last executing test programs: 5m34.674645099s ago: executing program 0 (id=921): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)=ANY=[], 0x0) 5m34.475414929s ago: executing program 0 (id=923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 5m34.337611435s ago: executing program 0 (id=925): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1b) getpeername(r2, 0x0, 0x0) 5m33.179412818s ago: executing program 1 (id=929): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) 5m32.328769748s ago: executing program 1 (id=931): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x50, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 5m31.124350434s ago: executing program 0 (id=934): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='./file1/../file0\x00', 0x0, 0x1c}, 0x14) r3 = socket(0x2b, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000037c0), 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x18408e, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 5m30.859582098s ago: executing program 0 (id=936): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 5m29.458595766s ago: executing program 0 (id=941): sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m29.429666705s ago: executing program 3 (id=942): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff04) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x4001, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1000000}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x401}, 0x1c) 5m28.918415329s ago: executing program 32 (id=941): sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m28.322225663s ago: executing program 1 (id=945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m28.289723923s ago: executing program 3 (id=946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 5m27.405196265s ago: executing program 1 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='./file1/../file0\x00', 0x0, 0x1c}, 0x14) r3 = socket(0x2b, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000037c0), 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x18408e, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 5m27.30719642s ago: executing program 3 (id=948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 5m27.214713091s ago: executing program 1 (id=949): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000000c0)=""/84) 5m25.159427382s ago: executing program 3 (id=958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000240)='./file1/../file0\x00', 0x0, 0x1c}, 0x14) r3 = socket(0x2b, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f00000037c0), 0x0, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x18408e, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 5m24.984529512s ago: executing program 1 (id=959): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1b) getpeername(r2, 0x0, 0x0) 5m23.766808307s ago: executing program 33 (id=959): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket(0x15, 0x5, 0x0) connect$l2tp6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1b) getpeername(r2, 0x0, 0x0) 5m23.721658807s ago: executing program 3 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 5m23.165365242s ago: executing program 3 (id=965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 5m22.709491598s ago: executing program 34 (id=965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 10.877559164s ago: executing program 2 (id=2961): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "fa54b4fbb5fa4d95", "0a5a06487d20e1a73c217b787ddac356", "0750e5e3", "192f8cc24e029a1a"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="34f3ffa50048be93ae5c181990077bb896f34179a3ad66739e60857dc01d512e55b8b3a3626692e5a8f7168fd3a144b53463f02256f9b120edd060893ff80ef4df7411268e21aeaa2f8ea35cb59daa87428e0ef84375bbbcb45e8b5138825cb359dd7e2a07964108c229", @ANYRES32=0x0], 0x34}}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000480), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0x3}) ppoll(&(0x7f0000000080)=[{r7, 0x349}], 0x1, 0x0, 0x0, 0x0) 9.856951505s ago: executing program 2 (id=2971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)="fbffffffffffff", 0x7}], 0x2) 9.242690366s ago: executing program 4 (id=2977): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x1, 0xff}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x24008801) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28b831877dff41c246b2690000001000010025bd7000fadbdf2500000000e1686e591927aaf62adfbbee39c85098b37d3397a5719a18b73303377bc5abdc6c4d9a44545f053006c528b359e738cef5f57cadcd925f5cc142bec756edc6a4cd15497d5da00e9c50dbca98f484232dc70f2d590a13e931e8a19ed153ed2be2904702a2c9", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 7.170034926s ago: executing program 4 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f0000000440)="f058fe7dad777f13", 0x300}], 0x2}, 0x5) 7.133848249s ago: executing program 2 (id=2984): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000002b00), 0x81940, 0x0) getegid() openat$nvram(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) fstat(r5, &(0x7f0000002b80)) statx(0xffffffffffffffff, &(0x7f0000002c00)='./file0\x00', 0x2000, 0x200, 0x0) sendmmsg$unix(r3, &(0x7f0000002e40)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000840)="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", 0x310}, {&(0x7f0000000300)="91e54fd0c99d67ab263e32bcafa855a6eb6e53f58ca8c8d3a935aa587ed2bb1219e5448d5b2b63041dff1b3fbf7dd7a2b66f6d214c370e07ac6f00c6200333c92c553a18cc3bf8384bc65e31097d073794f57355aebd7175f35dddef206690b2f614947680e739c74de9ec5fe4718b669805c04292cf45ebb8606709999efe44664a553f2eef9a52474704c145a969afe4ddf7496002ab8ccfa3aa983511959fc145dc", 0xa3}, {&(0x7f0000000440)="41822cf5b77ee2de0767ed88432d4e53eb6878fcfd", 0x15}, {&(0x7f00000004c0)}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff, r3, r0]}}], 0x50, 0x2000c000}}, {{&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002d40), 0x0, 0x200c8045}}], 0x2, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) socket$kcm(0x29, 0x5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff8000000c, "00000000ffffffe3", "71000000009f00000000000000a4c800", 0x8000, 0x2}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.186121344s ago: executing program 2 (id=2987): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, &(0x7f0000001cc0)="2501d7", 0x3, 0x8000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x204001, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) 5.482057772s ago: executing program 5 (id=2989): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x1e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.235583663s ago: executing program 2 (id=2992): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) 5.153573098s ago: executing program 6 (id=2993): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x1, 0xff}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x24008801) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28b831877dff41c246b2690000001000010025bd7000fadbdf2500000000e1686e591927aaf62adfbbee39c85098b37d3397a5719a18b73303377bc5abdc6c4d9a44545f053006c528b359e738cef5f57cadcd925f5cc142bec756edc6a4cd15497d5da00e9c50dbca98f484232dc70f2d590a13e931e8a19ed153ed2be2904702a2c9", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 5.123656954s ago: executing program 5 (id=2994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)="fbffffffffffff", 0x7}], 0x2) 4.98892902s ago: executing program 6 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x2000007, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x100006}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5b106a9ae9d83b0e}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.941266007s ago: executing program 7 (id=2996): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000", @ANYRES32=0x0, @ANYRES32], 0x50) 3.826390548s ago: executing program 7 (id=2997): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000002b00), 0x81940, 0x0) getegid() openat$nvram(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) fstat(r5, &(0x7f0000002b80)) statx(0xffffffffffffffff, &(0x7f0000002c00)='./file0\x00', 0x2000, 0x200, 0x0) sendmmsg$unix(r3, &(0x7f0000002e40)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000840)="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", 0x310}, {&(0x7f0000000300)="91e54fd0c99d67ab263e32bcafa855a6eb6e53f58ca8c8d3a935aa587ed2bb1219e5448d5b2b63041dff1b3fbf7dd7a2b66f6d214c370e07ac6f00c6200333c92c553a18cc3bf8384bc65e31097d073794f57355aebd7175f35dddef206690b2f614947680e739c74de9ec5fe4718b669805c04292cf45ebb8606709999efe44664a553f2eef9a52474704c145a969afe4ddf7496002ab8ccfa3aa983511959fc145dc", 0xa3}, {&(0x7f0000000440)="41822cf5b77ee2de0767ed88432d4e53eb6878fcfd", 0x15}, {&(0x7f00000004c0)}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff, r3, r0]}}], 0x50, 0x2000c000}}, {{&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002d40), 0x0, 0x200c8045}}], 0x2, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) socket$kcm(0x29, 0x5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff8000000c, "00000000ffffffe3", "71000000009f00000000000000a4c800", 0x8000, 0x2}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.913930832s ago: executing program 7 (id=2998): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "fa54b4fbb5fa4d95", "0a5a06487d20e1a73c217b787ddac356", "0750e5e3", "192f8cc24e029a1a"}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="34f3ffa50048be93ae5c181990077bb896f34179a3ad66739e60857dc01d512e55b8b3a3626692e5a8f7168fd3a144b53463f02256f9b120edd060893ff80ef4df7411268e21aeaa2f8ea35cb59daa87428e0ef84375bbbcb45e8b5138825cb359dd7e2a07964108c229", @ANYRES32=0x0], 0x34}}, 0x40010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000480), 0x101, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0x3}) ppoll(&(0x7f0000000080)=[{r7, 0x349}], 0x1, 0x0, 0x0, 0x0) 2.725035578s ago: executing program 4 (id=2999): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r2, r1, 0x0, 0x578410ed) 2.114599575s ago: executing program 5 (id=3000): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x1d, 0x2, 0x6) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.830963749s ago: executing program 5 (id=3001): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.725685447s ago: executing program 7 (id=3002): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000080), 0x200088, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 1.549578059s ago: executing program 5 (id=3003): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x3, 0x411}}}, 0x7) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/99) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0xffc8) 1.549111091s ago: executing program 6 (id=3004): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x4000, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.106828471s ago: executing program 4 (id=3005): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) writev(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x1, 0x1, 0xff}, 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x24008801) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="28b831877dff41c246b2690000001000010025bd7000fadbdf2500000000e1686e591927aaf62adfbbee39c85098b37d3397a5719a18b73303377bc5abdc6c4d9a44545f053006c528b359e738cef5f57cadcd925f5cc142bec756edc6a4cd15497d5da00e9c50dbca98f484232dc70f2d590a13e931e8a19ed153ed2be2904702a2c9", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 1.102267449s ago: executing program 6 (id=3006): socket(0xa, 0x5, 0x0) r0 = io_uring_setup(0x7a5f, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503f6, 0x10c}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x38, 0xb, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4880) 997.750837ms ago: executing program 5 (id=3007): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x4, 0xf3b8, 0x0, 0x1000, 0xfff, 0x4002004c4, 0x1000, 0x101, 0x97, 0x10, 0x3, 0x3, 0x4, 0x0, 0x8], 0x54000, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 923.579224ms ago: executing program 4 (id=3008): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000002b00), 0x81940, 0x0) getegid() openat$nvram(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) fstat(r5, &(0x7f0000002b80)) statx(0xffffffffffffffff, &(0x7f0000002c00)='./file0\x00', 0x2000, 0x200, 0x0) sendmmsg$unix(r3, &(0x7f0000002e40)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000840)="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", 0x310}, {&(0x7f0000000300)="91e54fd0c99d67ab263e32bcafa855a6eb6e53f58ca8c8d3a935aa587ed2bb1219e5448d5b2b63041dff1b3fbf7dd7a2b66f6d214c370e07ac6f00c6200333c92c553a18cc3bf8384bc65e31097d073794f57355aebd7175f35dddef206690b2f614947680e739c74de9ec5fe4718b669805c04292cf45ebb8606709999efe44664a553f2eef9a52474704c145a969afe4ddf7496002ab8ccfa3aa983511959fc145dc", 0xa3}, {&(0x7f0000000440)="41822cf5b77ee2de0767ed88432d4e53eb6878fcfdbe83fb75", 0x19}, {&(0x7f00000004c0)}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff, r3, r0]}}], 0x50, 0x2000c000}}, {{&(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002d40), 0x0, 0x200c8045}}], 0x2, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) socket$kcm(0x29, 0x5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff8000000c, "00000000ffffffe3", "71000000009f00000000000000a4c800", 0x8000, 0x2}) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 873.652788ms ago: executing program 7 (id=3009): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0105b08, &(0x7f0000000040)) 871.929893ms ago: executing program 6 (id=3010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)="fbffffffffffff", 0x7}], 0x2) 166.134673ms ago: executing program 2 (id=3011): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x1, 0x13, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x0, 0x26000, 0x1000, &(0x7f0000e48000/0x1000)=nil}) 49.367875ms ago: executing program 6 (id=3012): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) capset(&(0x7f0000000100)={0x20080522}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer(0xffffffffffffff9c, 0x0, 0x1a3403, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 49.036334ms ago: executing program 7 (id=3013): openat$ptmx(0xffffff9c, 0x0, 0x702d00, 0x0) syz_io_uring_setup(0x2b06, &(0x7f0000000040), 0x0, &(0x7f0000ffe000)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0x3a4054db02a83de0, 0x0, 'bridge0\x00', 'vlan1\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffd46}, @unspec}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x244) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 0s ago: executing program 4 (id=3014): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): reconfigure [ 239.515587][ T30] audit: type=1400 audit(1768967147.731:349): avc: denied { ioctl } for pid=8270 comm="syz.3.760" path="socket:[18578]" dev="sockfs" ino=18578 ioctlcmd=0x8b37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.954168][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 242.003320][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.754'. [ 242.184294][ T6333] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 242.598992][ T8310] fuse: Invalid rootmode [ 242.662279][ T8315] syzkaller0: entered promiscuous mode [ 242.668051][ T8315] syzkaller0: entered allmulticast mode [ 242.687827][ T8317] ntfs3(nullb0): Primary boot signature is not NTFS. [ 242.709559][ T8317] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 242.724622][ T6333] usb 3-1: config 0 has no interfaces? [ 242.730544][ T6333] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 242.740907][ T6333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.777793][ T6333] usb 3-1: config 0 descriptor?? [ 242.960443][ T8321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8321 comm=syz.0.774 [ 242.994342][ T5873] usb 3-1: USB disconnect, device number 4 [ 243.528048][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 243.934896][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 244.391238][ T8341] fuse: Invalid rootmode [ 245.611572][ T8358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8358 comm=syz.2.787 [ 245.799245][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 246.062689][ T6333] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 246.713620][ T6333] usb 1-1: config 0 