last executing test programs: 16.213480622s ago: executing program 0 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 16.212205839s ago: executing program 0 (id=1605): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x800) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x8, 0x0, 0x112, 0xff, 0x22004, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x3, 0x5, 0x3}, 0x50) syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}, {0x3}}}}, 0xf) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000240)={0x0, 0x4, {0x0}, {0xffffffffffffffff}, 0x2, 0x7fffffff}) timer_create(0x1, &(0x7f0000000280)={0x0, 0x3e, 0x5, @tid=r3}, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x30c03, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x200) r5 = accept$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e) lstat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001980)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000540)="d86043f39908e6604409422595fd17a6a90fae8a2e7a816eb93022b5f34bab9d26622477d57f431cbea45491e121e43f8718eca32a860a8c5ae6762be945327c57ff7eb0c74bccfe59982f2e909c868adec162377619e606a0abcd83d77fe30e8e1ad3b680920b54fff93eb8e0658962aa4321fe08ea", 0x76}, {&(0x7f00000005c0)="f41e62a74d5be8870ac53dbf9aa83787589f5e632a25827ad1bdd8aaf68129e4a988963eead11b02ca11e7cb48ce219f19d3ee77e12d1b6d8252808c7b59ab49b989f7c79af547f54e5ff8ecf2362742c36a69c8bdd013cca7c499a4158eef7e1af5feb6523df86dee204d7231e220fd65e3bea84870b07106dede1b73b9528e6ff1eebe35dceb97074f25f01a42739d05aa119e676233945f3ac6ca0a36e62c1e09f03240124d8dd7c50e6941c5e029fe83449600ef", 0xb6}], 0x2}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000740)="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", 0x1000}], 0x1, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, 0xffffffffffffffff}}}], 0x40, 0x20002090}}, {{&(0x7f0000001880)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)="af1ab97769ea64fa154d20e5e1c2bd967c382e05437c934c44b7968f44327abf03051221", 0x24}], 0x1, 0x0, 0x0, 0xc0}}], 0x3, 0x4000814) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000001a80)={@mcast2, 0x0}, &(0x7f0000001ac0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)=@deltclass={0x68, 0x29, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5eccfb332179ed81, 0xa}, {0xe, 0xfff3}, {0xd70495ed55394586, 0x8}}, [@TCA_RATE={0x6, 0x5, {0xca, 0x6}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x40) getpgid(r3) getpgid(r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) lgetxattr(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)=@random={'system.', '{\\[!*\x00'}, &(0x7f0000001d00)=""/210, 0xd2) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) bind$packet(r8, &(0x7f0000001e40)={0x11, 0x15, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000001e80)={0x3, 0x100, 0x7}) recvfrom$packet(r1, &(0x7f0000001ec0)=""/53, 0x35, 0x2100, &(0x7f0000001f00)={0x11, 0xf8, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000001f80)={&(0x7f0000001f40)=""/58, 0x3a, 0x8, 0x100}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001fc0)={'wlan1\x00'}) r9 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000002000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x3, 0x80, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x2fb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x4, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000002040)={0xa, 0x6, 0x50, 0x3a, 0x8, 0x9, 0x40, 0x38}, 0x20, &(0x7f0000002080)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x0, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x8, 0xf, 0x40}, @ptm_cap={0x3}]}, 0x7, [{0xb1, &(0x7f00000020c0)=@string={0xb1, 0x3, "00c7b3e0f478d79859f4ddf81dd3e0d8b168d2839b9cae5b3352f4e51d68ae59df3db565013c94ab44c69e5fcb0cdf195fe7ee63f5b25b6d1f46a7d4b394ebf5596b6361f7283a2ea51bffd3de9d046884eaca17b343b649f2fc043b755444e914fb2e67c94efa217649a430b9f28fe256c4cb7b7f537a674f88d4e750f17962b863771d02b6bba8ee038f400801b9a669fad1c160d7a3f3ede1ef7039ddd810c9700d4c87210253728e78f553b95d"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000002200)=@lang_id={0x4}}, {0x87, &(0x7f0000002240)=@string={0x87, 0x3, "62dd9abb093e84b87a4f1884ef826aaca7bf681e367b0b670e8e55e296ab229fe339e49a74e0b6453f1ba15b149a39f88ba63592bb4ee69b1d08be59ea62f407671bda596089bd6f5304ddb72208ef012ff895eb930967a37e0b3993e4b8b7fa68d34f34573f6bd587e0dad0bfd18a044c4ac9954260f1ccd966637ca869879d04608de018"}}, {0x86, &(0x7f0000002300)=@string={0x86, 0x3, "39f1d2764bd92a053d232b8ad51c28b77cdf2d0b53d4808502361c3185abc8a7b9e7d3ecb5c44a3cbd6394df6824f6b9f1a760b5b1246525e6405589c2ed6e2966b4adca78932fea814ed2ece0b83e2bea18fd1da2c78819052807417d2c82c64398599469f5fe396fb57ad07e3827ad5709de7df9e08822b2dcfae31563a36f6bfde2c9"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r9, &(0x7f00000025c0)={0x24, &(0x7f0000002480)={0x40, 0x2, 0x78, {0x78, 0x11, "ac6ffec78ce8dc6ffea6dabfe3aaadd5484f03980df8799270f65073070ead5727985389ef9f6fcdf877f89b482f39974970cbdbd794456279bca921b0ff91a394e445f9d321604719a5127029312eb38a9552a5d4e883813694a1b7b8d41a4d16abdf4123f61b50b21aaa937bd56c04fcaea4bf5cb3"}}, &(0x7f0000002500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000002540)={0x0, 0x22, 0x3, {[@main=@item_012={0x2, 0x0, 0xa, "b7df"}]}}, &(0x7f0000002580)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff, 0x4, 0x1, {0x22, 0xc96}}}}, &(0x7f0000002800)={0x2c, &(0x7f0000002600)={0x20, 0x7, 0x2d, "885bd842ae74d069c121be52a90635dbf52613bb7c7708e08c1dc8ee8082086ddf3b5dbb71fa3d8168f71a8881"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002680)={0x0, 0x8, 0x1}, &(0x7f00000026c0)={0x20, 0x1, 0xe3, "e7ec3541c45b07762d434a6bea4bf461e4609a2d06c2a420149f4d4f7ed6921a1ec53d080139cd16b415198e5e6f006ac0ed396eb4264604ac0048d6c7f9ecc656c6f9bcef735aea80919b7bba104134863c48455f5b79e2ea43d5ce28462af01934e4e46851e0191ec81f9f4c53882903f7f23c45f5aa0dcca39441db91c07643981c708c2d5eee66d59cfd47fd4ae14f06b3a72112af562fcc8db91df7c33a6a371dc23f2db2b369a7c5ed2131217f1e4170976e8f2c6a5709d2bb590170c1e027123d2db774160f946ec972e0e925427a2a483aa3e9e8b85a2fa5d56afb1290c8f4"}, &(0x7f00000027c0)={0x20, 0x3, 0x1, 0x8}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000002840)={0xa, 0x4e20, 0x6, @private2, 0x8001}, 0x1c, &(0x7f0000002940)=[{&(0x7f0000002880)="59a7ea4248cbb60637da14b1a80eafd82e5cf043f3f30080068ea9c0aa183c6704901b3ef61ef693461025b399c354562e6ded95fc7f7d7f80fd7551f6a4d3bfd944122636e563a7ff1f2a7b3e164fcbede7c9b3704136316b5841ab49c427655c51a7620345cb371d66d83c6499019eccfb299f58e314f298dae88a3a08b38e6ce4943b0b458e6df086379cb9af487dac436a41e8ed783c5995f58c09", 0x9d}], 0x1}}, {{&(0x7f0000002980)={0xa, 0x4e22, 0x3, @mcast1, 0x4}, 0x1c, &(0x7f0000002a40)=[{&(0x7f00000029c0)="1ee29f24612de9f44217bbb4f4e68b8e6425404e0b95d60576f494d4dbb57955ecb509d364311d10266306f29a7e5e4707c4c405a9762265b4d56dfab0a4159305c9707136ed398a1fa19ea25c264d6c39f4ee4699d3a12c49c13a", 0x5b}], 0x1, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x10000000}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}], 0x40}}, {{&(0x7f0000002ac0)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1ff}, 0x1c, &(0x7f0000002b40)=[{&(0x7f0000002b00)="39e3d91584354b89537a2fcf924a138b609fb17c", 0x14}], 0x1, &(0x7f0000002b80)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x8, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xe}}, @rthdr={{0x98, 0x29, 0x39, {0x1d, 0x10, 0x0, 0x3, 0x0, [@mcast1, @empty, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast1, @local, @loopback]}}}, @hopopts={{0x38, 0x29, 0x36, {0x5e, 0x3, '\x00', [@generic={0x3}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x88, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @pad1, @jumbo]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}, @hopopts={{0x120, 0x29, 0x36, {0xc, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x5, 0xbe, "3a3ed0e62eb15164bec2a66091471287a87e446714d68033bc6f7894540a8066a9a6fcbb991077dfd9c2f37edcc88f951458039574077606bf83d314dc0daca46abb40000651a802de40883eadc8d8ace82fe3bd53b4c0dbb4910674631f44e029527c068172c1e474a6bc2d8f625c2f9fa64b09a9cda3dc19037ac74e17449404b19ad3b95917856f55160b88a2f14afd64405cacdf1bcb6cdc1c5e1a80d1f0a9bfe70f256e89d6df212773f9215ed3041b5730086c3a0a08354e918ac5"}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x30, {0x2, 0xa, 0xc9, 0x1, [0x0, 0x4, 0x0, 0xff, 0x61d]}}]}}}], 0x348}}], 0x3, 0x1) ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, &(0x7f0000002fc0)={{0x1, 0xffffffff, 0x87, 0x3, 0x8, 0x1}, 0xdd, [0x6, 0x7, 0xffffffff, 0xfffffffe, 0x305f, 0x0, 0x1, 0x5, 0x1000, 0x3, 0x2, 0x1, 0x1, 0xa, 0x2, 0x2, 0x401, 0xa01, 0xe3a, 0x6, 0xffffffff, 0x1, 0xfffffffa, 0x7, 0x263c0, 0x2b90, 0x6, 0x40, 0x0, 0xff, 0x985f, 0x7fffffff, 0x4, 0x7ff, 0x0, 0x1, 0x3ff, 0x8, 0xd, 0x9, 0x8001, 0x0, 0x7, 0x1, 0x7, 0x6, 0xc738, 0x0, 0x1, 0xffff, 0x2, 0x7, 0x7fffffff, 0x8001, 0xe, 0x8000, 0x6, 0xe0, 0x3, 0x4, 0xfffffff5, 0x2, 0xc, 0x3, 0x2, 0x2, 0x8001, 0x2, 0x101, 0xfe5, 0x6, 0x8, 0x27, 0xfcec, 0xffff, 0x80, 0x7f, 0x3, 0x0, 0x7, 0x407e, 0xf, 0x0, 0x4, 0x8c, 0xf9, 0x1, 0x5, 0xa9, 0x6, 0x140, 0x9, 0x7, 0x6, 0x2b, 0x4, 0x4, 0x8, 0x3, 0x9, 0x3, 0x81, 0x1000, 0x5, 0x4, 0x3, 0x8, 0x4, 0x0, 0x2400000, 0x5, 0x6, 0x3ff, 0x7, 0xbe, 0x8, 0x1, 0x8001, 0x5, 0xffffffff, 0x70f9, 0x9, 0x8, 0x2, 0x549, 0xe2, 0xcc, 0x200, 0xe, 0x3, 0x571b, 0xf676, 0xefb, 0x1ff, 0x5, 0x2, 0x5fb44efa, 0x74c, 0x6, 0x2, 0x5, 0x7, 0xc3e9, 0x0, 0x0, 0x8a, 0x1, 0x2, 0x2, 0x40, 0x2, 0x8, 0x1, 0x3, 0x2c9259aa, 0x4, 0xffff4284, 0x4, 0x7ff, 0x5, 0x4, 0x7ff, 0x9, 0x7ff, 0x9, 0x9, 0x0, 0x5, 0x881f, 0x6, 0x0, 0xff, 0x7, 0x85dc, 0x9, 0x0, 0x0, 0x8, 0x1, 0x8, 0x4, 0x8, 0xef, 0x4, 0xffff, 0x431, 0xe2d, 0x9, 0x81, 0x4, 0x2, 0x7, 0x8, 0x10001, 0x1, 0xe2, 0x3ff, 0xce, 0x4, 0x5, 0x4, 0x7fff, 0x4, 0x3, 0x0, 0x3, 0x7, 0x1, 0x2, 0xd, 0x2, 0x2, 0x27, 0x3, 0xec9c, 0x101, 0x3, 0x9, 0x0, 0xae29, 0xdf, 0x9, 0x55aeea16, 0x1, 0x2, 0x2, 0x9, 0x8, 0x4, 0x4, 0x3, 0x80, 0xfff, 0x4, 0x9, 0x1000, 0xf683, 0xf, 0x4, 0x9, 0xa, 0x3, 0x8, 0x3, 0x6, 0x9, 0x81, 0xfff, 0xffffff80, 0x8, 0x8, 0xfffffff7, 0x2, 0x80, 0x7fffffff, 0xfffffffd, 0x101, 0x5bcb, 0x4, 0x54, 0x2, 0x6, 0x56, 0x8, 0xab6, 0x5, 0x4, 0x4, 0x4, 0x9, 0x4, 0x6, 0x1, 0x29d, 0xe, 0x20000, 0x0, 0x2, 0x3, 0xfffffff4, 0xc, 0xfffffffb, 0x6, 0x1c0000, 0x0, 0x938, 0x7, 0x3, 0x401, 0x80000000, 0xa, 0x7, 0xc4d, 0x7bec, 0x4a8, 0x0, 0xfffffff8, 0xec, 0xb, 0x10, 0x3, 0x400, 0x0, 0x81c6, 0x1, 0xfffff801, 0x2, 0xf7, 0x72f, 0x5, 0x7, 0x200, 0x8, 0xa46, 0x597b5220, 0x1, 0x9, 0x1f44, 0x1, 0x7ff, 0x81, 0x1, 0xb7b4, 0x10, 0x8000, 0x10, 0x7218, 0xaf, 0x533fd57c, 0x50, 0x2563, 0x1, 0x6, 0x2, 0x1, 0x8, 0x3, 0x140000, 0xbd, 0x8, 0x400, 0x5, 0x2, 0x6, 0x7, 0xa5b, 0x5, 0x8, 0xb, 0x400, 0x3, 0x0, 0x8, 0x7, 0x8ed, 0x80000000, 0x0, 0x8, 0xffffff40, 0x2, 0x8, 0x1, 0x210, 0xc, 0x1ff, 0x7ff, 0x8, 0x1, 0x7, 0x2, 0xa, 0x4, 0xd6, 0x7f, 0x3, 0x4, 0x8, 0x10, 0x8, 0x2, 0x4, 0x8, 0x4, 0x1, 0x2, 0x3, 0xa, 0x2, 0x2, 0x4, 0x401, 0x800, 0x9, 0x0, 0x2, 0x1, 0x9f0, 0x80000001, 0x9b4b, 0x9, 0x5, 0x4, 0x3, 0x9f1, 0x0, 0x7, 0x6, 0x800, 0xfffffffc, 0x401, 0x3, 0x2, 0x8, 0x9, 0x7, 0xf6, 0x6000000, 0x7cad5c8c, 0xd4, 0x5, 0xffff0000, 0xb, 0x1ff, 0x5, 0x0, 0x6, 0x1, 0x7, 0x7ff, 0xfff, 0x1, 0x100, 0x3, 0x6, 0x0, 0x4, 0x8, 0x1ff, 0x5a23, 0x1, 0x1, 0x100, 0x3, 0x3, 0x7, 0x6, 0x5, 0x0, 0x79, 0x1, 0x1, 0x8f, 0x8, 0x1, 0x3, 0x0, 0x4074, 0xf0c, 0xffffffff, 0xf, 0x3, 0x1, 0x1, 0x10000, 0x2, 0x31e, 0x1, 0x2c, 0x8, 0x5, 0x7, 0x7, 0x0, 0x8, 0x5, 0x0, 0x3, 0x3, 0x7, 0xeb2, 0x5, 0xfffffffd, 0x8000, 0x8, 0x1, 0x2, 0x10, 0x473, 0x8, 0x1, 0x8, 0xbd, 0x5, 0x4, 0x3, 0x1, 0x83, 0x1, 0x1, 0x6, 0x3, 0x6, 0x7, 0xe00000, 0x7, 0x7ff, 0x3, 0x7, 0x6, 0x1, 0x8, 0x80000001, 0x5, 0xb, 0x0, 0x5ef, 0x5, 0xcbb3, 0x3, 0x81, 0x10001, 0x4, 0x7, 0x18327369, 0x7, 0xacd6, 0x5c3, 0x80, 0x10, 0xfffffff8, 0x15e, 0x4, 0x6, 0x0, 0xffffffff, 0x1ff, 0x5, 0x7, 0x401, 0x8, 0x3ff, 0x0, 0x8, 0x1, 0x7, 0x3, 0x8000, 0x3, 0x8, 0x8, 0xfffffff7, 0xfffffff3, 0x2, 0xa2, 0xcb81, 0x4, 0x45a5, 0xffa, 0x1, 0x6, 0x7, 0xc, 0x3, 0x0, 0x80, 0xff, 0x0, 0x1, 0x1, 0xf43, 0x4, 0xb, 0x4, 0x5, 0x1, 0x7e26, 0x0, 0x3, 0x3, 0x4, 0x1000, 0x7, 0xffffff3f, 0x5, 0x54, 0x5, 0x5, 0x6, 0x6, 0x1, 0x9, 0x0, 0x2a1e, 0x9, 0xe, 0x8, 0x8000, 0x57, 0xfffffffd, 0xc28b, 0x6, 0x8, 0x7fa, 0x80, 0x9, 0x80000000, 0x4, 0x9, 0x9, 0x6, 0xfffffff8, 0x4, 0xffff6cc2, 0x7, 0xa, 0x81, 0x5, 0x3, 0x10, 0x3, 0xfff, 0x934, 0x3, 0x3, 0x956, 0x2b3c, 0x2, 0x7, 0x6, 0xa95, 0x6, 0x8000, 0x8, 0x1, 0x5, 0x1, 0xffffffff, 0x9, 0x7, 0x4, 0xd8a60c4b, 0x10001, 0x2, 0x3, 0x1, 0x100, 0xb219, 0x9, 0x2, 0x800, 0xbe2, 0x8, 0x8, 0x8, 0x9, 0x4, 0xe4, 0x2, 0x21, 0x7, 0x3, 0xfff, 0x7, 0x8, 0xf1b, 0x0, 0x83, 0xc, 0x4, 0x3, 0x8, 0x81, 0x0, 0x80, 0x5, 0x40, 0x7, 0x8, 0x100, 0x800, 0xfffffe00, 0x7, 0xfffffff8, 0xee, 0x1, 0x9f, 0x3, 0xebc000, 0x3, 0x32, 0xfffffffc, 0x1, 0x7bf9b6e4, 0x80000000, 0x800, 0xfffffeff, 0x1, 0xf668, 0x4, 0x6, 0xcea8, 0x5, 0x0, 0x10, 0xfffffff8, 0xfffffff1, 0x3, 0x6, 0x79, 0x6, 0x8, 0x1, 0x8, 0x18000000, 0x4, 0x7, 0x7, 0x8, 0xf, 0x4, 0x8, 0x3, 0x5, 0x5, 0x5, 0x7, 0xfffffffc, 0xc5, 0x2, 0x7, 0x3fe0000, 0x4, 0x400, 0x2, 0x9, 0x6, 0xffffffff, 0x7, 0x400, 0xcad, 0xfffffff7, 0x2, 0x7585, 0x200, 0x6, 0x7, 0x3, 0x8, 0x87, 0x4, 0x6, 0xffff68e0, 0x2, 0x1, 0xfffffff3, 0x5, 0x5d, 0x3, 0x0, 0x7, 0x5, 0x3, 0xfffff001, 0x3, 0x1, 0x9, 0x1, 0xd, 0x0, 0x81, 0x8, 0x8, 0x80000000, 0x8, 0x5c5c, 0x6, 0x4, 0x8, 0xcf, 0xa29, 0x359, 0x62, 0x1, 0x0, 0x2, 0xa, 0x8, 0x2, 0x5, 0x6985, 0x3, 0x1ff, 0x75, 0x8, 0x7f, 0x50000000, 0x6, 0x5, 0x2, 0x101, 0x8001, 0x7, 0x5, 0x0, 0xe, 0x3, 0xfffffffd, 0x7, 0x77, 0x2, 0xfffffd9b, 0xcfa, 0x2, 0xffff7727, 0x2, 0x100, 0x6, 0xda, 0x800, 0x7, 0x9, 0x1, 0xfffffffe, 0x100, 0x8000, 0x5, 0x7, 0x5, 0x1, 0xb3, 0x8, 0xf94, 0x400, 0x8, 0x9, 0xee4, 0x0, 0x5392, 0x7, 0x4, 0xffffffff, 0x10000, 0xc51, 0x3, 0xefe, 0x7ff, 0x8, 0x80, 0x5, 0x955, 0x8, 0x0, 0x3ff, 0x6c, 0x8fe, 0x0, 0x5, 0x9, 0x400, 0x6, 0xff, 0x14fa, 0x8, 0x7, 0x800, 0x6, 0xcfc7, 0x1, 0x401, 0x0, 0x40, 0x7, 0x101, 0xfffffeff, 0x7, 0x2, 0xffffffff, 0x7, 0x4, 0x7, 0xfffffffb, 0x7, 0xe82, 0x2, 0x4, 0xe175, 0x3, 0x4, 0x8000, 0xffff, 0x10, 0x7, 0x8, 0x0, 0x9, 0x80, 0x1348, 0x8, 0x0, 0x80000001, 0x3cbd, 0x4070, 0xfff, 0x99e, 0x9, 0xbba0, 0xa, 0x4, 0x5aa7a835, 0x7f, 0xc0000, 0x58, 0x1, 0x10001, 0x3, 0x7, 0xf, 0x9, 0x1, 0x735, 0x3, 0x9, 0x100, 0x6, 0x10001, 0xb7, 0x3, 0xff, 0x10000, 0xfffffff4, 0x3, 0xfffffffd, 0x9, 0x81, 0x249193b, 0x0, 0x7fff, 0x5, 0xe, 0xfffffffe, 0xfffffbff, 0x111, 0xe0, 0x9, 0x3, 0x4, 0x6, 0x2, 0xfb, 0xe7e8, 0xfffffd64, 0x9, 0x8, 0x7fff, 0x96, 0x9, 0x4, 0x9, 0x5, 0x80, 0x4, 0x5, 0x3ff, 0x80, 0x5ce, 0x8, 0xda, 0xa, 0x3, 0x1f, 0x10, 0x8, 0x816a, 0x62c1, 0x8001, 0x1e834f80, 0x4, 0xd9, 0x6, 0x3, 0x80000000, 0xd8d, 0x8, 0x6, 0x7fff, 0x8, 0xfffffff8, 0x7fffffff, 0xe, 0x0, 0x21c, 0x3, 0x1, 0x5ea, 0x7, 0x7, 0x6, 0x8, 0x9, 0xb, 0x7ff, 0x3, 0x1, 0x35, 0x8, 0x3, 0x2, 0x1, 0x6c, 0x101, 0xfffffff8, 0xfffffffd, 0x9, 0x3, 0x7, 0x9, 0x7, 0x80000001, 0x8, 0xe08, 0x6, 0x8, 0x7fff, 0x6]}) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000004000)={0x7ff, 0x9, 0x8b, 0x1}) 15.675973223s ago: executing program 0 (id=1621): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 15.585525264s ago: executing program 0 (id=1625): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x2, 0x12, 0x1, 0x5, 0x7fffffff}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbff, "", [@nested={0x2b, 0x0, 0x0, 0x0, [@typed={0x10, 0x0, 0x0, 0x0, @u64=0x2}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (rerun: 64) 15.141032215s ago: executing program 0 (id=1642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtclass={0x24, 0x28, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xb}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) (async) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000040)) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x916e, 0x1) ioctl$EVIOCGLED(r3, 0x80404519, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000180)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) kexec_load(0x0, 0x1, &(0x7f0000001440)=[{0x0}], 0x1) (async) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000002c0)={"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"}) (async) shutdown(r4, 0x0) fcntl$lock(r4, 0x0, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x1}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0xb, 0x4, 0x4, 0x5, {0x77359400}, {0x2, 0xc, 0x6, 0x2, 0x8, 0x37, "93fd52bf"}, 0x8000, 0x1, {&(0x7f0000000780)=[{0x5, 0x1, {0x6}, 0x200}, {0xfa20, 0x9, {0x5354e164}, 0xc}]}, 0x3}) (async) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afcc11d875397bdb22d0000b420a1a93c5240f45f819e010b7d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0xffffffff, 0xffffffff, 0xb4d, 0x6, 0x4, 0x3, 0x9, 0x8001}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) fchown(r4, 0x0, 0x0) 15.060222205s ago: executing program 0 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 2.8062079s ago: executing program 2 (id=1903): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r4, 0xaea2, 0x800000080000000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 1.996419939s ago: executing program 3 (id=1924): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40000021, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x28, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl(r1, 0x1, &(0x7f0000005900)="e5e2ff750231f79b2597ef5264e1ce7b2ba3eecce2f13bc65b8d54846865b2921157640925627b") (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) recvmmsg$unix(r3, &(0x7f00000057c0)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/237, 0xed}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f00000004c0)=""/22, 0x16}, {&(0x7f0000000500)=""/21, 0x15}], 0xa, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000000a00)=""/128, 0x80}, {&(0x7f0000001b40)=""/101, 0x65}, {&(0x7f0000001bc0)=""/194, 0xc2}, {&(0x7f0000001cc0)=""/202, 0xca}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/181, 0xb5}], 0x6, &(0x7f0000002f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000005340)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/40, 0x28}, {&(0x7f00000050c0)=""/249, 0xf9}, {&(0x7f00000051c0)=""/215, 0xd7}, {&(0x7f00000052c0)=""/95, 0x5f}], 0x6, &(0x7f00000053c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005400)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f0000005480)=""/165, 0xa5}, {&(0x7f0000005540)=""/2, 0x2}, {&(0x7f0000005580)=""/219, 0xdb}, {&(0x7f0000005680)=""/35, 0x23}, {&(0x7f00000056c0)=""/115, 0x73}], 0x5}}], 0x4, 0x2002, &(0x7f00000058c0)) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1.90674802s ago: executing program 2 (id=1926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x1, 0x1000, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r5, r3, 0xf, 0x8, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r6, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 1.046687058s ago: executing program 3 (id=1935): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x9) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x40074) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='environ\x00') r7 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r7) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r6, r4, 0x2) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000000)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x1}, 0x1) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x400000}, &(0x7f0000000100), &(0x7f00000000c0)) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.045372646s ago: executing program 2 (id=1936): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x1a28, 0x4) r1 = dup(r0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[], 0x1c8}, 0x1, 0x0, 0x0, 0x2}, 0x40000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) timer_settime(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x501100, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x501100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x9) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000570000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000300)="2e0f01c30f01c3dd82fe1000000f22170f005e08c4e2f917b000180000b9800000c00f3235001000000f30c4e175f86300260f38c83500000000b9800000c00f3235001000000f30", 0x48}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r8, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r8, r7}}, 0x18) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000740)={0x5, 0x0, [{0x1, 0x4, 0x1, 0x0, @adapter={0x10000, 0xffffffff, 0x3, 0xfff, 0x4}}, {0x9, 0x5, 0x1, 0x0, @adapter={0x8, 0x2, 0x8, 0x4, 0x4}}, {0x7, 0x4, 0x0, 0x0, @msi={0x7, 0x0, 0x2, 0x400000}}, {0x5, 0x5, 0x1, 0x0, @adapter={0x39b1, 0x7, 0x3, 0x0, 0x300000}}, {0x7f82, 0x4, 0x1, 0x0, @irqchip={0xffff8001, 0x3}}]}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r8, 0x653}}, 0x10) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r8, 0x653}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 996.805477ms ago: executing program 2 (id=1937): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f40)=@newtfilter={0x2c, 0x2c, 0x300, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) r3 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207) (async) fcntl$setpipe(r3, 0x407, 0x3) (async) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x4b, 0x100) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000400)={0x2, [0x6, 0x1, 0x9], [{0x2, 0x7, 0x0, 0x1, 0x1, 0x1}, {0xfffffffa, 0xffffffff, 0x1, 0x1}, {0x101, 0x7fff, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x4c1, 0x0, 0x1, 0x1, 0x1}, {0x12, 0xfffffffa, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x7}, {0xffffff7f, 0xf0f, 0x1, 0x0, 0x1}, {0x3, 0x80000001, 0x0, 0x0, 0x1}, {0x89d, 0xbe2d, 0x1}, {0x2, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1, 0x1}], 0x44ce}) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 946.565914ms ago: executing program 2 (id=1938): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000090) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) listen(r0, 0x2) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5e) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x396, 0x0, 0x3ff}]}) syz_open_dev$midi(&(0x7f00000000c0), 0x4, 0x101000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000b1eb502a200012800b00010067656e65766500001000028004000e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x10) 946.203617ms ago: executing program 2 (id=1939): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = dup(r3) read$FUSE(r4, &(0x7f0000002940)={0x2020}, 0x2020) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r4, 0x42}, {r2, 0x8}, {r4, 0x2003}, {r1, 0x935}, {r0, 0x20}, {r3, 0x40}, {r2, 0x400}], 0x7, &(0x7f0000000140)={r5, r6+60000000}, &(0x7f0000000180)={[0xa3c]}, 0x8) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r7 = syz_open_pts(r1, 0x80) r8 = dup3(r7, r1, 0x80000) read$FUSE(r8, &(0x7f0000001240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r9, {0x7, 0x2d, 0x7fff, 0x180, 0x2, 0x800, 0x0, 0xe85, 0x0, 0x0, 0x0, 0x400}}, 0x50) (async) read(r1, &(0x7f00000003c0)=""/234, 0xea) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0x3, 0x2, 0x2, 0xfbdfffd3, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xc}) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000000)) 436.71184ms ago: executing program 1 (id=1941): r0 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresgid(r1, 0xee01, r0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setregid(0xffffffffffffffff, r2) 435.196873ms ago: executing program 1 (id=1942): mkdir(&(0x7f0000000040)='./file1\x00', 0x20) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20002100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xcf, 0x7}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x100}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x58}}, 0x2000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 375.208374ms ago: executing program 1 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2e7de0d5bc6fc8327178f2594e882102837f22e566187e2c"}]]}, 0x54}, 0x1, 0x0, 0x0, 0xc844}, 0xc2010) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x8, 0x0, 0xe, {{0x20, 0x4, 0x1, 0x3, 0x80, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @generic={0x88, 0x4, 'WW'}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x5b, [@multicast2]}, @timestamp_addr={0x44, 0x3c, 0xbf, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x10000}, {@rand_addr=0x64010101, 0x101}, {@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@local, 0x1}, {@broadcast, 0xfffffffc}]}, @timestamp={0x44, 0x18, 0x44, 0x0, 0x3, [0x8, 0x0, 0x1, 0xa4f6, 0x8]}, @generic={0x7, 0x5, "73de29"}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x1, 0xfff1}, {0xc, 0x4}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r10, @ANYBLOB="4000100a14000100000000000000000000000000000000010a000200"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="020d0000180000002cbd700000000000080012000000020000000000000000000600000000000000fdffffff00000000ac1efa01000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000700000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000004000300", @ANYRESDEC], 0xc0}}, 0x0) 373.907092ms ago: executing program 1 (id=1944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x400, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x100006}, 0x3c) listen(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r3, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x12062, 0x0, 0x0) 316.445398ms ago: executing program 1 (id=1945): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'NLBL_MGMT\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, '-!\\$-\x0f&\xfb\xd7+$#+{*'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044081}, 0x8040) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, 'NLBL_MGMT\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x13, 0x14, '-!