syscall_64+0x106/0xf80 [ 1575.796364][T22924] ? clear_bhb_loop+0x40/0x90 [ 1575.796385][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.796390][ T5887] usb 2-1: device descriptor read/8, error -71 [ 1575.796403][T22924] RIP: 0033:0x7fdea6b9c799 [ 1575.796420][T22924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.796434][T22924] RSP: 002b:00007fdea7997028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1575.796449][T22924] RAX: ffffffffffffffda RBX: 00007fdea6e16090 RCX: 00007fdea6b9c799 [ 1575.796459][T22924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000900 [ 1575.796468][T22924] RBP: 00007fdea7997090 R08: 0000200000000280 R09: 0000000000000000 [ 1575.796478][T22924] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1575.796487][T22924] R13: 00007fdea6e16128 R14: 00007fdea6e16090 R15: 00007ffeb9c4abc8 [ 1575.796509][T22924] [ 1576.103230][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1576.110004][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1576.150013][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1576.241041][T22931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4184'. [ 1576.344974][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 1576.457569][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 1577.085598][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.094238][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.104249][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.111443][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.119868][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.147706][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.155060][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.162039][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.168737][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.176060][ T5818] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 1577.259720][ T5818] input input100: Timeout waiting for response from device. [ 1577.374075][ T5818] usb 4-1: USB disconnect, device number 45 [ 1578.908269][ T30] audit: type=1400 audit(1773014562.453:866): avc: denied { create } for pid=22949 comm="syz.2.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1578.930693][T22950] No source specified [ 1578.935109][ T30] audit: type=1400 audit(1773014562.472:867): avc: denied { mounton } for pid=22949 comm="syz.2.4191" path="/324/file0" dev="tmpfs" ino=1784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1579.053320][ T5887] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1580.056114][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 1580.064714][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1580.076582][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1580.087605][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1580.096814][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.114638][ T5887] usb 4-1: config 0 descriptor?? [ 1580.127588][ T5887] hub 4-1:0.0: USB hub found [ 1580.333997][ T5818] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1580.341287][ T5887] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1580.472815][ T5818] usb 5-1: device descriptor read/64, error -71 [ 1580.559566][ T5887] usbhid 4-1:0.0: can't add hid device: -71 [ 1580.565972][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1580.595111][ T5887] usb 4-1: USB disconnect, device number 46 [ 1580.729295][ T5818] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1581.080054][ T5818] usb 5-1: device descriptor read/64, error -71 [ 1582.214532][T22213] Bluetooth: hci4: command 0x0406 tx timeout [ 1582.293389][ T5818] usb usb5-port1: attempt power cycle [ 1582.443597][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1583.432178][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1583.500306][ T5818] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1583.550850][ T5818] usb 5-1: device descriptor read/8, error -71 [ 1584.779647][T23011] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4205'. [ 1585.154000][T23017] fuse: Unknown parameter 'euid<00000000000000000000' [ 1585.571422][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1585.994200][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1586.464203][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1586.496252][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1586.531296][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1586.591213][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1586.615764][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.644977][ T10] usb 2-1: Product: syz [ 1586.665981][ T10] usb 2-1: Manufacturer: syz [ 1586.687679][ T10] usb 2-1: SerialNumber: syz [ 1586.753359][ T10] usb 2-1: config 0 descriptor?? [ 1587.201003][ T10] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1587.543597][ T10] usb 2-1: USB disconnect, device number 46 [ 1588.021018][T15469] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1588.144191][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1588.169379][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1588.203938][T23037] fuse: Unknown parameter 'euid<00000000000000000000' [ 1588.683359][T15469] usb 5-1: Using ep0 maxpacket: 32 [ 1589.268244][T15469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.280784][T15469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.296399][T15469] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1589.306105][T15469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.317034][T15469] usb 5-1: config 0 descriptor?? [ 1589.327736][T15469] hub 5-1:0.0: USB hub found [ 1589.539546][T15469] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1590.125131][T15469] usbhid 5-1:0.0: can't add hid device: -71 [ 1590.927599][T15469] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1590.968904][T15469] usb 5-1: USB disconnect, device number 55 [ 1591.030238][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4217'. [ 1593.028917][T23074] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1593.221225][T15469] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1594.521829][T15469] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1594.553116][T15469] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1594.569227][T15469] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1594.598555][T15469] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1594.616200][T15469] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1594.657037][T15469] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1594.666581][T15469] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1594.675247][T15469] usb 1-1: Product: syz [ 1594.681264][T15469] usb 1-1: Manufacturer: syz [ 1594.873327][T15469] cdc_wdm 1-1:1.0: skipping garbage [ 1594.918641][T15469] cdc_wdm 1-1:1.0: skipping garbage [ 1594.954889][T15469] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1594.971507][T15469] cdc_wdm 1-1:1.0: Unknown control protocol [ 1595.162669][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1595.163006][T22089] usb 1-1: USB disconnect, device number 12 [ 1595.169302][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1595.169323][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1595.836485][T23090] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1596.826110][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'. [ 1596.924221][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4229'. [ 1597.987131][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1599.109122][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1599.115790][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1599.127770][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1599.137810][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1599.147159][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.528433][ T9] usb 5-1: config 0 descriptor?? [ 1599.548665][ T9] hub 5-1:0.0: USB hub found [ 1599.940804][ T9] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1601.032897][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1601.038871][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1601.097452][ T9] usb 5-1: USB disconnect, device number 56 [ 1603.067672][T23148] FAULT_INJECTION: forcing a failure. [ 1603.067672][T23148] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.118989][T23148] CPU: 0 UID: 0 PID: 23148 Comm: syz.4.4242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1603.119014][T23148] Tainted: [L]=SOFTLOCKUP [ 1603.119018][T23148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1603.119025][T23148] Call Trace: [ 1603.119029][T23148] [ 1603.119033][T23148] dump_stack_lvl+0x100/0x190 [ 1603.119055][T23148] should_fail_ex.cold+0x5/0xa [ 1603.119069][T23148] should_failslab+0xc2/0x120 [ 1603.119080][T23148] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1603.119094][T23148] ? alloc_empty_file+0x55/0x1c0 [ 1603.119107][T23148] ? __pfx_stack_trace_save+0x10/0x10 [ 1603.119124][T23148] alloc_empty_file+0x55/0x1c0 [ 1603.119137][T23148] path_openat+0xe8/0x31a0 [ 1603.119148][T23148] ? kasan_save_stack+0x3f/0x50 [ 1603.119162][T23148] ? kasan_save_stack+0x30/0x50 [ 1603.119176][T23148] ? kasan_save_track+0x14/0x30 [ 1603.119191][T23148] ? __kasan_slab_alloc+0x89/0x90 [ 1603.119207][T23148] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1603.119221][T23148] ? do_getname+0x35/0x390 [ 1603.119233][T23148] ? do_sys_openat2+0xc5/0x1e0 [ 1603.119246][T23148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.119259][T23148] ? __pfx_path_openat+0x10/0x10 [ 1603.119275][T23148] do_file_open+0x20e/0x430 [ 1603.119287][T23148] ? __pfx_do_file_open+0x10/0x10 [ 1603.119307][T23148] ? alloc_fd+0x476/0x790 [ 1603.119320][T23148] ? do_getname+0x191/0x390 [ 1603.119335][T23148] do_sys_openat2+0x10d/0x1e0 [ 1603.119347][T23148] ? __pfx_do_sys_openat2+0x10/0x10 [ 1603.119360][T23148] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1603.119375][T23148] ? __fget_files+0x21f/0x3d0 [ 1603.119387][T23148] __x64_sys_openat+0x12d/0x210 [ 1603.119401][T23148] ? __pfx___x64_sys_openat+0x10/0x10 [ 1603.119414][T23148] ? ksys_write+0x1ac/0x250 [ 1603.119434][T23148] do_syscall_64+0x106/0xf80 [ 1603.119446][T23148] ? clear_bhb_loop+0x40/0x90 [ 1603.119459][T23148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.119470][T23148] RIP: 0033:0x7fdea6b9c799 [ 1603.119480][T23148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1603.119491][T23148] RSP: 002b:00007fdea79b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1603.119502][T23148] RAX: ffffffffffffffda RBX: 00007fdea6e15fa0 RCX: 00007fdea6b9c799 [ 1603.119509][T23148] RDX: 00000000001a37c1 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1603.119515][T23148] RBP: 00007fdea79b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.119522][T23148] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 1603.119528][T23148] R13: 00007fdea6e16038 R14: 00007fdea6e15fa0 R15: 00007ffeb9c4abc8 [ 1603.119541][T23148] [ 1603.716945][T23158] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1603.933929][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1604.535633][ T30] audit: type=1400 audit(1773014586.428:868): avc: denied { execute } for pid=23171 comm="syz.3.4251" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=93831 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1604.847943][T15469] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1605.053716][T15469] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1605.096598][T15469] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1605.123182][T15469] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1605.132619][T15469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.485019][T23198] FAULT_INJECTION: forcing a failure. [ 1605.485019][T23198] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.500555][T23198] CPU: 0 UID: 0 PID: 23198 Comm: syz.0.4259 Tainted: G L syzkaller #0 PREEMPT(full) [ 1605.500585][T23198] Tainted: [L]=SOFTLOCKUP [ 1605.500591][T23198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1605.500600][T23198] Call