has no interfaces? [ 246.729672][ T6333] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 246.746773][ T6333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.974004][ T6333] usb 1-1: config 0 descriptor?? [ 247.179807][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 247.186688][ T10] usb 1-1: USB disconnect, device number 4 [ 247.926285][ T8411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.356979][ T8431] ntfs3(nullb0): Primary boot signature is not NTFS. [ 248.376227][ T8431] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 249.972033][ T8444] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 250.167943][ T5873] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 250.756976][ T5873] usb 5-1: config 0 has no interfaces? [ 250.762566][ T5873] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 250.771887][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.790556][ T5873] usb 5-1: config 0 descriptor?? [ 251.003293][ T5873] usb 5-1: USB disconnect, device number 4 [ 251.386275][ T8461] bridge0: port 3(gretap0) entered blocking state [ 251.392789][ T8461] bridge0: port 3(gretap0) entered forwarding state [ 251.399613][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.406740][ T8461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.414157][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.421215][ T8461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.462212][ T8461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.166397][ T30] audit: type=1400 audit(1768967160.921:350): avc: denied { write } for pid=8485 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.201406][ T30] audit: type=1400 audit(1768967161.571:351): avc: denied { getopt } for pid=8485 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.233497][ T30] audit: type=1400 audit(1768967161.611:352): avc: denied { getopt } for pid=8485 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 254.566878][ T30] audit: type=1400 audit(1768967162.931:353): avc: denied { setopt } for pid=8492 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 255.231813][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.239812][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.177915][ T8518] ntfs3(nullb0): Primary boot signature is not NTFS. [ 256.194737][ T8518] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 256.295495][ T6106] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 256.584628][ T6106] usb 5-1: config 0 has no interfaces? [ 256.622608][ T6106] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 256.645212][ T6106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.663083][ T6106] usb 5-1: config 0 descriptor?? [ 258.812872][ T6106] usb 5-1: USB disconnect, device number 5 [ 264.283275][ T5923] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 265.024398][ T5923] usb 5-1: config 0 has no interfaces? [ 265.029907][ T5923] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 265.066537][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.255058][ T5923] usb 5-1: config 0 descriptor?? [ 265.985898][ T5923] usb 5-1: USB disconnect, device number 6 [ 271.672500][ T8648] tipc: Enabled bearer , priority 0 [ 271.694707][ T8648] syzkaller0: entered promiscuous mode [ 271.700258][ T8648] syzkaller0: entered allmulticast mode [ 271.723139][ T5922] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 272.624739][ T8648] tipc: Resetting bearer [ 272.675930][ T8647] tipc: Resetting bearer [ 272.717829][ T8647] tipc: Disabling bearer [ 272.785253][ T5922] usb 3-1: config 0 has no interfaces? [ 272.790882][ T5922] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 272.913177][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.936567][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 272.962316][ T5922] usb 3-1: config 0 descriptor?? [ 272.982174][ T8659] : entered promiscuous mode [ 273.938276][ T5922] usb 3-1: USB disconnect, device number 5 [ 276.521012][ T8697] netlink: 11016 bytes leftover after parsing attributes in process `syz.1.905'. [ 277.113401][ T5923] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 277.586845][ T5923] usb 5-1: config 0 has no interfaces? [ 277.592323][ T5923] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 277.639458][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.670353][ T5923] usb 5-1: config 0 descriptor?? [ 277.794436][ T8724] tipc: Enabled bearer , priority 0 [ 277.804534][ T8724] syzkaller0: entered promiscuous mode [ 277.810020][ T8724] syzkaller0: entered allmulticast mode [ 278.872864][ T5922] usb 5-1: USB disconnect, device number 7 [ 278.905932][ T8723] tipc: Resetting bearer [ 278.914942][ T8732] netlink: 11016 bytes leftover after parsing attributes in process `syz.1.918'. [ 278.974153][ T8723] tipc: Disabling bearer [ 282.243355][ T8768] tipc: Enabled bearer , priority 0 [ 282.259606][ T8768] syzkaller0: entered promiscuous mode [ 282.282803][ T8768] syzkaller0: entered allmulticast mode [ 282.329856][ T8768] tipc: Resetting bearer [ 282.371315][ T8767] tipc: Resetting bearer [ 282.415743][ T8767] tipc: Disabling bearer [ 282.714776][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 283.076476][ T8776] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 284.865325][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.060919][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.112689][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.125130][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.134641][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.144635][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.152014][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.281895][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.289295][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.296541][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.304271][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.311726][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.448072][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.704698][ T8811] binder: 8809:8811 ioctl 4018620d 0 returned -22 [ 285.745232][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.865365][ T8815] tipc: Enabled bearer , priority 0 [ 285.928402][ T8812] syzkaller0: entered promiscuous mode [ 285.956802][ T8812] syzkaller0: entered allmulticast mode [ 286.132315][ T8812] tipc: Resetting bearer [ 286.165599][ T8810] tipc: Resetting bearer [ 286.258986][ T8810] tipc: Disabling bearer [ 286.352407][ T12] bridge_slave_1: left allmulticast mode [ 286.383113][ T12] bridge_slave_1: left promiscuous mode [ 286.404586][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.464829][ T12] bridge_slave_0: left allmulticast mode [ 286.475984][ T12] bridge_slave_0: left promiscuous mode [ 286.487219][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.559514][ T5826] Bluetooth: hci1: command tx timeout [ 288.497296][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 288.561438][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.580895][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.596454][ T12] bond0 (unregistering): Released all slaves [ 288.621091][ T8820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.750803][ T8834] : entered promiscuous mode [ 289.094781][ T8797] chnl_net:caif_netlink_parms(): no params data found [ 289.958535][ T5826] Bluetooth: hci1: command tx timeout [ 290.329011][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.337856][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.346770][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.354421][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.361781][ T5821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.929545][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.975650][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.984114][ T8797] bridge_slave_0: entered allmulticast mode [ 290.990833][ T8797] bridge_slave_0: entered promiscuous mode [ 291.023744][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.033718][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.040886][ T8797] bridge_slave_1: entered allmulticast mode [ 291.075363][ T8797] bridge_slave_1: entered promiscuous mode [ 291.254627][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.285641][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.468682][ T8797] team0: Port device team_slave_0 added [ 291.477184][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 292.119893][ T5829] Bluetooth: hci1: command tx timeout [ 292.121120][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 292.134361][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 292.146651][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 292.154108][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.160196][ T8797] team0: Port device team_slave_1 added [ 292.453266][ T5821] Bluetooth: hci0: command tx timeout [ 292.734688][ T8902] netlink: 10996 bytes leftover after parsing attributes in process `syz.2.970'. [ 292.765453][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.772412][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.843904][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.902712][ T12] hsr_slave_0: left promiscuous mode [ 293.822470][ T12] hsr_slave_1: left promiscuous mode [ 293.843835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.851284][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.924134][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.931520][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.023178][ T12] veth1_macvtap: left promiscuous mode [ 294.028917][ T12] veth0_macvtap: left promiscuous mode [ 294.054170][ T12] veth1_vlan: left promiscuous mode [ 294.059578][ T12] veth0_vlan: left promiscuous mode [ 294.173318][ T5821] Bluetooth: hci1: command tx timeout [ 294.263147][ T5821] Bluetooth: hci3: command tx timeout [ 294.493162][ T5821] Bluetooth: hci0: command tx timeout [ 295.414712][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.447486][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.714773][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.722041][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.749459][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.848259][ T8797] hsr_slave_0: entered promiscuous mode [ 295.873968][ T8797] hsr_slave_1: entered promiscuous mode [ 295.904901][ T8797] debugfs: 'hsr0' already exists in 'hsr' [ 295.910640][ T8797] Cannot create hsr debugfs directory [ 296.675760][ T5821] Bluetooth: hci3: command tx timeout [ 296.676194][ T5826] Bluetooth: hci0: command tx timeout [ 297.904330][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 298.136700][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.074879][ T5826] Bluetooth: hci3: command tx timeout [ 299.074885][ T5821] Bluetooth: hci0: command tx timeout [ 299.104391][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.285342][ T8885] chnl_net:caif_netlink_parms(): no params data found [ 299.374771][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.465660][ T8797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.593377][ T8975] ntfs3(nullb0): Primary boot signature is not NTFS. [ 299.600156][ T8975] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 299.611902][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.627707][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.635015][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.642111][ T8864] bridge_slave_0: entered allmulticast mode [ 299.649133][ T8864] bridge_slave_0: entered promiscuous mode [ 299.668696][ T8797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.700945][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.719975][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.735596][ T8864] bridge_slave_1: entered allmulticast mode [ 299.748536][ T8981] binder: BINDER_SET_CONTEXT_MGR already set [ 299.749681][ T8864] bridge_slave_1: entered promiscuous mode [ 299.756539][ T8981] binder: 8980:8981 ioctl 4018620d 2000000002c0 returned -16 [ 299.770362][ T8797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.804457][ T8797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.829377][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.842103][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.852698][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.860001][ T8885] bridge_slave_0: entered allmulticast mode [ 299.867828][ T8885] bridge_slave_0: entered promiscuous mode [ 299.878300][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.911242][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.920597][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.928205][ T8885] bridge_slave_1: entered allmulticast mode [ 299.936694][ T8885] bridge_slave_1: entered promiscuous mode [ 299.969256][ T8864] team0: Port device team_slave_0 added [ 299.977477][ T8864] team0: Port device team_slave_1 added [ 300.006389][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.014255][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.056002][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.162302][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.177783][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.211983][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.236915][ T8885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.289255][ T8885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.133334][ T5826] Bluetooth: hci3: command tx timeout [ 301.140980][ T8864] hsr_slave_0: entered promiscuous mode [ 301.187288][ T8864] hsr_slave_1: entered promiscuous mode [ 301.203788][ T8864] debugfs: 'hsr0' already exists in 'hsr' [ 301.209530][ T8864] Cannot create hsr debugfs directory [ 301.236077][ T8885] team0: Port device team_slave_0 added [ 301.340316][ T9014] ntfs3(nullb0): Primary boot signature is not NTFS. [ 301.347137][ T9014] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 301.365164][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.408669][ T8885] team0: Port device team_slave_1 added [ 301.550906][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.580337][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.588193][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.614660][ T8885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.655105][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.663113][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.704726][ T8885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.745593][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.860127][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.884684][ T8885] hsr_slave_0: entered promiscuous mode [ 301.890676][ T8885] hsr_slave_1: entered promiscuous mode [ 302.022510][ T8885] debugfs: 'hsr0' already exists in 'hsr' [ 302.028275][ T8885] Cannot create hsr debugfs directory [ 302.033788][ T6106] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.205131][ T6106] usb 5-1: config 0 has no interfaces? [ 302.213181][ T6106] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 302.222192][ T6106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.270523][ T6106] usb 5-1: config 0 descriptor?? [ 302.637096][ T796] usb 5-1: USB disconnect, device number 8 [ 302.957871][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.041707][ T12] bridge_slave_1: left allmulticast mode [ 303.059600][ T12] bridge_slave_1: left promiscuous mode [ 303.072673][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.096160][ T12] bridge_slave_0: left allmulticast mode [ 303.101824][ T12] bridge_slave_0: left promiscuous mode [ 303.119901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.144078][ T12] bridge_slave_1: left allmulticast mode [ 303.149738][ T12] bridge_slave_1: left promiscuous mode [ 303.173369][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.343829][ T12] bridge_slave_0: left allmulticast mode [ 303.349499][ T12] bridge_slave_0: left promiscuous mode [ 303.363343][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.013636][ T9064] binder: BINDER_SET_CONTEXT_MGR already set [ 305.025729][ T9064] binder: 9063:9064 ioctl 4018620d 2000000002c0 returned -16 [ 305.731637][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.751404][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.776384][ T12] bond0 (unregistering): Released all slaves [ 306.883400][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.906208][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.928572][ T12] bond0 (unregistering): Released all slaves [ 306.971120][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.052836][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.059989][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.085608][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.092735][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.125384][ T8864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.147211][ T12] : left promiscuous mode [ 307.255527][ T8864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 307.311071][ T8864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 307.428164][ T12] tipc: Left network mode [ 307.455454][ T8864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.627430][ T12] tipc: Left network mode [ 308.129194][ T8885] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 308.204901][ T8885] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 308.242171][ T8885] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 308.275780][ T8885] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 308.745912][ T9114] ntfs3(nullb0): Primary boot signature is not NTFS. [ 308.752678][ T9114] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 308.922505][ T9124] binder: 9122:9124 ioctl c0306201 0 returned -14 [ 309.034789][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.109514][ T8885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.161517][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.446047][ T8864] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.472554][ T8885] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.054694][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.061814][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.099904][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.107070][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.134552][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.141663][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.866651][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.873762][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.961659][ T12] hsr_slave_0: left promiscuous mode [ 310.981598][ T12] hsr_slave_1: left promiscuous mode [ 310.993868][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.002853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.024501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.031897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.057193][ T12] hsr_slave_0: left promiscuous mode [ 311.073771][ T12] hsr_slave_1: left promiscuous mode [ 311.080583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.088658][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.113738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.121141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.164913][ T12] veth1_macvtap: left promiscuous mode [ 311.171318][ T12] veth0_macvtap: left promiscuous mode [ 311.179070][ T12] veth1_vlan: left promiscuous mode [ 311.186211][ T12] veth1_macvtap: left promiscuous mode [ 311.191722][ T12] veth0_macvtap: left promiscuous mode [ 311.199761][ T12] veth1_vlan: left promiscuous mode [ 311.206035][ T12] veth0_vlan: left promiscuous mode [ 311.878408][ T9139] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 311.885373][ T12] team0 (unregistering): Port device vlan0 removed [ 312.177760][ T9151] ntfs3(nullb0): Primary boot signature is not NTFS. [ 312.184805][ T9151] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 312.258653][ T12] team0 (unregistering): Port device team_slave_1 removed [ 312.309117][ T12] team0 (unregistering): Port device team_slave_0 removed [ 314.443905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 314.509885][ T12] team0 (unregistering): Port device team_slave_0 removed [ 315.260257][ T9141] : entered promiscuous mode [ 315.398784][ T8885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.517107][ T8864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.599954][ T8797] veth0_vlan: entered promiscuous mode [ 315.630055][ T8797] veth1_vlan: entered promiscuous mode [ 315.744843][ T8797] veth0_macvtap: entered promiscuous mode [ 315.787875][ T8797] veth1_macvtap: entered promiscuous mode [ 315.860477][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.872411][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 315.942408][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.990525][ T9192] ntfs3(nullb0): Primary boot signature is not NTFS. [ 315.997348][ T9192] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 316.008611][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.023488][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.059312][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.096110][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.121404][ T8885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.736946][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.747960][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.789935][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.054552][ T3890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.117325][ T3890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.870922][ T3890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.884625][ T3890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.936418][ T30] audit: type=1400 audit(1768967226.311:354): avc: denied { mounton } for pid=8797 comm="syz-executor" path="/root/syzkaller.1ZdNkO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 318.317136][ T8885] veth0_vlan: entered promiscuous mode [ 318.341908][ T8885] veth1_vlan: entered promiscuous mode [ 318.391881][ T8885] veth0_macvtap: entered promiscuous mode [ 318.410912][ T8885] veth1_macvtap: entered promiscuous mode [ 318.557840][ T8864] veth0_vlan: entered promiscuous mode [ 318.598522][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.646125][ T8864] veth1_vlan: entered promiscuous mode [ 319.309137][ T9225] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 319.398809][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.462650][ T6024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.505847][ T6024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.553779][ T6024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.564143][ T8864] veth0_macvtap: entered promiscuous mode [ 319.590963][ T8864] veth1_macvtap: entered promiscuous mode [ 319.621076][ T6024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.839669][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.166480][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.203338][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.245239][ T8864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.311695][ T6007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.331802][ T6007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.365056][ T6007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.376708][ T6007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.413248][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.422643][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.479812][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 320.539882][ T9246] ntfs3(nullb0): Primary boot signature is not NTFS. [ 320.546958][ T9246] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 320.684400][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.705760][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.771865][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.797113][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.974288][ T9293] ntfs3(nullb0): Primary boot signature is not NTFS. [ 322.981090][ T9293] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 323.043355][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'. [ 324.053158][ T6942] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 324.323116][ T6942] usb 5-1: config 0 has no interfaces? [ 324.359232][ T6942] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 324.393085][ T6942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.419142][ T6942] usb 5-1: config 0 descriptor?? [ 326.162406][ T5880] usb 5-1: USB disconnect, device number 9 [ 326.403309][ T9345] syzkaller0: entered promiscuous mode [ 326.419487][ T9345] syzkaller0: entered allmulticast mode [ 329.994003][ T9385] ntfs3(nullb0): Primary boot signature is not NTFS. [ 330.000769][ T9385] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 331.363526][ T9409] netlink: 1696 bytes leftover after parsing attributes in process `syz.2.1064'. [ 335.504128][ T9479] syzkaller0: entered promiscuous mode [ 335.509626][ T9479] syzkaller0: entered allmulticast mode [ 335.704805][ T9466] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 336.853222][ T6012] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 337.180870][ T9511] fuse: Bad value for 'user_id' [ 337.202849][ T9511] fuse: Bad value for 'user_id' [ 337.254356][ T6012] usb 3-1: config 0 has no interfaces? [ 337.261147][ T6012] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 337.288292][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.309557][ T6012] usb 3-1: config 0 descriptor?? [ 337.546600][ T9492] kvm: kvm [9490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 337.596846][ T9492] kvm: kvm [9490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 338.284033][ T6012] usb 3-1: USB disconnect, device number 6 [ 338.883503][ T9529] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 339.597913][ T9544] fuse: Bad value for 'user_id' [ 339.613272][ T9544] fuse: Bad value for 'user_id' [ 339.802203][ T9548] syzkaller0: entered promiscuous mode [ 339.813815][ T9548] syzkaller0: entered allmulticast mode [ 339.905082][ T9552] tipc: Enabled bearer , priority 0 [ 340.054061][ T9552] tipc: Resetting bearer [ 340.846113][ T9549] tipc: Disabling bearer [ 341.859979][ T9580] syzkaller0: entered promiscuous mode [ 341.869590][ T9586] fuse: Bad value for 'user_id' [ 341.878097][ T9586] fuse: Bad value for 'user_id' [ 341.908270][ T9580] syzkaller0: entered allmulticast mode [ 342.313123][ T6012] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 342.470623][ T6012] usb 5-1: config 0 has no interfaces? [ 342.480402][ T6012] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 342.517488][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.569568][ T6012] usb 5-1: config 0 descriptor?? [ 342.827250][ T5873] usb 5-1: USB disconnect, device number 10 [ 344.499020][ T30] audit: type=1400 audit(1768967252.871:355): avc: denied { ioctl } for pid=9620 comm="syz.7.1122" path="socket:[24063]" dev="sockfs" ino=24063 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.850269][ T30] audit: type=1800 audit(1768967255.221:356): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.7.1122" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 346.852197][ T9624] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 346.886412][ T30] audit: type=1400 audit(1768967255.221:357): avc: denied { firmware_load } for pid=9620 comm="syz.7.1122" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 346.927034][ T9624] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 347.009359][ T30] audit: type=1400 audit(1768967255.381:358): avc: denied { firmware_load } for pid=9620 comm="syz.7.1122" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 347.013068][ T9624] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 349.415411][ T9701] syzkaller0: entered promiscuous mode [ 349.420886][ T9701] syzkaller0: entered allmulticast mode [ 349.493208][ T30] audit: type=1400 audit(1768967257.851:359): avc: denied { create } for pid=9706 comm="syz.6.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.557637][ T30] audit: type=1400 audit(1768967257.901:360): avc: denied { connect } for pid=9706 comm="syz.6.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.656537][ T30] audit: type=1400 audit(1768967257.901:361): avc: denied { write } for pid=9706 comm="syz.6.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.098190][ T9751] netlink: 'syz.6.1147': attribute type 29 has an invalid length. [ 351.173256][ T9751] netlink: 'syz.6.1147': attribute type 29 has an invalid length. [ 352.672822][ T9778] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.289526][ T9817] binder: 9816:9817 ioctl 4018620d 0 returned -22 [ 355.326052][ T9820] binder: 9819:9820 ioctl 4018620d 0 returned -22 [ 356.557423][ T30] audit: type=1400 audit(1768967264.911:362): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44996 daddr=10.128.0.193 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 356.630898][ T30] audit: type=1400 audit(1768967265.001:363): avc: denied { write } for pid=9854 comm="syz.6.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.936191][ T9866] tipc: Enabled bearer , priority 0 [ 356.957829][ T9866] syzkaller0: entered promiscuous mode [ 356.975110][ T9866] syzkaller0: entered allmulticast mode [ 357.118724][ T9866] tipc: Resetting bearer [ 357.153497][ T9865] tipc: Resetting bearer [ 357.171780][ T9865] tipc: Disabling bearer [ 357.256020][ T9881] binder: 9880:9881 ioctl 4018620d 0 returned -22 [ 358.469332][ T9891] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 359.296851][ T9935] tipc: Cannot configure node identity twice [ 359.334218][ T9942] binder: 9941:9942 ioctl 4018620d 0 returned -22 [ 359.470352][ T9949] binder: 9948:9949 ioctl c0306201 0 returned -14 [ 359.663260][ T6942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 359.803080][ T6942] usb 3-1: device descriptor read/64, error -71 [ 360.104783][ T6942] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 360.253090][ T6942] usb 3-1: device descriptor read/64, error -71 [ 360.453848][ T6942] usb usb3-port1: attempt power cycle [ 360.661611][ T9989] No control pipe specified [ 360.889596][T10002] Illegal XDP return value 65302584 on prog (id 104) dev syz_tun, expect packet loss! [ 360.923155][ T6942] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 360.976070][ T6942] usb 3-1: device descriptor read/8, error -71 [ 361.228881][ T6942] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 361.283553][ T6942] usb 3-1: device descriptor read/8, error -71 [ 361.584098][ T6942] usb usb3-port1: unable to enumerate USB device [ 361.935524][T10033] binder: 10032:10033 ioctl c0306201 0 returned -14 [ 362.571084][T10053] No control pipe specified [ 362.981466][T10064] netlink: 'syz.5.1220': attribute type 1 has an invalid length. [ 363.046063][T10064] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1220'. [ 363.160328][ T30] audit: type=1400 audit(1768967271.531:364): avc: denied { bind } for pid=10070 comm="syz.6.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.626867][T10096] binder: 10095:10096 ioctl c0306201 0 returned -14 [ 363.740768][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 363.761866][T10105] No control pipe specified [ 363.884617][ T10] usb 3-1: device descriptor read/64, error -71 [ 364.153080][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 364.299648][T10114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.331004][ T10] usb 3-1: device descriptor read/64, error -71 [ 364.463467][ T10] usb usb3-port1: attempt power cycle [ 364.614102][ T30] audit: type=1400 audit(1768967272.991:365): avc: denied { listen } for pid=10125 comm="syz.7.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.661174][ T30] audit: type=1400 audit(1768967272.991:366): avc: denied { getopt } for pid=10125 comm="syz.7.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.673955][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1241'. [ 364.692147][ T30] audit: type=1400 audit(1768967272.991:367): avc: denied { accept } for pid=10125 comm="syz.7.