\\$-\x0f&\xfb\xd7+$#+{*'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044081}, 0x8040) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x400040, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0x7, 0x9, 0x5, 0x80, 0xf, "60b67116c68d9bf1240de071f02414287cef70"}) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008005}, 0x40000) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) (async) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004041) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xe0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004041) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8204110}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8204110}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/power/wakeup_count', 0x8000, 0x80) (async) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/power/wakeup_count', 0x8000, 0x80) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000a80)={"e7ae02058cc45f6f4f9060b01b0502dc", 0x0, 0x0, {0x0, 0x8}, {0x200, 0xa06}, 0x3, [0x6, 0x83f, 0x377, 0x2, 0x400, 0x61, 0x73000000, 0x2, 0x3, 0x7, 0x8000, 0x3, 0x5, 0x800000008, 0x5, 0x2]}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000c00)={{r12}, r13, 0x0, @inherit={0x58, &(0x7f0000000b80)={0x0, 0x2, 0x401, 0xf800000000000000, {0x18, 0x8, 0xfb58, 0x5, 0x6}, [0x1, 0x8]}}, @devid}) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004004) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), r4) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4a5c54fe43a2dde9}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)={0xd0, r14, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x15}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xee5b}, {0x6}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0xffff}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4a5c54fe43a2dde9}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)={0xd0, r14, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x15}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xee5b}, {0x6}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0xffff}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f40), r5) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, r15, 0x300, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200448d4) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000002040)={0x0, 0x5bf5, 0x0, 0x8, 0x2, [0x5, 0xc4, 0x3, 0x8000]}) syz_open_pts(0xffffffffffffffff, 0x109000) 315.994559ms ago: executing program 3 (id=1946): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100a}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000007c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x15}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x3f7, 0x6, 0xd2a, 0x100}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x2, 0x3f7, 0x6, 0xd2a, 0x100}}}}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 309.004445ms ago: executing program 1 (id=1947): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6, 0x0, 0xfc}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12019b18e45700101c1b341b000000000001090224000100000000"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) 308.803423ms ago: executing program 3 (id=1948): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/67, 0x0, 0x70000}) setitimer(0x2, 0x0, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xe000, 0xa000, 0x2, 0x0, 0x2}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xb89}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]}) socket$unix(0x1, 0x5, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/67, 0x0, 0x70000}) (async) setitimer(0x2, 0x0, &(0x7f0000000180)) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) (async) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xe000, 0xa000, 0x2, 0x0, 0x2}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xb89}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]}) (async) socket$unix(0x1, 0x5, 0x0) (async) 236.657797ms ago: executing program 3 (id=1949): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x71}, {0x8, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0xc2}, 0x6, 0x7, "d93127", 0x3, 0x8}, {@none, 0xf, 0x4, "b9b3c5", 0x800, 0xfe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9, 0xff, 'k\"j', 0x2, 0x7}, {@any, 0x3, 0x6, "833643", 0x81, 0x95}, {@any, 0x2, 0xf9, "0203ab", 0x6, 0x1}, {@none, 0x76, 0x40, "5104a1", 0x1, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x23, "b50349", 0x0, 0x7}, {@none, 0xe, 0x0, "e6a474", 0xff, 0xb}]}}}, 0x74) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000001640)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000000)=0x13) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x78, r4, 0x2e145f8accc089b9, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mouse_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0x4) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '\xaa\xaa\xaa\xaa\xaa'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '%}'}, @NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '/dev/nullb0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000084) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002100)={0x2020}, 0x1b03) socket$kcm(0x29, 0x5, 0x0) r7 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28012, r7, 0x0) 66.693887ms ago: executing program 3 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x48840, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)='6', 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80043, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000180)={0x8, r4}) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000080)={0x20, r4, &(0x7f0000000040)=[{0x0, 0x2}, {}], 0xdeadbeef, 0x8, 0x2}) 0s ago: executing program 32 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) kernel console output (not intermixed with test programs): [ 53.017657][ T40] audit: type=1400 audit(1770654425.362:60): avc: denied { rlimitinh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.024658][ T40] audit: type=1400 audit(1770654425.362:61): avc: denied { siginh } for pid=5912 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.526060][ T832] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:40978' (ED25519) to the list of known hosts. [ 289.761289][ T40] audit: type=1400 audit(1770654662.122:62): avc: denied { name_bind } for pid=5962 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 289.798320][ T40] audit: type=1400 audit(1770654662.162:63): avc: denied { execute } for pid=5963 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 289.805250][ T40] audit: type=1400 audit(1770654662.162:64): avc: denied { execute_no_trans } for pid=5963 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 291.907633][ T40] audit: type=1400 audit(1770654664.272:65): avc: denied { mounton } for pid=5963 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 291.919532][ T5963] cgroup: Unknown subsys name 'net' [ 291.923111][ T40] audit: type=1400 audit(1770654664.282:66): avc: denied { mount } for pid=5963 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 291.932394][ T40] audit: type=1400 audit(1770654664.282:67): avc: denied { unmount } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 292.097961][ T5963] cgroup: Unknown subsys name 'cpuset' [ 292.102829][ T5963] cgroup: Unknown subsys name 'rlimit' [ 292.228597][ T40] audit: type=1400 audit(1770654664.592:68): avc: denied { setattr } for pid=5963 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.236432][ T40] audit: type=1400 audit(1770654664.592:69): avc: denied { create } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.244834][ T40] audit: type=1400 audit(1770654664.592:70): avc: denied { write } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.251839][ T40] audit: type=1400 audit(1770654664.592:71): avc: denied { read } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.283236][ T5971] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 292.955874][ T5963] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 295.760206][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 295.760223][ T40] audit: type=1400 audit(1770654668.122:82): avc: denied { execmem } for pid=5976 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 295.911525][ T40] audit: type=1400 audit(1770654668.272:83): avc: denied { create } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.924976][ T40] audit: type=1400 audit(1770654668.272:84): avc: denied { read write } for pid=5981 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 295.932322][ T40] audit: type=1400 audit(1770654668.272:85): avc: denied { open } for pid=5981 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 295.939871][ T40] audit: type=1400 audit(1770654668.282:86): avc: denied { ioctl } for pid=5981 comm="syz-executor" path="socket:[756]" dev="sockfs" ino=756 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.954454][ T5993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.955942][ T5992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.957635][ T5993] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.960778][ T5995] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.962945][ T5993] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 295.965873][ T5995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.968240][ T5992] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.970684][ T5993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 295.970874][ T5995] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.971558][ T5995] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.972039][ T5995] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.972552][ T5992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.972883][ T5995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.977715][ T5995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.978249][ T5993] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 295.984670][ T40] audit: type=1400 audit(1770654668.332:87): avc: denied { read } for pid=5980 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.986456][ T5995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.987814][ T40] audit: type=1400 audit(1770654668.332:88): avc: denied { open } for pid=5980 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 295.991086][ T5294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.996925][ T40] audit: type=1400 audit(1770654668.352:89): avc: denied { mounton } for pid=5980 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 295.999250][ T5294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 296.018672][ T5294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.023728][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.193028][ T40] audit: type=1400 audit(1770654668.552:90): avc: denied { module_request } for pid=5980 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 296.225473][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 296.255981][ T5988] chnl_net:caif_netlink_parms(): no params data found [ 296.283527][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 296.383073][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.385996][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.388380][ T5980] bridge_slave_0: entered allmulticast mode [ 296.391023][ T5980] bridge_slave_0: entered promiscuous mode [ 296.397206][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.399486][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.401862][ T5980] bridge_slave_1: entered allmulticast mode [ 296.404450][ T5980] bridge_slave_1: entered promiscuous mode [ 296.432237][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 296.459286][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.465248][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.467633][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.469909][ T5988] bridge_slave_0: entered allmulticast mode [ 296.472557][ T5988] bridge_slave_0: entered promiscuous mode [ 296.477109][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.479381][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.481876][ T5988] bridge_slave_1: entered allmulticast mode [ 296.484456][ T5988] bridge_slave_1: entered promiscuous mode [ 296.487093][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.489324][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.491677][ T5981] bridge_slave_0: entered allmulticast mode [ 296.494264][ T5981] bridge_slave_0: entered promiscuous mode [ 296.497636][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.499916][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.502224][ T5981] bridge_slave_1: entered allmulticast mode [ 296.504980][ T5981] bridge_slave_1: entered promiscuous mode [ 296.508516][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.570321][ T5980] team0: Port device team_slave_0 added [ 296.573381][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.577700][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.582123][ T5988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.586550][ T5988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.605385][ T5980] team0: Port device team_slave_1 added [ 296.618611][ T5988] team0: Port device team_slave_0 added [ 296.650085][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.653048][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.662399][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.667545][ T5988] team0: Port device team_slave_1 added [ 296.670408][ T5981] team0: Port device team_slave_0 added [ 296.684857][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.687098][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.695295][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.699928][ T5981] team0: Port device team_slave_1 added [ 296.701791][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.704147][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.706492][ T5987] bridge_slave_0: entered allmulticast mode [ 296.709072][ T5987] bridge_slave_0: entered promiscuous mode [ 296.712186][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.714452][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.716836][ T5987] bridge_slave_1: entered allmulticast mode [ 296.719523][ T5987] bridge_slave_1: entered promiscuous mode [ 296.747908][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.750100][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.758405][ T5988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.762786][ T5988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.765059][ T5988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.772941][ T5988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.798229][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.800538][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.808757][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.820400][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.826644][ T5980] hsr_slave_0: entered promiscuous mode [ 296.828958][ T5980] hsr_slave_1: entered promiscuous mode [ 296.831662][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.833880][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.842340][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.856354][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.868690][ T5988] hsr_slave_0: entered promiscuous mode [ 296.870953][ T5988] hsr_slave_1: entered promiscuous mode [ 296.873009][ T5988] debugfs: 'hsr0' already exists in 'hsr' [ 296.874979][ T5988] Cannot create hsr debugfs directory [ 296.907501][ T5987] team0: Port device team_slave_0 added [ 296.918854][ T5987] team0: Port device team_slave_1 added [ 296.953563][ T5981] hsr_slave_0: entered promiscuous mode [ 296.956053][ T5981] hsr_slave_1: entered promiscuous mode [ 296.958143][ T5981] debugfs: 'hsr0' already exists in 'hsr' [ 296.959984][ T5981] Cannot create hsr debugfs directory [ 296.967930][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.970136][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.978245][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.985127][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.987326][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.995321][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.092613][ T5987] hsr_slave_0: entered promiscuous mode [ 297.095377][ T5987] hsr_slave_1: entered promiscuous mode [ 297.097420][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 297.099236][ T5987] Cannot create hsr debugfs directory [ 297.197754][ T5980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.206433][ T5980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.214145][ T5980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.226000][ T5980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.266139][ T5988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.273687][ T5988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.278444][ T5988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.284384][ T5988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.333934][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.338396][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.342455][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.355882][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.389891][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.394405][ T5987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.399972][ T5987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.405052][ T5987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.409241][ T5987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.430103][ T5988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.435183][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.444675][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.446997][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.461454][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.464488][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.488572][ T5988] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.493183][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.495509][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.516198][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.518489][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.542324][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.567152][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.569456][ T40] audit: type=1400 audit(1770654669.932:91): avc: denied { sys_module } for pid=5980 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 297.582981][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.585274][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.594752][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.597546][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.606217][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.633354][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.639999][ T1243] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.642398][ T1243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.659216][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.661565][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.673546][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.701309][ T5988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.739187][ T5980] veth0_vlan: entered promiscuous mode [ 297.743783][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.750053][ T5980] veth1_vlan: entered promiscuous mode [ 297.783394][ T5988] veth0_vlan: entered promiscuous mode [ 297.793368][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.800028][ T5980] veth0_macvtap: entered promiscuous mode [ 297.803488][ T5988] veth1_vlan: entered promiscuous mode [ 297.807496][ T5981] veth0_vlan: entered promiscuous mode [ 297.811336][ T5980] veth1_macvtap: entered promiscuous mode [ 297.821369][ T5981] veth1_vlan: entered promiscuous mode [ 297.845712][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.853720][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.872097][ T1243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.878043][ T5988] veth0_macvtap: entered promiscuous mode [ 297.881416][ T1243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.884179][ T1243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.887352][ T5987] veth0_vlan: entered promiscuous mode [ 297.893892][ T5988] veth1_macvtap: entered promiscuous mode [ 297.896877][ T1243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.899919][ T5981] veth0_macvtap: entered promiscuous mode [ 297.903999][ T5981] veth1_macvtap: entered promiscuous mode [ 297.913545][ T5987] veth1_vlan: entered promiscuous mode [ 297.925330][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.936728][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.941999][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.949282][ T5988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.964255][ T1151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.967624][ T1151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.976368][ T1151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.984504][ T1151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.987408][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.991380][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.993892][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.999541][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.002332][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.016795][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.028882][ T5987] veth0_macvtap: entered promiscuous mode [ 298.044413][ T5987] veth1_macvtap: entered promiscuous mode [ 298.046799][ T5995] Bluetooth: hci3: command tx timeout [ 298.046886][ T5985] Bluetooth: hci2: command tx timeout [ 298.054679][ T5985] Bluetooth: hci0: command tx timeout [ 298.054871][ T5995] Bluetooth: hci1: command tx timeout [ 298.062411][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.065447][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.073425][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.085910][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.088525][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.097000][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.109767][ T1243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.114223][ T1243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.120427][ T5980] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 298.125085][ T1243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.125140][ T1243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.133349][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.136136][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.169399][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.171961][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.191691][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.195955][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.207851][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.210412][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.239438][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.242035][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.714607][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 298.864658][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 298.868445][ T24] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 298.871292][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.876339][ T24] usb 7-1: config 0 descriptor?? [ 299.070628][ T6089] Zero length message leads to an empty skb [ 299.081826][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 299.090897][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.094391][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 299.097720][ T24] usb 7-1: media controller created [ 299.106525][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.111632][ T6094] loop6: detected capacity change from 0 to 2640 [ 299.115253][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.117850][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.120609][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.123110][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.126473][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.128957][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.131392][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.133840][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.136585][ T5984] ldm_validate_partition_table(): Disk read failed. [ 299.138698][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.141157][ T5984] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.143629][ T5984] Dev loop6: unable to read RDB block 0 [ 299.145727][ T5984] loop6: unable to read partition table [ 299.149200][ T6094] ldm_validate_partition_table(): Disk read failed. [ 299.151377][ T6094] Dev loop6: unable to read RDB block 0 [ 299.153223][ T6094] loop6: unable to read partition table [ 299.156057][ T6094] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 299.203189][ T6096] evm: overlay not supported [ 299.212879][ T6098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12'. [ 299.216243][ T6098] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12'. [ 299.487851][ T24] az6027: usb out operation failed. (-71) [ 299.489764][ T24] stb0899_attach: Driver disabled by Kconfig [ 299.495182][ T24] az6027: no front-end attached [ 299.495182][ T24] [ 299.497708][ T24] az6027: usb out operation failed. (-71) [ 299.499765][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 299.503994][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 299.505070][ T5913] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 299.507640][ T54] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 299.514470][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 299.517132][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 299.523824][ T24] usb 7-1: USB disconnect, device number 2 [ 299.544714][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 299.660005][ T5913] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 299.662905][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.665552][ T5913] usb 5-1: Product: syz [ 299.666904][ T5913] usb 5-1: Manufacturer: syz [ 299.668378][ T5913] usb 5-1: SerialNumber: syz [ 299.671418][ T5913] usb 5-1: config 0 descriptor?? [ 299.674601][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 299.677438][ T54] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.680154][ T54] usb 8-1: config 0 has no interface number 0 [ 299.682231][ T54] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.685841][ T54] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.688955][ T54] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 299.691828][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.696265][ T54] usb 8-1: config 0 descriptor?? [ 300.077624][ T5913] airspy 5-1:0.0: Board ID: 00 [ 300.079206][ T5913] airspy 5-1:0.0: Firmware version: [ 300.125377][ T5995] Bluetooth: hci1: command tx timeout [ 300.127311][ T5995] Bluetooth: hci3: command tx timeout [ 300.129177][ T5995] Bluetooth: hci0: command tx timeout [ 300.131016][ T5995] Bluetooth: hci2: command tx timeout [ 300.304995][ T54] uclogic 0003:28BD:0071.0002: pen parameters not found [ 300.307394][ T54] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 300.311844][ T54] usb 8-1: USB disconnect, device number 2 [ 300.998576][ T6123] netlink: 56 bytes leftover after parsing attributes in process `syz.1.21'. [ 301.074669][ T6047] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 301.087366][ T5913] airspy 5-1:0.0: Registered as swradio24 [ 301.089222][ T5913] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 301.092482][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 301.092490][ T40] audit: type=1400 audit(1770654673.452:137): avc: denied { read write } for pid=6124 comm="syz.1.22" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 301.103803][ T40] audit: type=1400 audit(1770654673.452:138): avc: denied { open } for pid=6124 comm="syz.1.22" path="/8/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 301.124673][ T832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 301.130376][ T40] audit: type=1400 audit(1770654673.492:139): avc: denied { create } for pid=6128 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.144762][ T40] audit: type=1400 audit(1770654673.492:140): avc: denied { write } for pid=6128 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.151088][ T40] audit: type=1400 audit(1770654673.492:141): avc: denied { read } for pid=6128 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.188190][ T40] audit: type=1400 audit(1770654673.552:142): avc: denied { read write } for pid=6132 comm="syz.1.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.195396][ T40] audit: type=1400 audit(1770654673.552:143): avc: denied { ioctl open } for pid=6132 comm="syz.1.