Trace: [ 1605.500606][T23198] [ 1605.500611][T23198] dump_stack_lvl+0x100/0x190 [ 1605.500632][T23198] should_fail_ex.cold+0x5/0xa [ 1605.500646][T23198] should_failslab+0xc2/0x120 [ 1605.500658][T23198] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1605.500671][T23198] ? vhost_task_create+0xee/0x370 [ 1605.500689][T23198] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1605.500705][T23198] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1605.500722][T23198] vhost_task_create+0xee/0x370 [ 1605.500734][T23198] ? __pfx_vhost_task_create+0x10/0x10 [ 1605.500746][T23198] ? trace_contention_end+0x140/0x180 [ 1605.500761][T23198] ? __pfx_vhost_task_fn+0x10/0x10 [ 1605.500774][T23198] ? __pfx___mutex_lock+0x10/0x10 [ 1605.500786][T23198] ? kasan_quarantine_put+0x104/0x240 [ 1605.500801][T23198] ? lockdep_hardirqs_on+0x78/0x100 [ 1605.500816][T23198] kvm_mmu_post_init_vm+0x1b3/0x370 [ 1605.500830][T23198] kvm_arch_vcpu_ioctl_run+0x66/0x1830 [ 1605.500842][T23198] ? kvm_vcpu_ioctl+0x155c/0x1730 [ 1605.500861][T23198] kvm_vcpu_ioctl+0x730/0x1730 [ 1605.500878][T23198] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1605.500893][T23198] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1605.500909][T23198] ? do_vfs_ioctl+0x226/0x13e0 [ 1605.500926][T23198] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1605.500941][T23198] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1605.500959][T23198] ? __fget_files+0x215/0x3d0 [ 1605.500970][T23198] ? hook_file_ioctl_common+0x146/0x410 [ 1605.500989][T23198] ? selinux_file_ioctl+0x139/0x290 [ 1605.501001][T23198] ? selinux_file_ioctl+0xb4/0x290 [ 1605.501014][T23198] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1605.501030][T23198] __x64_sys_ioctl+0x18e/0x210 [ 1605.501047][T23198] do_syscall_64+0x106/0xf80 [ 1605.501058][T23198] ? clear_bhb_loop+0x40/0x90 [ 1605.501072][T23198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.501083][T23198] RIP: 0033:0x7fdfb6f9c799 [ 1605.501094][T23198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.501104][T23198] RSP: 002b:00007fdfb7de4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1605.501117][T23198] RAX: ffffffffffffffda RBX: 00007fdfb7215fa0 RCX: 00007fdfb6f9c799 [ 1605.501124][T23198] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1605.501130][T23198] RBP: 00007fdfb7de4090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.501136][T23198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.501142][T23198] R13: 00007fdfb7216038 R14: 00007fdfb7215fa0 R15: 00007ffc5c4b2b38 [ 1605.501156][T23198] [ 1605.874036][T15469] usb 2-1: usb_control_msg returned -32 [ 1605.899352][T15469] usbtmc 2-1:16.0: can't read capabilities [ 1606.045900][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1607.340526][T23213] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1607.480963][T23213] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1608.340254][T23228] fuse: Unknown parameter 'euid<00000000000000000000' [ 1608.886274][T23238] fuse: Unknown parameter 'euid<00000000000000000000' [ 1608.943277][ T9] usb 2-1: USB disconnect, device number 47 [ 1609.739396][T23250] cgroup: Invalid name [ 1609.937926][T23247] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1611.429700][T23278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.113823][ T30] audit: type=1400 audit(1773014593.521:869): avc: denied { create } for pid=23279 comm="syz.2.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1612.143784][T23280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1612.302771][ T30] audit: type=1400 audit(1773014593.662:870): avc: denied { ioctl } for pid=23292 comm="syz.1.4275" path="socket:[94022]" dev="sockfs" ino=94022 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1612.328286][ T30] audit: type=1400 audit(1773014593.662:871): avc: denied { bind } for pid=23292 comm="syz.1.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1612.348805][ T30] audit: type=1400 audit(1773014593.727:872): avc: denied { connect } for pid=23292 comm="syz.1.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1612.543687][T23304] netlink: 'syz.4.4281': attribute type 1 has an invalid length. [ 1612.766258][T23317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1612.862764][ T30] audit: type=1400 audit(1773014594.223:873): avc: denied { setopt } for pid=23325 comm="syz.2.4288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1612.862783][T23326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'. [ 1613.202651][ T30] audit: type=1400 audit(1773014594.541:874): avc: denied { setopt } for pid=23345 comm="syz.0.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1613.233874][T23346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1613.268441][T23346] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 1613.325253][ T30] audit: type=1400 audit(1773014594.663:875): avc: denied { map } for pid=23351 comm="syz.3.4299" path="socket:[94119]" dev="sockfs" ino=94119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1613.953221][T23373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.960461][T23373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.018662][T23373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.031328][T23373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.225913][ T86] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.249223][ T86] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.261535][ T86] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.271293][ T86] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.532588][ T30] audit: type=1400 audit(1773014595.786:876): avc: denied { read } for pid=23394 comm="syz.0.4315" path="socket:[94751]" dev="sockfs" ino=94751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1616.585715][T23357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1617.103945][T23435] syzkaller0: entered promiscuous mode [ 1617.109627][T23435] syzkaller0: entered allmulticast mode [ 1617.743245][T23480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1618.157713][T23505] erspan0: entered promiscuous mode [ 1618.169319][T23505] erspan0: entered allmulticast mode [ 1619.854165][T23544] raw_sendmsg: syz.4.4379 forgot to set AF_INET. Fix it! [ 1621.265877][T23499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1621.435392][T23558] syzkaller0: entered promiscuous mode [ 1621.440892][T23558] syzkaller0: entered allmulticast mode [ 1621.662926][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1621.759088][T23588] xt_hashlimit: size too large, truncated to 1048576 [ 1622.218026][T23616] syzkaller0: entered promiscuous mode [ 1622.224618][T23616] syzkaller0: entered allmulticast mode [ 1623.904135][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1624.739877][T23568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1625.100497][T23642] IPv6: NLM_F_CREATE should be specified when creating new route [ 1626.269887][T23735] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1627.198889][T23805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.206243][T23805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.525945][T23805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1627.537797][T23805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1627.632004][T11590] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.664342][T11590] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.684420][T11590] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.713272][T11590] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.792035][ T30] audit: type=1400 audit(1773014608.185:877): avc: denied { read } for pid=23835 comm="syz.2.4492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1627.843751][T23838] veth1_vlan: Device is already in use. [ 1627.937879][T23844] syzkaller0: entered promiscuous mode [ 1627.945151][T23844] syzkaller0: entered allmulticast mode [ 1628.688149][T22213] Bluetooth: hci4: command 0x0406 tx timeout [ 1629.110225][ T30] audit: type=1400 audit(1773014609.430:878): avc: denied { write } for pid=23942 comm="syz.0.4547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1629.689316][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4563'. [ 1629.829216][ T30] audit: type=1400 audit(1773014610.104:879): avc: denied { ioctl } for pid=23984 comm="syz.3.4565" path="socket:[96924]" dev="sockfs" ino=96924 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1629.875764][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1629.884999][T23988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1629.907129][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1629.908011][ T1146] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1629.916266][T23988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1629.935073][ T1146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1629.944344][ T1146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1629.955063][ T1146] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1630.023044][T23996] syz_tun: entered allmulticast mode [ 1630.158068][T24004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4574'. [ 1630.429206][T24021] syz_tun: entered allmulticast mode [ 1631.222064][ T30] audit: type=1400 audit(1773014611.395:880): avc: denied { create } for pid=24068 comm="syz.1.4599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1631.289024][ T30] audit: type=1400 audit(1773014611.395:881): avc: denied { getopt } for pid=24068 comm="syz.1.4599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1631.439184][T24092] syzkaller0: entered promiscuous mode [ 1631.445897][T24092] syzkaller0: entered allmulticast mode [ 1631.568394][T24102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1631.594284][T24103] syzkaller0: entered promiscuous mode [ 1631.600490][T24103] syzkaller0: entered allmulticast mode [ 1631.815130][T24116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 1632.018094][T24131] syzkaller0: entered promiscuous mode [ 1632.047172][T24131] syzkaller0: entered allmulticast mode [ 1632.186626][T23820] IPVS: starting estimator thread 0... [ 1632.235596][T24146] syzkaller0: entered promiscuous mode [ 1632.248147][T24146] syzkaller0: entered allmulticast mode [ 1632.322676][T24142] IPVS: using max 44 ests per chain, 105600 per kthread [ 1632.693470][T24181] syzkaller0: entered promiscuous mode [ 1632.699892][T24181] syzkaller0: entered allmulticast mode [ 1633.040652][T24204] syzkaller0: entered promiscuous mode [ 1633.046274][T24204] syzkaller0: entered allmulticast mode [ 1633.705613][ T30] audit: type=1400 audit(1773014613.725:882): avc: denied { bind } for pid=24249 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1633.799706][T24263] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1634.471826][T24305] 8021q: VLANs not supported on ip6gre0 [ 1634.863761][T24339] 8021q: VLANs not supported on ip6gre0 [ 1634.959450][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4723'. [ 1634.998742][T24346] syzkaller0: entered promiscuous mode [ 1635.004419][T24346] syzkaller0: entered allmulticast mode [ 1635.316288][T24368] 8021q: VLANs not supported on ip6tnl0 [ 1635.585441][T24386] bridge_slave_0: left allmulticast mode [ 1635.591123][T24386] bridge_slave_0: left promiscuous mode [ 1635.615516][T24386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.629136][T24386] bridge_slave_1: left allmulticast mode [ 1635.635412][T24386] bridge_slave_1: left promiscuous mode [ 1635.641215][T24386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.661506][T24386] bond0: (slave bond_slave_0): Releasing backup interface [ 1635.686019][T24386] bond0: (slave bond_slave_1): Releasing backup interface [ 1635.728547][T24386] team0: Port device team_slave_0 removed [ 1635.764549][T24386] team0: Port device team_slave_1 removed [ 1635.770635][T24386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.798033][T24386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.800761][ T30] audit: type=1400 audit(1773014615.691:883): avc: denied { ioctl } for pid=24406 comm="syz.2.4747" path="socket:[98025]" dev="sockfs" ino=98025 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1635.841028][T24386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1635.899782][T24413] l2tp_ppp: sess 2/0: no socket in recv [ 1636.589771][T23818] IPVS: starting estimator thread 0... [ 1636.718977][T24475] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1636.723996][T24465] IPVS: using max 46 ests per chain, 110400 per kthread [ 1637.106907][ T30] audit: type=1400 audit(1773014616.907:884): avc: denied { write } for pid=24500 comm="syz.2.