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.790447][T10135] team_slave_0: entered promiscuous mode [ 364.796378][T10135] team_slave_1: entered promiscuous mode [ 364.803267][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 364.843643][ T10] usb 3-1: device descriptor read/8, error -71 [ 364.869204][T10135] vlan2: entered promiscuous mode [ 364.883298][T10135] team0: entered promiscuous mode [ 365.093207][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 365.133870][ T10] usb 3-1: device descriptor read/8, error -71 [ 365.253328][ T10] usb usb3-port1: unable to enumerate USB device [ 365.688897][T10166] binder: BINDER_SET_CONTEXT_MGR already set [ 365.696163][T10166] binder: 10165:10166 ioctl 4018620d 2000000002c0 returned -16 [ 366.534484][T10177] netlink: 'syz.2.1253': attribute type 3 has an invalid length. [ 366.563070][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1253'. [ 367.476539][T10202] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 367.869051][ T6333] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 368.004028][ T6333] usb 8-1: device descriptor read/64, error -71 [ 368.264478][ T6333] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 369.233238][ T6333] usb 8-1: device descriptor read/64, error -71 [ 369.373505][ T6333] usb usb8-port1: attempt power cycle [ 370.805380][T10263] bond0: entered promiscuous mode [ 370.810601][T10263] bond_slave_0: entered promiscuous mode [ 370.816858][T10263] bond_slave_1: entered promiscuous mode [ 370.897441][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1287'. [ 371.014399][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1287'. [ 371.826386][ T30] audit: type=1400 audit(1768967280.101:368): avc: denied { listen } for pid=10281 comm="syz.4.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 371.858189][T10282] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 371.974326][ T30] audit: type=1400 audit(1768967280.301:369): avc: denied { bind } for pid=10283 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 372.016015][ T30] audit: type=1400 audit(1768967280.301:370): avc: denied { setopt } for pid=10283 comm="syz.5.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 372.138615][ T30] audit: type=1400 audit(1768967280.501:371): avc: denied { listen } for pid=10291 comm="syz.7.1298" lport=42098 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 372.413225][ T6333] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 372.491934][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1303'. [ 372.553150][ T6333] usb 7-1: device descriptor read/64, error -71 [ 372.983079][ T6333] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 373.008749][T10325] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1311'. [ 373.020631][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 373.133655][ T6333] usb 7-1: device descriptor read/64, error -71 [ 373.241219][ T30] audit: type=1400 audit(1768967281.611:372): avc: denied { bind } for pid=10344 comm="syz.2.1320" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 373.254181][ T6333] usb usb7-port1: attempt power cycle [ 373.288788][ T30] audit: type=1400 audit(1768967281.611:373): avc: denied { name_bind } for pid=10344 comm="syz.2.1320" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 373.336213][ T30] audit: type=1400 audit(1768967281.611:374): avc: denied { node_bind } for pid=10344 comm="syz.2.1320" saddr=ff02::1 src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 373.707433][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 374.670157][ T6333] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 374.704957][ T6333] usb 7-1: device descriptor read/8, error -71 [ 374.969991][T10398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10398 comm=syz.2.1342 [ 374.974339][T10400] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1343'. [ 375.058380][T10400] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1343'. [ 375.083487][T10400] team0: No ports can be present during mode change [ 375.610682][T10407] openvswitch: netlink: Missing valid actions attribute. [ 375.622571][T10407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.640463][ T30] audit: type=1400 audit(1768967284.011:375): avc: denied { ioctl } for pid=10406 comm="syz.2.1347" path="socket:[26991]" dev="sockfs" ino=26991 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 375.747744][T10411] bridge0: port 3(gretap0) entered disabled state [ 375.835822][T10411] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.843136][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.001688][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.030980][T10411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.080508][T10411] veth0_vlan: left allmulticast mode [ 376.127499][T10411] vlan3: left promiscuous mode [ 376.132353][T10411] bond0: left promiscuous mode [ 376.138826][T10411] bond_slave_0: left promiscuous mode [ 376.145549][T10411] bond_slave_1: left promiscuous mode [ 376.152207][T10411] bridge0: left promiscuous mode [ 376.160520][ T3890] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.190393][ T3890] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.202171][ T3890] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.211215][ T3890] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.008667][ T30] audit: type=1400 audit(1768967285.381:376): avc: denied { block_suspend } for pid=10447 comm="syz.2.1362" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.032379][ T6333] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 377.058660][T10450] fuse: Bad value for 'rootmode' [ 377.112780][ T30] audit: type=1400 audit(1768967285.481:377): avc: denied { setopt } for pid=10453 comm="syz.5.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.164891][ T6333] usb 5-1: device descriptor read/64, error -71 [ 377.236956][ T30] audit: type=1400 audit(1768967285.611:378): avc: denied { setopt } for pid=10462 comm="syz.5.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 377.345012][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1372'. [ 377.403168][ T6333] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 377.476030][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 377.506560][ T30] audit: type=1400 audit(1768967285.881:379): avc: denied { accept } for pid=10482 comm="syz.7.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.533148][ T30] audit: type=1400 audit(1768967285.881:380): avc: denied { read } for pid=10482 comm="syz.7.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.572519][ T6333] usb 5-1: device descriptor read/64, error -71 [ 377.683434][ T6333] usb usb5-port1: attempt power cycle [ 378.315831][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.322190][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.393071][ T6333] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 378.593584][ T6333] usb 5-1: device descriptor read/8, error -71 [ 378.652129][T10500] tipc: Started in network mode [ 378.661086][T10500] tipc: Node identity be2da686f2d1, cluster identity 4711 [ 378.679726][T10500] tipc: Enabled bearer , priority 0 [ 378.750184][T10500] syzkaller0: entered promiscuous mode [ 378.760836][T10500] syzkaller0: entered allmulticast mode [ 378.770693][T10500] tipc: Resetting bearer [ 378.843114][ T6333] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 378.854751][T10499] tipc: Resetting bearer [ 378.887042][ T6333] usb 5-1: device descriptor read/8, error -71 [ 379.003263][ T6333] usb usb5-port1: unable to enumerate USB device [ 379.032918][T10505] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 379.193672][T10518] netlink: 'syz.7.1389': attribute type 10 has an invalid length. [ 379.212554][T10518] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1389'. [ 379.247675][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1389'. [ 381.351983][T10499] tipc: Disabling bearer [ 381.365312][T10518] geneve0: entered promiscuous mode [ 381.372385][T10518] team0: Port device geneve0 added [ 381.388668][T10519] geneve0 (unregistering): left promiscuous mode [ 381.396725][T10519] team0: Port device geneve0 removed [ 381.412654][ T10] tipc: Node number set to 1291626118 [ 381.448716][T10539] syzkaller0: entered promiscuous mode [ 381.456560][T10539] syzkaller0: entered allmulticast mode [ 381.619513][ T30] audit: type=1400 audit(1768967289.991:381): avc: denied { getopt } for pid=10562 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.242614][T10560] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 388.683574][T10638] syzkaller0: entered promiscuous mode [ 388.689084][T10638] syzkaller0: entered allmulticast mode [ 389.390177][T10651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10651 comm=syz.4.1419 [ 390.188809][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1432'. [ 390.203709][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1432'. [ 390.813137][T10665] tipc: Enabling of bearer rejected, failed to enable media [ 391.507650][ T30] audit: type=1400 audit(1768967299.871:382): avc: denied { ioctl } for pid=10686 comm="syz.7.1439" path="socket:[27447]" dev="sockfs" ino=27447 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.200501][ T30] audit: type=1400 audit(1768967300.571:383): avc: denied { listen } for pid=10707 comm="syz.6.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.491581][T10721] fuse: Bad value for 'fd' [ 393.874706][T10743] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 394.353107][ T30] audit: type=1400 audit(1768967302.721:384): avc: denied { ioctl } for pid=10750 comm="syz.6.1466" path="socket:[28082]" dev="sockfs" ino=28082 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 394.444183][T10755] fuse: Bad value for 'fd' [ 395.210222][T10761] tipc: Started in network mode [ 395.213125][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 395.231314][T10761] tipc: Node identity fa450f5194eb, cluster identity 4711 [ 395.247091][T10761] tipc: Enabled bearer , priority 0 [ 395.268894][T10767] syzkaller0: entered promiscuous mode [ 395.284403][T10767] syzkaller0: entered allmulticast mode [ 395.319882][T10761] tipc: Resetting bearer [ 395.348953][T10756] tipc: Resetting bearer [ 395.562151][T10756] tipc: Disabling bearer [ 395.576956][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1477'. [ 395.795738][T10784] fuse: Unknown parameter '0x0000000000000003' [ 396.998199][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1475'. [ 397.230435][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1465'. [ 397.439923][T10822] fuse: Unknown parameter '0x0000000000000003' [ 399.723424][T10855] fuse: Unknown parameter '0x0000000000000003' [ 399.873162][T10859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1506'. [ 402.830806][T10892] fuse: Unknown parameter '0x0000000000000003' [ 403.425536][ T30] audit: type=1400 audit(1768967311.801:385): avc: denied { bind } for pid=10900 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 403.464453][ T30] audit: type=1400 audit(1768967311.821:386): avc: denied { name_bind } for pid=10900 comm="syz.2.1519" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 403.514318][ T30] audit: type=1400 audit(1768967311.821:387): avc: denied { node_bind } for pid=10900 comm="syz.2.1519" saddr=::ffff:172.20.20.187 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 406.048314][T10941] xt_NFQUEUE: number of total queues is 0 [ 407.116732][T10945] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 408.025259][T10953] syzkaller0: entered promiscuous mode [ 408.053198][T10953] syzkaller0: entered allmulticast mode [ 408.465539][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1539'. [ 408.818777][ T30] audit: type=1400 audit(1768967317.191:388): avc: denied { module_request } for pid=10967 comm="syz.4.1536" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 410.968582][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 411.369212][T10988] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1548'. [ 411.385315][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1548'. [ 412.570129][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 412.580034][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 415.857471][ T30] audit: type=1400 audit(1768967324.231:389): avc: denied { connect } for pid=11075 comm="syz.7.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 416.014677][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 416.112060][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 416.943026][ T30] audit: type=1400 audit(1768967325.311:390): avc: denied { ioctl } for pid=11101 comm="syz.4.1587" path="socket:[29149]" dev="sockfs" ino=29149 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 416.943820][T11102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1587'. [ 417.218408][ T30] audit: type=1400 audit(1768967325.591:391): avc: denied { write } for pid=11108 comm="syz.5.1577" lport=40721 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 417.219621][T11110] netlink: 'syz.5.1577': attribute type 11 has an invalid length. [ 417.384980][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1577'. [ 418.259693][T11116] tipc: Enabled bearer , priority 0 [ 418.571576][T11118] tipc: Resetting bearer [ 418.632082][T11115] tipc: Resetting bearer [ 418.714279][T11115] tipc: Disabling bearer [ 421.175240][T11167] tipc: Enabled bearer , priority 0 [ 421.193757][T11167] syzkaller0: entered promiscuous mode [ 421.199251][T11167] syzkaller0: entered allmulticast mode [ 421.691043][T11174] tipc: Resetting bearer [ 422.287622][T11166] tipc: Resetting bearer [ 422.378465][T11166] tipc: Disabling bearer [ 422.515634][ T6942] tipc: Node number set to 1287780582 [ 423.865251][T11206] tipc: Enabling of bearer rejected, failed to enable media [ 423.977132][T11214] netlink: 'syz.4.1624': attribute type 10 has an invalid length. [ 424.087607][T11214] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 425.182904][T11230] syzkaller0: entered promiscuous mode [ 425.217482][T11230] syzkaller0: entered allmulticast mode [ 425.262579][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1636'. [ 425.391139][ T30] audit: type=1400 audit(1768967333.761:392): avc: denied { bind } for pid=11242 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.340694][T11272] tipc: Enabling of bearer rejected, failed to enable media [ 427.514696][ T30] audit: type=1400 audit(1768967335.891:393): avc: denied { connect } for pid=11296 comm="syz.6.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.570974][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1650'. [ 427.594313][ T30] audit: type=1400 audit(1768967335.961:394): avc: denied { write } for pid=11296 comm="syz.6.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 428.550845][T11313] netlink: 'syz.6.1654': attribute type 10 has an invalid length. [ 428.559483][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.568023][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.581897][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.589059][T11313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.596511][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.603630][T11313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.625982][T11313] bridge0: entered promiscuous mode [ 428.631798][T11313] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 428.891341][T11322] tipc: Enabling of bearer rejected, failed to enable media [ 429.072756][T11326] syzkaller0: entered promiscuous mode [ 429.190758][T11326] syzkaller0: entered allmulticast mode [ 431.399542][ T30] audit: type=1400 audit(1768967339.771:395): avc: denied { create } for pid=11363 comm="syz.7.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 431.451201][ T30] audit: type=1400 audit(1768967339.771:396): avc: denied { write } for pid=11363 comm="syz.7.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 431.495508][ T30] audit: type=1400 audit(1768967339.771:397): avc: denied { shutdown } for pid=11363 comm="syz.7.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.544690][ T30] audit: type=1400 audit(1768967339.771:398): avc: denied { read } for pid=11363 comm="syz.7.