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 301.213463][ T6133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.236122][ T6047] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 301.239709][ T6047] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 301.243079][ T6047] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 301.247030][ T6047] usb 8-1: config 0 interface 0 has no altsetting 0 [ 301.250759][ T6047] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 301.253490][ T6047] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 301.256203][ T6047] usb 8-1: Product: syz [ 301.257522][ T6047] usb 8-1: Manufacturer: syz [ 301.258994][ T6047] usb 8-1: SerialNumber: syz [ 301.261861][ T6047] usb 8-1: config 0 descriptor?? [ 301.266603][ T6047] usb 8-1: selecting invalid altsetting 0 [ 301.277388][ T832] usb 7-1: Using ep0 maxpacket: 16 [ 301.280735][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.284103][ T832] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 301.288613][ T832] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 301.291611][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.295148][ T5913] usb 5-1: USB disconnect, device number 2 [ 301.299224][ T832] usb 7-1: config 0 descriptor?? [ 301.435384][ T40] audit: type=1400 audit(1770654673.802:144): avc: denied { create } for pid=6141 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.441988][ T40] audit: type=1400 audit(1770654673.802:145): avc: denied { ioctl } for pid=6141 comm="syz.1.28" path="socket:[10563]" dev="sockfs" ino=10563 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.442115][ T6142] syzkaller1: entered promiscuous mode [ 301.451417][ T6142] syzkaller1: entered allmulticast mode [ 301.475432][ T54] usb 8-1: USB disconnect, device number 3 [ 301.551251][ T40] audit: type=1400 audit(1770654673.912:146): avc: denied { write } for pid=6143 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 301.731664][ T832] nintendo 0003:057E:2019.0003: hidraw1: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 301.795213][ T832] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-38 [ 301.804654][ T832] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-38 [ 301.807450][ T832] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-38 [ 301.825375][ T832] nintendo 0003:057E:2019.0003: probe - fail = -38 [ 301.827606][ T832] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -38 [ 301.985055][ T2298] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 302.016641][ T832] usb 7-1: USB disconnect, device number 3 [ 302.204872][ T5995] Bluetooth: hci0: command tx timeout [ 302.205831][ T5990] Bluetooth: hci3: command tx timeout [ 302.207210][ T5995] Bluetooth: hci1: command tx timeout [ 302.207307][ T5985] Bluetooth: hci2: command tx timeout [ 302.238891][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.242325][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.245569][ T2298] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.249580][ T2298] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.252430][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.256369][ T2298] usb 6-1: config 0 descriptor?? [ 302.332582][ T6166] tc_dump_action: action bad kind [ 302.654674][ T832] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 302.665646][ T2298] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x6 [ 302.674975][ T2298] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 302.826097][ T832] usb 8-1: Using ep0 maxpacket: 8 [ 302.834981][ T832] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.838194][ T832] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 302.841072][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.869279][ T832] usb 8-1: config 0 descriptor?? [ 302.874373][ T832] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 302.931983][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 302.934333][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 303.154649][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 303.195710][ T53] libceph: connect (1)[c::]:6789 error -101 [ 303.197894][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 303.305955][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.309258][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.312399][ T5913] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.316334][ T5913] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 303.321328][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 303.324216][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.327485][ T5913] usb 5-1: SerialNumber: syz [ 303.335986][ T5913] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 303.338932][ T5913] usb-storage 5-1:1.0: USB Mass Storage device detected [ 303.344403][ T5913] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 303.396807][ T6177] ceph: No mds server is up or the cluster is laggy [ 303.537047][ T6050] usb 5-1: USB disconnect, device number 3 [ 303.725056][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 303.877634][ T53] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 303.880633][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.883298][ T53] usb 7-1: Product: syz [ 303.885011][ T53] usb 7-1: Manufacturer: syz [ 303.886601][ T53] usb 7-1: SerialNumber: syz [ 303.889847][ T53] usb 7-1: config 0 descriptor?? [ 304.086215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 304.284848][ T5990] Bluetooth: hci2: command tx timeout [ 304.284921][ T5985] Bluetooth: hci0: command tx timeout [ 304.288075][ T5990] Bluetooth: hci3: command tx timeout [ 304.288891][ T64] Bluetooth: hci1: command tx timeout [ 304.398282][ T6200] netlink: 84 bytes leftover after parsing attributes in process `syz.0.50'. [ 304.401178][ T6200] netlink: 84 bytes leftover after parsing attributes in process `syz.0.50'. [ 304.492767][ T832] gspca_vc032x: reg_w err -71 [ 304.494424][ T832] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 304.498167][ T832] usb 8-1: USB disconnect, device number 4 [ 304.533573][ T6206] Illegal XDP return value 3767791648 on prog (id 3) dev syz_tun, expect packet loss! [ 304.577009][ T6210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.704140][ T53] usb 7-1: Firmware version (0.0) predates our first public release. [ 304.706808][ T53] usb 7-1: Please update to version 0.2 or newer [ 304.746220][ T53] usb 7-1: USB disconnect, device number 4 [ 304.777115][ T5913] usb 6-1: USB disconnect, device number 2 [ 305.210925][ T6229] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 305.240040][ T6231] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 305.242285][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.249116][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 305.252699][ T6231] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 305.254834][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.261612][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 305.269851][ T6231] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(18) [ 305.272004][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.274504][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 305.277041][ T6231] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.280874][ T6231] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 305.283162][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.285696][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 305.287931][ T6231] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.292315][ T6231] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(26) [ 305.294447][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.298044][ T6231] vhci_hcd vhci_hcd.0: Device attached [ 305.302721][ T6231] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.310174][ T6242] vhci_hcd: connection closed [ 305.310587][ T6240] vhci_hcd: connection closed [ 305.310965][ T6238] vhci_hcd: connection closed [ 305.313200][ T76] vhci_hcd vhci_hcd.2: stop threads [ 305.314641][ T6234] vhci_hcd: connection closed [ 305.316867][ T76] vhci_hcd vhci_hcd.2: release socket [ 305.317792][ T6232] vhci_hcd: connection closed [ 305.319729][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 305.324110][ T76] vhci_hcd vhci_hcd.2: stop threads [ 305.325884][ T76] vhci_hcd vhci_hcd.2: release socket [ 305.327685][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 305.330004][ T76] vhci_hcd vhci_hcd.2: stop threads [ 305.332132][ T76] vhci_hcd vhci_hcd.2: release socket [ 305.334268][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 305.337673][ T76] vhci_hcd vhci_hcd.2: stop threads [ 305.339837][ T76] vhci_hcd vhci_hcd.2: release socket [ 305.342011][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 305.344356][ T76] vhci_hcd vhci_hcd.2: stop threads [ 305.346710][ T76] vhci_hcd vhci_hcd.2: release socket [ 305.348518][ T76] vhci_hcd vhci_hcd.2: disconnect device [ 305.724603][ T54] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 305.784586][ T6263] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 305.786705][ T6263] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 305.789829][ T6263] vhci_hcd vhci_hcd.0: Device attached [ 305.794003][ T6263] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 305.796281][ T6263] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 305.799190][ T6263] vhci_hcd vhci_hcd.0: Device attached [ 305.801419][ T6263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.804412][ T6263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.807710][ T6263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.811293][ T6263] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 305.813390][ T6263] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.816006][ T6263] vhci_hcd vhci_hcd.0: Device attached [ 305.818660][ T6268] vhci_hcd: connection closed [ 305.819091][ T6266] vhci_hcd: connection closed [ 305.819436][ T6264] vhci_hcd: connection closed [ 305.822294][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 305.825982][ T1243] vhci_hcd vhci_hcd.1: release socket [ 305.827734][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 305.829663][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 305.831400][ T1243] vhci_hcd vhci_hcd.1: release socket [ 305.833342][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 305.835711][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 305.837396][ T1243] vhci_hcd vhci_hcd.1: release socket [ 305.839129][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 305.850980][ T6271] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 305.878222][ T54] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.881442][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.885568][ T54] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 305.889367][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 305.891896][ T54] usb 8-1: SerialNumber: syz [ 306.053203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.100708][ T54] usb 8-1: 0:2 : does not exist [ 306.119592][ T54] usb 8-1: USB disconnect, device number 5 [ 306.140118][ T6104] udevd[6104]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.347312][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 306.347323][ T40] audit: type=1400 audit(1770654678.712:188): avc: denied { mount } for pid=6287 comm="syz.1.79" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 306.359190][ T40] audit: type=1400 audit(1770654678.722:189): avc: denied { search } for pid=6287 comm="syz.1.79" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.373356][ T40] audit: type=1400 audit(1770654678.732:190): avc: denied { search } for pid=6287 comm="syz.1.79" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.382355][ T40] audit: type=1400 audit(1770654678.732:191): avc: denied { read open } for pid=6287 comm="syz.1.79" path="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.390975][ T40] audit: type=1400 audit(1770654678.732:192): avc: denied { search } for pid=6287 comm="syz.1.79" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 306.409900][ T6290] syzkaller0: entered promiscuous mode [ 306.411745][ T6290] syzkaller0: entered allmulticast mode [ 306.414959][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 306.426913][ T40] audit: type=1400 audit(1770654678.792:193): avc: denied { write } for pid=6289 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.568987][ T40] audit: type=1400 audit(1770654678.932:194): avc: denied { sys_module } for pid=6293 comm="syz.1.82" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 306.575979][ T10] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 306.579617][ T10] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 306.582749][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 306.585909][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.771572][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 306.785239][ T6303] pim6reg1: entered allmulticast mode [ 306.798570][ T6303] pim6reg1: left allmulticast mode [ 306.831428][ T40] audit: type=1400 audit(1770654679.192:195): avc: denied { unmount } for pid=5987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.874590][ T1460] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 306.935390][ T6312] team_slave_0: entered promiscuous mode [ 306.937294][ T6312] team_slave_1: entered promiscuous mode [ 306.940578][ T6312] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.947351][ T40] audit: type=1400 audit(1770654679.312:196): avc: denied { create } for pid=6311 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.952696][ T6312] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 307.016834][ T40] audit: type=1400 audit(1770654679.382:197): avc: denied { read append } for pid=6317 comm="syz.2.92" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.027692][ T1460] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.031406][ T1460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.038825][ T1460] usb 6-1: config 0 descriptor?? [ 307.042908][ T1460] cp210x 6-1:0.0: cp210x converter detected [ 307.051371][ T6319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.448576][ T1460] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 307.455127][ T1460] usb 6-1: cp210x converter now attached to ttyUSB0 [ 307.655559][ T2298] usb 6-1: USB disconnect, device number 3 [ 307.660050][ T2298] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.668115][ T2298] cp210x 6-1:0.0: device disconnected [ 308.009584][ T6335] syzkaller0: entered promiscuous mode [ 308.011286][ T6335] syzkaller0: entered allmulticast mode [ 308.055708][ T6339] tap0: tun_chr_ioctl cmd 35111 [ 308.525951][ T10] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 308.529599][ T10] input: Aiptek as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:17.0/input/input6 [ 308.545465][ T10] input: failed to attach handler kbd to device input6, error: -5 [ 308.573781][ T10] usb 5-1: USB disconnect, device number 4 [ 308.584988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.054687][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 309.220754][ T10] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 309.223835][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.232574][ T10] usb 8-1: Product: syz [ 309.234108][ T10] usb 8-1: Manufacturer: syz [ 309.235968][ T10] usb 8-1: SerialNumber: syz [ 309.240230][ T10] usb 8-1: config 0 descriptor?? [ 309.248716][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 309.433084][ T6375] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 309.739548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 310.024740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 310.454728][ T6047] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 310.614626][ T6047] usb 6-1: Using ep0 maxpacket: 32 [ 310.617998][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.621689][ T6047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.625109][ T6047] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 310.628123][ T6047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.632510][ T6047] usb 6-1: config 0 descriptor?? [ 310.682771][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055ce4000: rx timeout, send abort [ 310.686654][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055ce4000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 310.781059][ T6393] process 'syz.0.120' launched './file0' with NULL argv: empty string added [ 311.024698][ T2298] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 311.042447][ T6047] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 311.045960][ T6047] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 311.175624][ T2298] usb 7-1: Using ep0 maxpacket: 16 [ 311.178976][ T2298] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 311.181571][ T2298] usb 7-1: config 1 has no interface number 0 [ 311.183503][ T2298] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 311.186858][ T2298] usb 7-1: config 1 interface 105 has no altsetting 0 [ 311.190747][ T2298] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 311.193597][ T2298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.196161][ T2298] usb 7-1: Product: syz [ 311.197466][ T2298] usb 7-1: Manufacturer: syz [ 311.198960][ T2298] usb 7-1: SerialNumber: syz [ 311.202352][ T6398] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.242154][ T6047] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 311.409470][ T2298] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22 [ 311.442659][ T6047] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 311.479891][ T10] gspca_stk1135: reg_w 0x2ff err -71 [ 311.482760][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.484908][ T10] gspca_stk1135: Sensor write failed [ 311.486725][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.488779][ T10] gspca_stk1135: Sensor write failed [ 311.490636][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.492726][ T10] gspca_stk1135: Sensor read failed [ 311.494437][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.496665][ T10] gspca_stk1135: Sensor read failed [ 311.498422][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 311.500695][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.502837][ T10] gspca_stk1135: Sensor read failed [ 311.504792][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.506893][ T10] gspca_stk1135: Sensor read failed [ 311.508718][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.510861][ T10] gspca_stk1135: Sensor write failed [ 311.512663][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 311.514895][ T10] gspca_stk1135: Sensor write failed [ 311.516704][ T10] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 311.521587][ T10] usb 8-1: USB disconnect, device number 6 [ 311.610928][ T9] usb 7-1: USB disconnect, device number 5 [ 311.643117][ T6047] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 311.847213][ T6047] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 311.862692][ T6047] usb 6-1: USB disconnect, device number 4 [ 312.244601][ T54] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 312.326375][ T6417] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 312.331469][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.359349][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 312.359360][ T40] audit: type=1400 audit(1770654684.722:217): avc: denied { ioctl } for pid=6418 comm="syz.0.133" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9879 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.379540][ T40] audit: type=1400 audit(1770654684.742:218): avc: denied { ioctl } for pid=6420 comm="syz.1.134" path="socket:[10874]" dev="sockfs" ino=10874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.387447][ T40] audit: type=1400 audit(1770654684.752:219): avc: denied { setopt } for pid=6420 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 312.387802][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 312.397005][ T832] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 312.404721][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 312.418270][ T54] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.420815][ T54] usb 8-1: config 0 has no interface number 0 [ 312.422744][ T54] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.426739][ T54] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.429562][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.433373][ T54] usb 8-1: config 0 descriptor?? [ 312.439297][ T54] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 312.485301][ T6424] ip6gre1: entered promiscuous mode [ 312.487009][ T6424] ip6gre1: entered allmulticast mode [ 312.490890][ T1145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.491930][ T6424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.493540][ T1145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.514700][ T5913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.544621][ T832] usb 7-1: Using ep0 maxpacket: 32 [ 312.547593][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.551140][ T832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.554192][ T832] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.557916][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.562077][ T832] usb 7-1: config 0 descriptor?? [ 312.565449][ T832] hub 7-1:0.0: USB hub found [ 312.637188][ T40] audit: type=1400 audit(1770654685.002:220): avc: denied { write } for pid=6402 comm="syz.3.125" name="iowarrior0" dev="devtmpfs" ino=2928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 312.754686][ T6047] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 312.768517][ T832] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 312.888602][ T6191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 312.893498][ T54] usb 8-1: USB disconnect, device number 7 [ 312.906136][ T6047] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.909413][ T6047] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 312.913151][ T6047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 312.916793][ T6047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 312.919930][ T6047] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 312.927749][ T6047] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 312.930687][ T6047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 312.933308][ T6047] usb 5-1: Product: syz [ 312.934785][ T6047] usb 5-1: Manufacturer: syz [ 312.936306][ T6047] usb 5-1: SerialNumber: syz [ 312.939817][ T6047] usb 5-1: config 0 descriptor?? [ 313.004764][ T6191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.145234][ T6047] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 313.147422][ T6047] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 313.179141][ T832] hid-generic 0003:046D:C31C.0006: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 313.274636][ T6191] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 313.351790][ T6047] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 313.354296][ T6047] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 313.358225][ T6047] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 313.426705][ T6191] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.429923][ T6191] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 313.432773][ T6191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.436795][ T6191] usb 6-1: config 0 descriptor?? [ 313.446069][ T6191] pwc: Askey VC010 type 2 USB webcam detected. [ 313.484811][ T54] usb 7-1: USB disconnect, device number 6 [ 313.558742][ T6047] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 313.684692][ T832] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 313.836396][ T832] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.839912][ T832] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.843045][ T832] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.846073][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.849255][ T6191] pwc: recv_control_msg error -32 req 02 val 2b00 [ 313.852589][ T6432] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 313.852940][ T6191] pwc: recv_control_msg error -32 req 02 val 2700 [ 313.863029][ T832] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.866765][ T6191] pwc: recv_control_msg error -32 req 02 val 2c00 [ 313.870974][ T6191] pwc: recv_control_msg error -32 req 04 val 1000 [ 313.873440][ T6191] pwc: recv_control_msg error -32 req 04 val 1300 [ 313.888525][ T6191] pwc: recv_control_msg error -32 req 04 val 1400 [ 313.894644][ T6191] pwc: recv_control_msg error -32 req 02 val 2000 [ 313.898360][ T6191] pwc: recv_control_msg error -32 req 02 val 2100 [ 313.907229][ T6191] pwc: recv_control_msg error -32 req 04 val 1500 [ 313.913519][ T6191] pwc: recv_control_msg error -32 req 02 val 2500 [ 314.060820][ T9] usb 8-1: USB disconnect, device number 8 [ 314.117118][ T6191] pwc: recv_control_msg error -71 req 02 val 2600 [ 314.121779][ T6191] pwc: recv_control_msg error -71 req 02 val 2900 [ 314.124132][ T6191] pwc: recv_control_msg error -71 req 02 val 2800 [ 314.128967][ T6191] pwc: recv_control_msg error -71 req 04 val 1100 [ 314.131316][ T6191] pwc: recv_control_msg error -71 req 04 val 1200 [ 314.135439][ T6191] pwc: Registered as video103. [ 314.138099][ T6191] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/input/input7 [ 314.149625][ T6191] usb 6-1: USB disconnect, device number 5 [ 314.304594][ T6401] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 314.360826][ T6047] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 314.363560][ T6047] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 314.371251][ T6047] usb 5-1: USB disconnect, device number 5 [ 314.464615][ T6401] usb 7-1: Using ep0 maxpacket: 32 [ 314.467626][ T6401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.471165][ T6401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.474412][ T6401] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.477338][ T6401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.481164][ T6401] usb 7-1: config 0 descriptor?? [ 314.484452][ T6401] hub 7-1:0.0: USB hub found [ 314.686604][ T6401] hub 7-1:0.0: 1 port detected [ 314.896995][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 314.898614][ T40] audit: type=1400 audit(1770654687.262:221): avc: denied { create } for pid=6449 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.906657][ T40] audit: type=1400 audit(1770654687.262:222): avc: denied { write } for pid=6449 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.912798][ T40] audit: type=1400 audit(1770654687.262:223): avc: denied { nlmsg_write } for pid=6449 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.919937][ T40] audit: type=1400 audit(1770654687.262:224): avc: denied { write } for pid=6449 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.928861][ T40] audit: type=1400 audit(1770654687.262:225): avc: denied { connect } for pid=6449 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.939179][ T40] audit: type=1400 audit(1770654687.262:226): avc: denied { name_connect } for pid=6449 comm="syz.0.146" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 315.295989][ T6401] hub 7-1:0.0: activate --> -90 [ 315.384580][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 315.464685][ T6191] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 315.544636][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 315.549302][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 315.551880][ T24] usb 5-1: config 0 has no interface number 0 [ 315.553844][ T24] usb 5-1: config 0 interface 35 altsetting 189 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.564636][ T24] usb 5-1: config 0 interface 35 altsetting 189 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.567798][ T24] usb 5-1: config 0 interface 35 has no altsetting 0 [ 315.569930][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 315.572780][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.576675][ T24] usb 5-1: config 0 descriptor?? [ 315.615852][ T6191] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.619692][ T6191] usb 8-1: config 0 has no interfaces? [ 315.621788][ T6191] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 315.625252][ T6191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.629578][ T6191] usb 8-1: config 0 descriptor?? [ 315.689609][ T6478] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 315.701476][ T6401] usb 7-1-port1: config error [ 315.704450][ T6047] usb 7-1: USB disconnect, device number 7 [ 315.714427][ T6478] hsr0: entered promiscuous mode [ 315.716680][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 315.727892][ T6478] hsr_slave_0: left promiscuous mode [ 315.765165][ T6478] hsr_slave_1: left promiscuous mode [ 315.778334][ T6478] hsr0 (unregistering): left promiscuous mode [ 315.839425][ T6474] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 315.842216][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.846866][ T6474] vhci_hcd vhci_hcd.0: Device attached [ 315.851357][ T6480] vhci_hcd: connection closed [ 315.852744][ T6050] usb 8-1: USB disconnect, device number 9 [ 315.857668][ T1145] vhci_hcd vhci_hcd.3: stop threads [ 315.860411][ T1145] vhci_hcd vhci_hcd.3: release socket [ 315.862667][ T1145] vhci_hcd vhci_hcd.3: disconnect device [ 315.945370][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 315.983749][ T24] logitech-djreceiver 0003:046D:C52B.0007: unknown main item tag 0x0 [ 315.987361][ T24] logitech-djreceiver 0003:046D:C52B.0007: unknown main item tag 0x0 [ 315.989967][ T24] logitech-djreceiver 0003:046D:C52B.0007: unknown main item tag 0x0 [ 315.992624][ T24] logitech-djreceiver 0003:046D:C52B.0007: unknown main item tag 0x0 [ 315.995321][ T24] logitech-djreceiver 0003:046D:C52B.0007: unknown main item tag 0x0 [ 316.000621][ T24] logitech-djreceiver 0003:046D:C52B.0007: hidraw1: USB HID v0.05 Device [HID 046d:c52b] on usb-dummy_hcd.0-1/input35 [ 316.188040][ T832] usb 5-1: USB disconnect, device number 6 [ 316.295525][ T6485] kvm: user requested TSC rate below hardware speed [ 316.525342][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 316.548918][ T6491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.631868][ T6491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.738301][ T6491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.740300][ T6493] netlink: 64 bytes leftover after parsing attributes in process `syz.0.161'. [ 316.767597][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 316.794670][ T6491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.906588][ T76] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.919424][ T76] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.927590][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.939995][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.033130][ T6499] netlink: 64 bytes leftover after parsing attributes in process `syz.3.164'. [ 317.049008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 317.051672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 317.054768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 317.068501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 317.414582][ T54] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 317.414665][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 317.464626][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 317.564704][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 317.565193][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 317.569670][ T54] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 317.569889][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 317.572522][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.572535][ T54] usb 7-1: Product: syz [ 317.575874][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 317.577762][ T54] usb 7-1: Manufacturer: syz [ 317.578993][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.582309][ T54] usb 7-1: SerialNumber: syz [ 317.583493][ T54] usb 7-1: config 0 descriptor?? [ 317.583772][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 317.589722][ T54] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 317.589948][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 317.598406][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 317.601406][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 317.604883][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 317.609425][ T9] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 317.612281][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.614893][ T9] usb 8-1: Product: syz [ 317.616225][ T9] usb 8-1: Manufacturer: syz [ 317.617696][ T9] usb 8-1: SerialNumber: syz [ 317.620443][ T9] usb 8-1: config 0 descriptor?? [ 317.622718][ T6511] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 317.625282][ T6511] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 317.629200][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.646050][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 317.651206][ T24] usb 5-1: config 0 has no interfaces? [ 317.654967][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 317.659753][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.668084][ T24] usb 5-1: Product: syz [ 317.671688][ T24] usb 5-1: Manufacturer: syz [ 317.678197][ T24] usb 5-1: SerialNumber: syz [ 317.686958][ T24] usb 5-1: config 0 descriptor?? [ 317.734565][ T64] Bluetooth: hci3: command tx timeout [ 317.843326][ T24] usb 8-1: USB disconnect, device number 10 [ 317.893926][ T2298] usb 5-1: USB disconnect, device number 7 [ 318.377290][ T6517] netlink: 52 bytes leftover after parsing attributes in process `syz.3.172'. [ 318.380255][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.172'. [ 318.664676][ T832] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 318.731193][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 318.731205][ T40] audit: type=1400 audit(1770654691.092:249): avc: denied { setopt } for pid=6533 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.739549][ T40] audit: type=1400 audit(1770654691.092:250): avc: denied { bind } for pid=6533 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.745448][ T40] audit: type=1400 audit(1770654691.092:251): avc: denied { name_bind } for pid=6533 comm="syz.1.180" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 318.752948][ T40] audit: type=1400 audit(1770654691.092:252): avc: denied { node_bind } for pid=6533 comm="syz.1.180" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 318.759748][ T40] audit: type=1400 audit(1770654691.092:253): avc: denied { name_connect } for pid=6533 comm="syz.1.180" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 318.794262][ T54] gspca_ov534_9: reg_w failed -71 [ 318.815304][ T832] usb 5-1: Using ep0 maxpacket: 32 [ 318.818410][ T832] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 318.820953][ T832] usb 5-1: config 0 has no interface number 0 [ 318.822898][ T832] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.827953][ T832] usb 5-1: config 0 interface 85 has no altsetting 0 [ 318.832048][ T832] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 318.836113][ T832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.838703][ T832] usb 5-1: Product: syz [ 318.840022][ T832] usb 5-1: Manufacturer: syz [ 318.841495][ T832] usb 5-1: SerialNumber: syz [ 318.844830][ T832] usb 5-1: config 0 descriptor?? [ 319.034608][ T2298] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 319.084592][ T54] gspca_ov534_9: Unknown sensor 0000 [ 319.084646][ T54] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 319.090046][ T54] usb 7-1: USB disconnect, device number 8 [ 319.184581][ T2298] usb 6-1: Using ep0 maxpacket: 8 [ 319.187790][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.192130][ T2298] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 319.195787][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.200262][ T2298] usb 6-1: config 0 descriptor?? [ 319.327259][ T40] audit: type=1400 audit(1770654691.692:254): avc: denied { connect } for pid=6539 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.382814][ T40] audit: type=1400 audit(1770654691.742:255): avc: denied { accept } for pid=6539 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.407379][ T2298] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 319.450890][ T832] appletouch 5-1:0.85: Geyser mode initialized. [ 319.453944][ T832] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.85/input/input8 [ 319.654264][ T5913] usb 5-1: USB disconnect, device number 8 [ 319.667294][ T5913] appletouch 5-1:0.85: input: appletouch disconnected [ 319.774764][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 319.872372][ T9] usb 6-1: USB disconnect, device number 6 [ 319.934597][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 319.937612][ T24] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 319.940381][ T24] usb 8-1: config 0 has no interface number 0 [ 319.942344][ T24] usb 8-1: config 0 interface 119 has no altsetting 0 [ 319.946207][ T24] usb 8-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 319.949090][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.957619][ T24] usb 8-1: Product: syz [ 319.959006][ T24] usb 8-1: Manufacturer: syz [ 319.960516][ T24] usb 8-1: SerialNumber: syz [ 319.963900][ T24] usb 8-1: config 0 descriptor?? [ 320.257764][ T40] audit: type=1400 audit(1770654692.622:256): avc: denied { ioctl } for pid=6558 comm="syz.0.191" path="socket:[10197]" dev="sockfs" ino=10197 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 320.295303][ T40] audit: type=1400 audit(1770654692.662:257): avc: denied { create } for pid=6560 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.303496][ T40] audit: type=1400 audit(1770654692.662:258): avc: denied { bind } for pid=6560 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.373875][ T24] mos7840 8-1:0.119: required endpoints missing [ 320.379975][ T24] usb 8-1: USB disconnect, device number 11 [ 320.421087][ T6565] Bluetooth: MGMT ver 1.23 [ 320.984816][ T54] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 321.134572][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 321.138072][ T54] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.141211][ T54] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 321.144189][ T54] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 321.148907][ T54] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 321.153095][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.156423][ T54] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 321.159387][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.162035][ T54] usb 6-1: SerialNumber: syz [ 321.167671][ T54] usb 6-1: config 0 descriptor?? [ 321.175325][ T54] usb-storage 6-1:0.0: USB Mass Storage device detected [ 321.187278][ T54] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 321.503751][ T6595] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 321.606701][ T6595] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 321.635071][ T6595] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 321.642563][ T6595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.821152][ T5990] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 321.836430][ T6191] usb 6-1: USB disconnect, device number 7 [ 322.057030][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.059248][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.234599][ T2298] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 322.404701][ T2298] usb 7-1: Using ep0 maxpacket: 32 [ 322.415322][ T2298] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 322.418012][ T2298] usb 7-1: config 0 has no interface number 0 [ 322.420071][ T2298] usb 7-1: config 0 interface 184 has no altsetting 0 [ 322.438285][ T2298] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.442130][ T2298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.446866][ T2298] usb 7-1: Product: syz [ 322.448659][ T2298] usb 7-1: Manufacturer: syz [ 322.450400][ T2298] usb 7-1: SerialNumber: syz [ 322.453078][ T2298] usb 7-1: config 0 descriptor?? [ 322.457896][ T2298] smsc75xx v1.0.0 [ 323.059167][ T2298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 323.063866][ T2298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.096056][ T6050] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 323.259486][ T6050] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 323.263003][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.267546][ T6050] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.272264][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.276934][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.282640][ T6050] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 323.286132][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.290387][ T6050] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.295061][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.299467][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.305308][ T6050] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 323.308290][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.312598][ T6050] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.317359][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.321757][ T6050] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.328870][ T6050] usb 8-1: string descriptor 0 read error: -22 [ 323.331484][ T6050] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.335317][ T6050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.362387][ T6050] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 323.504661][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 323.611856][ T6050] usb 8-1: USB disconnect, device number 12 [ 323.614683][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 323.655071][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 323.658315][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.661150][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.674620][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.677700][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.680566][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.683907][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.687326][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.690095][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.693436][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.696713][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.699629][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.703052][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.706248][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.709059][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.712507][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.715875][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.718780][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.722235][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.726702][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.729516][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.732875][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.736073][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 323.738891][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 323.742280][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.745880][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 323.748845][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 323.751466][ T24] usb 5-1: Product: syz [ 323.752789][ T24] usb 5-1: Manufacturer: syz [ 323.754289][ T24] usb 5-1: SerialNumber: syz [ 323.757444][ T24] usb 5-1: config 0 descriptor?? [ 323.766525][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 323.784602][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 323.788131][ T54] usb 6-1: config 7 has an invalid interface number: 152 but max is 0 [ 323.790806][ T54] usb 6-1: config 7 descriptor has 1 excess byte, ignoring [ 323.793139][ T54] usb 6-1: config 7 has no interface number 0 [ 323.795560][ T54] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 323.799187][ T54] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 323.802655][ T54] usb 6-1: config 7 interface 152 altsetting 190 endpoint 0x6 has invalid wMaxPacketSize 0 [ 323.806044][ T54] usb 6-1: config 7 interface 152 altsetting 190 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.810467][ T54] usb 6-1: config 7 interface 152 has no altsetting 0 [ 323.814806][ T54] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 323.817790][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.820426][ T54] usb 6-1: Product: syz [ 323.821864][ T54] usb 6-1: Manufacturer: syz [ 323.823433][ T54] usb 6-1: SerialNumber: syz [ 323.847991][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 323.848003][ T40] audit: type=1400 audit(1770654696.212:284): avc: denied { read } for pid=6678 comm="syz.3.240" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 323.859285][ T40] audit: type=1400 audit(1770654696.212:285): avc: denied { open } for pid=6678 comm="syz.3.240" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 323.885502][ T2298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 323.889688][ T2298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 323.893493][ T2298] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 323.897393][ T2298] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 323.904660][ T2298] usb 7-1: USB disconnect, device number 9 [ 324.038381][ T54] usbtest 6-1:7.152: couldn't get endpoints, -71 [ 324.041632][ T54] usbtest 6-1:7.152: probe with driver usbtest failed with error -71 [ 324.048653][ T54] usb 6-1: USB disconnect, device number 8 [ 324.604731][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.667469][ T40] audit: type=1400 audit(1770654697.032:286): avc: denied { create } for pid=6690 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 324.784665][ T40] audit: type=1400 audit(1770654697.142:287): avc: denied { create } for pid=6693 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.534629][ T53] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 325.764309][ T53] usb 7-1: config index 0 descriptor too short (expected 63524, got 36) [ 325.767143][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 97, changing to 4 [ 325.770964][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24929, setting to 1023 [ 325.776772][ T53] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.779644][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.782152][ T53] usb 7-1: Product: syz [ 325.783482][ T53] usb 7-1: Manufacturer: syz [ 325.785100][ T53] usb 7-1: SerialNumber: syz [ 325.787772][ T53] usb 7-1: config 0 descriptor?? [ 325.791299][ T53] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 61 [ 325.877286][ T40] audit: type=1400 audit(1770654698.242:288): avc: denied { create } for pid=6703 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 326.023483][ T53] usb 7-1: USB disconnect, device number 10 [ 326.038751][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.215059][ T40] audit: type=1400 audit(1770654698.582:289): avc: denied { mount } for pid=6709 comm="syz.1.249" name="/" dev="ramfs" ino=13005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 326.283839][ T53] usb 5-1: USB disconnect, device number 9 [ 326.289790][ T53] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 326.410654][ T6714] kvm: pic: non byte write [ 326.415483][ T6714] kvm: pic: non byte write [ 326.418106][ T6714] kvm: pic: single mode not supported [ 326.418166][ T6714] kvm: pic: level sensitive irq not supported [ 326.523837][ T6717] syz.2.251(6717): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 326.571949][ T40] audit: type=1400 audit(1770654698.932:290): avc: denied { audit_write } for pid=6720 comm="syz.0.253" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 326.581861][ T40] audit: type=1400 audit(1770654698.942:291): avc: denied { watch watch_reads } for pid=6720 comm="syz.0.253" path="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.589304][ T40] audit: type=1400 audit(1770654698.942:292): avc: denied { allowed } for pid=6722 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 326.620179][ T40] audit: type=1400 audit(1770654698.982:293): avc: denied { bind } for pid=6726 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.887611][ T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 327.146534][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.151818][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.156400][ T53] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 327.160216][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.170564][ T53] usb 7-1: config 0 descriptor?? [ 327.304592][ T6028] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 327.455168][ T6028] usb 8-1: Using ep0 maxpacket: 32 [ 327.467692][ T6028] usb 8-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 327.470756][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.473391][ T6028] usb 8-1: Product: syz [ 327.484562][ T6028] usb 8-1: Manufacturer: syz [ 327.486415][ T6028] usb 8-1: SerialNumber: syz [ 327.495126][ T6028] usb 8-1: config 0 descriptor?? [ 327.498664][ T6028] hub 8-1:0.0: bad descriptor, ignoring hub [ 327.500655][ T6028] hub 8-1:0.0: probe with driver hub failed with error -5 [ 327.503829][ T6028] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 327.581763][ T53] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 327.584121][ T53] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 327.587975][ T53] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0008/input/input10 [ 327.602281][ T53] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 327.786605][ T2298] usb 7-1: USB disconnect, device number 11 [ 327.814678][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 327.965529][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 327.974989][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.978177][ T24] usb 5-1: config 0 has no interfaces? [ 327.979929][ T24] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 327.982822][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.991835][ T24] usb 5-1: config 0 descriptor?? [ 328.116000][ T6028] gspca_vc032x: reg_r err -71 [ 328.119350][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.122267][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.124096][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.126823][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.128658][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.130568][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.132398][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.134174][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.154902][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.156803][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.158644][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.160478][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.162359][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.164191][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.172114][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.174064][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.176071][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.178040][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.179892][ T6028] gspca_vc032x: I2c Bus Busy Wait 00 [ 328.181785][ T6028] gspca_vc032x: Unknown sensor... [ 328.183579][ T6028] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 328.205700][ T6028] usb 8-1: USB disconnect, device number 13 [ 328.635028][ T5913] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 328.784618][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 328.787876][ T5913] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 328.790471][ T5913] usb 7-1: config 0 has no interface number 0 [ 328.792409][ T5913] usb 7-1: config 0 interface 12 has no altsetting 0 [ 328.796558][ T5913] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 328.799413][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.801902][ T5913] usb 7-1: Product: syz [ 328.803224][ T5913] usb 7-1: Manufacturer: syz [ 328.804793][ T5913] usb 7-1: SerialNumber: syz [ 328.807497][ T5913] usb 7-1: config 0 descriptor?? [ 328.914662][ T6028] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 329.074626][ T6028] usb 8-1: Using ep0 maxpacket: 32 [ 329.078046][ T6028] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 329.081850][ T6028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.089335][ T6028] usb 8-1: config 0 descriptor?? [ 329.295090][ T6028] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 329.300658][ T6028] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 329.304921][ T6028] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 329.307416][ T6028] usb 8-1: media controller created [ 329.313799][ T6028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.354588][ T6028] stb0899_attach: Driver disabled by Kconfig [ 330.356501][ T6028] az6027: no front-end attached [ 330.356501][ T6028] [ 330.359478][ T6028] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 330.364030][ T6028] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input11 [ 330.372576][ T6028] dvb-usb: schedule remote query interval to 400 msecs. [ 330.375709][ T6028] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 330.564919][ T53] usb 8-1: USB disconnect, device number 14 [ 330.582757][ T53] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 330.584298][ T6028] usb 5-1: USB disconnect, device number 10 [ 330.614321][ T6778] binder: 6777:6778 ioctl c0306201 200000000c80 returned -14 [ 330.648684][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 330.648695][ T40] audit: type=1400 audit(1770654703.012:298): avc: denied { execute_no_trans } for pid=6779 comm="syz.0.274" path="/77/file2" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 330.661319][ T6780] binder: 6779:6780 ioctl 4018620d 0 returned -22 [ 330.775591][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 330.786540][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.796222][ T6786] bond1: entered promiscuous mode [ 330.798201][ T6786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 330.802361][ T6786] bond1: left promiscuous mode [ 330.838135][ T5913] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 330.842073][ T5913] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 330.844709][ T5913] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 