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1637.265699][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4794'. [ 1637.657020][ T30] audit: type=1400 audit(1773014617.431:885): avc: denied { create } for pid=24524 comm="syz.2.4801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1637.728028][ T30] audit: type=1400 audit(1773014617.478:886): avc: denied { write } for pid=24524 comm="syz.2.4801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1638.359179][T24568] netlink: 'syz.3.4820': attribute type 7 has an invalid length. [ 1638.367334][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1638.376768][T24568] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1638.376801][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1638.533129][T24579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1638.601898][T11590] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 1639.360407][T24572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1639.489893][T24605] syz_tun: entered allmulticast mode [ 1639.500878][T24603] syz_tun: left allmulticast mode [ 1639.510580][T24601] syzkaller0: entered promiscuous mode [ 1639.517037][T24601] syzkaller0: entered allmulticast mode [ 1639.578643][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1640.096316][T24631] syz_tun: entered allmulticast mode [ 1640.108293][T24637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4848'. [ 1640.127528][T24631] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1640.136555][T24631] mroute: pending queue full, dropping entries [ 1640.144950][T24630] syz_tun: left allmulticast mode [ 1640.585030][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1641.195795][T24676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.203104][T24676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.312271][T24676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.330359][T24676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.508803][T11590] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.574191][T11590] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.600812][T24703] syzkaller0: entered promiscuous mode [ 1641.606317][T24703] syzkaller0: entered allmulticast mode [ 1641.636519][T24712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4879'. [ 1641.653476][T11590] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.674239][T11590] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.765488][T24720] syz_tun: entered allmulticast mode [ 1641.775410][T24719] syz_tun: left allmulticast mode [ 1641.898413][T24728] syzkaller0: entered promiscuous mode [ 1641.903917][T24728] syzkaller0: entered allmulticast mode [ 1642.101581][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1642.144510][T24748] syz_tun: entered allmulticast mode [ 1642.160409][T24747] syz_tun: left allmulticast mode [ 1642.598031][T24777] syz_tun: entered allmulticast mode [ 1642.613464][T24777] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1642.622011][T24777] mroute: pending queue full, dropping entries [ 1642.646957][T24780] __nla_validate_parse: 2 callbacks suppressed [ 1642.646977][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1642.663415][T24776] syz_tun: left allmulticast mode [ 1642.882364][ T30] audit: type=1400 audit(1773014622.316:887): avc: denied { connect } for pid=24793 comm="syz.4.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1642.938426][ T30] audit: type=1400 audit(1773014622.372:888): avc: denied { write } for pid=24793 comm="syz.4.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1643.235798][T24807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1643.410968][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1643.677077][T24837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1643.735030][T24837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1643.952220][T24700] IPVS: starting estimator thread 0... [ 1643.959271][T24843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4934'. [ 1643.989203][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4938'. [ 1644.046501][T24848] IPVS: using max 43 ests per chain, 103200 per kthread [ 1644.548911][T24889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4951'. [ 1644.649371][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4953'. [ 1644.963651][T24918] syzkaller0: entered promiscuous mode [ 1644.979524][T24918] syzkaller0: entered allmulticast mode [ 1645.068447][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4965'. [ 1645.089375][T24920] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1645.097965][T24920] mroute: pending queue full, dropping entries [ 1645.214783][T24936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1645.222555][T24936] IPv6: NLM_F_CREATE should be set when creating new route [ 1645.519912][T24960] syz_tun: entered allmulticast mode [ 1645.597566][T24967] syzkaller0: entered promiscuous mode [ 1645.609337][T24967] syzkaller0: entered allmulticast mode [ 1645.904316][T21127] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 1648.930635][T25016] syzkaller0: entered promiscuous mode [ 1648.936513][T25016] syzkaller0: entered allmulticast mode [ 1648.990770][T24981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1649.123893][T25019] __nla_validate_parse: 5 callbacks suppressed [ 1649.123913][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1649.367746][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5011'. [ 1649.439950][T25048] syzkaller0: entered promiscuous mode [ 1649.453039][T25048] syzkaller0: entered allmulticast mode [ 1649.617763][T25062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5018'. [ 1649.872086][T25080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1649.952575][T25085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1650.103954][T25099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5032'. [ 1650.200594][T25108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1650.406620][T25122] syzkaller0: entered promiscuous mode [ 1650.412132][T25122] syzkaller0: entered allmulticast mode [ 1650.498106][T25132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5047'. [ 1650.953112][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1651.224601][T25188] bond1 (unregistering): Released all slaves [ 1651.379392][T25208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5076'. [ 1651.765950][ T30] audit: type=1400 audit(1773014630.626:889): avc: denied { read } for pid=25239 comm="syz.4.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1652.295451][T25248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1652.318277][T25248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1652.432947][ T86] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.469535][ T86] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.496929][ T86] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.507017][ T86] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.504996][T25331] syzkaller0: entered promiscuous mode [ 1653.510628][T25331] syzkaller0: entered allmulticast mode [ 1653.579394][ T30] audit: type=1400 audit(1773014632.329:890): avc: denied { ioctl } for pid=25337 comm="syz.1.5133" path="socket:[102514]" dev="sockfs" ino=102514 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1653.622649][T25338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5133'. [ 1653.946392][T25363] 8021q: VLANs not supported on ip6tnl0 [ 1654.246346][T25387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5156'. [ 1654.378285][T25395] 8021q: VLANs not supported on ip6gre0 [ 1654.485478][T21127] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x10 [ 1654.743438][T25427] __nla_validate_parse: 1 callbacks suppressed [ 1654.743458][T25427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5169'. [ 1654.766452][T25427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5169'. [ 1655.161494][T25460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5183'. [ 1655.365305][T25466] tipc: Started in network mode [ 1655.375815][T25466] tipc: Node identity 6e46ef45637c, cluster identity 4711 [ 1655.383418][T25466] tipc: Enabled bearer , priority 0 [ 1655.401568][T25466] syzkaller0: entered promiscuous mode [ 1655.411185][T25466] syzkaller0: entered allmulticast mode [ 1655.466645][T25466] tipc: Resetting bearer [ 1655.482927][T25465] tipc: Resetting bearer [ 1655.521344][T25465] tipc: Disabling bearer [ 1655.636182][T25489] syzkaller0: entered promiscuous mode [ 1655.644215][T25489] syzkaller0: entered allmulticast mode [ 1655.667988][T25493] sctp: [Deprecated]: syz.3.5197 (pid 25493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1655.667988][T25493] Use struct sctp_sack_info instead [ 1655.763618][T25493] sctp: [Deprecated]: syz.3.5197 (pid 25493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1655.763618][T25493] Use struct sctp_sack_info instead [ 1655.934945][T25510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1656.029936][ T30] audit: type=1400 audit(1773014634.622:891): avc: denied { write } for pid=25517 comm="syz.2.5208" path="socket:[102785]" dev="sockfs" ino=102785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1656.368924][ T30] audit: type=1400 audit(1773014634.940:892): avc: denied { setopt } for pid=25532 comm="syz.0.5215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1657.488009][T25606] syzkaller0: entered promiscuous mode [ 1657.494285][T25606] syzkaller0: entered allmulticast mode [ 1657.674932][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5251'. [ 1657.768970][T25628] tipc: Started in network mode [ 1657.779008][T25628] tipc: Node identity 9e86fb0a9298, cluster identity 4711 [ 1657.789118][T25628] tipc: Enabled bearer , priority 0 [ 1657.808604][T25628] syzkaller0: entered promiscuous mode [ 1657.819915][T25628] syzkaller0: entered allmulticast mode [ 1657.911822][T25628] tipc: Resetting bearer [ 1657.947202][T25627] tipc: Resetting bearer [ 1657.984299][T25627] tipc: Disabling bearer [ 1659.030324][T25706] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5282'. [ 1659.089532][ T30] audit: type=1400 audit(1773014637.476:893): avc: denied { ioctl } for pid=25708 comm="syz.4.5283" path="socket:[103082]" dev="sockfs" ino=103082 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1659.139543][T25711] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1659.333101][T25725] 8021q: VLANs not supported on ip6gre0 [ 1659.709557][T25747] 8021q: VLANs not supported on ip6gre0 [ 1659.877480][T25760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5307'. [ 1660.030333][ T30] audit: type=1400 audit(1773014638.356:894): avc: denied { getopt } for pid=25770 comm="syz.0.5311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1660.170907][T25786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5318'. [ 1660.342364][T25797] dummy0: entered promiscuous mode [ 1660.350592][T25797] vlan0: entered promiscuous mode [ 1660.357405][T25799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5323'. [ 1660.491821][T25808] 8021q: VLANs not supported on ip6gre0 [ 1660.695696][T25825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1661.190133][T25862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5349'. [ 1661.681088][T25901] nftables ruleset with unbound set [ 1662.020533][T22213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1662.039451][T22213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1662.048575][T22213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1662.061207][T22213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1662.068685][T22213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1662.278870][T17646] syz_tun (unregistering): left allmulticast mode [ 1662.290184][T25931] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5374'. [ 1662.374126][T25928] syzkaller1: entered promiscuous mode [ 1662.406082][T25928] syzkaller1: entered allmulticast mode [ 1662.545542][T25916] chnl_net:caif_netlink_parms(): no params data found [ 1662.844324][T25916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.851625][T25916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.858776][T25916] bridge_slave_0: entered allmulticast mode [ 1662.867487][T25916] bridge_slave_0: entered promiscuous mode [ 1662.888343][T25916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.906657][T25916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.920495][T25916] bridge_slave_1: entered allmulticast mode [ 1662.940080][T25916] bridge_slave_1: entered promiscuous mode [ 1663.025908][T25916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.046240][T25916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.109988][T25916] team0: Port device team_slave_0 added [ 1663.122453][T25916] team0: Port device team_slave_1 added [ 1663.156150][ T30] audit: type=1400 audit(1773014641.285:895): avc: denied { bind } for pid=25985 comm="syz.4.