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 432.439335][T11378] netlink: 'syz.2.1671': attribute type 10 has an invalid length. [ 433.222621][T11391] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 434.729222][T11435] : rxe_newlink: already configured on veth0_vlan [ 435.413037][T11457] macvtap1: entered promiscuous mode [ 435.420563][T11457] macvtap1: entered allmulticast mode [ 435.432137][T11457] veth0_to_team: entered promiscuous mode [ 435.439486][T11457] veth0_to_team: entered allmulticast mode [ 435.460432][T11457] team0: Device macvtap1 failed to register rx_handler [ 435.473387][T11457] veth0_to_team: left allmulticast mode [ 435.483048][T11457] veth0_to_team: left promiscuous mode [ 435.724185][T11463] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1700'. [ 437.727909][T11501] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 438.866942][T11521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 438.984965][ T30] audit: type=1400 audit(1768967347.351:399): avc: denied { ioctl } for pid=11510 comm="syz.6.1720" path="socket:[30502]" dev="sockfs" ino=30502 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 439.538191][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.546278][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.536615][T11574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.246939][T11596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.625321][ T30] audit: type=1400 audit(1768967350.001:400): avc: denied { ioctl } for pid=11606 comm="syz.4.1751" path="/353/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 441.710504][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1754'. [ 441.780071][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1754'. [ 444.189669][T11672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.506104][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1778'. [ 444.792457][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'. [ 445.564307][T11696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.857910][T11709] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1789'. [ 445.904520][T11709] netlink: 'syz.5.1789': attribute type 10 has an invalid length. [ 445.912927][T11709] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.920415][T11709] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.995374][T11709] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.002536][T11709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.010810][T11709] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.017967][T11709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.096197][T11709] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 446.275157][T11723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.407348][T11741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.837527][T11757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.897832][T11759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.047610][T11765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.249105][T11775] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1808'. [ 448.273415][T11775] team0: No ports can be present during mode change [ 448.323018][ T30] audit: type=1400 audit(1768967356.691:401): avc: denied { create } for pid=11768 comm="syz.2.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 448.393185][ T30] audit: type=1400 audit(1768967356.691:402): avc: denied { accept } for pid=11768 comm="syz.2.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 448.765450][T11803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.991533][T11817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.035829][T11819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.277754][T11832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.981423][T11851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.380934][T11871] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1845'. [ 450.451161][T11873] syzkaller0: entered promiscuous mode [ 450.466609][T11873] syzkaller0: entered allmulticast mode [ 451.526182][T11887] tipc: Enabled bearer , priority 0 [ 451.544129][T11887] syzkaller0: entered promiscuous mode [ 451.549618][T11887] syzkaller0: entered allmulticast mode [ 451.589609][T11887] tipc: Resetting bearer [ 451.607269][T11886] tipc: Resetting bearer [ 451.643590][T11886] tipc: Disabling bearer [ 451.727177][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1859'. [ 452.881013][T11910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.952005][T11914] syzkaller0: entered promiscuous mode [ 452.982250][T11914] syzkaller0: entered allmulticast mode [ 453.381913][T11929] tipc: Enabling of bearer rejected, failed to enable media [ 454.766578][T11944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.813822][T11947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.009930][T11955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.138931][T11954] syzkaller0: entered promiscuous mode [ 455.144538][T11954] syzkaller0: entered allmulticast mode [ 456.235911][T11971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.253686][T11969] tipc: Enabling of bearer rejected, failed to enable media [ 456.399967][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1890'. [ 456.746915][T11997] netlink: 'syz.2.1897': attribute type 11 has an invalid length. [ 456.766309][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'. [ 456.793190][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 456.878934][T12004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.002673][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1902'. [ 457.670069][T12031] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1911'. [ 457.808005][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1915'. [ 457.903321][T12045] tipc: Enabled bearer , priority 0 [ 457.911145][T12046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.914190][T12045] syzkaller0: entered promiscuous mode [ 457.943043][T12045] syzkaller0: entered allmulticast mode [ 457.968096][T12045] tipc: Resetting bearer [ 457.991323][T12043] tipc: Resetting bearer [ 458.024518][T12043] tipc: Disabling bearer [ 458.059600][T12052] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1921'. [ 458.290721][T12076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.468510][T12094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.692450][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 458.733854][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 458.733864][ T6024] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.761110][ T6024] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.780671][ T6024] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.799079][ T6024] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.494879][T12147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.078947][T12154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.313334][T12167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.621297][T12169] syzkaller0: entered promiscuous mode [ 460.722077][T12169] syzkaller0: entered allmulticast mode [ 461.043195][T12169] 0: reclassify loop, rule prio 0, protocol 800 [ 461.189162][T12183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.333855][T12192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.386296][T12199] tipc: Enabling of bearer rejected, failed to enable media [ 461.415331][T12193] syzkaller0: entered promiscuous mode [ 461.420830][T12193] syzkaller0: entered allmulticast mode [ 461.461341][T12204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.780975][T12220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.328255][T12236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.359575][T12237] hpfs: hpfs_map_sector(): read error [ 462.392839][T12234] block nbd2: not configured, cannot reconfigure [ 462.412515][ T5826] block nbd0: Receive control failed (result -32) [ 462.633812][T12250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 462.731947][T12255] tipc: Enabled bearer , priority 0 [ 462.753748][T12252] tipc: Resetting bearer [ 462.870897][T12252] tipc: Disabling bearer [ 463.084201][T12269] syzkaller0: entered promiscuous mode [ 463.096420][T12269] syzkaller0: entered allmulticast mode [ 463.314212][T12277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.376791][T12283] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2016'. [ 463.397430][T12285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.690925][T12293] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2019'. [ 464.330061][T12297] sch_tbf: burst 15 is lower than device veth0 mtu (1514) ! [ 464.408105][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2024'. [ 464.501320][T12319] netlink: 'syz.6.2024': attribute type 10 has an invalid length. [ 464.502446][T12320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.511092][T12310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.536384][T12319] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.543704][T12319] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.669200][T12326] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2030'. [ 465.002474][T12335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.664052][T12343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2037'. [ 465.700784][T12345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.480134][T12360] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 467.553390][T12382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.716959][T12390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.822259][T12395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.834732][T12411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.892912][T12415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.906300][T12413] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 468.971978][T12417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.038301][T12425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.191624][T12435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.200085][T12436] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 469.217602][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2076'. [ 469.330775][T12443] netlink: 'syz.7.2076': attribute type 10 has an invalid length. [ 469.355602][T12444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.368040][T12438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.378091][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.385762][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.398240][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.405425][T12443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.412845][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.419999][T12443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.430535][T12443] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 469.477797][T12452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.638665][T12464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.718585][T12470] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2090'. [ 469.794351][T12475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.848443][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'. [ 469.880563][T12477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.892697][T12477] netlink: 'syz.2.2093': attribute type 10 has an invalid length. [ 470.094786][T12497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.192245][T12502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.213971][T12507] capability: warning: `syz.5.2106' uses 32-bit capabilities (legacy support in use) [ 470.267273][T12510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.123795][T12526] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 471.264577][T12536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.509834][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2129'. [ 471.683458][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2135'. [ 471.724061][T12568] tipc: Enabled bearer , priority 0 [ 471.731721][T12568] syzkaller0: entered promiscuous mode [ 471.757696][T12568] syzkaller0: entered allmulticast mode [ 471.809133][T12567] tipc: Resetting bearer [ 471.850437][T12572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.881392][T12567] tipc: Disabling bearer [ 472.779944][ T30] audit: type=1400 audit(1768967380.721:403): avc: denied { ioctl } for pid=12575 comm="syz.4.2140" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 473.102744][T12592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.484264][T12608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.799428][T12627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.882842][T12631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.921271][T12631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.128537][T12639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.544562][T12658] tipc: Enabled bearer , priority 0 [ 475.555386][T12660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.596694][T12658] tipc: Resetting bearer [ 475.698553][T12662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.726610][T12662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.750671][T12657] tipc: Disabling bearer [ 475.846383][T12667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.175924][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2186'. [ 476.201813][T12681] netlink: 'syz.4.2186': attribute type 10 has an invalid length. [ 476.411386][T12690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.482329][T12695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.609109][T12709] syzkaller0: entered promiscuous mode [ 477.645478][T12709] syzkaller0: entered allmulticast mode [ 477.680056][T12717] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.004261][T12723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.050196][T12725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.112340][T12727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.855758][T12773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.848228][T12789] usb usb8: usbfs: process 12789 (syz.4.2223) did not claim interface 0 before use [ 481.182243][T12793] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2225'. [ 481.366931][T12800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.531128][T12809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.906635][T12752] tipc: Enabling of bearer rejected, failed to enable media [ 482.068506][T12829] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2236'. [ 482.197732][T12835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.382174][T12840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.387755][ T30] audit: type=1400 audit(1768967390.781:404): avc: denied { write } for pid=12841 comm="syz.5.2242" name="snmp" dev="proc" ino=4026533994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 483.530054][T12851] syzkaller0: entered promiscuous mode [ 483.554250][T12851] syzkaller0: entered allmulticast mode [ 483.578325][T12852] tipc: Enabling of bearer rejected, failed to enable media [ 483.643034][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 483.914346][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.924749][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.935952][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.945214][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.953299][ T10] usb 3-1: Product: syz [ 483.957582][ T10] usb 3-1: Manufacturer: syz [ 483.962201][ T10] usb 3-1: SerialNumber: syz [ 484.392529][ T10] usb 3-1: 0:2 : does not exist [ 484.832017][ T6333] usb 3-1: USB disconnect, device number 15 [ 485.005599][T12874] tipc: Enabling of bearer rejected, failed to enable media [ 485.146285][ T30] audit: type=1400 audit(1768967393.521:405): avc: denied { nlmsg_read } for pid=12893 comm="syz.7.