330.847183][ T5913] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 330.852252][ T5913] usb 7-1: USB disconnect, device number 12 [ 330.905649][ T40] audit: type=1400 audit(1770654703.272:299): avc: denied { setopt } for pid=6788 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.974598][ T6047] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 331.097438][ T1151] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 331.104069][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.106983][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.124646][ T6047] usb 6-1: Using ep0 maxpacket: 16 [ 331.135878][ T6047] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 331.139028][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.141938][ T6047] usb 6-1: Product: syz [ 331.143447][ T6047] usb 6-1: Manufacturer: syz [ 331.145294][ T6047] usb 6-1: SerialNumber: syz [ 331.148273][ T6047] usb 6-1: config 0 descriptor?? [ 331.377269][ T6800] kvm: emulating exchange as write [ 331.394685][ T6028] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 331.436079][ T6803] geneve2: entered promiscuous mode [ 331.440899][ T40] audit: type=1400 audit(1770654703.802:300): avc: denied { write } for pid=6802 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.561127][ T6047] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 331.564977][ T6047] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.569120][ T6047] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 331.571648][ T6047] usb 6-1: media controller created [ 331.574618][ T6028] usb 8-1: Using ep0 maxpacket: 32 [ 331.577851][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.578808][ T6047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.581270][ T6028] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.587078][ T6028] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 331.589920][ T6028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.593951][ T6028] usb 8-1: config 0 descriptor?? [ 331.597036][ T6028] hub 8-1:0.0: USB hub found [ 331.672522][ T40] audit: type=1400 audit(1770654704.022:301): avc: denied { read } for pid=6804 comm="syz.0.285" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.849988][ T6047] zl10353_read_register: readreg error (reg=127, ret==0) [ 331.852376][ T6047] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 331.855062][ T6047] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 331.859074][ T6047] usb 6-1: USB disconnect, device number 9 [ 331.871922][ T6047] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 331.988506][ T6028] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 332.223775][ T6028] hid-generic 0003:046D:C31C.0009: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 332.594614][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 332.594757][ T6047] usb 8-1: USB disconnect, device number 15 [ 332.776032][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.779707][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.784151][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 332.787445][ T24] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 332.790825][ T24] usb 6-1: Manufacturer: syz [ 332.794268][ T24] usb 6-1: config 0 descriptor?? [ 333.254590][ T54] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 333.454686][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 333.459128][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.463308][ T54] usb 8-1: config 0 has no interfaces? [ 333.469170][ T54] usb 8-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 333.472257][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.474998][ T54] usb 8-1: Product: syz [ 333.476480][ T54] usb 8-1: Manufacturer: syz [ 333.478255][ T54] usb 8-1: SerialNumber: syz [ 333.481544][ T54] usb 8-1: config 0 descriptor?? [ 333.677128][ T40] audit: type=1400 audit(1770654706.042:302): avc: denied { read } for pid=6840 comm="syz.0.299" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 333.678644][ T6841] deleting an unspecified loop device is not supported. [ 333.688219][ T40] audit: type=1400 audit(1770654706.042:303): avc: denied { open } for pid=6840 comm="syz.0.299" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 333.702387][ T40] audit: type=1400 audit(1770654706.042:304): avc: denied { ioctl } for pid=6840 comm="syz.0.299" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 333.781588][ T54] usb 8-1: USB disconnect, device number 16 [ 333.818344][ T24] uclogic 0003:256C:006D.000A: v1 frame probing failed: -71 [ 333.822108][ T24] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 333.825502][ T24] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 333.829864][ T24] usb 6-1: USB disconnect, device number 10 [ 334.187311][ T40] audit: type=1400 audit(1770654706.552:305): avc: denied { create } for pid=6857 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 334.196274][ T40] audit: type=1400 audit(1770654706.562:306): avc: denied { write } for pid=6857 comm="syz.0.304" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 334.246551][ T6860] macvtap1: entered promiscuous mode [ 334.248573][ T6860] dummy0: entered promiscuous mode [ 334.251193][ T6860] team0: Device macvtap1 failed to register rx_handler [ 334.253788][ T6860] dummy0: left promiscuous mode [ 334.379167][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.386876][ T40] audit: type=1400 audit(1770654706.752:307): avc: denied { mounton } for pid=6873 comm="syz.2.312" path="/proc/141/task" dev="proc" ino=14448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 334.550120][ T6884] syz.0.316 uses obsolete (PF_INET,SOCK_PACKET) [ 334.604603][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 334.607105][ T6047] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 334.755094][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 334.756789][ T6047] usb 6-1: Using ep0 maxpacket: 32 [ 334.761665][ T6047] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 334.764301][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 334.767189][ T6047] usb 6-1: config 0 has no interface number 0 [ 334.769667][ T6047] usb 6-1: config 0 interface 89 has no altsetting 0 [ 334.771909][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.776006][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.779197][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.783362][ T6047] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 334.786624][ T6047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.789127][ T6047] usb 6-1: Product: syz [ 334.790490][ T6047] usb 6-1: Manufacturer: syz [ 334.791980][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.798355][ T6047] usb 6-1: SerialNumber: syz [ 334.800673][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.804029][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.807771][ T6047] usb 6-1: config 0 descriptor?? [ 334.811660][ T6047] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 334.815728][ T6047] em28xx 6-1:0.89: Video interface 89 found: bulk [ 335.025884][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 335.027713][ T9] usbtmc 8-1:16.0: can't read capabilities [ 335.228839][ T6191] usb 8-1: USB disconnect, device number 17 [ 335.416104][ T6047] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 335.689298][ T6920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.332'. [ 335.757995][ T6925] netlink: 23 bytes leftover after parsing attributes in process `syz.0.335'. [ 335.759302][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 335.759312][ T40] audit: type=1400 audit(1770654708.122:316): avc: denied { prog_load } for pid=6924 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.759844][ T6926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.759891][ T6926] IPv6: NLM_F_CREATE should be set when creating new route [ 335.776496][ T40] audit: type=1400 audit(1770654708.142:317): avc: denied { prog_run } for pid=6927 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 336.027579][ T6965] Option 'Ô_n'¶tr—1ZQ¥3Œ ¬-Öµ²ÙkÕXÜv~’' to dns_resolver key: bad/missing value [ 336.225615][ T6047] em28xx 6-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 336.228326][ T6047] em28xx 6-1:0.89: failed to read eeprom (err=-5) [ 336.230388][ T6047] em28xx 6-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 336.296332][ T6047] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 336.299328][ T6047] em28xx 6-1:0.89: analog set to bulk mode. [ 336.305489][ T6047] usb 6-1: USB disconnect, device number 11 [ 336.313895][ T6047] em28xx 6-1:0.89: Disconnecting em28xx [ 336.318007][ T9] em28xx 6-1:0.89: Registering V4L2 extension [ 336.321503][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 336.325568][ T40] audit: type=1326 audit(1770654708.682:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6986 comm="syz.3.360" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd936d9af79 code=0x0 [ 336.328714][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 336.359149][ T9] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 336.361535][ T9] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 336.363949][ T9] em28xx 6-1:0.89: No AC97 audio processor [ 336.369419][ T9] usb 6-1: Decoder not found [ 336.371059][ T9] em28xx 6-1:0.89: failed to create media graph [ 336.373378][ T9] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 336.378365][ T9] em28xx 6-1:0.89: Registering snapshot button... [ 336.381621][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.89/input/input12 [ 336.395887][ T9] em28xx 6-1:0.89: Remote control support is not available for this card. [ 336.400036][ T6047] em28xx 6-1:0.89: Closing input extension [ 336.403285][ T6047] em28xx 6-1:0.89: Deregistering snapshot button [ 336.407624][ T6999] ======================================================= [ 336.407624][ T6999] WARNING: The mand mount option has been deprecated and [ 336.407624][ T6999] and is ignored by this kernel. Remove the mand [ 336.407624][ T6999] option from the mount to silence this warning. [ 336.407624][ T6999] ======================================================= [ 336.421200][ T40] audit: type=1400 audit(1770654708.782:319): avc: denied { mount } for pid=6998 comm="syz.2.361" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 336.423833][ T6999] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.439868][ T6047] em28xx 6-1:0.89: Freeing device [ 336.456107][ T40] audit: type=1400 audit(1770654708.822:320): avc: denied { unmount } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 336.518030][ T7007] tipc: Enabling of bearer rejected, failed to enable media [ 336.521071][ T40] audit: type=1400 audit(1770654708.882:321): avc: denied { append } for pid=7008 comm="syz.2.364" name="dlm-monitor" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.586549][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.367'. [ 336.651208][ T7024] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 336.703815][ T7028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 336.752844][ T40] audit: type=1400 audit(1770654709.112:322): avc: denied { map_create } for pid=7033 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 336.759018][ T40] audit: type=1400 audit(1770654709.112:323): avc: denied { map_read map_write } for pid=7033 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 336.804994][ T54] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 336.880379][ T40] audit: type=1400 audit(1770654709.242:324): avc: denied { write } for pid=7039 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.944246][ T40] audit: type=1400 audit(1770654709.302:325): avc: denied { mounton } for pid=7045 comm="syz.1.377" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 336.945353][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 336.955270][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 336.956105][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 336.958386][ T54] usb 7-1: config 2 interface 0 has no altsetting 0 [ 336.961156][ T7046] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 336.966314][ T54] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 336.966660][ T7046] UDF-fs: Scanning with blocksize 512 failed [ 336.969138][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.971830][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 336.974315][ T54] usb 7-1: Product: syz [ 336.976988][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 336.978778][ T54] usb 7-1: Manufacturer: syz [ 336.981697][ T7046] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 336.983346][ T54] usb 7-1: SerialNumber: syz [ 336.986277][ T7046] UDF-fs: Scanning with blocksize 1024 failed [ 336.989640][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 336.992722][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 336.995878][ T7046] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 336.998317][ T7046] UDF-fs: Scanning with blocksize 2048 failed [ 337.000489][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 337.003533][ T7046] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 337.006689][ T7046] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 337.009108][ T7046] UDF-fs: Scanning with blocksize 4096 failed [ 337.011073][ T7046] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 337.146542][ T7059] netlink: 'syz.1.381': attribute type 9 has an invalid length. [ 337.149170][ T7059] netlink: 'syz.1.381': attribute type 11 has an invalid length. [ 337.151742][ T7059] netlink: 'syz.1.381': attribute type 12 has an invalid length. [ 337.154320][ T7059] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.381'. [ 337.157602][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 337.158928][ T7061] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 337.194285][ T54] usb 7-1: USB disconnect, device number 13 [ 337.256135][ T7068] all: renamed from bridge_slave_0 (while UP) [ 337.286129][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 337.516795][ T7089] vcan0: tx address claim with dest, not broadcast [ 337.519032][ T7088] vcan0: tx address claim with dest, not broadcast [ 337.597432][ T7095] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µ [ 337.608258][ T7097] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 337.617426][ T7097] CIFS mount error: No usable UNC path provided in device string! [ 337.617426][ T7097] [ 337.620819][ T7097] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 337.798099][ T7106] cgroup: noprefix used incorrectly [ 337.837098][ T7111] hpfs: hpfs_map_sector(): read error [ 337.854049][ T7114] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.914082][ T7121] netlink: 65528 bytes leftover after parsing attributes in process `syz.3.400'. [ 337.917245][ T7121] netlink: 1728 bytes leftover after parsing attributes in process `syz.3.400'. [ 337.921617][ T7121] syzkaller0: entered promiscuous mode [ 337.923391][ T7121] syzkaller0: entered allmulticast mode [ 337.950091][ T7125] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 338.113694][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 338.458953][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 338.462690][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 338.513607][ T7155] hfs: can't find a HFS filesystem on dev sr0 [ 339.503986][ T7198] xfrm1: entered promiscuous mode [ 339.512548][ T7198] xfrm1: entered allmulticast mode [ 339.588524][ T7214] [U] /DEV/KVM [ 339.590455][ T7214] [U] J"—E:ÀÆ" [ 339.854721][ T2298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 339.994586][ T2298] usb 6-1: device descriptor read/64, error -71 [ 340.033266][ T7262] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 340.058365][ T7262] bond2: (slave geneve3): making interface the new active one [ 340.061850][ T7262] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 340.065661][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.068577][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.071505][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.075118][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 340.103805][ T7266] xfrm1: entered promiscuous mode [ 340.105967][ T7266] xfrm1: entered allmulticast mode [ 340.244616][ T2298] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 340.374598][ T2298] usb 6-1: device descriptor read/64, error -71 [ 340.484957][ T2298] usb usb6-port1: attempt power cycle [ 340.582711][ T7294] nftables ruleset with unbound chain [ 340.614723][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.824615][ T2298] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 340.845131][ T2298] usb 6-1: device descriptor read/8, error -71 [ 340.929070][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 340.929087][ T40] audit: type=1400 audit(1770654713.292:372): avc: denied { unmount } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 341.084844][ T2298] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 341.114601][ T2298] usb 6-1: device descriptor read/8, error -71 [ 341.134055][ T7331] binder: BC_ATTEMPT_ACQUIRE not supported [ 341.136010][ T7331] binder: 7330:7331 ioctl c0306201 2000000001c0 returned -22 [ 341.224887][ T2298] usb usb6-port1: unable to enumerate USB device [ 341.252130][ T7347] syzkaller0: entered promiscuous mode [ 341.253990][ T7347] syzkaller0: entered allmulticast mode [ 341.312427][ T40] audit: type=1400 audit(1770654713.672:373): avc: denied { ioctl } for pid=7350 comm="syz.0.463" path="socket:[14210]" dev="sockfs" ino=14210 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.317094][ T7356] netlink: 'syz.2.464': attribute type 7 has an invalid length. [ 341.322731][ T7356] netlink: 'syz.2.464': attribute type 8 has an invalid length. [ 341.329326][ T7356] ip6gretap0: entered promiscuous mode [ 341.331765][ T7356] syz_tun: entered promiscuous mode [ 341.333820][ T7356] gretap0: entered promiscuous mode [ 341.399491][ T7358] veth3: entered allmulticast mode [ 341.404138][ T40] audit: type=1400 audit(1770654713.762:374): avc: denied { create } for pid=7357 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 341.494683][ T40] audit: type=1800 audit(1770654713.852:375): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.0.466" name="/newroot/150/bus/#810//deleted" dev="tmpfs" ino=810 res=0 errno=0 [ 341.532116][ T40] audit: type=1400 audit(1770654713.892:376): avc: denied { unlink } for pid=7367 comm="syz.3.468" name="#c" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 341.570463][ T40] audit: type=1400 audit(1770654713.932:377): avc: denied { connect } for pid=7373 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 341.585628][ T7374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=7374 comm=syz.0.471 [ 341.634687][ T40] audit: type=1400 audit(1770654713.992:378): avc: denied { mount } for pid=7380 comm="syz.3.473" name="/" dev="rpc_pipefs" ino=16819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 341.650489][ T40] audit: type=1326 audit(1770654714.012:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.3.473" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd936d9af79 code=0x0 [ 341.670600][ T7388] __nla_validate_parse: 48 callbacks suppressed [ 341.670613][ T7388] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.475'. [ 341.776679][ T40] audit: type=1400 audit(1770654714.142:380): avc: denied { write } for pid=7396 comm="syz.3.478" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 341.809940][ T40] audit: type=1400 audit(1770654714.172:381): avc: denied { map } for pid=7400 comm="syz.3.479" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 341.817872][ T7401] netlink: 48 bytes leftover after parsing attributes in process `syz.3.479'. [ 341.824258][ T7395] smc: net device bond0 applied user defined pnetid SYZ2 [ 341.828149][ T7395] netlink: 14 bytes leftover after parsing attributes in process `syz.0.477'. [ 341.844950][ T7395] smc: removing net device bond0 with user defined pnetid SYZ2 [ 341.848785][ T7395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.857287][ T7395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.862049][ T7395] bond0 (unregistering): Released all slaves [ 341.868100][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 341.868149][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 341.870128][ T7408] tmpfs: Unknown parameter 'us2q' [ 341.901243][ T7414] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 341.906449][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 342.220246][ T7436] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.488'. [ 342.304624][ T5913] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 342.319949][ T7446] loop6: detected capacity change from 0 to 2640 [ 342.323570][ T6104] buffer_io_error: 19515 callbacks suppressed [ 342.323580][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.334585][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.337051][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.339525][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.341939][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.344463][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.347611][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.350076][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.352505][ T6104] ldm_validate_partition_table(): Disk read failed. [ 342.354851][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.357455][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 342.359998][ T6104] Dev loop6: unable to read RDB block 0 [ 342.361895][ T6104] loop6: unable to read partition table [ 342.365358][ T7446] ldm_validate_partition_table(): Disk read failed. [ 342.367508][ T7446] Dev loop6: unable to read RDB block 0 [ 342.369318][ T7446] loop6: unable to read partition table [ 342.371215][ T7446] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 342.465002][ T5913] usb 7-1: Using ep0 maxpacket: 8 [ 342.471396][ T5913] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 342.474232][ T5913] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.477448][ T5913] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.480533][ T5913] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.483614][ T5913] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.488548][ T5913] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.491392][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.502592][ T7451] overlay: filesystem on ./bus is read-only [ 342.692687][ T7473] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 342.693104][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 342.702672][ T7472] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 342.707428][ T7472] netlink: 52 bytes leftover after parsing attributes in process `syz.1.500'. [ 342.707727][ T5913] usb 7-1: GET_CAPABILITIES returned 0 [ 342.723142][ T5913] usbtmc 7-1:16.0: can't read capabilities [ 342.907831][ T9] usb 7-1: USB disconnect, device number 14 [ 343.292452][ T7517] 9p: Could not find request transport: vir [ 343.308349][ T7522] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 343.354905][ T5913] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 343.401333][ T7536] loop6: detected capacity change from 0 to 2640 [ 343.403736][ T7536] ldm_validate_partition_table(): Disk read failed. [ 343.407370][ T7536] Dev loop6: unable to read RDB block 0 [ 343.409445][ T7536] loop6: unable to read partition table [ 343.411680][ T7536] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 343.524671][ T5913] usb 7-1: Using ep0 maxpacket: 8 [ 343.527608][ T5913] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 343.530261][ T5913] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.533626][ T5913] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.536768][ T5913] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.539866][ T5913] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.543961][ T5913] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.547233][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.604760][ T7555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.617036][ T7552] sctp: [Deprecated]: syz.0.519 (pid 7552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.617036][ T7552] Use struct sctp_sack_info instead [ 343.721583][ T7563] overlay: ./file0 is not a directory [ 343.753492][ T5913] usb 7-1: usb_control_msg returned -71 [ 343.756650][ T7567] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 343.756784][ T5913] usbtmc 7-1:16.0: can't read capabilities [ 343.769623][ T5913] usb 7-1: USB disconnect, device number 15 [ 343.796113][ T7567] smc: adding net device bond0 with user defined pnetid SYZ2 [ 343.800455][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.826807][ T7567] bond0: (slave veth3): Enslaving as an active interface with a down link [ 343.846458][ T7567] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 343.850614][ T7567] bond0: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 343.890268][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.529'. [ 343.897469][ T7584] loop6: detected capacity change from 0 to 2640 [ 343.899824][ T7584] ldm_validate_partition_table(): Disk read failed. [ 343.901961][ T7584] Dev loop6: unable to read RDB block 0 [ 343.903792][ T7584] loop6: unable to read partition table [ 343.907246][ T7584] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 344.015494][ T7600] sctp: [Deprecated]: syz.0.537 (pid 7600) Use of int in max_burst socket option. [ 344.015494][ T7600] Use struct sctp_assoc_value instead [ 344.257545][ T7616] batman_adv: batadv0: Adding interface: macsec1 [ 344.259611][ T7616] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.267605][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.270878][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.273911][ T7616] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 344.309164][ T7622] loop6: detected capacity change from 0 to 2640 [ 344.312012][ T7622] ldm_validate_partition_table(): Disk read failed. [ 344.315657][ T7622] Dev loop6: unable to read RDB block 0 [ 344.318007][ T7622] loop6: unable to read partition table [ 344.324595][ T7622] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 344.329955][ T7624] program syz.2.