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1663.186775][T25916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.201618][T25916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.231940][T25916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.244387][T25916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.264128][T25916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.291706][T25916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.355127][T25916] hsr_slave_0: entered promiscuous mode [ 1663.361602][T25916] hsr_slave_1: entered promiscuous mode [ 1663.380281][T25916] debugfs: 'hsr0' already exists in 'hsr' [ 1663.398435][T25916] Cannot create hsr debugfs directory [ 1663.536585][T26002] syzkaller0: entered promiscuous mode [ 1663.542140][T26002] syzkaller0: entered allmulticast mode [ 1664.127968][T26039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1664.145216][T26036] syzkaller0: entered promiscuous mode [ 1664.150703][T26036] syzkaller0: entered allmulticast mode [ 1664.237305][T26042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1664.252502][ T51] Bluetooth: hci3: command tx timeout [ 1664.339060][T25916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1664.352896][T25916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1664.364409][T25916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1664.381721][T25916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1664.493915][T25916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.511733][T25916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.522609][T11590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.529744][T11590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.546697][T11590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.553881][T11590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.613697][T25916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1664.624553][T25916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1664.857292][T26072] syzkaller0: entered promiscuous mode [ 1664.870326][T26072] syzkaller0: entered allmulticast mode [ 1664.927336][T25916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.950687][T26076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5427'. [ 1665.127184][T25916] veth0_vlan: entered promiscuous mode [ 1665.161033][T25916] veth1_vlan: entered promiscuous mode [ 1665.237733][T25916] veth0_macvtap: entered promiscuous mode [ 1665.253514][T25916] veth1_macvtap: entered promiscuous mode [ 1665.279772][T25916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.293793][T25916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1665.346403][T11590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.372651][T11590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.390180][T11590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.423745][T11590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.535197][T11590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.564248][T11590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.634088][T21127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.634539][T26114] syzkaller0: entered promiscuous mode [ 1665.647594][T26114] syzkaller0: entered allmulticast mode [ 1665.651576][T21127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.900543][T26132] syzkaller0: entered promiscuous mode [ 1665.906045][T26132] syzkaller0: entered allmulticast mode [ 1666.180831][T26155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1666.347588][T26163] syzkaller0: entered promiscuous mode [ 1666.356418][T26163] syzkaller0: entered allmulticast mode [ 1666.474027][ T51] Bluetooth: hci3: command tx timeout [ 1666.691017][T26177] tipc: Enabled bearer , priority 0 [ 1666.699575][T26177] syzkaller0: entered promiscuous mode [ 1666.705056][T26177] syzkaller0: entered allmulticast mode [ 1666.730695][T26177] tipc: Resetting bearer [ 1666.753759][T26176] tipc: Resetting bearer [ 1666.786307][T26176] tipc: Disabling bearer [ 1667.225583][ T30] audit: type=1400 audit(1773014645.103:896): avc: denied { bind } for pid=26218 comm="syz.3.5489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1667.410350][T26237] syzkaller0: entered promiscuous mode [ 1667.417368][T26237] syzkaller0: entered allmulticast mode [ 1667.465966][T26241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5501'. [ 1667.571174][ T30] audit: type=1400 audit(1773014645.421:897): avc: denied { setopt } for pid=26245 comm="syz.4.5503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1667.690235][T26253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5506'. [ 1667.899566][T26269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5514'. [ 1667.934766][T26271] syzkaller0: entered promiscuous mode [ 1667.941312][T26271] syzkaller0: entered allmulticast mode [ 1668.087166][T26280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5519'. [ 1668.159160][T26284] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1668.170585][T26282] syzkaller0: entered promiscuous mode [ 1668.186164][T26282] syzkaller0: entered allmulticast mode [ 1668.270618][T26290] tipc: Started in network mode [ 1668.275523][T26290] tipc: Node identity 7ea3e4b88b9a, cluster identity 4711 [ 1668.283515][T26290] tipc: Enabled bearer , priority 0 [ 1668.295018][T26290] syzkaller0: entered promiscuous mode [ 1668.300501][T26290] syzkaller0: entered allmulticast mode [ 1668.317777][T26290] tipc: Resetting bearer [ 1668.362886][T26289] tipc: Resetting bearer [ 1668.397639][T26289] tipc: Disabling bearer [ 1668.482673][T26298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5527'. [ 1668.622012][T26313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1668.698280][ T51] Bluetooth: hci3: command tx timeout [ 1668.867242][T26330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1669.811715][T21127] wlan1: Trigger new scan to find an IBSS to join [ 1669.968648][T26424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.977171][T26424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.061546][T26434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5578'. [ 1670.642243][T26480] syzkaller0: entered promiscuous mode [ 1670.647985][T26480] syzkaller0: entered allmulticast mode [ 1670.922575][T26504] tipc: Enabled bearer , priority 0 [ 1670.924087][ T51] Bluetooth: hci3: command tx timeout [ 1670.934843][T26504] syzkaller0: entered promiscuous mode [ 1670.940586][T26504] syzkaller0: entered allmulticast mode [ 1670.953800][T26504] tipc: Resetting bearer [ 1670.980060][T26503] tipc: Resetting bearer [ 1671.021285][T26503] tipc: Disabling bearer [ 1671.190126][T26521] syzkaller0: entered promiscuous mode [ 1671.195697][ T30] audit: type=1400 audit(1773014648.808:898): avc: denied { read } for pid=26522 comm="syz.4.5606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1671.215681][T26521] syzkaller0: entered allmulticast mode [ 1671.590807][T26540] syzkaller0: entered promiscuous mode [ 1671.602698][T26540] syzkaller0: entered allmulticast mode [ 1673.134826][T26580] syzkaller0: entered promiscuous mode [ 1673.140333][T26580] syzkaller0: entered allmulticast mode [ 1673.392957][T26601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.400302][T26601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.511257][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5624'. [ 1673.591159][T26601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.641169][T26601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.795279][T26632] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5626'. [ 1673.879592][ T1146] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.897915][ T1146] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.931984][ T1146] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.972803][ T1146] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.010190][ T1146] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.032926][ T1146] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.073722][T26634] syzkaller1: entered promiscuous mode [ 1674.097985][T26634] syzkaller1: entered allmulticast mode [ 1674.114511][T21127] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.136533][T21127] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.195117][T26646] syzkaller0: entered promiscuous mode [ 1674.210689][T26646] syzkaller0: entered allmulticast mode [ 1674.504529][T26673] netlink: 'syz.0.5635': attribute type 1 has an invalid length. [ 1675.805406][T26673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1675.822279][T26678] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1675.838370][T26681] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1675.845344][T26681] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1676.081737][T26705] syzkaller1: entered promiscuous mode [ 1676.087245][T26705] syzkaller1: entered allmulticast mode [ 1676.687674][T26759] syzkaller1: entered promiscuous mode [ 1676.696039][T26759] syzkaller1: entered allmulticast mode [ 1676.734493][T26762] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1676.743478][T26762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1677.250034][T26806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1677.443452][T26803] infiniband syz0: set down [ 1677.448060][T26803] infiniband syz0: added bond_slave_0 [ 1677.472211][T26816] netlink: 'syz.0.5678': attribute type 8 has an invalid length. [ 1677.478994][T26803] RDS/IB: syz0: added [ 1677.480111][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5678'. [ 1677.485156][T26803] smc: adding ib device syz0 with port count 1 [ 1677.499322][T26816] bond0: entered promiscuous mode [ 1677.505151][T26816] bond_slave_0: entered promiscuous mode [ 1677.511002][T26816] bond_slave_1: entered promiscuous mode [ 1677.512046][T26803] smc: ib device syz0 port 1 has no pnetid [ 1677.518519][T26816] gretap0: entered promiscuous mode [ 1677.528700][T26816] batadv0: entered promiscuous mode [ 1677.536220][T26816] hsr1: entered promiscuous mode [ 1677.609493][T26819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1677.833370][T26832] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5685'. [ 1678.488118][T26869] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1678.580186][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5698'. [ 1678.790613][ T5860] IPVS: starting estimator thread 0... [ 1678.933930][T26887] IPVS: using max 49 ests per chain, 117600 per kthread [ 1678.944345][T26891] tipc: Enabled bearer , priority 0 [ 1678.978197][T26891] tipc: Resetting bearer [ 1679.035190][T26890] tipc: Disabling bearer [ 1679.067113][T26898] tipc: Started in network mode [ 