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 485.751495][T12920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.876410][T12933] tipc: Enabling of bearer rejected, failed to enable media [ 485.903084][ T5860] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 486.048494][T12943] syzkaller0: entered promiscuous mode [ 486.054216][T12943] syzkaller0: entered allmulticast mode [ 486.065620][ T5860] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 486.082089][ T5860] usb 8-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 486.109011][ T5860] usb 8-1: Manufacturer: syz [ 486.132728][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2267'. [ 486.149960][ T5860] usb 8-1: config 0 descriptor?? [ 486.176331][ T5860] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 486.195789][T12955] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 486.207204][ T5860] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 486.248997][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2268'. [ 487.771508][T12966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.824390][T12972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.149639][ T5860] usb 8-1: USB disconnect, device number 5 [ 488.164059][ T5860] ftdi_sio 8-1:0.0: device disconnected [ 488.291778][ T5826] Bluetooth: Wrong link type (-71) [ 488.600849][T13010] syzkaller0: entered promiscuous mode [ 488.609346][T13010] syzkaller0: entered allmulticast mode [ 489.061014][T13026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.794400][T13060] mmap: syz.7.2292 (13060) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 490.274974][T13062] tipc: Enabling of bearer rejected, failed to enable media [ 490.367275][T13063] syzkaller0: entered promiscuous mode [ 490.394915][T13063] syzkaller0: entered allmulticast mode [ 490.644552][T13084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.372541][T13167] tipc: Enabling of bearer rejected, failed to enable media [ 493.454984][T13169] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 494.494660][T13194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 494.674821][T13214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.202672][T13252] capability: warning: `syz.2.2334' uses deprecated v2 capabilities in a way that may be insecure [ 496.119848][T13294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.153350][ T30] audit: type=1400 audit(1768967404.521:406): avc: denied { map } for pid=13284 comm="syz.4.2342" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 496.155407][T13299] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 496.271209][T13306] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2348'. [ 496.287279][ T30] audit: type=1400 audit(1768967404.661:407): avc: denied { open } for pid=13284 comm="syz.4.2342" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 496.339898][T13310] netlink: 'syz.6.2348': attribute type 10 has an invalid length. [ 498.912285][T13358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.002280][ T30] audit: type=1400 audit(1768967407.371:408): avc: denied { create } for pid=13365 comm="syz.6.2361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 500.206594][T13380] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2365'. [ 500.216770][T13380] netlink: 'syz.7.2365': attribute type 10 has an invalid length. [ 500.225021][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.232249][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.976837][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.986664][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.018157][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2370'. [ 501.128024][T13390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 501.139025][T13398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.290126][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 501.380098][T13425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.648562][T13447] syzkaller0: entered promiscuous mode [ 501.654077][T13447] syzkaller0: entered allmulticast mode [ 502.073303][ T5860] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.235005][ T5860] usb 7-1: config 0 has an invalid interface number: 207 but max is 0 [ 502.251521][ T5860] usb 7-1: config 0 has no interface number 0 [ 502.270461][ T5860] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 502.300430][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.326448][T13499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2396'. [ 502.348414][ T5860] usb 7-1: config 0 descriptor?? [ 502.374812][T13499] netlink: 'syz.4.2396': attribute type 10 has an invalid length. [ 502.535323][T13514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.563724][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.628421][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.680553][ T5860] usb 7-1: Cannot read MAC address [ 502.724029][ T5860] MOSCHIP usb-ethernet driver 7-1:0.207: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 502.764949][ T5860] usb 7-1: USB disconnect, device number 6 [ 503.201184][T13577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.337713][T13588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2423'. [ 504.664079][T13616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.664680][T13614] block nbd5: not configured, cannot reconfigure [ 504.712101][ T6942] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 504.750869][ T6942] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 504.864550][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2435'. [ 505.049932][T13638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.335145][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2443'. [ 506.595318][T13672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.784036][T13685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2449'. [ 506.992260][T13679] kvm: kvm [13678]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffc80000ea00 [ 507.006349][T13679] kvm: kvm [13678]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x40000000300 [ 509.394345][ T30] audit: type=1400 audit(1768967417.771:409): avc: denied { map } for pid=13709 comm="syz.6.2459" path="socket:[40142]" dev="sockfs" ino=40142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 509.489765][T13714] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 509.744845][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2462'. [ 509.788665][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2463'. [ 509.917803][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2466'. [ 509.923471][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2465'. [ 510.080339][T13734] syzkaller0: entered promiscuous mode [ 510.092905][T13734] syzkaller0: entered allmulticast mode [ 510.233517][T13747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.546991][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2478'. [ 511.636141][T13771] syzkaller0: entered promiscuous mode [ 511.645245][T13771] syzkaller0: entered allmulticast mode [ 511.906604][T13793] syzkaller0: entered promiscuous mode [ 511.925862][T13793] syzkaller0: entered allmulticast mode [ 516.480989][ T5826] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 517.662996][ T30] audit: type=1400 audit(1768967426.031:410): avc: denied { read } for pid=13850 comm="syz.7.2504" path="socket:[39635]" dev="sockfs" ino=39635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.825857][T13853] syzkaller0: entered promiscuous mode [ 517.847823][T13853] syzkaller0: entered allmulticast mode [ 518.605565][T13872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2509'. [ 521.591406][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 521.650514][T13920] netlink: 'syz.4.2516': attribute type 10 has an invalid length. [ 522.007296][T13919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.066067][T13994] syzkaller0: entered promiscuous mode [ 524.071537][T13994] syzkaller0: entered allmulticast mode [ 524.099518][T13998] binder: BINDER_SET_CONTEXT_MGR already set [ 524.111752][T13998] binder: 13996:13998 ioctl 4018620d 200000000040 returned -16 [ 524.411939][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2540'. [ 524.666019][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2528'. [ 524.679617][T14046] bond1: option mode: unable to set because the bond device is up [ 524.690983][T14046] netlink: 'syz.6.2528': attribute type 10 has an invalid length. [ 524.864937][ T30] audit: type=1400 audit(1768967433.231:411): avc: denied { ioctl } for pid=14051 comm="syz.5.2546" path="socket:[40624]" dev="sockfs" ino=40624 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 525.217095][T14077] syzkaller0: entered promiscuous mode [ 525.241752][T14077] syzkaller0: entered allmulticast mode [ 525.283364][T14082] 9pnet_fd: p9_fd_create_tcp (14082): problem connecting socket to 127.0.0.1 [ 525.310899][T14082] 9pnet_fd: p9_fd_create_tcp (14082): problem connecting socket to 127.0.0.1 [ 525.321272][T14082] 9pnet_fd: p9_fd_create_tcp (14082): problem connecting socket to 127.0.0.1 [ 525.359432][T14082] 9pnet_virtio: no channels available for device 127.0.0.1 [ 525.568875][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2558'. [ 525.647718][T14093] syzkaller0: entered promiscuous mode [ 525.663122][T14100] netlink: 'syz.5.2558': attribute type 10 has an invalid length. [ 525.685920][T14093] syzkaller0: entered allmulticast mode [ 525.856735][T14095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.911584][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.918829][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.499818][ T5826] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 527.705859][T14174] openvswitch: netlink: Missing valid actions attribute. [ 527.723397][T14174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.512545][T14186] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2572'. [ 530.582457][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2574'. [ 530.647822][T14212] netlink: 'syz.5.2574': attribute type 10 has an invalid length. [ 531.536113][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 531.545544][ T5826] Bluetooth: hci1: Injecting HCI hardware error event [ 531.554115][ T5821] Bluetooth: hci1: hardware error 0x00 [ 533.572419][T14277] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2597'. [ 533.614360][ T5821] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 533.938022][T14210] bond3: option mode: unable to set because the bond device is up [ 534.103668][T14295] fuse: Bad value for 'fd' [ 534.691508][T14300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.166783][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2612'. [ 535.175783][T14317] bond1: option mode: unable to set because the bond device is up [ 535.185410][T14317] netlink: 'syz.7.2612': attribute type 10 has an invalid length. [ 535.316929][T14321] syzkaller0: entered promiscuous mode [ 535.343892][T14321] syzkaller0: entered allmulticast mode [ 537.004905][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 537.022720][T14357] openvswitch: netlink: Flow actions attr not present in new flow. [ 537.583158][T14362] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 538.201009][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2636'. [ 538.847524][T14388] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 539.021592][ T30] audit: type=1400 audit(1768967447.391:412): avc: denied { getopt } for pid=14396 comm="syz.2.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 540.076293][T14412] syzkaller0: entered promiscuous mode [ 540.081796][T14412] syzkaller0: entered allmulticast mode [ 540.144331][T14426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.643011][ T6012] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 540.787540][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 540.804665][ T6012] usb 8-1: Using ep0 maxpacket: 16 [ 540.815186][ T6012] usb 8-1: config 0 has no interfaces? [ 540.823647][ T6012] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.832685][ T6012] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.842864][ T6012] usb 8-1: Product: syz [ 540.863053][ T6012] usb 8-1: Manufacturer: syz [ 540.867671][ T6012] usb 8-1: SerialNumber: syz [ 540.886740][ T6012] usb 8-1: config 0 descriptor?? [ 541.063418][T14464] fuse: Bad value for 'fd' [ 541.130282][ T6012] usb 8-1: USB disconnect, device number 6 [ 541.957132][T14485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.050430][T14484] syzkaller0: entered promiscuous mode [ 542.056104][T14484] syzkaller0: entered allmulticast mode [ 542.247556][ T30] audit: type=1400 audit(1768967450.581:413): avc: denied { mount } for pid=14486 comm="syz.6.2666" name="/" dev="configfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 545.283701][ T30] audit: type=1400 audit(1768967453.641:414): avc: denied { read } for pid=14534 comm="syz.2.2677" name="mouse0" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 545.363854][T14543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.510846][ T30] audit: type=1400 audit(1768967453.881:415): avc: denied { bind } for pid=14555 comm="syz.7.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 545.833073][ T6012] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 546.058710][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 546.212998][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 546.225980][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 546.243953][ T6012] usb 6-1: not running at top speed; connect to a high speed hub [ 546.250250][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 546.278629][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.281928][ T6012] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.298986][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.337318][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.353007][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.386465][ T6012] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.396670][ T6012] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.412911][ T6012] usb 6-1: config 1 interface 0 has no altsetting 0 [ 546.443093][ T6942] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 546.473537][ T6012] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.40 [ 546.500862][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.520979][ T6012] usb 6-1: Product: syz [ 546.531248][ T6012] usb 6-1: Manufacturer: syz [ 546.541356][ T6012] usb 6-1: SerialNumber: syz [ 546.637836][ T6942] usb 8-1: not running at top speed; connect to a high speed hub [ 546.637842][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 546.656367][ T10] usbtmc 3-1:16.0: can't read capabilities [ 546.667308][ T6942] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 546.686627][ T6942] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 546.734800][T14579] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2687'. [ 546.801654][ T6942] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.854130][T14578] syzkaller0: entered promiscuous mode [ 546.861898][ T6012] usbhid 6-1:1.0: can't add hid device: -71 [ 546.864230][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 546.869302][ T6012] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 546.890504][ T6942] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 546.898674][T14539] usbtmc 3-1:16.0: Unable to send data, error -71 [ 546.907116][ T6942] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.912132][T14578] syzkaller0: entered allmulticast mode [ 546.918923][ T6012] usb 6-1: USB disconnect, device number 2 [ 546.926914][ T6942] usb 8-1: Product: syz [ 546.949489][ T6942] usb 8-1: Manufacturer: syz [ 546.979699][ T10] usb 3-1: USB disconnect, device number 16 [ 546.980282][ T6942] usb 8-1: SerialNumber: syz [ 548.226808][ T6942] usb 8-1: 0:2 : does not exist [ 548.363352][ T6942] usb 8-1: USB disconnect, device number 7 [ 548.546198][T14632] binder: BINDER_SET_CONTEXT_MGR already set [ 548.552185][T14632] binder: 14631:14632 ioctl 4018620d 200000000040 returned -16 [ 549.209017][T14654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2698'. [ 549.851190][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2698'. [ 550.649693][T14682] binder: BINDER_SET_CONTEXT_MGR already set [ 550.656606][T14682] binder: 14681:14682 ioctl 4018620d 200000000040 returned -16 [ 550.702526][T14684] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2702'. [ 550.753368][ T30] audit: type=1400 audit(1768967459.131:416): avc: denied { ioctl } for pid=14683 comm="syz.5.2702" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 551.808084][T14691] random: crng reseeded on system resumption [ 551.835243][ T30] audit: type=1400 audit(1768967460.181:417): avc: denied { write } for pid=14690 comm="syz.7.2706" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 551.902054][ T30] audit: type=1400 audit(1768967460.181:418): avc: denied { open } for pid=14690 comm="syz.7.2706" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 552.492432][ T6942] libceph: connect (1)[c::]:6789 error -101 [ 552.527898][ T6942] libceph: mon0 (1)[c::]:6789 connect error [ 552.844354][ T6942] libceph: connect (1)[c::]:6789 error -101 [ 552.864536][ T6942] libceph: mon0 (1)[c::]:6789 connect error [ 553.197895][T14752] netlink: 'syz.4.2707': attribute type 3 has an invalid length. [ 553.393338][ T6942] libceph: connect (1)[c::]:6789 error -101 [ 553.410643][ T6942] libceph: mon0 (1)[c::]:6789 connect error [ 553.516824][T14760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2711'. [ 553.656473][T14760] input: syz1 as /devices/virtual/input/input6 [ 553.667177][ T30] audit: type=1400 audit(1768967462.041:419): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=2887 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 553.738217][ T30] audit: type=1400 audit(1768967462.041:420): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2887 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 553.766273][ T30] audit: type=1400 audit(1768967462.041:421): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2887 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 554.155202][T14780] syzkaller0: entered promiscuous mode [ 554.217134][T14780] syzkaller0: entered allmulticast mode [ 554.342746][ T6942] libceph: connect (1)[c::]:6789 error -101 [ 554.348918][ T6942] libceph: mon0 (1)[c::]:6789 connect error [ 554.878566][T14715] ceph: No mds server is up or the cluster is laggy [ 556.201919][T14823] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 556.945644][T14834] random: crng reseeded on system resumption [ 558.079790][T14849] fuse: Bad value for 'fd' [ 558.164878][T14849] ipip0: entered promiscuous mode [ 558.208189][T14849] ipip0: entered allmulticast mode [ 558.545945][ T6012] kernel write not supported for file /uhid (pid: 6012 comm: kworker/1:9) [ 559.643384][T14875] Bluetooth: MGMT ver 1.23 [ 559.818765][T14879] syzkaller0: entered promiscuous mode [ 559.863004][T14879] syzkaller0: entered allmulticast mode [ 560.056838][T14885] tipc: Enabled bearer , priority 0 [ 560.064546][T14885] syzkaller0: entered promiscuous mode [ 560.070067][T14885] syzkaller0: entered allmulticast mode [ 560.093857][T14885] tipc: Resetting bearer [ 560.168168][T14884] tipc: Resetting bearer [ 560.227581][T14884] tipc: Disabling bearer [ 561.460218][ T30] audit: type=1400 audit(1768967469.041:422): avc: denied { setopt } for pid=14905 comm="syz.2.