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.332962][ T7624] ata1.00: non-matching transfer count (0/2304) [ 344.512091][ T7656] loop6: detected capacity change from 0 to 2640 [ 344.516314][ T6104] ldm_validate_partition_table(): Disk read failed. [ 344.518461][ T6104] Dev loop6: unable to read RDB block 0 [ 344.520405][ T6104] loop6: unable to read partition table [ 344.528920][ T7656] ldm_validate_partition_table(): Disk read failed. [ 344.531083][ T7656] Dev loop6: unable to read RDB block 0 [ 344.532921][ T7656] loop6: unable to read partition table [ 344.537658][ T7656] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 344.608357][ T7667] netlink: 'syz.0.558': attribute type 2 has an invalid length. [ 344.804919][ T6401] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 344.924170][ T7693] loop6: detected capacity change from 0 to 2640 [ 344.927410][ T7693] ldm_validate_partition_table(): Disk read failed. [ 344.929569][ T7693] Dev loop6: unable to read RDB block 0 [ 344.931418][ T7693] loop6: unable to read partition table [ 344.933336][ T7693] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 344.977245][ T6401] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 344.979905][ T6401] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 344.982826][ T6401] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 344.985838][ T6401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.988883][ T6401] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.991926][ T6401] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 344.996816][ T6401] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 344.999720][ T6401] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.003375][ T6401] usb 6-1: config 0 descriptor?? [ 345.213635][ T6401] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 345.418249][ T2298] usb 6-1: USB disconnect, device number 16 [ 345.422239][ T2298] usblp0: removed [ 345.671379][ T7731] fuse: Unknown parameter 'grÏup_id' [ 345.752916][ T7737] ip6gre3: entered allmulticast mode [ 345.755680][ T7737] team0: Device ip6gre3 is of different type [ 345.803059][ T7739] overlayfs: missing 'lowerdir' [ 345.959412][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 345.959423][ T40] audit: type=1400 audit(1770654718.322:432): avc: denied { mount } for pid=7752 comm="syz.1.585" name="/" dev="hugetlbfs" ino=18715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 345.959938][ T7753] overlayfs: failed to resolve '/PynÈÆB) [ 345.959938][ T7753] ÉÁÖ¤§ÛÜñ[x S|NTÐåÔsØß´)÷-²EÅÊjU./file0': -2 [ 345.961384][ T40] audit: type=1400 audit(1770654718.322:433): avc: denied { mounton } for pid=7752 comm="syz.1.585" path="/117/file0" dev="hugetlbfs" ino=18715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 345.978027][ T7755] geneve2: entered promiscuous mode [ 345.992508][ T40] audit: type=1400 audit(1770654718.352:434): avc: denied { unmount } for pid=5980 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 346.019420][ T40] audit: type=1400 audit(1770654718.382:435): avc: denied { connect } for pid=7750 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.065643][ T7761] vivid-002: disconnect [ 346.152013][ T40] audit: type=1400 audit(1770654718.512:436): avc: denied { accept } for pid=7776 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 346.185645][ T40] audit: type=1400 audit(1770654718.552:437): avc: denied { read write } for pid=7769 comm="syz.1.593" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 346.193360][ T40] audit: type=1400 audit(1770654718.552:438): avc: denied { open } for pid=7769 comm="syz.1.593" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 346.204580][ T40] audit: type=1400 audit(1770654718.552:439): avc: denied { ioctl } for pid=7769 comm="syz.1.593" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 346.212559][ T40] audit: type=1400 audit(1770654718.552:440): avc: denied { map } for pid=7769 comm="syz.1.593" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 346.213501][ T7785] bond3 (unregistering): Released all slaves [ 346.247641][ T7793] netlink: 'syz.0.596': attribute type 11 has an invalid length. [ 346.292154][ T7800] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 346.296575][ T7800] overlayfs: missing 'lowerdir' [ 346.438268][ T40] audit: type=1400 audit(1770654718.802:441): avc: denied { create } for pid=7830 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 346.476005][ T7834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.678762][ T7866] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 346.683280][ T7866] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 346.688937][ T7866] cramfs: wrong magic [ 346.707857][ T7869] __nla_validate_parse: 9 callbacks suppressed [ 346.707868][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 346.957000][ T7895] capability: warning: `syz.1.634' uses deprecated v2 capabilities in a way that may be insecure [ 346.966361][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 346.989043][ T7899] vlan0: entered promiscuous mode [ 347.042537][ T7905] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 347.061608][ T7905] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 347.196450][ T7927] ata1.00: invalid cdb length 6 [ 347.289255][ T7937] bond1: ARP target 4.0.0.0 is already present [ 347.291790][ T7937] bond1: option arp_ip_target: invalid value (4) [ 347.295125][ T7937] bond1 (unregistering): Released all slaves [ 347.459211][ T7957] bridge_slave_0: left allmulticast mode [ 347.461219][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.484242][ T7962] geneve3: entered promiscuous mode [ 347.486785][ T7962] geneve3: entered allmulticast mode [ 347.488842][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.491835][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.495169][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.497938][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 348.079913][ T8002] i2c i2c-1: dtv_property_process_set: SET cmd 0x307a7973 undefined [ 348.086660][ T8002] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 348.089174][ T8002] netlink: 92 bytes leftover after parsing attributes in process `syz.3.660'. [ 348.363872][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.366579][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.369060][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.371564][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.374120][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.377204][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.379788][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 348.382281][ T8014] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 349.047435][ T8068] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 349.306638][ T8085] netlink: 'syz.2.687': attribute type 8 has an invalid length. [ 349.309299][ T8085] net_ratelimit: 46 callbacks suppressed [ 349.309309][ T8085] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 349.374641][ T8093] tipc: Started in network mode [ 349.376392][ T8093] tipc: Node identity , cluster identity 4711 [ 349.378598][ T8093] tipc: Failed to set node id, please configure manually [ 349.380831][ T8093] tipc: Enabling of bearer rejected, failed to enable media [ 349.493885][ T8102] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 349.522419][ T8102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.526592][ T8102] bond3: (slave bond4): making interface the new active one [ 349.527344][ T8106] binder: 8105:8106 unknown command 0 [ 349.529225][ T8102] bond3: (slave bond4): Enslaving as an active interface with an up link [ 349.530725][ T8106] binder: 8105:8106 ioctl c0306201 200000000080 returned -22 [ 349.536077][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'. [ 349.537624][ T8102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 349.568283][ T8110] netlink: 'syz.0.696': attribute type 10 has an invalid length. [ 349.737167][ T8128] netlink: 'syz.0.700': attribute type 1 has an invalid length. [ 349.739627][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.700'. [ 349.894900][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 349.946249][ T8140] comedi: valid board names for 8255 driver are: [ 349.948493][ T8140] 8255 [ 349.949415][ T8140] comedi: valid board names for vmk80xx driver are: [ 349.951564][ T8140] vmk80xx [ 349.953308][ T8140] comedi: valid board names for usbduxsigma driver are: [ 349.956133][ T8140] usbduxsigma [ 349.957548][ T8140] comedi: valid board names for usbduxfast driver are: [ 349.960321][ T8140] usbduxfast [ 349.961694][ T8140] comedi: valid board names for usbdux driver are: [ 349.964283][ T8140] usbdux [ 349.967474][ T8140] comedi: valid board names for ni6501 driver are: [ 349.970009][ T8140] ni6501 [ 349.971224][ T8140] comedi: valid board names for dt9812 driver are: [ 349.973685][ T8140] dt9812 [ 349.975832][ T8140] comedi: valid board names for ni_labpc_cs driver are: [ 349.978187][ T8140] ni_labpc_cs [ 349.979366][ T8140] comedi: valid board names for ni_daq_700 driver are: [ 349.982001][ T8140] ni_daq_700 [ 349.983250][ T8140] comedi: valid board names for labpc_pci driver are: [ 349.986217][ T8140] labpc_pci [ 349.987685][ T8140] comedi: valid board names for adl_pci9118 driver are: [ 349.990405][ T8140] pci9118dg [ 349.993064][ T8140] pci9118hg [ 349.994179][ T8140] pci9118hr [ 349.995321][ T8140] comedi: valid board names for 8255_pci driver are: [ 349.997477][ T8140] 8255_pci [ 349.998602][ T8140] comedi: valid board names for s526 driver are: [ 350.000662][ T8140] s526 [ 350.001528][ T8140] comedi: valid board names for multiq3 driver are: [ 350.003679][ T8140] multiq3 [ 350.004719][ T8140] comedi: valid board names for pcmuio driver are: [ 350.006844][ T8140] pcmuio48 [ 350.007873][ T8140] pcmuio96 [ 350.008950][ T8140] comedi: valid board names for pcmmio driver are: [ 350.011106][ T8140] pcmmio [ 350.012064][ T8140] comedi: valid board names for pcmda12 driver are: [ 350.014214][ T8140] pcmda12 [ 350.015311][ T8140] comedi: valid board names for pcmad driver are: [ 350.017351][ T8140] pcmad12 [ 350.018364][ T8140] pcmad16 [ 350.019368][ T8140] comedi: valid board names for ni_labpc driver are: [ 350.021570][ T8140] lab-pc-1200 [ 350.022689][ T8140] lab-pc-1200ai [ 350.023842][ T8140] lab-pc+ [ 350.024950][ T8140] comedi: valid board names for atmio16 driver are: [ 350.027024][ T8140] atmio16 [ 350.028028][ T8140] atmio16d [ 350.029056][ T8140] comedi: valid board names for ni_at_ao driver are: [ 350.031181][ T8140] at-ao-6 [ 350.032241][ T8140] at-ao-10 [ 350.033272][ T8140] comedi: valid board names for ni_at_a2150 driver are: [ 350.035698][ T8140] ni_at_a2150 [ 350.036807][ T8140] comedi: valid board names for adq12b driver are: [ 350.038868][ T8140] adq12b [ 350.039827][ T8140] comedi: valid board names for mpc624 driver are: [ 350.041906][ T8140] mpc624 [ 350.042936][ T8140] comedi: valid board names for c6xdigio driver are: [ 350.045110][ T8140] c6xdigio [ 350.046210][ T8140] comedi: valid board names for aio_iiro_16 driver are: [ 350.048446][ T8140] aio_iiro_16 [ 350.049560][ T8140] comedi: valid board names for aio_aio12_8 driver are: [ 350.051806][ T8140] aio_aio12_8 [ 350.052907][ T8140] aio_ai12_8 [ 350.054054][ T8140] aio_ao12_4 [ 350.055294][ T8140] comedi: valid board names for fl512 driver are: [ 350.057417][ T8140] fl512 [ 350.058384][ T8140] comedi: valid board names for dmm32at driver are: [ 350.060444][ T8140] dmm32at [ 350.061404][ T8140] comedi: valid board names for dt282x driver are: [ 350.063362][ T8140] dt2821 [ 350.064380][ T8140] dt2821-f [ 350.065496][ T8140] dt2821-g [ 350.066531][ T8140] dt2823 [ 350.067546][ T8140] dt2824-pgh [ 350.068627][ T8140] dt2824-pgl [ 350.069711][ T8140] dt2825 [ 350.070718][ T8140] dt2827 [ 350.071676][ T8140] dt2828 [ 350.072635][ T8140] dt2829 [ 350.073591][ T8140] dt21-ez [ 350.074677][ T8140] dt23-ez [ 350.075679][ T8140] dt24-ez [ 350.076684][ T8140] dt24-ez-pgl [ 350.077877][ T8140] comedi: valid board names for dt2817 driver are: [ 350.079956][ T8140] dt2817 [ 350.080895][ T8140] comedi: valid board names for dt2815 driver are: [ 350.082858][ T8140] dt2815 [ 350.083774][ T8140] comedi: valid board names for dt2814 driver are: [ 350.085815][ T8140] dt2814 [ 350.086729][ T8140] comedi: valid board names for dt2811 driver are: [ 350.088746][ T8140] dt2811-pgh [ 350.089797][ T8140] dt2811-pgl [ 350.090880][ T8140] comedi: valid board names for dt2801 driver are: [ 350.092845][ T8140] dt2801 [ 350.093807][ T8140] comedi: valid board names for das6402 driver are: [ 350.095849][ T8140] das6402-12 [ 350.096892][ T8140] das6402-16 [ 350.097952][ T8140] comedi: valid board names for das1800 driver are: [ 350.100032][ T8140] das-1701st [ 350.101075][ T8140] das-1701st-da [ 350.102195][ T8140] das-1702st [ 350.103227][ T8140] das-1702st-da [ 350.104326][ T8140] das-1702hr [ 350.105384][ T8140] das-1702hr-da [ 350.106607][ T8140] das-1701ao [ 350.107630][ T8140] das-1702ao [ 350.108662][ T8140] das-1801st [ 350.109676][ T8140] das-1801st-da [ 350.110898][ T8140] das-1802st [ 350.111939][ T8140] das-1802st-da [ 350.113050][ T8140] das-1802hr [ 350.114095][ T8140] das-1802hr-da [ 350.115316][ T8140] das-1801hc [ 350.116341][ T8140] das-1802hc [ 350.117367][ T8140] das-1801ao [ 350.118385][ T8140] das-1802ao [ 350.119392][ T8140] comedi: valid board names for das800 driver are: [ 350.121408][ T8140] das-800 [ 350.122375][ T8140] cio-das800 [ 350.123376][ T8140] das-801 [ 350.124315][ T8140] cio-das801 [ 350.125401][ T8140] das-802 [ 350.126346][ T8140] cio-das802 [ 350.127372][ T8140] cio-das802/16 [ 350.128470][ T8140] comedi: valid board names for isa-das08 driver are: [ 350.130510][ T8140] isa-das08 [ 350.131580][ T8140] das08-pgm [ 350.132578][ T8140] das08-pgh [ 350.133573][ T8140] das08-pgl [ 350.134666][ T8140] das08-aoh [ 350.135668][ T8140] das08-aol [ 350.136666][ T8140] das08-aom [ 350.137823][ T8140] das08/jr-ao [ 350.138878][ T8140] das08jr-16-ao [ 350.140038][ T8140] pc104-das08 [ 350.141088][ T8140] das08jr/16 [ 350.142182][ T8140] comedi: valid board names for das16m1 driver are: [ 350.144152][ T8140] das16m1 [ 350.145199][ T8140] comedi: valid board names for dac02 driver are: [ 350.147186][ T8140] dac02 [ 350.148080][ T8140] comedi: valid board names for rti802 driver are: [ 350.150093][ T8140] rti802 [ 350.151019][ T8140] comedi: valid board names for rti800 driver are: [ 350.152974][ T8140] rti800 [ 350.153934][ T8140] rti815 [ 350.154956][ T8140] comedi: valid board names for pcm3724 driver are: [ 350.156967][ T8140] pcm3724 [ 350.157971][ T8140] comedi: valid board names for pcl818 driver are: [ 350.159999][ T8140] pcl818l [ 350.160973][ T8140] pcl818h [ 350.161977][ T8140] pcl818hd [ 350.162961][ T8140] pcl818hg [ 350.163914][ T8140] pcl818 [ 350.164950][ T8140] pcl718 [ 350.165885][ T8140] pcm3718 [ 350.166829][ T8140] comedi: valid board names for pcl816 driver are: [ 350.168750][ T8140] pcl816 [ 350.169677][ T8140] pcl814b [ 350.170694][ T8140] comedi: valid board names for pcl812 driver are: [ 350.172670][ T8140] pcl812 [ 350.173590][ T8140] pcl812pg [ 350.174675][ T8140] acl8112pg [ 350.175680][ T8140] acl8112dg [ 350.176698][ T8140] acl8112hg [ 350.177751][ T8140] a821pgl [ 350.178712][ T8140] a821pglnda [ 350.179753][ T8140] a821pgh [ 350.180743][ T8140] a822pgl [ 350.181792][ T8140] a822pgh [ 350.182784][ T8140] a823pgl [ 350.183757][ T8140] a823pgh [ 350.184842][ T8140] pcl813 [ 350.185784][ T8140] pcl813b [ 350.186766][ T8140] acl8113 [ 350.187770][ T8140] iso813 [ 350.188726][ T8140] acl8216 [ 350.189732][ T8140] a826pg [ 350.190708][ T8140] comedi: valid board names for pcl730 driver are: [ 350.192758][ T8140] pcl730 [ 350.193718][ T8140] iso730 [ 350.194747][ T8140] acl7130 [ 350.195733][ T8140] pcm3730 [ 350.196700][ T8140] pcl725 [ 350.197631][ T8140] p8r8dio [ 350.198598][ T8140] acl7225b [ 350.199608][ T8140] p16r16dio [ 350.200648][ T8140] pcl733 [ 350.201561][ T8140] pcl734 [ 350.202487][ T8140] opmm-1616-xt [ 350.203608][ T8140] pearl-mm-p [ 350.205206][ T8140] ir104-pbf [ 350.206294][ T8140] comedi: valid board names for pcl726 driver are: [ 350.208334][ T8140] pcl726 [ 350.209294][ T8140] pcl727 [ 350.210278][ T8140] pcl728 [ 350.211227][ T8140] acl6126 [ 350.212223][ T8140] acl6128 [ 350.213218][ T8140] comedi: valid board names for pcl724 driver are: [ 350.215356][ T8140] pcl724 [ 350.216300][ T8140] pcl722 [ 350.217250][ T8140] pcl731 [ 350.218195][ T8140] acl7122 [ 350.219160][ T8140] acl7124 [ 350.220169][ T8140] pet48dio [ 350.221153][ T8140] pcmio48 [ 350.222133][ T8140] onyx-mm-dio [ 350.223226][ T8140] comedi: valid board names for pcl711 driver are: [ 350.225271][ T8140] pcl711 [ 350.226214][ T8140] pcl711b [ 350.227202][ T8140] acl8112hg [ 350.228236][ T8140] acl8112dg [ 350.229263][ T8140] comedi: valid board names for amplc_pc263 driver are: [ 350.231513][ T8140] pc263 [ 350.232425][ T8140] comedi: valid board names for amplc_pc236 driver are: [ 350.234619][ T8140] pc36at [ 350.235553][ T8140] comedi: valid board names for amplc_dio200 driver are: [ 350.237637][ T8140] pc212e [ 350.238570][ T8140] pc214e [ 350.239492][ T8140] pc215e [ 350.240431][ T8140] pc218e [ 350.241381][ T8140] pc272e [ 350.242301][ T8140] comedi: valid board names for comedi_parport driver are: [ 350.244447][ T8140] comedi_parport [ 350.245632][ T8140] comedi: valid board names for comedi_test driver are: [ 350.247726][ T8140] comedi_test [ 350.248801][ T8140] comedi: valid board names for comedi_bond driver are: [ 350.250959][ T8140] comedi_bond [ 350.321329][ T8145] netlink: 108 bytes leftover after parsing attributes in process `syz.0.707'. [ 350.324083][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 350.460272][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 351.270125][ T8170] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.716'. [ 351.273412][ T8170] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 351.450487][ T8194] netlink: 488 bytes leftover after parsing attributes in process `syz.2.726'. [ 351.502444][ T8203] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.507251][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.509660][ T8203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.512166][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.514433][ T8203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.519589][ T8203] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 351.791023][ T8242] trusted_key: encrypted_key: master key parameter '' is invalid [ 351.819191][ T8244] ksmbd: Unknown IPC event: 1, ignore. [ 351.828726][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 351.828743][ T40] audit: type=1400 audit(1770654724.192:467): avc: denied { map } for pid=8243 comm="syz.3.747" path="socket:[18262]" dev="sockfs" ino=18262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.838945][ T40] audit: type=1400 audit(1770654724.192:468): avc: denied { read accept } for pid=8243 comm="syz.3.747" path="socket:[18262]" dev="sockfs" ino=18262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 351.869112][ T8252] __nla_validate_parse: 3 callbacks suppressed [ 351.869128][ T8252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.749'. [ 351.928906][ T40] audit: type=1326 audit(1770654724.292:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.938584][ T40] audit: type=1326 audit(1770654724.292:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.949498][ T40] audit: type=1326 audit(1770654724.292:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.959393][ T40] audit: type=1326 audit(1770654724.292:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.968744][ T40] audit: type=1326 audit(1770654724.292:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.978633][ T40] audit: type=1326 audit(1770654724.292:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.987503][ T40] audit: type=1326 audit(1770654724.292:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 351.994267][ T40] audit: type=1326 audit(1770654724.292:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8255 comm="syz.2.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68479af79 code=0x7ffc0000 [ 352.286526][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 352.289994][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 352.496415][ T8304] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.764'. [ 352.692600][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 352.735346][ T8326] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.774'. [ 353.963632][ T8394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24564 sclass=netlink_route_socket pid=8394 comm=syz.2.796 [ 354.159025][ T8412] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 354.544134][ T8450] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 354.576269][ T8454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4442 sclass=netlink_route_socket pid=8454 comm=syz.3.819 [ 354.650948][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 355.126160][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.858'. [ 355.669489][ T8575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.086522][ T8606] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 356.105701][ T8606] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 356.117349][ T8606] bridge_slave_1: left allmulticast mode [ 356.119346][ T8606] bridge_slave_1: left promiscuous mode [ 356.128113][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.136196][ T8606] bond0: (slave bond_slave_0): Releasing backup interface [ 356.142809][ T8606] bond0: (slave bond_slave_1): Releasing backup interface [ 356.154168][ T8606] team0: Port device team_slave_0 removed [ 356.167405][ T8606] team0: Port device team_slave_1 removed [ 356.169812][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.172077][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.176329][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.178714][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.185403][ T8606] bond0: (slave netdevsim0): Releasing backup interface [ 356.192036][ T8606] bond0: (slave wlan1): Releasing backup interface [ 356.210541][ T8606] batman_adv: batadv0: Removing interface: macsec1 [ 356.295487][ T5985] Bluetooth: hci2: command 0x0406 tx timeout [ 356.305189][ T8626] ªªªªªª: renamed from wg2 (while UP) [ 356.388442][ T8639] netlink: 'syz.1.896': attribute type 21 has an invalid length. [ 356.391042][ T8639] netlink: 156 bytes leftover after parsing attributes in process `syz.1.896'. [ 356.607010][ T5990] Bluetooth: hci3: command 0x0406 tx timeout [ 356.847053][ T40] kauditd_printk_skb: 453 callbacks suppressed [ 356.847071][ T40] audit: type=1400 audit(1770654729.212:930): avc: denied { read write } for pid=5980 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.859263][ T40] audit: type=1400 audit(1770654729.222:931): avc: denied { create } for pid=8673 comm="syz.1.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 356.865761][ T40] audit: type=1400 audit(1770654729.222:932): avc: denied { create } for pid=8673 comm="syz.1.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 356.872083][ T40] audit: type=1400 audit(1770654729.222:933): avc: denied { create } for pid=8673 comm="syz.1.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 356.879097][ T40] audit: type=1400 audit(1770654729.242:934): avc: denied { read write } for pid=5980 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.892874][ T40] audit: type=1400 audit(1770654729.252:935): avc: denied { prog_load } for pid=8675 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 356.900804][ T40] audit: type=1400 audit(1770654729.252:936): avc: denied { write } for pid=8677 comm="syz.1.915" name="ip_mr_cache" dev="proc" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 356.910333][ T40] audit: type=1400 audit(1770654729.252:937): avc: denied { create } for pid=8677 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 356.917721][ T40] audit: type=1400 audit(1770654729.252:938): avc: denied { create } for pid=8677 comm="syz.1.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 356.925689][ T40] audit: type=1400 audit(1770654729.252:939): avc: denied { allowed } for pid=8675 comm="syz.0.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 357.386530][ T8709] netlink: 'syz.0.928': attribute type 10 has an invalid length. [ 357.399237][ T8709] team0: Port device dummy0 added [ 357.404124][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.406734][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.407245][ T8709] netlink: 'syz.0.928': attribute type 10 has an invalid length. [ 357.408968][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.413705][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.416151][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.418856][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.421222][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.423385][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.425621][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.427805][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.430526][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.431102][ T8709] team0: Port device dummy0 removed [ 357.433283][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.437868][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.440495][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.442671][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.444798][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.446883][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.448973][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.451123][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.453222][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.456390][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.458568][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.460704][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.462931][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.465110][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.467298][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.469431][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.471499][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.473586][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.475763][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.477939][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.480110][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.482203][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.484724][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.487192][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.489296][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.491464][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.493590][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.495976][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.498271][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.500428][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.502523][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.504821][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.507564][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.510374][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.511841][ T8729] geneve2: entered promiscuous mode [ 357.513058][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.516735][ T8729] geneve2: entered allmulticast mode [ 357.518043][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.522382][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.525285][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.528067][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.530822][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.533433][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.536453][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.539241][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.542022][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.544804][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.547537][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.550330][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.553477][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.556375][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.559166][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.561956][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.564854][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.567941][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.570731][ T5995] Bluetooth: hci3: unexpected event for opcode 0x040e [ 357.769568][ T8757] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 358.416883][ T8801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8801 comm=syz.1.965 [ 358.503808][ T8808] pimreg: tun_chr_ioctl cmd 1074025688 [ 358.506970][ T8808] pimreg: tun_chr_ioctl cmd 1074025678 [ 358.509616][ T8808] pimreg: group set to 0 [ 358.514605][ T8810] pimreg: tun_chr_ioctl cmd 1074025678 [ 358.516390][ T8810] pimreg: group set to 0 [ 358.792290][ T8840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.983'. [ 359.165150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.438171][ T5990] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 359.472141][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 359.656188][ T8925] bond3 (unregistering): Released all slaves [ 359.725833][ T8940] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 359.729570][ T8940] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 359.924663][ T5990] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 359.962838][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 360.090245][ T5990] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 360.105682][ T9017] 9p: p9: multiple sources not supported [ 360.230843][ T5990] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 360.368440][ T9025] xt_cgroup: invalid path, errno=-2 [ 360.403152][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 360.445180][ T5985] Bluetooth: hci1: command 0x0406 tx timeout [ 360.571993][ T9103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.661846][ T5995] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 360.744252][ T9139] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1107'. [ 360.842620][ T9156] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 361.116283][ T9199] bond1: (slave bond_slave_1): Device is not our slave [ 361.118504][ T9199] bond1: option active_slave: invalid value (bond_slave_1) [ 361.121793][ T9199] bond1 (unregistering): Released all slaves [ 361.840846][ T9262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 361.843846][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 361.864769][ T40] kauditd_printk_skb: 1112 callbacks suppressed [ 361.864781][ T40] audit: type=1400 audit(1770654990.222:2052): avc: denied { read write } for pid=5988 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 361.874862][ T40] audit: type=1400 audit(1770654990.232:2053): avc: denied { read write } for pid=9263 comm="syz.3.1158" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 361.882055][ T40] audit: type=1400 audit(1770654990.232:2054): avc: denied { execute } for pid=9263 comm="syz.3.1158" name="file0" dev="tmpfs" ino=1350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 361.889831][ T40] audit: type=1400 audit(1770654990.242:2055): avc: denied { create } for pid=9265 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 361.896214][ T40] audit: type=1400 audit(1770654990.242:2056): avc: denied { create } for pid=9265 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 361.902238][ T40] audit: type=1400 audit(1770654990.242:2057): avc: denied { read write } for pid=5987 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 361.910300][ T40] audit: type=1400 audit(1770654990.242:2058): avc: denied { create } for pid=9265 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 361.918558][ T40] audit: type=1400 audit(1770654990.252:2059): avc: denied { read } for pid=9267 comm="syz.3.1160" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 361.925774][ T40] audit: type=1400 audit(1770654990.262:2060): avc: denied { read write } for pid=5987 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 361.933186][ T40] audit: type=1400 audit(1770654990.282:2061): avc: denied { create } for pid=9270 comm="syz.3.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 362.150282][ T9283] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 362.152867][ T9283] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1164'. [ 362.156342][ T9283] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 362.159636][ T9283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.170694][ T9283] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 362.174509][ T9283] netlink: 'syz.1.1164': attribute type 4 has an invalid length. [ 362.190323][ T9283] netlink: 'syz.1.1164': attribute type 4 has an invalid length. [ 362.330696][ T5995] Bluetooth: hci1: hcon ffff88802dfb8000 sent 1 < count 3840 [ 362.334058][ T5995] Bluetooth: hci1: hcon ffff88802dfb8000 sent 0 < count 6 [ 362.337898][ T5995] Bluetooth: hci1: hcon ffff88802dfb8000 sent 0 < count 6 [ 362.340184][ T5995] Bluetooth: hci1: hcon ffff88802dfb8000 sent 0 < count 6 [ 362.557006][ T5995] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 362.759444][ T9342] bond3: option downdelay: invalid value (18446744073709551615) [ 362.762117][ T9342] bond3: option downdelay: allowed values 0 - 2147483647 [ 362.769856][ T9342] bond3 (unregistering): Released all slaves [ 362.772039][ T9347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9347 comm=syz.3.1191 [ 362.782989][ T9347] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 362.800995][ T9353] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 362.801643][ T9347] bond1: (slave bridge2): making interface the new active one [ 362.803638][ T9353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 362.806735][ T9347] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 362.811445][ T9353] vhci_hcd vhci_hcd.0: Device attached [ 362.820993][ T9351] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 362.825290][ T9351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9351 comm=syz.3.1191 [ 362.830261][ T9347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9347 comm=syz.3.1191 [ 362.834098][ T9354] vhci_hcd: connection closed [ 362.847429][ T1146] vhci_hcd vhci_hcd.2: stop threads [ 362.850695][ T1146] vhci_hcd vhci_hcd.2: release socket [ 362.852418][ T1146] vhci_hcd vhci_hcd.2: disconnect device [ 363.155725][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1216'. [ 363.267301][ T9436] ipvlan0: entered promiscuous mode [ 363.269103][ T9436] ipvlan0: entered allmulticast mode [ 363.271314][ T9436] veth0_vlan: entered allmulticast mode [ 363.277920][ T9441] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1228'. [ 363.339701][ T9450] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 363.367795][ T5985] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff [ 363.453246][ T9460] macsec2: entered promiscuous mode [ 363.455475][ T9460] macsec2: entered allmulticast mode [ 363.645707][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.743853][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 363.746653][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 363.795582][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 363.798131][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 364.004885][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 364.006871][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 364.064873][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 364.067029][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 364.210048][ T5985] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 364.311176][ T9541] __nla_validate_parse: 4 callbacks suppressed [ 364.311188][ T9541] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1269'. [ 364.423620][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 364.515268][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 364.517383][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 364.571174][ T9486] ceph: No mds server is up or the cluster is laggy [ 364.573550][ T9494] ceph: No mds server is up or the cluster is laggy [ 364.577676][ T2298] libceph: connect (1)[c::]:6789 error -101 [ 364.579600][ T2298] libceph: mon0 (1)[c::]:6789 connect error [ 364.622149][ T9586] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 364.633180][ T5995] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 364.689845][ T9600] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 364.692924][ T9600] ALSA: mixer_oss: invalid index 1374389 [ 364.723173][ T9609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1299'. [ 364.730859][ T9609] bond0: entered promiscuous mode [ 364.732482][ T9609] bond_slave_0: entered promiscuous mode [ 364.734389][ T9609] bond_slave_1: entered promiscuous mode [ 364.738490][ T9609] syz_tun: entered promiscuous mode [ 364.741295][ T9609] gretap0: entered promiscuous mode [ 364.743493][ T9609] debugfs: 'hsr1' already exists in 'hsr' [ 364.746899][ T9609] Cannot create hsr debugfs directory [ 364.752224][ T9609] hsr1: entered promiscuous mode [ 364.778263][ T5985] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 364.784403][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 364.791083][ T9619] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 364.804802][ T9627] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 364.870538][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 364.873714][ T9638] syzkaller0: entered promiscuous mode [ 364.886014][ T9638] syzkaller0: entered allmulticast mode [ 364.888646][ T7486] syzkaller0: tun_net_xmit 48 [ 364.908771][ T5995] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 365.075443][ T9671] kernel profiling enabled (shift: 63) [ 365.079768][ T9671] profiling shift: 63 too large [ 365.845260][ T9654] macvtap0: entered allmulticast mode [ 365.847347][ T9654] veth0_macvtap: entered allmulticast mode [ 365.850533][ T9665] vlan0: entered promiscuous mode [ 365.857266][ T9665] team0: Port device vlan0 added [ 365.909518][ T5995] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 366.173245][ T9707] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 366.175786][ T9707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1337'. [ 366.178459][ T9707] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 366.180600][ T9707] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 366.182853][ T9707] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 366.880994][ T40] kauditd_printk_skb: 915 callbacks suppressed [ 366.881007][ T40] audit: type=1400 audit(1770654995.242:2977): avc: denied { create } for pid=9779 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 366.889171][ T9780] pim6reg1: entered allmulticast mode [ 366.894683][ T40] audit: type=1400 audit(1770654995.242:2978): avc: denied { create } for pid=9779 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 366.901166][ T40] audit: type=1400 audit(1770654995.242:2979): avc: denied { map_create } for pid=9779 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 366.907113][ T40] audit: type=1400 audit(1770654995.242:2980): avc: denied { read } for pid=9779 comm="syz.1.1368" dev="nsfs" ino=4026532881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 366.909520][ T9783] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 366.914010][ T40] audit: type=1400 audit(1770654995.242:2981): avc: denied { execmem } for pid=9779 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 366.922337][ T40] audit: type=1400 audit(1770654995.252:2982): avc: denied { read write } for pid=5987 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 366.929699][ T40] audit: type=1400 audit(1770654995.292:2983): avc: denied { read write } for pid=5988 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 366.940089][ T40] audit: type=1400 audit(1770654995.302:2984): avc: denied { read } for pid=9784 comm="syz.2.1371" dev="nsfs" ino=4026533035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 366.961245][ T9783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.963774][ T40] audit: type=1400 audit(1770654995.322:2985): avc: denied { prog_load } for pid=9784 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 366.969990][ T40] audit: type=1400 audit(1770654995.332:2986): avc: denied { create } for pid=9784 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 366.981884][ T9787] vlan2: entered promiscuous mode [ 366.983661][ T9787] bond2: entered promiscuous mode [ 366.985790][ T9787] vlan2: entered allmulticast mode [ 366.987607][ T9787] bond2: entered allmulticast mode [ 366.990211][ T9783] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9783 comm=syz.3.1370 [ 367.001684][ T9787] bond2: (slave bridge4): making interface the new active one [ 367.003942][ T9787] bridge4: entered promiscuous mode [ 367.006930][ T9787] bridge4: entered allmulticast mode [ 367.009126][ T9787] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 367.042368][ T9794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 367.044424][ T9794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 367.048251][ T9794] vhci_hcd vhci_hcd.0: Device attached [ 367.051094][ T9795] vhci_hcd: unknown pdu 2 [ 367.052575][ T13] vhci_hcd vhci_hcd.1: stop threads [ 367.054265][ T13] vhci_hcd vhci_hcd.1: release socket [ 367.056559][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 367.553803][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 367.556705][ T9817] netlink: 'syz.0.1381': attribute type 21 has an invalid length. [ 367.656009][ T5995] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 367.659339][ T5995] CPU: 2 UID: 0 PID: 5995 Comm: kworker/u33:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.659359][ T5995] Tainted: [L]=SOFTLOCKUP [ 367.659363][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 367.659370][ T5995] Workqueue: hci0 hci_rx_work [ 367.659411][ T5995] Call Trace: [ 367.659415][ T5995] [ 367.659421][ T5995] dump_stack_lvl+0x100/0x190 [ 367.659438][ T5995] sysfs_warn_dup.cold+0x1c/0x28 [ 367.659455][ T5995] sysfs_create_dir_ns+0x24b/0x2b0 [ 367.659474][ T5995] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 367.659489][ T5995] ? find_held_lock+0x2b/0x80 [ 367.659504][ T5995] ? kobject_add_internal+0x25f/0x930 [ 367.659520][ T5995] ? kobject_add_internal+0x25f/0x930 [ 367.659536][ T5995] ? do_raw_spin_unlock+0x145/0x1e0 [ 367.659552][ T5995] kobject_add_internal+0x2c8/0x930 [ 367.659568][ T5995] kobject_add+0x16a/0x1e0 [ 367.659582][ T5995] ? __pfx_kobject_add+0x10/0x10 [ 367.659594][ T5995] ? class_to_subsys+0x10f/0x150 [ 367.659622][ T5995] ? kobject_put+0xb9/0x640 [ 367.659640][ T5995] ? _raw_spin_unlock+0x28/0x50 [ 367.659655][ T5995] device_add+0x294/0x1950 [ 367.659669][ T5995] ? __pfx_dev_set_name+0x10/0x10 [ 367.659686][ T5995] ? __pfx_device_add+0x10/0x10 [ 367.659700][ T5995] ? mgmt_send_event_skb+0x2fb/0x460 [ 367.659719][ T5995] hci_conn_add_sysfs+0x1a3/0x260 [ 367.659735][ T5995] le_conn_complete_evt+0x11cb/0x1f40 [ 367.659752][ T5995] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 367.659771][ T5995] hci_le_conn_complete_evt+0x23c/0x3a0 [ 367.659784][ T5995] ? skb_pull_data+0x15f/0x1e0 [ 367.659797][ T5995] hci_le_meta_evt+0x34a/0x5f0 [ 367.659811][ T5995] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 367.659826][ T5995] hci_event_packet+0x682/0x11c0 [ 367.659838][ T5995] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 367.659852][ T5995] ? __pfx_hci_event_packet+0x10/0x10 [ 367.659866][ T5995] ? kcov_remote_start+0x374/0x660 [ 367.659882][ T5995] ? lockdep_hardirqs_on+0x78/0x100 [ 367.659898][ T5995] hci_rx_work+0x451/0xfc0 [ 367.659915][ T5995] process_one_work+0x9c2/0x1840 [ 367.659935][ T5995] ? __pfx_process_one_work+0x10/0x10 [ 367.659952][ T5995] ? assign_work+0x19c/0x250 [ 367.659964][ T5995] worker_thread+0x5da/0xe40 [ 367.659981][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 367.659997][ T5995] ? kthread+0x17d/0x730 [ 367.660008][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 367.660019][ T5995] kthread+0x3b3/0x730 [ 367.660047][ T5995] ? __pfx_kthread+0x10/0x10 [ 367.660057][ T5995] ? ret_from_fork+0x79/0xaf0 [ 367.660070][ T5995] ? ret_from_fork+0x79/0xaf0 [ 367.660085][ T5995] ? rcu_is_watching+0x12/0xc0 [ 367.660105][ T5995] ? __pfx_kthread+0x10/0x10 [ 367.660120][ T5995] ret_from_fork+0x754/0xaf0 [ 367.660141][ T5995] ? __pfx_ret_from_fork+0x10/0x10 [ 367.660163][ T5995] ? __switch_to+0x7b9/0x10c0 [ 367.660188][ T5995] ? __pfx_kthread+0x10/0x10 [ 367.660206][ T5995] ret_from_fork_asm+0x1a/0x30 [ 367.660236][ T5995] [ 367.660338][ T5995] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 367.752302][ T5995] Bluetooth: hci0: failed to register connection device [ 367.807277][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 367.810036][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 367.938673][ T7489] Bluetooth: hci4: Frame reassembly failed (-84) [ 368.700620][ T5985] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 368.703519][ T5985] CPU: 3 UID: 0 PID: 5985 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.703539][ T5985] Tainted: [L]=SOFTLOCKUP [ 368.703543][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.703550][ T5985] Workqueue: hci3 hci_rx_work [ 368.703569][ T5985] Call Trace: [ 368.703573][ T5985] [ 368.703578][ T5985] dump_stack_lvl+0x100/0x190 [ 368.703595][ T5985] sysfs_warn_dup.cold+0x1c/0x28 [ 368.703611][ T5985] sysfs_create_dir_ns+0x24b/0x2b0 [ 368.703633][ T5985] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 368.703649][ T5985] ? find_held_lock+0x2b/0x80 [ 368.703664][ T5985] ? kobject_add_internal+0x25f/0x930 [ 368.703680][ T5985] ? kobject_add_internal+0x25f/0x930 [ 368.703696][ T5985] ? do_raw_spin_unlock+0x145/0x1e0 [ 368.703712][ T5985] kobject_add_internal+0x2c8/0x930 [ 368.703728][ T5985] kobject_add+0x16a/0x1e0 [ 368.703742][ T5985] ? __pfx_kobject_add+0x10/0x10 [ 368.703755][ T5985] ? class_to_subsys+0x10f/0x150 [ 368.703773][ T5985] ? kobject_put+0xb9/0x640 [ 368.703785][ T5985] ? _raw_spin_unlock+0x28/0x50 [ 368.703798][ T5985] device_add+0x294/0x1950 [ 368.703812][ T5985] ? __pfx_dev_set_name+0x10/0x10 [ 368.703827][ T5985] ? __pfx_device_add+0x10/0x10 [ 368.703841][ T5985] ? mgmt_send_event_skb+0x2fb/0x460 [ 368.703858][ T5985] hci_conn_add_sysfs+0x1a3/0x260 [ 368.703873][ T5985] le_conn_complete_evt+0x11cb/0x1f40 [ 368.703891][ T5985] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 368.703907][ T5985] hci_le_conn_complete_evt+0x23c/0x3a0 [ 368.703921][ T5985] ? skb_pull_data+0x15f/0x1e0 [ 368.703934][ T5985] hci_le_meta_evt+0x34a/0x5f0 [ 368.703948][ T5985] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 368.703963][ T5985] hci_event_packet+0x682/0x11c0 [ 368.703975][ T5985] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 368.703989][ T5985] ? __pfx_hci_event_packet+0x10/0x10 [ 368.704003][ T5985] ? kcov_remote_start+0x374/0x660 [ 368.704020][ T5985] ? lockdep_hardirqs_on+0x78/0x100 [ 368.704035][ T5985] hci_rx_work+0x451/0xfc0 [ 368.704050][ T5985] process_one_work+0x9c2/0x1840 [ 368.704069][ T5985] ? __pfx_process_one_work+0x10/0x10 [ 368.704085][ T5985] ? assign_work+0x19c/0x250 [ 368.704098][ T5985] worker_thread+0x5da/0xe40 [ 368.704117][ T5985] ? kthread+0x17d/0x730 [ 368.704127][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 368.704139][ T5985] kthread+0x3b3/0x730 [ 368.704151][ T5985] ? __pfx_kthread+0x10/0x10 [ 368.704161][ T5985] ? ret_from_fork+0x79/0xaf0 [ 368.704173][ T5985] ? ret_from_fork+0x79/0xaf0 [ 368.704186][ T5985] ? rcu_is_watching+0x12/0xc0 [ 368.704200][ T5985] ? __pfx_kthread+0x10/0x10 [ 368.704212][ T5985] ret_from_fork+0x754/0xaf0 [ 368.704225][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 368.704239][ T5985] ? __switch_to+0x7b9/0x10c0 [ 368.704254][ T5985] ? __pfx_kthread+0x10/0x10 [ 368.704266][ T5985] ret_from_fork_asm+0x1a/0x30 [ 368.704284][ T5985] [ 368.704298][ T5985] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 368.796269][ T5985] Bluetooth: hci3: failed to register connection device [ 368.970294][ T5985] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 368.973380][ T5985] CPU: 2 UID: 0 PID: 5985 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.973400][ T5985] Tainted: [L]=SOFTLOCKUP [ 368.973404][ T5985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.973412][ T5985] Workqueue: hci1 hci_rx_work [ 368.973429][ T5985] Call Trace: [ 368.973433][ T5985] [ 368.973438][ T5985] dump_stack_lvl+0x100/0x190 [ 368.973455][ T5985] sysfs_warn_dup.cold+0x1c/0x28 [ 368.973471][ T5985] sysfs_create_dir_ns+0x24b/0x2b0 [ 368.973489][ T5985] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 368.973505][ T5985] ? find_held_lock+0x2b/0x80 [ 368.973520][ T5985] ? kobject_add_internal+0x25f/0x930 [ 368.973563][ T5985] ? kobject_add_internal+0x25f/0x930 [ 368.973579][ T5985] ? do_raw_spin_unlock+0x145/0x1e0 [ 368.973595][ T5985] kobject_add_internal+0x2c8/0x930 [ 368.973623][ T5985] kobject_add+0x16a/0x1e0 [ 368.973640][ T5985] ? __pfx_kobject_add+0x10/0x10 [ 368.973654][ T5985] ? class_to_subsys+0x10f/0x150 [ 368.973671][ T5985] ? kobject_put+0xb9/0x640 [ 368.973683][ T5985] ? _raw_spin_unlock+0x28/0x50 [ 368.973696][ T5985] device_add+0x294/0x1950 [ 368.973709][ T5985] ? __pfx_dev_set_name+0x10/0x10 [ 368.973725][ T5985] ? __pfx_device_add+0x10/0x10 [ 368.973738][ T5985] ? mgmt_send_event_skb+0x2fb/0x460 [ 368.973755][ T5985] hci_conn_add_sysfs+0x1a3/0x260 [ 368.973771][ T5985] le_conn_complete_evt+0x11cb/0x1f40 [ 368.973788][ T5985] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 368.973804][ T5985] hci_le_conn_complete_evt+0x23c/0x3a0 [ 368.973818][ T5985] ? skb_pull_data+0x15f/0x1e0 [ 368.973832][ T5985] hci_le_meta_evt+0x34a/0x5f0 [ 368.973845][ T5985] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 368.973860][ T5985] hci_event_packet+0x682/0x11c0 [ 368.973873][ T5985] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 368.973887][ T5985] ? __pfx_hci_event_packet+0x10/0x10 [ 368.973901][ T5985] ? kcov_remote_start+0x374/0x660 [ 368.973917][ T5985] ? lockdep_hardirqs_on+0x78/0x100 [ 368.973932][ T5985] hci_rx_work+0x451/0xfc0 [ 368.973947][ T5985] process_one_work+0x9c2/0x1840 [ 368.973967][ T5985] ? __pfx_process_one_work+0x10/0x10 [ 368.973984][ T5985] ? assign_work+0x19c/0x250 [ 368.973997][ T5985] worker_thread+0x5da/0xe40 [ 368.974016][ T5985] ? kthread+0x17d/0x730 [ 368.974026][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 368.974038][ T5985] kthread+0x3b3/0x730 [ 368.974049][ T5985] ? __pfx_kthread+0x10/0x10 [ 368.974060][ T5985] ? ret_from_fork+0x79/0xaf0 [ 368.974072][ T5985] ? ret_from_fork+0x79/0xaf0 [ 368.974084][ T5985] ? rcu_is_watching+0x12/0xc0 [ 368.974098][ T5985] ? __pfx_kthread+0x10/0x10 [ 368.974111][ T5985] ret_from_fork+0x754/0xaf0 [ 368.974123][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 368.974137][ T5985] ? __switch_to+0x7b9/0x10c0 [ 368.974152][ T5985] ? __pfx_kthread+0x10/0x10 [ 368.974164][ T5985] ret_from_fork_asm+0x1a/0x30 [ 368.974182][ T5985] [ 368.974257][ T5985] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 369.027814][ T9948] vlan0: entered promiscuous mode [ 369.029789][ T5985] Bluetooth: hci1: failed to register connection device [ 369.170992][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 369.174778][ T9972] netlink: 'syz.3.1441': attribute type 7 has an invalid length. [ 369.178020][ T9972] netlink: 'syz.3.1441': attribute type 13 has an invalid length. [ 369.442694][T10013] netlink: 'syz.2.1454': attribute type 21 has an invalid length. [ 369.445817][T10013] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.448379][T10013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.451635][T10013] IPv6: NLM_F_CREATE should be set when creating new route [ 369.454301][T10013] IPv6: NLM_F_CREATE should be set when creating new route [ 369.457310][T10013] IPv6: NLM_F_CREATE should be set when creating new route [ 369.492572][T10021] __nla_validate_parse: 1 callbacks suppressed [ 369.492589][T10021] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1457'. [ 369.658547][T10048] capability: warning: `syz.3.1469' uses 32-bit capabilities (legacy support in use) [ 369.754900][T10062] netlink: 'syz.3.1475': attribute type 12 has an invalid length. [ 369.757393][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 369.761321][T10062] netlink: 'syz.3.1475': attribute type 12 has an invalid length. [ 369.764356][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 369.908879][T10084] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 369.915607][T10084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.918482][T10084] batadv0: entered promiscuous mode [ 369.920680][T10084] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 369.966218][ T5995] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 370.085789][T10111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1492'. [ 370.374573][T10138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10138 comm=syz.2.1502 [ 370.428197][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.430726][T10140] bridge0: port 1(1¾x9ÿ) entered disabled state [ 370.439152][T10140] team_slave_0: left promiscuous mode [ 370.441090][T10140] team_slave_1: left promiscuous mode [ 370.494357][T10140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.499968][T10140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.516097][T10140] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 370.518332][T10140] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 370.522288][T10140] vlan0: left promiscuous mode [ 370.602703][T10140] geneve2: left promiscuous mode [ 370.616656][T10140] geneve3: left promiscuous mode [ 370.618557][T10140] geneve3: left allmulticast mode [ 370.627563][ T1146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.634578][ T1146] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.637284][ T1146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.637624][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1513'. [ 370.640029][ T1146] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.662548][ T1146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.666023][ T1146] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.670593][ T1146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.673575][ T1146] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.680220][T10164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10164 comm=syz.1.1513 [ 370.685736][T10164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10164 comm=syz.1.1513 [ 370.727077][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 370.730624][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 370.742872][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 370.744915][ T7483] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.748611][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 370.758261][ T7483] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.761487][ T7483] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.764952][ T7483] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.788234][T10189] xt_TCPMSS: Only works on TCP SYN packets [ 370.844651][ T5985] Bluetooth: hci3: command 0x0406 tx timeout [ 370.904861][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 370.907620][T10215] netlink: 'syz.2.1534': attribute type 11 has an invalid length. [ 371.094832][ T5985] Bluetooth: hci1: command 0x0406 tx timeout [ 371.152703][T10259] bond6: ARP target 4.0.0.0 is already present [ 371.155600][T10259] bond6: option arp_ip_target: invalid value (4) [ 371.158759][T10259] bond6 (unregistering): Released all slaves [ 371.351860][T10290] validate_nla: 1 callbacks suppressed [ 371.351872][T10290] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 371.365729][T10290] 8021q: adding VLAN 0 to HW filter on device bond4 [ 371.446590][T10290] bond4: (slave batadv1): Opening slave failed [ 371.476699][ T5294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:32' [ 371.484801][ T5294] CPU: 0 UID: 0 PID: 5294 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.484828][ T5294] Tainted: [L]=SOFTLOCKUP [ 371.484832][ T5294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 371.484841][ T5294] Workqueue: hci0 hci_rx_work [ 371.484857][ T5294] Call Trace: [ 371.484861][ T5294] [ 371.484866][ T5294] dump_stack_lvl+0x100/0x190 [ 371.484883][ T5294] sysfs_warn_dup.cold+0x1c/0x28 [ 371.484899][ T5294] sysfs_create_dir_ns+0x24b/0x2b0 [ 371.484917][ T5294] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 371.484933][ T5294] ? find_held_lock+0x2b/0x80 [ 371.484948][ T5294] ? kobject_add_internal+0x25f/0x930 [ 371.484963][ T5294] ? kobject_add_internal+0x25f/0x930 [ 371.484979][ T5294] ? do_raw_spin_unlock+0x145/0x1e0 [ 371.484994][ T5294] kobject_add_internal+0x2c8/0x930 [ 371.485010][ T5294] kobject_add+0x16a/0x1e0 [ 371.485024][ T5294] ? __pfx_kobject_add+0x10/0x10 [ 371.485037][ T5294] ? class_to_subsys+0x10f/0x150 [ 371.485053][ T5294] ? kobject_put+0xb9/0x640 [ 371.485065][ T5294] ? _raw_spin_unlock+0x28/0x50 [ 371.485080][ T5294] device_add+0x294/0x1950 [ 371.485093][ T5294] ? __pfx_dev_set_name+0x10/0x10 [ 371.485109][ T5294] ? __pfx_device_add+0x10/0x10 [ 371.485122][ T5294] ? mgmt_send_event_skb+0x2fb/0x460 [ 371.485139][ T5294] hci_conn_add_sysfs+0x1a3/0x260 [ 371.485154][ T5294] le_conn_complete_evt+0x11cb/0x1f40 [ 371.485171][ T5294] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 371.485187][ T5294] hci_le_conn_complete_evt+0x23c/0x3a0 [ 371.485200][ T5294] ? skb_pull_data+0x15f/0x1e0 [ 371.485213][ T5294] hci_le_meta_evt+0x34a/0x5f0 [ 371.485227][ T5294] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 371.485242][ T5294] hci_event_packet+0x682/0x11c0 [ 371.485255][ T5294] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 371.485269][ T5294] ? __pfx_hci_event_packet+0x10/0x10 [ 371.485283][ T5294] ? kcov_remote_start+0x374/0x660 [ 371.485299][ T5294] ? lockdep_hardirqs_on+0x78/0x100 [ 371.485314][ T5294] hci_rx_work+0x451/0xfc0 [ 371.485329][ T5294] process_one_work+0x9c2/0x1840 [ 371.485348][ T5294] ? __pfx_process_one_work+0x10/0x10 [ 371.485365][ T5294] ? assign_work+0x19c/0x250 [ 371.485377][ T5294] worker_thread+0x5da/0xe40 [ 371.485394][ T5294] ? __pfx_worker_thread+0x10/0x10 [ 371.485407][ T5294] ? kthread+0x17d/0x730 [ 371.485417][ T5294] ? __pfx_worker_thread+0x10/0x10 [ 371.485429][ T5294] kthread+0x3b3/0x730 [ 371.485441][ T5294] ? __pfx_kthread+0x10/0x10 [ 371.485451][ T5294] ? ret_from_fork+0x79/0xaf0 [ 371.485464][ T5294] ? ret_from_fork+0x79/0xaf0 [ 371.485476][ T5294] ? rcu_is_watching+0x12/0xc0 [ 371.485490][ T5294] ? __pfx_kthread+0x10/0x10 [ 371.485531][ T5294] ret_from_fork+0x754/0xaf0 [ 371.485555][ T5294] ? __pfx_ret_from_fork+0x10/0x10 [ 371.485575][ T5294] ? __switch_to+0x7b9/0x10c0 [ 371.485591][ T5294] ? __pfx_kthread+0x10/0x10 [ 371.485604][ T5294] ret_from_fork_asm+0x1a/0x30 [ 371.485625][ T5294] [ 371.485648][ T5294] kobject: kobject_add_internal failed for hci0:32 with -EEXIST, don't try to register things with the same name in the same directory. [ 371.606834][ T5294] Bluetooth: hci0: failed to register connection device [ 371.808516][T10327] bond5: entered promiscuous mode [ 371.810336][T10327] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.822172][T10327] bond5: (slave sit1): refused to change device type [ 371.885071][ T40] kauditd_printk_skb: 911 callbacks suppressed [ 371.885083][ T40] audit: type=1400 audit(1770655000.252:3898): avc: denied { create } for pid=10334 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 371.896411][ T40] audit: type=1400 audit(1770655000.252:3899): avc: denied { create } for pid=10334 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 371.907137][ T40] audit: type=1400 audit(1770655000.252:3900): avc: denied { create } for pid=10334 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 371.916831][ T40] audit: type=1400 audit(1770655000.262:3901): avc: denied { read write } for pid=5980 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.925586][ T40] audit: type=1400 audit(1770655000.282:3902): avc: denied { read write } for pid=10338 comm="syz.1.1575" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.934852][ T40] audit: type=1400 audit(1770655000.292:3903): avc: denied { read write } for pid=10338 comm="syz.1.1575" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.945255][ T40] audit: type=1400 audit(1770655000.312:3904): avc: denied { read write } for pid=5987 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.952747][ T40] audit: type=1400 audit(1770655000.312:3905): avc: denied { read write } for pid=5980 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.964960][ T40] audit: type=1400 audit(1770655000.312:3906): avc: denied { prog_load } for pid=10334 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.971651][ T40] audit: type=1400 audit(1770655000.312:3907): avc: denied { create } for pid=10334 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 371.974658][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.013614][T10345] bridge5: entered promiscuous mode [ 372.020511][T10345] bridge5: entered allmulticast mode [ 372.026068][T10345] team0: Port device bridge5 added [ 372.069923][T10347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10347 comm=syz.1.1578 [ 372.742796][T10353] IPVS: length: 18 != 8 [ 372.751366][T10355] netlink: 'syz.2.1580': attribute type 32 has an invalid length. [ 372.788933][T10355] bond3: Setting coupled_control to off (0) [ 372.924634][ T5294] Bluetooth: hci3: command 0x0406 tx timeout [ 373.046896][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.053632][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.072117][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.078739][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.114121][T10384] veth0_macvtap: left allmulticast mode [ 373.157993][ T7483] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.163328][ T7483] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.171365][ T7483] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.174687][ T7483] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.174790][ T5985] Bluetooth: hci1: command 0x0406 tx timeout [ 373.177886][ T7483] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.182698][ T7483] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.185808][ T7483] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.188678][ T7483] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 373.237476][T10405] bridge3: entered promiscuous mode [ 373.382315][ T5985] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 373.475960][T10429] netlink: 'syz.1.1610': attribute type 7 has an invalid length. [ 373.478470][T10429] netlink: 'syz.1.1610': attribute type 8 has an invalid length. [ 373.968729][T10463] team0 (unregistering): Port device team_slave_0 removed [ 373.972241][T10463] team0 (unregistering): Port device team_slave_1 removed [ 374.250022][T10490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10490 comm=syz.1.1636 [ 374.680339][T10527] syzkaller0: entered promiscuous mode [ 374.682101][T10527] syzkaller0: entered allmulticast mode [ 375.004649][ T5985] Bluetooth: hci3: command 0x0406 tx timeout [ 375.116196][T10562] __nla_validate_parse: 77 callbacks suppressed [ 375.116208][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'. [ 375.136494][T10562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.561611][T10584] xt_bpf: check failed: parse error [ 376.057431][T10596] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 376.353018][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 376.426216][T10618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10618 comm=syz.1.1681 [ 376.465593][T10624] kAFS: unable to lookup cell '(,c¾ûL' [ 376.465738][T10625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1683'. [ 376.467868][T10624] kAFS: unable to lookup cell '(,c¾ûL' [ 376.591827][T10644] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 376.894652][ T40] kauditd_printk_skb: 35197 callbacks suppressed [ 376.894665][ T40] audit: type=1400 audit(1770655005.262:37935): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.902013][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.903128][ T40] audit: type=1400 audit(1770655005.262:37936): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.907029][ T5645] audit: audit_lost=391 audit_rate_limit=0 audit_backlog_limit=64 [ 376.915123][ T5645] audit: backlog limit exceeded [ 376.915208][ T40] audit: type=1400 audit(1770655005.262:37937): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.916845][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.923129][ T40] audit: type=1400 audit(1770655005.262:37938): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.923157][ T40] audit: type=1400 audit(1770655005.262:37939): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.925443][ T5645] audit: audit_lost=392 audit_rate_limit=0 audit_backlog_limit=64 [ 377.084640][ T5294] Bluetooth: hci3: command 0x0406 tx timeout [ 377.551403][T10712] trusted_key: encrypted_key: insufficient parameters specified [ 377.559649][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 377.780894][T10725] netlink: 57 bytes leftover after parsing attributes in process `syz.2.1726'. [ 378.100820][T10735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.119028][T10735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.573921][T10761] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 378.592218][T10761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 378.807010][T10796] netlink: 'syz.3.1754': attribute type 4 has an invalid length. [ 379.163734][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 379.402973][T10850] veth5: entered allmulticast mode [ 380.002423][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 380.008594][T10899] veth0_to_team: entered promiscuous mode [ 380.011420][T10899] veth0_to_team: left promiscuous mode [ 380.018934][T10901] netlink: 'syz.3.1794': attribute type 21 has an invalid length. [ 380.021648][T10901] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1794'. [ 380.290821][T10921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10921 comm=syz.2.1802 [ 380.294875][T10922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10922 comm=syz.2.1802 [ 380.367101][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 380.422663][T10933] netlink: 'syz.3.1805': attribute type 1 has an invalid length. [ 380.827604][T10960] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 380.951492][T10977] binfmt_misc: register: failed to install interpreter file ./file1 [ 380.958308][T10977] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 380.965745][T10977] team0: Port device dummy0 added [ 380.970048][T10977] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 380.979624][T10977] team0: Port device dummy0 removed [ 380.985020][T10977] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 381.628980][T11008] xt_CT: No such helper "pptp" [ 381.656121][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.658639][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.713249][T11006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.738359][T11006] vlan0: left promiscuous mode [ 381.787224][T11006] xfrm1: left promiscuous mode [ 381.800505][T11006] hsr1: left promiscuous mode [ 381.806964][T11006] vlan2: left promiscuous mode [ 381.809053][T11006] bond2: left promiscuous mode [ 381.811187][T11006] bridge4: left promiscuous mode [ 381.821925][T11006] bond5: left promiscuous mode [ 381.827167][T11006] bridge5: left promiscuous mode [ 381.832595][ T1146] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.835539][ T1146] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.838319][ T1146] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.844602][ T1146] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.847283][ T1146] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.849909][ T1146] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.852512][ T1146] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.855380][ T1146] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.891092][T11016] syzkaller0: entered promiscuous mode [ 381.892946][T11016] syzkaller0: entered allmulticast mode [ 381.906614][ T40] kauditd_printk_skb: 33713 callbacks suppressed [ 381.906626][ T40] audit: type=1400 audit(1770655010.262:71481): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.919599][ T40] audit: type=1400 audit(1770655010.272:71482): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.927147][ T40] audit: type=1400 audit(1770655010.272:71483): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.927276][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 381.934154][ T40] audit: type=1400 audit(1770655010.272:71484): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.936064][ T5645] audit: audit_lost=450 audit_rate_limit=0 audit_backlog_limit=64 [ 381.942753][ T40] audit: type=1400 audit(1770655010.272:71485): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.945259][ T5645] audit: backlog limit exceeded [ 381.952156][ T40] audit: type=1400 audit(1770655010.272:71486): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.953813][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 383.195479][T11048] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1846'. [ 383.498053][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.500834][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.759440][T11055] netlink: 'syz.2.1849': attribute type 15 has an invalid length. [ 383.992585][T11079] netlink: 'syz.1.1857': attribute type 27 has an invalid length. [ 384.067846][T11079] bridge_slave_0: left promiscuous mode [ 384.102939][T11079] vlan0: left promiscuous mode [ 384.108745][T11079] ipvlan0: left promiscuous mode [ 384.110419][T11079] ipvlan0: left allmulticast mode [ 384.112023][T11079] veth0_vlan: left allmulticast mode [ 384.143251][T11079] macsec2: left promiscuous mode [ 384.145180][T11079] macsec2: left allmulticast mode [ 384.148887][T11079] veth5: left allmulticast mode [ 384.167840][T11080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.170755][T11080] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.178362][T11080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.185615][ T7489] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.194944][ T7489] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.198680][ T7489] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.203017][ T7489] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.697208][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 384.700432][T11109] netlink: 'syz.1.1868': attribute type 30 has an invalid length. [ 384.708182][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 384.711870][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 384.715707][T11112] netlink: 'syz.3.1865': attribute type 7 has an invalid length. [ 384.718829][T11112] netlink: 'syz.3.1865': attribute type 13 has an invalid length. [ 384.723613][ T60] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.729633][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 384.729899][ T60] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.733037][T11109] netlink: 'syz.1.1868': attribute type 30 has an invalid length. [ 384.736414][ T60] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.742419][ T60] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.839827][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'. [ 384.855934][T11120] bond1: Invalid ad_actor_system MAC address. [ 384.858310][T11120] bond1: option ad_actor_system: invalid value (255) [ 384.861965][T11120] bond1 (unregistering): Released all slaves [ 385.044311][T11130] netlink: 'syz.1.1873': attribute type 15 has an invalid length. [ 385.160196][T11132] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 385.492922][T11139] futex_wake_op: syz.3.1878 tries to shift op by 32; fix this program [ 386.148485][T11192] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 386.167296][T11192] bond6: entered promiscuous mode [ 386.170361][T11192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.175633][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'. [ 386.912011][T11213] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1905'. [ 386.914720][ T40] kauditd_printk_skb: 36410 callbacks suppressed [ 386.914733][ T40] audit: type=1400 audit(1770655015.282:107409): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.924678][ T40] audit: type=1400 audit(1770655015.282:107410): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.931792][T11213] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 386.931995][ T40] audit: type=1400 audit(1770655015.282:107411): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.941474][ T40] audit: type=1400 audit(1770655015.282:107412): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.948825][ T40] audit: type=1400 audit(1770655015.282:107413): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.956069][ T40] audit: type=1400 audit(1770655015.282:107414): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.963002][ T40] audit: type=1400 audit(1770655015.282:107415): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.966054][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.970085][ T40] audit: type=1400 audit(1770655015.282:107416): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.972171][ T5645] audit: audit_lost=614 audit_rate_limit=0 audit_backlog_limit=64 [ 387.337875][T11239] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1913'. [ 387.624491][T11267] netlink: 'syz.3.1924': attribute type 1 has an invalid length. [ 387.627245][T11267] netlink: 'syz.3.1924': attribute type 1 has an invalid length. [ 387.738713][T11275] syzkaller0: entered promiscuous mode [ 387.740717][T11275] syzkaller0: entered allmulticast mode [ 387.988306][T11280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 388.578254][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 389.242916][T11332] syz.3.1948 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 389.592086][ T7438] vivid-002: reconnect [ 389.676833][ T5988] syz_tun (unregistering): left promiscuous mode [ 389.705150][T10911] bond0: (slave syz_tun): Releasing backup interface [ 389.715065][T10911] syz_tun (unregistering): left promiscuous mode [ 390.499173][ T7486] bridge_slave_1: left allmulticast mode [ 390.501187][ T7486] bridge_slave_1: left promiscuous mode [ 390.503820][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.508616][ T7486] ¾x9ÿ: left allmulticast mode [ 390.510207][ T7486] ¾x9ÿ: left promiscuous mode [ 390.512521][ T7486] bridge0: port 1(1¾x9ÿ) entered disabled state [ 390.540425][ T7486] ip6gretap0 (unregistering): left promiscuous mode [ 390.614995][ T7486] gretap0 (unregistering): left promiscuous mode [ 390.899733][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.903502][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.907192][ T7486] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 390.914202][ T7486] bond0 (unregistering): Released all slaves [ 390.918488][ T7486] bond1 (unregistering): Released all slaves [ 390.924410][ T7486] bond2 (unregistering): Released all slaves [ 390.930896][ T7486] bond3 (unregistering): Released all slaves [ 390.993910][ T7486] bond4 (unregistering): Released all slaves [ 391.053152][ T7486] bond5 (unregistering): Released all slaves [ 391.119053][ T7486] bond6 (unregistering): Released all slaves [ 391.401438][ T7486] hsr_slave_0: left promiscuous mode [ 391.403608][ T7486] hsr_slave_1: left promiscuous mode [ 391.405683][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.408680][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.638973][ T7486] team0 (unregistering): Port device team_slave_1 removed [ 391.652899][ T7486] team0 (unregistering): Port device team_slave_0 removed [ 391.926722][ T40] kauditd_printk_skb: 43614 callbacks suppressed [ 391.926734][ T40] audit: type=1400 audit(1770655020.292:149431): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.932456][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.935506][ T40] audit: type=1400 audit(1770655020.292:149432): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.937508][ T5645] audit: audit_lost=1148 audit_rate_limit=0 audit_backlog_limit=64 [ 391.944051][ T40] audit: type=1400 audit(1770655020.292:149433): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.946621][ T5645] audit: backlog limit exceeded [ 391.953099][ T40] audit: type=1400 audit(1770655020.292:149434): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.955099][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.961513][ T40] audit: type=1400 audit(1770655020.292:149435): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.967661][ T5645] audit: audit_lost=1149 audit_rate_limit=0 audit_backlog_limit=64 [ 392.365885][ T7486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.469098][ T7486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.548512][ T7486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.633015][ T7486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.099127][ T7486] bridge_slave_1: left allmulticast mode [ 393.102142][ T7486] bridge_slave_1: left promiscuous mode [ 393.104802][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.111608][ T7486] bridge_slave_0: left allmulticast mode [ 393.114058][ T7486] bridge_slave_0: left promiscuous mode [ 393.117420][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.736928][ T7486] bond0 (unregistering): Released all slaves [ 393.824143][ T7486] gretap0 (unregistering): left promiscuous mode [ 394.041611][ T7486] bond1 (unregistering): (slave bridge2): Releasing active interface [ 394.044216][ T7486] bond1 (unregistering): (slave bridge2): the permanent HWaddr of slave - 9a:39:ad:43:7c:79 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 394.203862][ T7486] bond1 (unregistering): (slave bridge3): Releasing active interface [ 394.284270][ T7486] bond2 (unregistering): (slave bridge4): Releasing active interface [ 394.287794][ T7486] bridge4 (unregistering): left allmulticast mode [ 394.401636][ T7486] team0: Port device bridge5 removed [ 394.466451][ T7486] bond0 (unregistering): left promiscuous mode [ 394.468977][ T7486] bond_slave_0: left promiscuous mode [ 394.471348][ T7486] bond_slave_1: left promiscuous mode [ 394.473160][ T7486] batadv0: left promiscuous mode [ 394.482871][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.488860][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.492917][ T7486] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 394.496263][ T7486] bond0 (unregistering): Released all slaves [ 394.500509][ T7486] bond1 (unregistering): Released all slaves [ 394.565967][ T7486] bond2 (unregistering): Released all slaves [ 394.571851][ T7486] bond3 (unregistering): Released all slaves [ 394.634958][ T7486] bond4 (unregistering): Released all slaves [ 394.700194][ T7486] bond5 (unregistering): Released all slaves [ 395.309869][ T7486] hsr_slave_0: left promiscuous mode [ 395.312158][ T7486] hsr_slave_1: left promiscuous mode [ 395.314173][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.445732][ T7486] team0 (unregistering): Port device vlan0 removed [ 396.001133][ T7486] team0 (unregistering): Port device team_slave_1 removed [ 396.023277][ T7486] team0 (unregistering): Port device team_slave_0 removed [ 396.934540][ T40] kauditd_printk_skb: 46886 callbacks suppressed [ 396.934553][ T40] audit: type=1400 audit(1770655025.292:194593): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.943129][ T40] audit: type=1400 audit(1770655025.302:194594): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.949823][ T40] audit: type=1400 audit(1770655025.302:194595): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.949927][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.956393][ T40] audit: type=1400 audit(1770655025.302:194596): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.956420][ T40] audit: type=1400 audit(1770655025.302:194597): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.956441][ T40] audit: type=1400 audit(1770655025.302:194598): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.956462][ T40] audit: type=1400 audit(1770655025.302:194599): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.956482][ T40] audit: type=1400 audit(1770655025.302:194600): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.956503][ T40] audit: type=1400 audit(1770655025.302:194601): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.944591][ T40] kauditd_printk_skb: 47627 callbacks suppressed [ 401.944605][ T40] audit: type=1400 audit(1770655030.302:241942): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.953361][ T40] audit: type=1400 audit(1770655030.312:241943): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.959941][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 401.960206][ T40] audit: type=1400 audit(1770655030.312:241944): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.962260][ T5645] audit: audit_lost=1822 audit_rate_limit=0 audit_backlog_limit=64 [ 401.968940][ T40] audit: type=1400 audit(1770655030.312:241945): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.971578][ T5645] audit: backlog limit exceeded [ 401.978276][ T40] audit: type=1400 audit(1770655030.312:241946): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.978304][ T40] audit: type=1400 audit(1770655030.312:241947): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 401.980608][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 406.954540][ T40] kauditd_printk_skb: 47305 callbacks suppressed [ 406.954554][ T40] audit: type=1400 audit(1770655035.312:289251): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.963451][ T40] audit: type=1400 audit(1770655035.322:289252): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.965735][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 406.970461][ T40] audit: type=1400 audit(1770655035.322:289253): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.973089][ T5645] audit: audit_lost=1824 audit_rate_limit=0 audit_backlog_limit=64 [ 406.979933][ T40] audit: type=1400 audit(1770655035.322:289254): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.982399][ T5645] audit: backlog limit exceeded [ 406.989116][ T40] audit: type=1400 audit(1770655035.322:289255): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 406.991069][ T5645] audit: audit_backlog=65 > audit_backlog_limit=64 [ 406.997386][ T40] audit: type=1400 audit(1770655035.322:289256): avc: denied { read } for pid=5645 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0