last executing test programs: 9.276384126s ago: executing program 4 (id=480): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x0, 0xd, 0x0, 0x0, 0x0, 0xa], 0x2, [0x4, 0x5, 0xfffe, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6662, 0x0, 0xffff], [0x0, 0x7ff]}}}}]}, 0x88}}, 0x20000000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0xffffffffffffffff, r3, 0xffffffffffffff9c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000180)=0x1) 8.601582156s ago: executing program 4 (id=490): r0 = socket(0x18, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) 7.330237094s ago: executing program 4 (id=493): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xfc, 0xeb, 0xe4, 0x40, 0x547, 0x6801, 0x436f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x44, 0x13}}]}}]}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x22100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x3ff, 0x3, 0x2}, 0x10) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) ioctl$EVIOCGREP(r1, 0x80084522, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@setlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x414}}}}}}, @IFLA_MASTER={0x8}, @IFLA_MTU={0x8, 0x4, 0x800}, @IFLA_GROUP={0x8, 0x1b, 0xfff}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x68}}, 0x0) 4.641544059s ago: executing program 4 (id=516): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 4.578146643s ago: executing program 4 (id=518): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="146c", 0x2}], 0x1}}], 0x1, 0x20004000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x20010, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x28004080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000001080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000500)={0xfd, 0x7, 0x2, 0x0}) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000000)) 2.832477414s ago: executing program 1 (id=525): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28}}], 0x1, 0x4000001) 2.634686861s ago: executing program 0 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="200000001814010000000000030000000800010000000000"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000c00000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 2.597474979s ago: executing program 1 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)=0x39a35579) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020000000000feff0000000040000000000058872d091b997545bfd38bfb851b7f82d7946e0591eaae4912903151fc6bf90cbc17f022", @ANYRES32=r3, @ANYBLOB="22003300a094a500ffffffffffff080211000000505050505050d974080084801d000000"], 0x40}}, 0x0) 2.439055441s ago: executing program 0 (id=532): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x40080000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) set_mempolicy_home_node(&(0x7f0000124000/0x2000)=nil, 0x2000, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) utime(0x0, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r3}], 0x1, 0x83a6) fcntl$setpipe(r3, 0x407, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/124, 0x7c) write$char_usb(r3, &(0x7f0000000440)="93", 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) setns(0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) getpeername(r5, 0x0, 0x0) unshare(0x60020e00) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x261200, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x0, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@arp={@local, @local, 0xff, 0xff000000, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x2, 0x5, 0x7, 0x7, 0xfff, 'gretap0\x00', 'hsr0\x00', {}, {}, 0x0, 0x10a}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8de, 0x400}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) 2.430446885s ago: executing program 2 (id=533): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0xc, 0x7}, {}, {0x4, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x9}]}}]}, 0x4c}}, 0x800) 2.337535205s ago: executing program 1 (id=534): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$UHID_CREATE2(r1, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6, 0x9, 0x5, 0x80000000, 0x80, 0xffff, "ec31baeb46f2"}}, 0x11e) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x119) 2.235165988s ago: executing program 0 (id=535): r0 = socket(0x18, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) 2.180313769s ago: executing program 4 (id=536): syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=0x0], 0x0) 2.130937112s ago: executing program 2 (id=537): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000043000900fffffffffddb"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) 2.10801762s ago: executing program 1 (id=538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 2.022826523s ago: executing program 2 (id=539): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 2.007748417s ago: executing program 0 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00=\x00\t'], 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) 2.004882709s ago: executing program 1 (id=541): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001b40)=""/164, 0xa4}, {&(0x7f0000000280)=""/35, 0x23}], 0x2}, 0x23}], 0x2, 0x40000100, 0x0) 1.954220093s ago: executing program 2 (id=542): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0xfffffffc, {"00000000000000000000000000000001"}}}}, 0x118) ioctl$TIOCMBIC(r0, 0x5417, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) accept$phonet_pipe(r3, 0x0, &(0x7f0000000040)=0xfffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40408c5) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x2}, {0x2, 0x1}, {}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x2}], {}, [{0x8, 0x1}]}, 0x64, 0x0) setuid(0xee01) creat(&(0x7f0000000200)='./file0\x00', 0x102) shutdown(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 1.907900648s ago: executing program 0 (id=543): get_mempolicy(0x0, 0xfffffffffffffffe, 0x1ff, &(0x7f0000ffc000/0x2000)=nil, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xd, 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0xdb6d, 0x7ff, 0x7, 0x919}, 0x4c, [0x9, 0x9, 0x5, 0x64ff, 0x3, 0x0, 0x101, 0x481572bf, 0x50, 0x1, 0x8f5, 0x5d02, 0xd, 0x328, 0xe78d, 0x1, 0x310, 0x7fffffff, 0x5, 0x1b7, 0x1ff, 0x8001, 0x8, 0xd, 0x0, 0x0, 0x1, 0x3, 0x9, 0x9, 0x2, 0x2, 0xffffffff, 0xa, 0x36, 0x1, 0x9, 0x0, 0x1, 0x0, 0x80000009, 0x1, 0x5, 0x10, 0x6, 0x8, 0x8, 0x60, 0x3, 0x8000, 0xfffffffe, 0x4, 0x0, 0x800000, 0x3, 0x8, 0x6, 0x5, 0x0, 0x9, 0xffff8000, 0x9, 0x5, 0x101], [0x5b9, 0x11, 0x80, 0x81, 0x0, 0x1, 0x0, 0x9, 0x6, 0x2, 0x4, 0x1, 0x8, 0x0, 0x3, 0x86c0, 0x60000, 0x10000, 0x8, 0x401, 0x1, 0x1, 0x863, 0x848, 0xfffffffb, 0x9, 0xffff7fff, 0xeaf, 0x10, 0x7, 0x1, 0x80, 0x8, 0x1ff, 0x3, 0x9, 0x7f, 0x3, 0x81, 0xc8, 0x1, 0x807, 0x2, 0x1a, 0x149f, 0x5, 0x4, 0x69ee, 0x8, 0xd, 0x0, 0x2, 0x8, 0x8, 0xfffff18e, 0x9, 0x1ed7, 0x1, 0x4, 0x1ff, 0x1, 0xffffffda, 0x0, 0x2], [0xe0d, 0x0, 0xa, 0x8, 0x400, 0xfffffffe, 0x7, 0x8, 0x1, 0x4, 0x3, 0x80000001, 0x411ef906, 0x6, 0xf, 0x3, 0x20000, 0x3, 0xe, 0xffff, 0x6, 0x7, 0x3ff, 0x7, 0x3, 0x4, 0xb, 0x9, 0x1, 0x1, 0x1e6, 0x1, 0x4, 0x62d7, 0x5, 0x77f1c688, 0x5, 0x1, 0x6, 0xffffffff, 0x40, 0x9, 0x2, 0x7, 0xc, 0x8, 0x8df1, 0xfff, 0x4, 0x3, 0x7, 0xa, 0x9, 0x1, 0x3585, 0x3ff, 0xd088, 0x0, 0x7fff, 0xfffffffb, 0x4, 0x8, 0x1], [0x6, 0x9, 0x8, 0x5, 0x10000, 0x4, 0x4928, 0xffff, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x4, 0x3, 0x7, 0xed, 0x4, 0x7, 0x81, 0x80000000, 0x7, 0x4, 0xbcc, 0x2, 0x70, 0x4, 0x8, 0x8, 0x4, 0x2, 0x0, 0x0, 0x101, 0x83, 0x9, 0x1ff, 0x9, 0x7fff, 0xa, 0x49, 0x8, 0x80000001, 0x2ccc, 0x10001, 0x20c, 0xe, 0x6, 0x6c252734, 0x3, 0x8, 0xf, 0x9, 0x89, 0x0, 0x2, 0x9, 0x7, 0x0, 0x3, 0x0, 0x2, 0x9, 0x2]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x800}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r4, &(0x7f0000000100)}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a00004000090000000000000000000100000004"], 0xab4}}, 0x2000c804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x6a2800, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0) 1.827149269s ago: executing program 1 (id=544): r0 = socket(0x18, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) 1.046374561s ago: executing program 2 (id=545): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7f, @empty, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 1.004985728s ago: executing program 2 (id=546): bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 698.942067ms ago: executing program 0 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, &(0x7f0000000340)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x2000013d, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="001503f7ff00c3924277bbb1f9118b707fc140a0d202af7bd6c167a5fced38b0e7d9e3a197222fd2ff05181229850a24a3ee6cee7f6ba6dc9b13c11e56425a21fbea3142bc81a9b7aeab10b1a5a587d278f46ff83ce0d7282127e22868e09cdf268cd36c93980d0ce07bfcf42dfcf2d8d79d8aa9f8c843b8ddc43effb357ef25a333358b68c6687a4c3d128d634ea0c80e0bbea85dbd5c6ee7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x1, 0x323}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x8184c, 0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) 494.125445ms ago: executing program 3 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, r4, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1000, r4, 0x0, 0x0, 0x3, 0x0, 0x2, r4}]) io_cancel(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f00000000c0)="7c0974d71a3adff17b5d367a047b761ffffd537e8269a723fd39f4457d3f573a2cb2a7ec4b15d47d165734fd6f0f1fe731d78c9577f249f8b7457294d5f3bc03f54ec7d79cd8c4d521ecda9303e38a508b6152b76be3830793279aa6e111f068442b79193085ac138eda1b62fde3d90ab99c04ff", 0x74, 0xfffffffffffff30c, 0x0, 0x1, r1}, &(0x7f0000001280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) mremap(&(0x7f00000b3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000112000/0x1000)=nil) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) 300.501358ms ago: executing program 3 (id=550): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000080)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffff9) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44850) 208.856874ms ago: executing program 3 (id=551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) 122.902814ms ago: executing program 3 (id=552): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 66.338923ms ago: executing program 3 (id=553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x100) syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) 0s ago: executing program 3 (id=554): syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="110000000400000004000000020000000000000097af336507d1a8cdc99d5d3947c7c71a87ae8fe137b245e7b0d31e49ad31d9f0f97769c96b50ded67f88ebed36ba75ed3e4c7da7a6f757024ecff483c55ebea3947c0c8020903ab53e5e817b10a9217359607d952bc3d5680bc395fdc6864b48ed8aa9f791800f9b43637614f19a35336358c799f965d81f37a8501badcd15840ec48c3ccc38346ba72ad6e5a34728b0fea62771a0143527476ee2562db18ae2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000490001002abd7000fcdbdf250a001f00", @ANYRES32=0x0, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x60c8000}, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x2, 0x3ff, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0x7fff, 0x6, 0x7, 0x4, 0xca3, 0x7, 0x80000000, 0xfffffffffffffffe, 0xffffbfffffffffff, 0x9, 0x0, 0x103, 0x4, 0x2, 0x7, 0x3, 0x8, 0x5}) r2 = memfd_secret(0xfffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r0, @ANYBLOB="908a9dec571f976e12840cfe39d393e7886024e588c23edf581dfdd7bf4eed397247182198195bfac981868da9aff8559f22f872a4fe70b14993470b8a17b0e82a6225f9e29afe0f49bfccfaaf336798"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x6, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) socket$inet6_dccp(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x3c6f, &(0x7f0000000480)={0x0, 