1679.072004][T26898] tipc: Node identity c2e3b47957c2, cluster identity 4711 [ 1679.079827][T26898] tipc: Enabled bearer , priority 0 [ 1679.088115][T26898] syzkaller0: entered promiscuous mode [ 1679.093628][T26898] syzkaller0: entered allmulticast mode [ 1679.150247][T26897] tipc: Resetting bearer [ 1679.179085][T26897] tipc: Disabling bearer [ 1679.460766][T26916] syzkaller0: entered promiscuous mode [ 1679.466639][T26916] syzkaller0: entered allmulticast mode [ 1679.998054][T26947] syz_tun: left allmulticast mode [ 1680.079990][T26953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1680.310216][T26971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.383896][T26976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5738'. [ 1680.399400][T26976] xt_hashlimit: size too large, truncated to 1048576 [ 1680.406168][T26978] netlink: 'syz.0.5739': attribute type 10 has an invalid length. [ 1680.407796][T26976] xt_hashlimit: overflow, try lower: 0/0 [ 1680.450008][T26976] syz_tun: entered allmulticast mode [ 1680.488458][T26975] syz_tun: left allmulticast mode [ 1680.586064][T26984] syzkaller0: entered promiscuous mode [ 1680.591703][T26984] syzkaller0: entered allmulticast mode [ 1680.673685][T26992] netlink: 'syz.0.5744': attribute type 8 has an invalid length. [ 1680.681670][T26992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5744'. [ 1681.245788][T27012] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1682.450813][T27046] netlink: 'syz.2.5761': attribute type 8 has an invalid length. [ 1682.462285][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1682.498616][T27049] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1682.579562][T27053] syzkaller0: entered promiscuous mode [ 1682.585053][T27053] syzkaller0: entered allmulticast mode [ 1683.587840][T27078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1683.604769][T27078] xt_hashlimit: size too large, truncated to 1048576 [ 1683.611789][T27078] xt_hashlimit: overflow, try lower: 0/0 [ 1684.064497][T27066] syzkaller1: entered promiscuous mode [ 1684.071296][T27066] syzkaller1: entered allmulticast mode [ 1684.411223][T27105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1684.521123][T27111] syzkaller0: entered promiscuous mode [ 1684.529149][T27111] syzkaller0: entered allmulticast mode [ 1684.663571][T27123] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1686.029847][T27135] syzkaller0: entered promiscuous mode [ 1686.035432][T27135] syzkaller0: entered allmulticast mode [ 1686.109634][T27116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.224667][T27159] tipc: Enabled bearer , priority 0 [ 1686.297603][T27116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.329547][T27159] syzkaller0: entered promiscuous mode [ 1686.339308][T27159] syzkaller0: entered allmulticast mode [ 1686.410239][T27116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.438803][T27164] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1686.466491][T27159] tipc: Resetting bearer [ 1686.481513][T27158] tipc: Resetting bearer [ 1686.498670][T27158] tipc: Disabling bearer [ 1686.540130][T27116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.660880][ T86] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.706041][ T86] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.752651][ T86] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.781484][T16690] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.921348][T27198] tipc: Enabled bearer , priority 0 [ 1686.932259][T27198] syzkaller0: entered promiscuous mode [ 1686.949530][T27198] syzkaller0: entered allmulticast mode [ 1686.969889][T27200] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5812'. [ 1686.997225][T27200] syzkaller1: entered promiscuous mode [ 1687.003097][T27200] syzkaller1: entered allmulticast mode [ 1687.014665][T27198] tipc: Resetting bearer [ 1687.074769][T27197] tipc: Resetting bearer [ 1687.117717][T27197] tipc: Disabling bearer [ 1687.492882][T27219] syzkaller0: entered promiscuous mode [ 1687.514746][T27219] syzkaller0: entered allmulticast mode [ 1687.765848][T27239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1688.155685][T27264] syzkaller0: entered promiscuous mode [ 1688.174813][T27264] syzkaller0: entered allmulticast mode [ 1688.501734][T22213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1688.511808][T22213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1688.522429][T22213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1688.537347][T22213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1688.545113][T22213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1690.061838][T27298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1690.133722][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5849'. [ 1690.143341][T27301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5849'. [ 1690.414610][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5858'. [ 1690.753935][T22213] Bluetooth: hci1: command tx timeout [ 1690.891019][T27284] chnl_net:caif_netlink_parms(): no params data found [ 1690.956683][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330b9000: rx timeout, send abort [ 1690.980278][ T30] audit: type=1400 audit(1773014667.319:899): avc: denied { read } for pid=5160 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1691.049131][T16690] bridge_slave_1: left allmulticast mode [ 1691.052371][ T30] audit: type=1400 audit(1773014667.319:900): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.062971][T16690] bridge_slave_1: left promiscuous mode [ 1691.101755][ T30] audit: type=1400 audit(1773014667.319:901): avc: denied { search } for pid=5160 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.101870][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.123483][ T30] audit: type=1400 audit(1773014667.319:902): avc: denied { add_name } for pid=5160 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.161588][ T30] audit: type=1400 audit(1773014667.319:903): avc: denied { create } for pid=5160 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1691.195509][T16690] bridge_slave_0: left allmulticast mode [ 1691.201300][T16690] bridge_slave_0: left promiscuous mode [ 1691.201541][ T30] audit: type=1400 audit(1773014667.328:904): avc: denied { append open } for pid=5160 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1691.222918][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.247326][ T30] audit: type=1400 audit(1773014667.328:905): avc: denied { getattr } for pid=5160 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1691.491204][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031ceec00: rx timeout, send abort [ 1691.501025][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330b9000: abort rx timeout. Force session deactivation [ 1691.711221][T16690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.720911][T16690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.730676][T16690] bond0 (unregistering): Released all slaves [ 1691.752479][T27364] tipc: Enabled bearer , priority 0 [ 1691.759961][T27370] syzkaller0: entered promiscuous mode [ 1691.783040][T27370] syzkaller0: entered allmulticast mode [ 1691.806657][T27381] tipc: Resetting bearer [ 1691.892941][T16690] tipc: Left network mode [ 1691.898965][T27354] tipc: Resetting bearer [ 1691.974582][T27354] tipc: Disabling bearer [ 1692.016947][T27284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.033709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031ceec00: abort rx timeout. Force session deactivation [ 1692.045135][T27284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.065909][T27284] bridge_slave_0: entered allmulticast mode [ 1692.074277][T27284] bridge_slave_0: entered promiscuous mode [ 1692.083066][T27284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.090283][T27284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.097701][T27284] bridge_slave_1: entered allmulticast mode [ 1692.122561][T27284] bridge_slave_1: entered promiscuous mode [ 1692.381373][T27423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1692.438400][T27284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.473682][T27284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1692.544503][T27284] team0: Port device team_slave_0 added [ 1692.549669][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5883'. [ 1692.559750][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1692.591577][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1692.600471][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044247800: rx timeout, send abort [ 1692.634700][T27284] team0: Port device team_slave_1 added [ 1692.687781][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1692.736355][ T30] audit: type=1400 audit(1773014668.966:906): avc: denied { connect } for pid=27448 comm="syz.1.5888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1692.741924][T27446] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1692.833504][T27284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.847164][T27284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1692.918314][T27284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.979257][T22213] Bluetooth: hci1: command tx timeout [ 1692.988571][T16690] hsr_slave_0: left promiscuous mode [ 1692.995698][T16690] hsr_slave_1: left promiscuous mode [ 1693.005428][T16690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.017505][T16690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.132390][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880694ed800: rx timeout, send abort [ 1693.140792][ C0] vcan0: j1939_tp_rxtimer: 0xffff888044247800: abort rx timeout. Force session deactivation [ 1693.203084][T16690] team0 (unregistering): Port device team_slave_1 removed [ 1693.226048][T16690] team0 (unregistering): Port device team_slave_0 removed [ 1693.317699][T27284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.324687][T27284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.350636][T27284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.434572][T27466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1693.506290][T27284] hsr_slave_0: entered promiscuous mode [ 1693.512872][T27284] hsr_slave_1: entered promiscuous mode [ 1693.519040][T27284] debugfs: 'hsr0' already exists in 'hsr' [ 1693.525020][T27284] Cannot create hsr debugfs directory [ 1693.674973][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880694ed800: abort rx timeout. Force session deactivation [ 1693.693595][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1693.887080][T27495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1693.900969][T16690] IPVS: stop unused estimator thread 0... [ 1694.267359][T27523] openvswitch: netlink: Flow actions attr not present in new flow. [ 1694.347003][T16690] wlan1: Trigger new scan to find an IBSS to join [ 1694.460932][T27535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1694.536931][T27537] syzkaller0: entered promiscuous mode [ 1694.573370][T27537] syzkaller0: entered allmulticast mode [ 1694.630135][T27537] simple: basic_1 [ 1694.634058][T27537] simple: basic_2 [ 1694.637696][T27537] simple: basic_3 [ 1694.641338][T27537] simple: basic_4 [ 1694.645013][T27537] simple: basic_5 [ 1694.648646][T27537] simple: basic_6 [ 1694.652271][T27537] simple: basic_7 [ 1694.655944][T27537] simple: basic_8 [ 1694.659572][T27537] simple: basic_9 [ 1694.663209][T27537] simple: basic_10 [ 1694.666965][T27537] simple: basic_11 [ 1694.670680][T27537] simple: basic_12 [ 1694.674441][T27537] simple: basic_13 [ 1694.678152][T27537] simple: basic_14 [ 1694.681871][T27537] simple: basic_15 [ 1694.685657][T27537] simple: basic_16 [ 1694.689372][T27537] simple: basic_17 [ 1694.693088][T27537] 0: reclassify loop, rule prio 0, protocol 800 [ 1694.835219][T27554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1694.926940][T27284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1694.971888][T27284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1695.001738][T27561] netlink: 