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 562.916775][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.955791][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.159491][T14927] syzkaller0: entered promiscuous mode [ 563.193213][T14927] syzkaller0: entered allmulticast mode [ 563.976974][T14966] 9p: Bad value for 'rfdno' [ 565.399265][T14966] lo speed is unknown, defaulting to 1000 [ 565.405181][T14966] lo speed is unknown, defaulting to 1000 [ 565.411955][T14966] lo speed is unknown, defaulting to 1000 [ 565.421025][T14966] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 565.435235][T14966] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 565.453971][T14966] lo speed is unknown, defaulting to 1000 [ 565.461177][T14966] lo speed is unknown, defaulting to 1000 [ 565.467686][T14966] lo speed is unknown, defaulting to 1000 [ 565.474089][T14966] lo speed is unknown, defaulting to 1000 [ 565.480416][T14966] lo speed is unknown, defaulting to 1000 [ 565.486830][T14966] lo speed is unknown, defaulting to 1000 [ 565.689035][T14998] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 565.706695][T14998] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 565.728549][T14998] netlink: 'syz.2.2779': attribute type 10 has an invalid length. [ 565.744029][ T30] audit: type=1326 audit(1768967474.121:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.5.2764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcba59acb9 code=0x0 [ 565.782448][T14998] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 565.800656][T14998] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 565.820293][T14998] bond0: (slave wlan1): Opening slave failed [ 566.205016][ T6012] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 566.227619][T15039] 9p: Bad value for 'rfdno' [ 566.234577][T15040] fuse: Unknown parameter '0xffffffffffffffff' [ 566.363042][ T6012] usb 3-1: Using ep0 maxpacket: 8 [ 566.371955][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.387470][ T6012] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.409879][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.458792][ T6012] usb 3-1: config 0 descriptor?? [ 566.546468][T15047] syzkaller0: entered promiscuous mode [ 566.558303][T15047] syzkaller0: entered allmulticast mode [ 566.722058][ T6012] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 566.926252][ T5860] usb 3-1: USB disconnect, device number 17 [ 566.932242][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 567.153565][T15100] fuse: Unknown parameter '0x0000000000000009' [ 568.466230][T15116] fuse: Bad value for 'user_id' [ 568.471123][T15116] fuse: Bad value for 'user_id' [ 568.594351][T15121] tipc: Enabled bearer , priority 0 [ 568.619277][T15121] tipc: Resetting bearer [ 568.673522][T14919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 568.685956][T15120] tipc: Disabling bearer [ 568.826485][T14919] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 568.835155][T14919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.877876][T14919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 569.590305][T14919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.218814][ T5821] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 570.385144][T14919] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 570.394728][T14919] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 570.433079][T14919] usb 3-1: Product: syz [ 570.437312][T14919] usb 3-1: Manufacturer: syz [ 570.479262][T14919] cdc_wdm 3-1:1.0: skipping garbage [ 570.573575][T14919] cdc_wdm 3-1:1.0: skipping garbage [ 570.779448][T14919] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 570.825166][T14919] cdc_wdm 3-1:1.0: Unknown control protocol [ 571.512742][ T30] audit: type=1400 audit(1768967479.221:424): avc: denied { bind } for pid=15156 comm="syz.6.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 571.544139][T14919] usb 3-1: USB disconnect, device number 18 [ 571.603490][ T30] audit: type=1400 audit(1768967479.231:425): avc: denied { write } for pid=15156 comm="syz.6.2825" path="socket:[44463]" dev="sockfs" ino=44463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 572.023132][ T6478] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 572.223119][ T6478] usb 8-1: Using ep0 maxpacket: 8 [ 572.530338][ T6478] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 572.567483][ T6478] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.589873][ T6478] usb 8-1: config 0 has no interface number 0 [ 572.681562][ T6478] usb 8-1: config 0 interface 52 has no altsetting 0 [ 572.717093][ T6478] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 572.727017][ T6478] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 572.735304][ T6478] usb 8-1: Product: syz [ 572.739548][ T6478] usb 8-1: SerialNumber: syz [ 572.747585][ T6478] usb 8-1: config 0 descriptor?? [ 573.025759][ T6942] libceph: connect (1)[c::]:6789 error -101 [ 573.275520][ T6942] libceph: mon0 (1)[c::]:6789 connect error [ 573.314707][T15191] tipc: Enabled bearer , priority 0 [ 573.346450][T15191] tipc: Resetting bearer [ 573.375139][T15188] tipc: Disabling bearer [ 573.508543][ T6478] usb 8-1: USB disconnect, device number 8 [ 574.260976][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 574.294856][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 574.370816][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 574.379977][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 574.387866][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 574.414263][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 574.422119][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 575.141823][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 575.162333][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 575.227913][T15224] lo speed is unknown, defaulting to 1000 [ 575.391637][T15224] chnl_net:caif_netlink_parms(): no params data found [ 575.704149][T15224] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.711346][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.718893][T15224] bridge_slave_0: entered allmulticast mode [ 575.731310][T15224] bridge_slave_0: entered promiscuous mode [ 575.740489][T15224] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.748239][T15194] ceph: No mds server is up or the cluster is laggy [ 575.760590][T15224] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.775446][T15224] bridge_slave_1: entered allmulticast mode [ 575.828125][T15224] bridge_slave_1: entered promiscuous mode [ 575.873353][T15224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.893681][T15224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.985187][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 576.547922][T15224] team0: Port device team_slave_0 added [ 576.555924][T15224] team0: Port device team_slave_1 added [ 576.582309][T15224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.589375][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.615967][T15224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.619713][ T5826] Bluetooth: hci5: command tx timeout [ 576.651625][T15224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.671779][T15224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.995364][T15224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.457855][T15224] hsr_slave_0: entered promiscuous mode [ 578.464462][T15224] hsr_slave_1: entered promiscuous mode [ 578.515229][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2849'. [ 578.653404][ T5826] Bluetooth: hci5: command tx timeout [ 579.444606][ T30] audit: type=1400 audit(1768967487.811:426): avc: denied { write } for pid=15538 comm="syz.7.2852" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 579.826874][T15553] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2847'. [ 579.839617][ T50] Bluetooth: hci4: Frame reassembly failed (-84) [ 580.733463][ T5821] Bluetooth: hci5: command tx timeout [ 580.843477][ T6012] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 580.854819][T15224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 580.977291][T15224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 580.997617][T15224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 581.051971][ T6012] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 581.061128][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 581.081360][T15224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 581.097772][ T6012] usb 5-1: Product: syz [ 581.109572][ T6012] usb 5-1: Manufacturer: syz [ 581.127104][T15592] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2857'. [ 581.136092][ T6012] usb 5-1: SerialNumber: syz [ 581.163457][ T6012] usb 5-1: config 0 descriptor?? [ 581.178113][ T6012] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 581.199432][ T6012] dvb-usb: bulk message failed: -22 (2/0) [ 581.288565][ T6012] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 581.319008][ T6012] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 581.343506][ T6012] usb 5-1: media controller created [ 581.366625][ T6012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 581.437517][ T6012] cxusb: set interface failed [ 581.461583][ T6012] dvb-usb: bulk message failed: -22 (1/0) [ 581.557338][T15224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.581732][T15224] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.596721][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.603788][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.640570][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.647675][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.853059][ T5821] Bluetooth: hci4: command 0x1003 tx timeout [ 581.853582][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 581.918985][ T6012] DVB: Unable to find symbol mt352_attach() [ 581.922890][T15224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.937432][T15224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.977876][ T6012] dvb-usb: bulk message failed: -22 (5/0) [ 582.063123][ T6012] zl10353_read_register: readreg error (reg=127, ret==-121) [ 582.097572][ T6012] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 582.274940][ T6012] rc_core: IR keymap rc-dvico-mce not found [ 582.280837][ T6012] Registered IR keymap rc-empty [ 582.367628][ T6012] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 582.534259][ T6012] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 582.894895][ T5826] Bluetooth: hci5: command tx timeout [ 583.044809][ T6012] dvb-usb: schedule remote query interval to 100 msecs. [ 583.063373][ T6012] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 583.131030][T15656] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2863'. [ 583.173720][ T6012] usb 5-1: USB disconnect, device number 15 [ 583.203293][T15664] fuse: Bad value for 'fd' [ 583.547497][ T6012] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 583.582044][T15224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.748511][T15224] veth0_vlan: entered promiscuous mode [ 583.782139][T15224] veth1_vlan: entered promiscuous mode [ 583.922297][T15224] veth0_macvtap: entered promiscuous mode [ 584.410646][T15224] veth1_macvtap: entered promiscuous mode [ 584.457732][T15224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.507140][T15224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.534791][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.559097][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.644619][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.675059][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.032126][T15699] syzkaller0: entered promiscuous mode [ 585.047496][T15699] syzkaller0: entered allmulticast mode [ 585.119784][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.148543][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.430069][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.442407][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.512737][ T30] audit: type=1400 audit(1768967496.881:427): avc: denied { mounton } for pid=15224 comm="syz-executor" path="/root/syzkaller.TjBerN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 588.853081][T15706] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 589.014449][T15706] usb 5-1: Using ep0 maxpacket: 16 [ 589.021617][T15706] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 589.037366][T15706] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 589.076697][T15706] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.136915][T15706] usb 5-1: config 1 interface 0 has no altsetting 0 [ 589.155226][T15706] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 589.259736][T15706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.733773][T15706] usb 5-1: Product: syz [ 589.742322][T15706] usb 5-1: Manufacturer: syz [ 589.753799][T15706] usb 5-1: SerialNumber: syz [ 590.084398][T15706] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 591.244815][ T30] audit: type=1400 audit(1768967499.611:428): avc: denied { read write } for pid=15796 comm="syz.4.2883" name="lp0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 591.273209][T14919] usb 5-1: USB disconnect, device number 16 [ 591.297354][T14919] usblp0: removed [ 591.325361][ T30] audit: type=1400 audit(1768967499.641:429): avc: denied { open } for pid=15796 comm="syz.4.2883" path="/dev/usb/lp0" dev="devtmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 591.590387][T15865] tipc: Enabling of bearer rejected, failed to enable media [ 591.730051][T15865] syzkaller0: entered promiscuous mode [ 591.761739][T15865] syzkaller0: entered allmulticast mode [ 591.925900][T15879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2897'. [ 595.302797][T15945] netlink: 800 bytes leftover after parsing attributes in process `syz.4.2910'. [ 596.829535][T15972] syzkaller0: entered promiscuous mode [ 596.841615][T15972] syzkaller0: entered allmulticast mode [ 597.005793][T15954] lo speed is unknown, defaulting to 1000 [ 597.179440][T15997] tipc: Enabling of bearer rejected, failed to enable media [ 597.315712][T15997] syzkaller0: entered promiscuous mode [ 597.321565][T15997] syzkaller0: entered allmulticast mode [ 599.693055][T16065] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 600.031452][T16083] tipc: Enabling of bearer rejected, failed to enable media [ 600.130260][T16083] syzkaller0: entered promiscuous mode [ 600.182965][T16083] syzkaller0: entered allmulticast mode [ 601.088398][ T30] audit: type=1400 audit(1768967509.451:430): avc: denied { write } for pid=16107 comm="syz.6.2945" path="socket:[48278]" dev="sockfs" ino=48278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 601.354244][T16117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2949'. [ 602.199568][T16154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=16154 comm=syz.2.2956 [ 602.845648][ T30] audit: type=1400 audit(1768967511.221:431): avc: denied { read } for pid=16155 comm="syz.4.2957" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 602.845697][ T30] audit: type=1400 audit(1768967511.221:432): avc: denied { open } for pid=16155 comm="syz.4.2957" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 602.845727][ T30] audit: type=1400 audit(1768967511.221:433): avc: denied { ioctl } for pid=16155 comm="syz.4.2957" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 602.926874][T16169] fuse: Bad value for 'rootmode' [ 602.987524][T16170] tipc: Enabled bearer , priority 0 [ 602.987949][T16170] syzkaller0: entered promiscuous mode [ 602.987962][T16170] syzkaller0: entered allmulticast mode [ 602.997239][T16170] tipc: Resetting bearer [ 603.006422][T16167] tipc: Resetting bearer [ 603.126847][T16167] tipc: Disabling bearer [ 603.948415][ T30] audit: type=1326 audit(1768967512.321:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 604.069963][T16222] tipc: Enabling of bearer rejected, failed to enable media [ 604.078599][ T30] audit: type=1326 audit(1768967512.351:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 604.122498][ T30] audit: type=1326 audit(1768967512.351:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 604.200139][T16222] syzkaller0: entered promiscuous mode [ 604.235831][ T30] audit: type=1326 audit(1768967512.351:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 604.260903][T16222] syzkaller0: entered allmulticast mode [ 604.299439][ T30] audit: type=1326 audit(1768967512.361:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 604.626472][ T30] audit: type=1326 audit(1768967512.481:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c61b5b58e code=0x7ffc0000 [ 604.979308][ T89] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 605.262696][ T89] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 605.271936][ T89] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.280780][ T89] usb 8-1: Product: syz [ 605.324732][ T89] usb 8-1: Manufacturer: syz [ 605.333814][ T89] usb 8-1: SerialNumber: syz [ 605.355751][ T89] usb 8-1: config 0 descriptor?? [ 605.531520][ T89] ch341 8-1:0.0: ch341-uart converter detected [ 606.586120][ T89] usb 8-1: failed to receive control message: -110 [ 606.592901][ T89] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 606.633411][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 606.633440][ T30] audit: type=1326 audit(1768967515.011:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 606.726992][ T30] audit: type=1326 audit(1768967515.011:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c61b9acb9 code=0x7ffc0000 [ 607.251281][T16274] syzkaller0: entered promiscuous mode [ 607.257082][T16274] syzkaller0: entered allmulticast mode [ 608.361393][T15706] usb 8-1: USB disconnect, device number 9 [ 608.370406][T15706] ch341 8-1:0.0: device disconnected [ 608.435467][ T5826] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 608.521553][ T30] audit: type=1400 audit(1768967516.891:501): avc: denied { append } for pid=16316 comm="syz.7.2991" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 608.527187][T16317] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 608.766246][ T30] audit: type=1400 audit(1768967517.131:502): avc: denied { append } for pid=16318 comm="syz.2.2992" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 608.944428][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2992'. [ 611.096139][T16327] tipc: Enabling of bearer rejected, failed to enable media [ 611.671833][T16331] bridge_slave_1: left allmulticast mode [ 611.692243][T16331] bridge_slave_1: left promiscuous mode [ 611.706434][T16331] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.751167][T16331] bridge_slave_0: left allmulticast mode [ 611.769282][T16331] bridge_slave_0: left promiscuous mode [ 611.797288][T16331] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.224429][T16371] ======================================================= [ 612.224429][T16371] WARNING: The mand mount option has been deprecated and [ 612.224429][T16371] and is ignored by this kernel. Remove the mand [ 612.224429][T16371] option from the mount to silence this warning. [ 612.224429][T16371] ======================================================= [ 612.451206][ T30] audit: type=1400 audit(1768967520.791:503): avc: denied { mount } for pid=16369 comm="syz.7.3002" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 612.684502][T16371] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 612.737932][T16371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 612.841811][T16371] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 612.871557][T16371] overlayfs: failed to look up (tracing) for ino (-66) [ 613.094674][ T30] audit: type=1400 audit(1768967521.471:504): avc: denied { append } for pid=16383 comm="syz.5.3007" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 613.123367][ T30] audit: type=1400 audit(1768967521.471:505): avc: denied { map } for pid=16383 comm="syz.5.3007" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 613.571068][ T30] audit: type=1400 audit(1768967521.471:506): avc: denied { execute } for pid=16383 comm="syz.5.3007" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 613.658917][T16392] tipc: Enabling of bearer rejected, failed to enable media [ 613.668791][ T30] audit: type=1400 audit(1768967522.011:507): avc: denied { unmount } for pid=8885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 613.924065][T16408] [ 613.926511][T16408] ============================= [ 613.931326][T16408] WARNING: suspicious RCU usage [ 613.936336][T16408] syzkaller #0 Not tainted [ 613.940720][T16408] ----------------------------- [ 613.945576][T16408] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 613.954058][T16408] [ 613.954058][T16408] other info that might help us debug this: [ 613.954058][T16408] [ 613.964289][T16408] [ 613.964289][T16408] rcu_scheduler_active = 2, debug_locks = 1 [ 613.972334][T16408] 1 lock held by syz.4.3014/16408: [ 613.977492][T16408] #0: ffffffff8e5e29c0 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x33e/0xad0 [ 613.988702][T16408] [ 613.988702][T16408] stack backtrace: [ 613.994593][T16408] CPU: 1 UID: 0 PID: 16408 Comm: syz.4.3014 Not tainted syzkaller #0 PREEMPT(full) [ 613.994609][T16408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 613.994615][T16408] Call Trace: [ 613.994620][T16408] [ 613.994624][T16408] dump_stack_lvl+0x100/0x190 [ 613.994642][T16408] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 613.994661][T16408] get_callchain_entry+0x278/0x3f0 [ 613.994674][T16408] get_perf_callchain+0x2d6/0x990 [ 613.994687][T16408] ? __pfx_get_perf_callchain+0x10/0x10 [ 613.994697][T16408] ? __schedule+0xf65/0x5e10 [ 613.994715][T16408] ? __lock_acquire+0x4a5/0x2630 [ 613.994729][T16408] __bpf_get_stack+0x531/0xa90 [ 613.994742][T16408] ? __pfx___bpf_get_stack+0x10/0x10 [ 613.994755][T16408] bpf_get_stack+0x32/0x40 [ 613.994765][T16408] bpf_get_stack_raw_tp+0x1dd/0x280 [ 613.994783][T16408] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 613.994795][T16408] bpf_prog_test_run_syscall+0x6b7/0xad0 [ 613.994811][T16408] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 613.994826][T16408] ? fput+0x79/0x100 [ 613.994840][T16408] ? __bpf_prog_get+0x97/0x2a0 [ 613.994855][T16408] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 613.994869][T16408] __sys_bpf+0x1e56/0x5050 [ 613.994883][T16408] ? __pfx___sys_bpf+0x10/0x10 [ 613.994894][T16408] ? __pfx_futex_wait+0x10/0x10 [ 613.994913][T16408] ? trace_sched_exit_tp+0xcd/0x100 [ 613.994929][T16408] ? __schedule+0xf65/0x5e10 [ 613.994946][T16408] ? do_futex+0x192/0x350 [ 613.994965][T16408] ? xfd_validate_state+0x129/0x190 [ 613.994979][T16408] __x64_sys_bpf+0x7b/0xc0 [ 613.994991][T16408] ? lockdep_hardirqs_on+0x78/0x100 [ 613.995001][T16408] do_syscall_64+0xc9/0xf80 [ 613.995013][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.995024][T16408] RIP: 0033:0x7f133899acb9 [ 613.995033][T16408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.995045][T16408] RSP: 002b:00007f13397de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 613.995055][T16408] RAX: ffffffffffffffda RBX: 00007f1338c15fa0 RCX: 00007f133899acb9 [ 613.995062][T16408] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 613.995068][T16408] RBP: 00007f1338a08bf7 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 613.995074][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 613.995080][T16408] R13: 00007f1338c16038 R14: 00007f1338c15fa0 R15: 00007ffd47ee4548 [ 613.995093][T16408] [ 615.284535][ T6332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.454003][ T6332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.623231][ T6332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.753787][ T6332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.894987][ T30] audit: type=1400 audit(1768967524.271:508): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 615.936762][ T6332] bridge_slave_1: left allmulticast mode [ 615.950810][ T6332] bridge_slave_1: left promiscuous mode [ 615.958138][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.967892][ T6332] bridge_slave_0: left allmulticast mode [ 615.973645][ T6332] bridge_slave_0: left promiscuous mode [ 615.979265][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.106136][ T6332] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 616.224908][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.234304][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.243456][ T6332] bond0 (unregistering): Released all slaves [ 616.302349][ T6332] bond1 (unregistering): Released all slaves [ 616.361226][ T6332] : left promiscuous mode [ 616.412053][ T6332] tipc: Left network mode [ 616.768195][ T6332] hsr_slave_0: left promiscuous mode [ 616.775178][ T6332] hsr_slave_1: left promiscuous mode [ 616.794882][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.802662][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.954323][ T3545] smc: removing ib device  [ 617.089124][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 617.115899][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 618.162889][ T6332] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.237892][ T6332] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.297152][ T6332] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.337873][ T6332] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.485176][ T6332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.551783][ T6332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.616414][ T6332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.709781][ T6332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.861779][ T6332] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.923668][ T6332] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.024118][ T6332] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.106132][ T6332] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.252222][ T6332] bridge_slave_1: left allmulticast mode [ 619.258711][ T6332] bridge_slave_1: left promiscuous mode [ 619.265508][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.276609][ T6332] bridge_slave_0: left allmulticast mode [ 619.282226][ T6332] bridge_slave_0: left promiscuous mode [ 619.289742][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.301334][ T6332] bridge_slave_1: left allmulticast mode [ 619.307700][ T6332] bridge_slave_1: left promiscuous mode [ 619.315254][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.325760][ T6332] bridge_slave_0: left allmulticast mode [ 619.331393][ T6332] bridge_slave_0: left promiscuous mode [ 619.338839][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.562132][ T6332] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 619.624371][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.635154][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.644563][ T6332] bond0 (unregistering): Released all slaves [ 619.654485][ T6332] bond1 (unregistering): Released all slaves [ 619.664944][ T6332] bond2 (unregistering): Released all slaves [ 619.733212][ T6332] bond3 (unregistering): Released all slaves [ 619.844140][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.856247][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.865579][ T6332] bond0 (unregistering): Released all slaves [ 619.980428][ T6332] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 619.988733][ T6332] bridge0 (unregistering): left promiscuous mode [ 620.043101][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.051784][ T6332] bond_slave_0: left promiscuous mode [ 620.058740][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.069215][ T6332] bond_slave_1: left promiscuous mode [ 620.076085][ T6332] bond0 (unregistering): Released all slaves [ 620.137181][ T6332] bond1 (unregistering): Released all slaves [ 620.260063][ T6332] tipc: Left network mode [ 620.272628][ T6332] tipc: Left network mode [ 620.697931][ T6332] hsr_slave_0: left promiscuous mode [ 620.706603][ T6332] hsr_slave_1: left promiscuous mode [ 620.712475][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.720925][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.738588][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.756122][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.767261][ T6332] hsr_slave_0: left promiscuous mode [ 620.774526][ T6332] hsr_slave_1: left promiscuous mode [ 620.780399][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.789624][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.799014][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.806532][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.820629][ T6332] hsr_slave_0: left promiscuous mode [ 620.830431][ T6332] hsr_slave_1: left promiscuous mode [ 620.836167][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.843594][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.851045][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.859168][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.888329][ T6332] veth1_macvtap: left promiscuous mode [ 620.893872][ T6332] veth0_macvtap: left promiscuous mode [ 620.899376][ T6332] veth1_vlan: left promiscuous mode [ 620.904836][ T6332] veth0_vlan: left promiscuous mode [ 620.910953][ T6332] veth1_macvtap: left promiscuous mode [ 620.916453][ T6332] veth0_macvtap: left promiscuous mode [ 620.921943][ T6332] veth1_vlan: left promiscuous mode [ 620.927506][ T6332] veth0_vlan: left promiscuous mode [ 620.933515][ T6332] veth1_macvtap: left promiscuous mode [ 620.938970][ T6332] veth0_macvtap: left promiscuous mode [ 620.944781][ T6332] veth1_vlan: left promiscuous mode [ 620.950007][ T6332] veth0_vlan: left promiscuous mode [ 621.308162][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 621.332864][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 621.733519][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 621.759255][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 622.170036][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 622.195705][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 623.857148][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.863510][ T1297] ieee802154 phy1 wpan1: encryption failed: -22