'syz.0.5916': attribute type 21 has an invalid length. [ 1695.020033][T27284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1695.059602][T27561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5916'. [ 1695.098473][T27561] netlink: 'syz.0.5916': attribute type 4 has an invalid length. [ 1695.123599][T27561] netlink: 'syz.0.5916': attribute type 5 has an invalid length. [ 1695.131655][T27284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1695.205043][T27575] pimreg: entered allmulticast mode [ 1695.214838][T22213] Bluetooth: hci1: command tx timeout [ 1695.314451][ T30] audit: type=1400 audit(1773014671.380:907): avc: denied { ioctl } for pid=27569 comm="syz.3.5920" path="socket:[110916]" dev="sockfs" ino=110916 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1695.921805][T27284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.949813][T27284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1695.968587][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.975733][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.026938][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.034089][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1696.100618][T27284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1696.174876][T27613] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1696.370773][T27630] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input101 [ 1696.659792][T27284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.977360][T27284] veth0_vlan: entered promiscuous mode [ 1696.992574][T27284] veth1_vlan: entered promiscuous mode [ 1697.039610][T27284] veth0_macvtap: entered promiscuous mode [ 1697.050838][T27284] veth1_macvtap: entered promiscuous mode [ 1697.073023][T27284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1697.093275][T27284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1697.104399][T27670] syzkaller0: entered promiscuous mode [ 1697.109890][T27670] syzkaller0: entered allmulticast mode [ 1697.135821][ T86] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.145837][ T86] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.187193][ T86] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.195977][ T86] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.299256][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.314428][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.374396][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.384113][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.421555][T22213] Bluetooth: hci1: command tx timeout [ 1697.606986][T27697] syzkaller0: entered promiscuous mode [ 1697.612513][T27697] syzkaller0: entered allmulticast mode [ 1697.714247][T27703] syzkaller0: entered promiscuous mode [ 1697.721035][T27703] syzkaller0: entered allmulticast mode [ 1697.825355][T27709] syzkaller0: entered promiscuous mode [ 1697.832298][T27709] syzkaller0: entered allmulticast mode [ 1697.842472][T27709] tipc: Enabled bearer , priority 0 [ 1697.851339][T27708] tipc: Resetting bearer [ 1697.883178][T27708] tipc: Disabling bearer [ 1697.947718][T27717] __nla_validate_parse: 8 callbacks suppressed [ 1697.947738][T27717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1698.196159][T27732] syzkaller0: entered promiscuous mode [ 1698.202593][T27732] syzkaller0: entered allmulticast mode [ 1698.210766][T27734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5969'. [ 1698.308552][T27738] syzkaller0: entered promiscuous mode [ 1698.314062][T27738] syzkaller0: entered allmulticast mode [ 1698.331108][T27742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1698.341174][T27744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1698.685478][T27768] syzkaller0: entered promiscuous mode [ 1698.693774][T27772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1698.702829][T27768] syzkaller0: entered allmulticast mode [ 1699.740046][T16690] wlan1: Trigger new scan to find an IBSS to join [ 1700.072579][T27805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6000'. [ 1700.377447][T27789] syzkaller0: entered promiscuous mode [ 1700.382990][T27789] syzkaller0: entered allmulticast mode [ 1700.791112][T11596] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 1701.880698][T27821] syzkaller0: entered promiscuous mode [ 1701.886350][T27821] syzkaller0: entered allmulticast mode [ 1702.132727][T27840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6013'. [ 1702.281325][T27847] syzkaller0: entered promiscuous mode [ 1702.288616][T27847] syzkaller0: entered allmulticast mode [ 1702.634806][T27876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1702.711851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8d2000: rx timeout, send abort [ 1703.248761][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8d3400: rx timeout, send abort [ 1703.257203][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8d2000: abort rx timeout. Force session deactivation [ 1703.791316][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b8d3400: abort rx timeout. Force session deactivation [ 1703.891868][T27878] tipc: New replicast peer: 255.255.255.255 [ 1703.914916][T27878] tipc: Enabled bearer , priority 10 [ 1704.061179][T27895] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1704.327920][T27915] netlink: 'syz.4.6042': attribute type 3 has an invalid length. [ 1704.335828][T27915] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6042'. [ 1704.344931][T27915] netlink: 'syz.4.6042': attribute type 3 has an invalid length. [ 1704.353800][T27915] netlink: 208 bytes leftover after parsing attributes in process `syz.4.6042'. [ 1704.444252][T27918] syzkaller0: entered promiscuous mode [ 1704.449842][T27918] syzkaller0: entered allmulticast mode [ 1704.463835][T27922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6046'. [ 1704.475132][T27923] tipc: Enabling of bearer rejected, failed to enable media [ 1704.768855][T27942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6051'. [ 1705.964410][T27942] bond0: entered promiscuous mode [ 1705.970648][T27942] bond_slave_0: entered promiscuous mode [ 1705.976462][T27942] bond_slave_1: entered promiscuous mode [ 1705.984471][T27942] gretap0: entered promiscuous mode [ 1705.990986][T27942] debugfs: 'hsr1' already exists in 'hsr' [ 1705.996724][T27942] Cannot create hsr debugfs directory [ 1706.013199][T27942] hsr1: entered promiscuous mode [ 1706.155781][T27955] tipc: Started in network mode [ 1706.160689][T27955] tipc: Node identity ac14140f, cluster identity 4711 [ 1706.187306][T27955] tipc: New replicast peer: 255.255.255.255 [ 1706.196194][T27955] tipc: Enabled bearer , priority 10 [ 1706.200095][T27960] xt_hashlimit: size too large, truncated to 1048576 [ 1706.213583][T27961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6058'. [ 1706.317507][T27971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1706.475519][T27976] syzkaller0: entered promiscuous mode [ 1706.491104][T27976] syzkaller0: entered allmulticast mode [ 1706.539970][T27981] tipc: Enabling of bearer rejected, failed to enable media [ 1707.042492][T28009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6073'. [ 1708.265826][T23818] tipc: Node number set to 2886997007 [ 1708.360477][T28026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1708.416716][T28028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1708.426865][T28026] bond0: entered promiscuous mode [ 1708.438075][T28026] gretap0: entered promiscuous mode [ 1708.443879][T28026] debugfs: 'hsr1' already exists in 'hsr' [ 1708.457280][T28026] Cannot create hsr debugfs directory [ 1708.463695][T28026] hsr1: entered promiscuous mode [ 1708.675596][T28049] tipc: Enabling of bearer rejected, failed to enable media [ 1708.840813][T28056] syzkaller0: entered promiscuous mode [ 1708.846539][T28056] syzkaller0: entered allmulticast mode [ 1709.504229][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d9bd400: rx timeout, send abort [ 1710.038492][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f450400: rx timeout, send abort [ 1710.046866][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d9bd400: abort rx timeout. Force session deactivation [ 1710.103660][T28081] __nla_validate_parse: 1 callbacks suppressed [ 1710.103678][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1710.581639][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f450400: abort rx timeout. Force session deactivation [ 1710.911879][T28116] tipc: Enabling of bearer rejected, failed to enable media [ 1711.214788][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803633f800: rx timeout, send abort [ 1711.299993][T28150] syzkaller0: entered promiscuous mode [ 1711.305603][T28150] syzkaller0: entered allmulticast mode [ 1711.751824][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803633d400: rx timeout, send abort [ 1711.760094][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803633f800: abort rx timeout. Force session deactivation [ 1712.294342][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803633d400: abort rx timeout. Force session deactivation [ 1713.073724][T28197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 1713.074560][T28196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1713.193548][T28207] Bluetooth: MGMT ver 1.23 [ 1713.475030][T28222] xt_CT: No such helper "snmp_trap" [ 1713.517757][T28232] tipc: Enabled bearer , priority 0 [ 1713.526461][T28232] syzkaller0: entered promiscuous mode [ 1713.532090][T28232] syzkaller0: entered allmulticast mode [ 1713.594177][T28232] tipc: Resetting bearer [ 1713.617981][T28229] syzkaller0: entered promiscuous mode [ 1713.624928][T28229] syzkaller0: entered allmulticast mode [ 1713.639267][T28231] tipc: Resetting bearer [ 1713.663244][T28238] netlink: 'syz.4.6141': attribute type 20 has an invalid length. [ 1713.671764][T28231] tipc: Disabling bearer [ 1713.672078][T28238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6141'. [ 1713.718873][T28236] syzkaller1: entered promiscuous mode [ 1713.724448][T28236] syzkaller1: entered allmulticast mode [ 1713.820855][T28239] syzkaller0: entered promiscuous mode [ 1713.826774][T28239] syzkaller0: entered allmulticast mode [ 1713.866823][T28245] syzkaller0: entered promiscuous mode [ 1713.872341][T28245] syzkaller0: entered allmulticast mode [ 1714.105491][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1714.121718][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1714.140784][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1714.154425][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1714.177609][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1715.863256][T18376] syz_tun (unregistering): left allmulticast mode [ 1715.933645][T28310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1715.958053][T28312] netlink: 'syz.2.6152': attribute type 20 has an invalid length. [ 1715.968878][T28312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1716.122048][T28320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6156'. [ 1716.155391][ T30] audit: type=1400 audit(1773014690.882:908): avc: denied { write } for pid=28319 comm="syz.3.6156" path="socket:[113314]" dev="sockfs" ino=113314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1716.400515][T22213] Bluetooth: hci5: command tx timeout [ 1716.495657][ T30] audit: type=1400 audit(1773014691.200:909): avc: denied { ioctl } for pid=28331 comm="syz.3.6161" path="socket:[113356]" dev="sockfs" ino=113356 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1716.606845][T28348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6164'. [ 1716.644933][ T30] audit: type=1400 audit(1773014691.341:910): avc: denied { read } for pid=28331 comm="syz.3.6161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1716.762915][T28331] lec:lec_atm_close: lec0: Shut down! [ 1716.881400][ T30] audit: type=1400 audit(1773014691.565:911): avc: denied { write } for pid=28363 comm="syz.2.6169" path="socket:[113414]" dev="sockfs" ino=113414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1717.000721][T28371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1717.060367][T28256] chnl_net:caif_netlink_parms(): no params data found [ 1717.107388][T11609] bridge_slave_1: left allmulticast mode [ 1717.113046][T11609] bridge_slave_1: left promiscuous mode [ 1717.130859][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.190901][T11609] bridge_slave_0: left allmulticast mode [ 1717.220563][T11609] bridge_slave_0: left promiscuous mode [ 1717.232237][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.257711][T28388] netlink: 'syz.3.6175': attribute type 32 has an invalid length. [ 1717.363909][T28394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6178'. [ 1717.847490][T11609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.859101][T11609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.868494][T11609] bond0 (unregistering): Released all slaves [ 1717.880436][T11609] bond1 (unregistering): Released all slaves [ 1717.896904][T11609] bond2 (unregistering): Released all slaves [ 1717.953699][T28404] tipc: New replicast peer: 255.255.255.255 [ 1717.979888][T28404] tipc: Enabled bearer , priority 10 [ 1718.056206][T11609] tipc: Left network mode [ 1718.624340][T22213] Bluetooth: hci5: command tx timeout [ 1719.590743][T28426] syzkaller0: entered promiscuous mode [ 1719.596325][T28426] syzkaller0: entered allmulticast mode [ 1719.795721][T28457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6194'. [ 1720.848637][T22213] Bluetooth: hci5: command tx timeout [ 1721.195854][ T5860] tipc: Node number set to 2502014073 [ 1721.313988][T28256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.335926][T28256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.379715][T28256] bridge_slave_0: entered allmulticast mode [ 1721.409136][T28256] bridge_slave_0: entered promiscuous mode [ 1721.455671][T28256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.463241][T28256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.472718][T28256] bridge_slave_1: entered allmulticast mode [ 1721.480392][T28256] bridge_slave_1: entered promiscuous mode [ 1721.631058][T28497] syzkaller0: entered promiscuous mode [ 1721.659290][T28497] syzkaller0: entered allmulticast mode [ 1721.857710][T28524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6209'. [ 1723.070082][T22213] Bluetooth: hci5: command tx timeout [ 1723.219637][T28256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.230224][T11609] hsr_slave_0: left promiscuous mode [ 1723.235840][T11609] hsr_slave_1: left promiscuous mode [ 1723.242359][T11609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.250173][T11609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1723.342492][T11609] team0 (unregistering): Port device team_slave_1 removed [ 1723.370649][T11609] team0 (unregistering): Port device team_slave_0 removed [ 1723.394276][T11590] smc: removing ib device syz0 [ 1723.430604][T28548] netlink: 'syz.2.6212': attribute type 21 has an invalid length. [ 1723.438802][T28548] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6212'. [ 1723.455113][T28511] syzkaller0: entered promiscuous mode [ 1723.460576][T28511] syzkaller0: entered allmulticast mode [ 1723.571668][T28256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.598959][T28548] netlink: 'syz.2.6212': attribute type 4 has an invalid length. [ 1723.610829][T28548] netlink: 'syz.2.6212': attribute type 5 has an invalid length. [ 1723.624276][T28548] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6212'. [ 1723.780268][T28256] team0: Port device team_slave_0 added [ 1723.815035][T28256] team0: Port device team_slave_1 added [ 1724.092820][T28256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.102698][T28256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.134901][T28256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.192759][T28256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.213675][T28256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.251361][T28256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.407753][T28591] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6221'. [ 1724.560390][T28600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1724.652021][T28577] syzkaller0: entered promiscuous mode [ 1724.657992][T28577] syzkaller0: entered allmulticast mode [ 1724.700370][T28592] syzkaller0: entered promiscuous mode [ 1724.706339][T28592] syzkaller0: entered allmulticast mode [ 1724.727468][T28256] hsr_slave_0: entered promiscuous mode [ 1724.751019][T28256] hsr_slave_1: entered promiscuous mode [ 1724.767151][T28256] debugfs: 'hsr0' already exists in 'hsr' [ 1724.773001][T28256] Cannot create hsr debugfs directory [ 1727.803801][T28625] syzkaller0: entered promiscuous mode [ 1727.813648][T28625] syzkaller0: entered allmulticast mode [ 1727.921785][T28635] syzkaller0: entered promiscuous mode [ 1727.932786][T28638] netlink: 'syz.2.6230': attribute type 21 has an invalid length. [ 1727.934580][T28635] syzkaller0: entered allmulticast mode [ 1727.962002][T28638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1728.084924][T28648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6233'. [ 1728.130690][T28638] netlink: 'syz.2.6230': attribute type 4 has an invalid length. [ 1728.138582][T28638] netlink: 'syz.2.6230': attribute type 5 has an invalid length. [ 1728.146518][T28638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1728.169966][T11609] IPVS: stop unused estimator thread 0... [ 1728.241624][T28651] syzkaller0: entered promiscuous mode [ 1728.255856][T28651] syzkaller0: entered allmulticast mode [ 1728.391622][T28664] syzkaller0: entered promiscuous mode [ 1728.397354][T28664] syzkaller0: entered allmulticast mode [ 1728.731600][T28256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1728.771498][T28256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1728.804457][T28256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1728.821803][T28256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1729.014832][T28256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.032152][T28701] syzkaller1: entered promiscuous mode [ 1729.038477][T28701] syzkaller1: entered allmulticast mode [ 1729.059659][T28707] syzkaller0: entered promiscuous mode [ 1729.068745][T28707] syzkaller0: entered allmulticast mode [ 1729.097186][ T30] audit: type=1400 audit(1773014703.001:912): avc: denied { bind } for pid=28700 comm="syz.4.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1729.101700][T28256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.141976][ T30] audit: type=1400 audit(1773014703.001:913): avc: denied { listen } for pid=28700 comm="syz.4.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1729.194878][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.202049][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.234672][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.241866][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1729.354314][ T5473] lec:lec_start_xmit: lec0:No lecd attached [ 1729.463769][T28723] syzkaller0: entered promiscuous mode [ 1729.480517][T28723] syzkaller0: entered allmulticast mode [ 1729.665828][T28741] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1729.683789][T28256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.770028][T28256] veth0_vlan: entered promiscuous mode [ 1729.798487][T28256] veth1_vlan: entered promiscuous mode [ 1729.838887][T28256] veth0_macvtap: entered promiscuous mode [ 1729.852117][T28256] veth1_macvtap: entered promiscuous mode [ 1729.875715][T28256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1729.899497][T28256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1729.934678][T21127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.965148][T21127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.003535][T21127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.025997][T21127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.047386][T28694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1732.171799][T16690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.179675][T16690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.233555][T28803] syzkaller1: entered promiscuous mode [ 1732.239552][T28803] syzkaller1: entered allmulticast mode [ 1732.285980][T11590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.310634][T11590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.806256][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1732.820962][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1732.831194][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1732.853609][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1732.868669][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1732.922271][ T1146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1733.155985][T28847] chnl_net:caif_netlink_parms(): no params data found [ 1733.208498][T28862] syzkaller0: entered promiscuous mode [ 1733.219570][T28862] syzkaller0: entered allmulticast mode [ 1733.289362][T28847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.296615][T28847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.303746][T28847] bridge_slave_0: entered allmulticast mode [ 1733.311711][T28847] bridge_slave_0: entered promiscuous mode [ 1733.319637][T28847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.327677][T28847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.334871][T28847] bridge_slave_1: entered allmulticast mode [ 1733.342682][T28847] bridge_slave_1: entered promiscuous mode [ 1733.373000][T28847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.391747][T28847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.434414][T28847] team0: Port device team_slave_0 added [ 1733.451534][T28847] team0: Port device team_slave_1 added [ 1733.478792][T28847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.485746][T28847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.512000][T28847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.523946][T28847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.531384][T28847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.557512][T28847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.598057][T28847] hsr_slave_0: entered promiscuous mode [ 1733.604263][T28847] hsr_slave_1: entered promiscuous mode [ 1733.610155][T28847] debugfs: 'hsr0' already exists in 'hsr' [ 1733.616053][T28847] Cannot create hsr debugfs directory [ 1733.794648][ T1146] gretap0 (unregistering): left promiscuous mode [ 1734.173069][ T1146] bond0 (unregistering): left promiscuous mode [ 1734.182772][ T1146] bond0 (unregistering): Released all slaves [ 1734.240098][ T1146] tipc: Left network mode [ 1734.409250][ T1146] hsr_slave_0: left promiscuous mode [ 1734.414975][ T1146] hsr_slave_1: left promiscuous mode [ 1734.838122][ T1146] IPVS: stop unused estimator thread 0... [ 1734.960718][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1734.969115][ C0] lec:lec_tx_timeout: lec0 [ 1734.974145][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1735.035616][ T51] Bluetooth: hci4: command tx timeout [ 1735.626115][T28816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1735.667004][T28847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1735.686554][T28847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1735.718197][T28847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1735.765850][T28847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1735.862868][T28885] syzkaller1: entered promiscuous mode [ 1735.880714][T28885] syzkaller1: entered allmulticast mode [ 1736.116159][T28910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.123985][T28910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1736.180567][T28908] syzkaller0: entered promiscuous mode [ 1736.186067][T28908] syzkaller0: entered allmulticast mode [ 1736.213396][T28847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.229869][T28847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.303491][T21127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.310663][T21127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.327253][T28923] syzkaller0: entered promiscuous mode [ 1736.345805][T28923] syzkaller0: entered allmulticast mode [ 1736.376562][T11590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.383734][T11590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1736.852990][T28847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1736.898785][T28966] syzkaller0: entered promiscuous mode [ 1736.915189][T28966] syzkaller0: entered allmulticast mode [ 1736.935509][T28959] syzkaller0: entered promiscuous mode [ 1736.952896][T28959] syzkaller0: entered allmulticast mode [ 1737.092654][T28972] syzkaller0: entered promiscuous mode [ 1737.105545][T28972] syzkaller0: entered allmulticast mode [ 1737.264471][ T51] Bluetooth: hci4: command tx timeout [ 1737.727979][T28961] lec:lec_atm_close: lec0: Shut down! [ 1738.787561][T29015] syzkaller0: entered promiscuous mode [ 1738.794586][T29015] syzkaller0: entered allmulticast mode [ 1738.946093][T28847] veth0_vlan: entered promiscuous mode [ 1739.041720][T29030] syzkaller0: entered promiscuous mode [ 1739.074894][T29030] syzkaller0: entered allmulticast mode [ 1739.095866][T28847] veth1_vlan: entered promiscuous mode [ 1739.235547][T16690] wlan1: Trigger new scan to find an IBSS to join [ 1739.485459][ T51] Bluetooth: hci4: command tx timeout [ 1740.564450][T28847] veth0_macvtap: entered promiscuous mode [ 1740.583156][T28847] veth1_macvtap: entered promiscuous mode [ 1740.611186][T28847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1740.631878][T28847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1740.649662][T11590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.709286][T11590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.717841][T29065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6327'. [ 1740.726046][T11590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.790043][T11590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.917410][T29078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6333'. [ 1740.930946][T16690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.962383][T16690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.039965][T29082] syzkaller0: entered promiscuous mode [ 1741.063157][T29082] syzkaller0: entered allmulticast mode [ 1741.070379][T16690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.086156][T16690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.669644][T29068] lec:lec_atm_close: lec0: Shut down! [ 1741.718487][ T51] Bluetooth: hci4: command tx timeout [ 1742.663106][T29089] syzkaller1: entered promiscuous mode [ 1742.668940][T29089] syzkaller1: entered allmulticast mode [ 1742.677443][T29096] bridge0: entered allmulticast mode [ 1742.713306][T29107] syzkaller0: entered promiscuous mode [ 1742.720132][T29107] syzkaller0: entered allmulticast mode [ 1743.017199][T22213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1743.028586][T22213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1743.037186][T22213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1743.056519][T22213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1743.067202][T22213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1743.500436][T16690] wlan1: Trigger new scan to find an IBSS to join [ 1744.720181][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1744.918404][T29165] syzkaller0: entered promiscuous mode [ 1744.924070][T29165] syzkaller0: entered allmulticast mode [ 1745.241372][T28797] ================================================================== [ 1745.249453][T28797] BUG: KASAN: null-ptr-deref in send_to_lecd+0x2ef/0x5e0 [ 1745.256454][T28797] Write of size 4 at addr 0000000000000140 by task dhcpcd/28797 [ 1745.264049][T28797] [ 1745.266364][T28797] CPU: 1 UID: 101 PID: 28797 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1745.266380][T28797] Tainted: [L]=SOFTLOCKUP [ 1745.266384][T28797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1745.266391][T28797] Call Trace: [ 1745.266396][T28797] [ 1745.266400][T28797] dump_stack_lvl+0x100/0x190 [ 1745.266419][T28797] kasan_report+0xdf/0x1e0 [ 1745.266430][T28797] ? send_to_lecd+0x2ef/0x5e0 [ 1745.266443][T28797] kasan_check_range+0x10f/0x1e0 [ 1745.266455][T28797] send_to_lecd+0x2ef/0x5e0 [ 1745.266467][T28797] lec_start_xmit+0x1252/0x2070 [ 1745.266481][T28797] dev_hard_start_xmit+0x121/0x7d0 [ 1745.266498][T28797] sch_direct_xmit+0x1b2/0xc60 [ 1745.266509][T28797] ? __lock_acquire+0x4a5/0x2630 [ 1745.266526][T28797] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1745.266536][T28797] ? pfifo_fast_dequeue+0x5ba/0xb70 [ 1745.266548][T28797] __qdisc_run+0x52d/0x1b10 [ 1745.266559][T28797] __dev_queue_xmit+0x196d/0x4800 [ 1745.266575][T28797] ? find_held_lock+0x2b/0x80 [ 1745.266588][T28797] ? __might_fault+0xc5/0x140 [ 1745.266602][T28797] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1745.266620][T28797] ? __pfx__copy_from_iter+0x10/0x10 [ 1745.266636][T28797] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1745.266654][T28797] ? packet_parse_headers+0x5ae/0x800 [ 1745.266668][T28797] ? __asan_memset+0x23/0x50 [ 1745.266681][T28797] ? packet_parse_headers+0x5ba/0x800 [ 1745.266695][T28797] ? packet_parse_headers+0x205/0x800 [ 1745.266709][T28797] ? __pfx_packet_parse_headers+0x10/0x10 [ 1745.266724][T28797] packet_xmit+0x243/0x310 [ 1745.266739][T28797] packet_sendmsg+0x32f4/0x53c0 [ 1745.266753][T28797] ? avc_has_perm+0xf0/0x1e0 [ 1745.266771][T28797] ? sock_has_perm+0x258/0x2f0 [ 1745.266781][T28797] ? __pfx_sock_has_perm+0x10/0x10 [ 1745.266791][T28797] ? __pfx_packet_sendmsg+0x10/0x10 [ 1745.266809][T28797] sock_write_iter+0x524/0x5a0 [ 1745.266823][T28797] ? __pfx_packet_sendmsg+0x10/0x10 [ 1745.266837][T28797] ? __pfx_sock_write_iter+0x10/0x10 [ 1745.266853][T28797] ? __pfx_file_has_perm+0x10/0x10 [ 1745.266870][T28797] do_iter_readv_writev+0x6ee/0x920 [ 1745.266885][T28797] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1745.266900][T28797] ? selinux_file_permission+0x8f/0x6d0 [ 1745.266913][T28797] ? bpf_lsm_file_permission+0x9/0x10 [ 1745.266928][T28797] ? security_file_permission+0x76/0x210 [ 1745.266942][T28797] ? rw_verify_area+0xce/0x6d0 [ 1745.266956][T28797] vfs_writev+0x360/0xe10 [ 1745.266972][T28797] ? __pfx_vfs_writev+0x10/0x10 [ 1745.266986][T28797] ? rw_verify_area+0xce/0x6d0 [ 1745.267000][T28797] ? __pfx_sock_read_iter+0x10/0x10 [ 1745.267018][T28797] ? do_writev+0x28a/0x340 [ 1745.267032][T28797] do_writev+0x28a/0x340 [ 1745.267046][T28797] ? __pfx_do_writev+0x10/0x10 [ 1745.267062][T28797] do_syscall_64+0x106/0xf80 [ 1745.267073][T28797] ? clear_bhb_loop+0x40/0x90 [ 1745.267086][T28797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.267097][T28797] RIP: 0033:0x7f53f6e3c407 [ 1745.267107][T28797] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1745.267117][T28797] RSP: 002b:00007fff9cf80170 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 1745.267128][T28797] RAX: ffffffffffffffda RBX: 00007f53f6db2780 RCX: 00007f53f6e3c407 [ 1745.267135][T28797] RDX: 0000000000000002 RSI: 00007fff9cf801d0 RDI: 0000000000000003 [ 1745.267142][T28797] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 1745.267148][T28797] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff9cf80210 [ 1745.267154][T28797] R13: 0000562512791790 R14: 00007fff9cf80260 R15: 00007fff9cf90430 [ 1745.267164][T28797] [ 1745.267168][T28797] ================================================================== [ 1745.623353][T28797] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1745.630521][T28797] CPU: 1 UID: 101 PID: 28797 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 1745.641256][T28797] Tainted: [L]=SOFTLOCKUP [ 1745.645547][T28797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1745.655571][T28797] Call Trace: [ 1745.658822][T28797] [ 1745.661727][T28797] dump_stack_lvl+0x100/0x190 [ 1745.666382][T28797] vpanic+0x552/0x970 [ 1745.670334][T28797] ? __pfx_vpanic+0x10/0x10 [ 1745.674804][T28797] ? __pfx_vprintk_emit+0x10/0x10 [ 1745.679802][T28797] ? is_bpf_text_address+0x6f/0x1a0 [ 1745.684984][T28797] ? send_to_lecd+0x2ef/0x5e0 [ 1745.689632][T28797] panic+0xd1/0xe0 [ 1745.693322][T28797] ? __pfx_panic+0x10/0x10 [ 1745.697709][T28797] ? end_report.part.0+0x23/0x90 [ 1745.702620][T28797] ? rcu_is_watching+0x12/0xc0 [ 1745.707355][T28797] ? end_report.part.0+0x23/0x90 [ 1745.712265][T28797] ? check_panic_on_warn+0x1f/0x90 [ 1745.717351][T28797] check_panic_on_warn.cold+0x19/0x34 [ 1745.722693][T28797] end_report.part.0+0x3a/0x90 [ 1745.727430][T28797] kasan_report.cold+0xe/0x18 [ 1745.732079][T28797] ? send_to_lecd+0x2ef/0x5e0 [ 1745.736728][T28797] kasan_check_range+0x10f/0x1e0 [ 1745.741637][T28797] send_to_lecd+0x2ef/0x5e0 [ 1745.746111][T28797] lec_start_xmit+0x1252/0x2070 [ 1745.750944][T28797] dev_hard_start_xmit+0x121/0x7d0 [ 1745.756029][T28797] sch_direct_xmit+0x1b2/0xc60 [ 1745.760762][T28797] ? __lock_acquire+0x4a5/0x2630 [ 1745.765675][T28797] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1745.770929][T28797] ? pfifo_fast_dequeue+0x5ba/0xb70 [ 1745.776097][T28797] __qdisc_run+0x52d/0x1b10 [ 1745.780570][T28797] __dev_queue_xmit+0x196d/0x4800 [ 1745.785570][T28797] ? find_held_lock+0x2b/0x80 [ 1745.790216][T28797] ? __might_fault+0xc5/0x140 [ 1745.794866][T28797] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1745.800223][T28797] ? __pfx__copy_from_iter+0x10/0x10 [ 1745.805496][T28797] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1745.810930][T28797] ? packet_parse_headers+0x5ae/0x800 [ 1745.816274][T28797] ? __asan_memset+0x23/0x50 [ 1745.820845][T28797] ? packet_parse_headers+0x5ba/0x800 [ 1745.826195][T28797] ? packet_parse_headers+0x205/0x800 [ 1745.831539][T28797] ? __pfx_packet_parse_headers+0x10/0x10 [ 1745.837240][T28797] packet_xmit+0x243/0x310 [ 1745.841657][T28797] packet_sendmsg+0x32f4/0x53c0 [ 1745.846480][T28797] ? avc_has_perm+0xf0/0x1e0 [ 1745.851047][T28797] ? sock_has_perm+0x258/0x2f0 [ 1745.855779][T28797] ? __pfx_sock_has_perm+0x10/0x10 [ 1745.860873][T28797] ? __pfx_packet_sendmsg+0x10/0x10 [ 1745.866048][T28797] sock_write_iter+0x524/0x5a0 [ 1745.870785][T28797] ? __pfx_packet_sendmsg+0x10/0x10 [ 1745.875956][T28797] ? __pfx_sock_write_iter+0x10/0x10 [ 1745.881215][T28797] ? __pfx_file_has_perm+0x10/0x10 [ 1745.886310][T28797] do_iter_readv_writev+0x6ee/0x920 [ 1745.891482][T28797] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1745.897187][T28797] ? selinux_file_permission+0x8f/0x6d0 [ 1745.902718][T28797] ? bpf_lsm_file_permission+0x9/0x10 [ 1745.908064][T28797] ? security_file_permission+0x76/0x210 [ 1745.913680][T28797] ? rw_verify_area+0xce/0x6d0 [ 1745.918426][T28797] vfs_writev+0x360/0xe10 [ 1745.922766][T28797] ? __pfx_vfs_writev+0x10/0x10 [ 1745.927603][T28797] ? rw_verify_area+0xce/0x6d0 [ 1745.932355][T28797] ? __pfx_sock_read_iter+0x10/0x10 [ 1745.937543][T28797] ? do_writev+0x28a/0x340 [ 1745.941933][T28797] do_writev+0x28a/0x340 [ 1745.946162][T28797] ? __pfx_do_writev+0x10/0x10 [ 1745.950912][T28797] do_syscall_64+0x106/0xf80 [ 1745.955474][T28797] ? clear_bhb_loop+0x40/0x90 [ 1745.960123][T28797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.965996][T28797] RIP: 0033:0x7f53f6e3c407 [ 1745.970382][T28797] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1745.989968][T28797] RSP: 002b:00007fff9cf80170 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 1745.998361][T28797] RAX: ffffffffffffffda RBX: 00007f53f6db2780 RCX: 00007f53f6e3c407 [ 1746.006302][T28797] RDX: 0000000000000002 RSI: 00007fff9cf801d0 RDI: 0000000000000003 [ 1746.014253][T28797] RBP: 0000000000000188 R08: 0000000000000000 R09: 0000000000000000 [ 1746.022193][T28797] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff9cf80210 [ 1746.030134][T28797] R13: 0000562512791790 R14: 00007fff9cf80260 R15: 00007fff9cf90430 [ 1746.038078][T28797] [ 1747.121911][T28797] Shutting down cpus with NMI [ 1747.126825][T28797] Kernel Offset: disabled [ 1747.131125][T28797] Rebooting in 86400 seconds..