0x3eb5, 0x2, 0x0, 0x382}, &(0x7f0000000500), &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x700, 0xc7, 0x3, 0xe, {{0xb, 0x4, 0x3, 0x17, 0x2c, 0x65, 0x0, 0x10, 0x4, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x17, 0x39, [@remote, @multicast1, @remote, @private=0xa010101, @private=0xa010100]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000ff7f000000100000a29b5f69688eb650", @ANYRES32=r1, @ANYBLOB="fcfffdff00"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="030000000400"/28], 0x50) clock_gettime(0xfffffffffffffff1, &(0x7f0000000000)) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014870000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 49.779086][ T29] audit: type=1400 audit(1739160225.438:88): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.782132][ T5808] cgroup: Unknown subsys name 'net' [ 49.801887][ T29] audit: type=1400 audit(1739160225.438:89): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.829422][ T29] audit: type=1400 audit(1739160225.468:90): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.956575][ T5808] cgroup: Unknown subsys name 'cpuset' [ 49.963498][ T5808] cgroup: Unknown subsys name 'rlimit' [ 50.070142][ T29] audit: type=1400 audit(1739160225.728:91): avc: denied { setattr } for pid=5808 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.099592][ T29] audit: type=1400 audit(1739160225.728:92): avc: denied { create } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.121462][ T29] audit: type=1400 audit(1739160225.728:93): avc: denied { write } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.145608][ T29] audit: type=1400 audit(1739160225.728:94): avc: denied { read } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.163598][ T5810] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.166184][ T29] audit: type=1400 audit(1739160225.738:95): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.199869][ T29] audit: type=1400 audit(1739160225.738:96): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 50.223429][ T29] audit: type=1400 audit(1739160225.758:97): avc: denied { read } for pid=5490 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.035824][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.949801][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.959134][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.966894][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.975586][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.986936][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.994160][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.003136][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.010600][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.014802][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.018732][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.026571][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.033318][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.039803][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.048070][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.053879][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.060679][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.074326][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.082204][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.090555][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.100491][ T5138] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.102825][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.108054][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.116064][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.124580][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.129350][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.137662][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.143813][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.150112][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.157467][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.170876][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.433172][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 53.473545][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 53.515755][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 53.566779][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.573924][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.582498][ T5821] bridge_slave_0: entered allmulticast mode [ 53.589004][ T5821] bridge_slave_0: entered promiscuous mode [ 53.597688][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.604999][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.612116][ T5821] bridge_slave_1: entered allmulticast mode [ 53.619034][ T5821] bridge_slave_1: entered promiscuous mode [ 53.666970][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.680341][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 53.692638][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.735644][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.742757][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.750301][ T5828] bridge_slave_0: entered allmulticast mode [ 53.758521][ T5828] bridge_slave_0: entered promiscuous mode [ 53.769088][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 53.788855][ T5821] team0: Port device team_slave_0 added [ 53.796070][ T5821] team0: Port device team_slave_1 added [ 53.802300][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.809608][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.816765][ T5828] bridge_slave_1: entered allmulticast mode [ 53.823132][ T5828] bridge_slave_1: entered promiscuous mode [ 53.835602][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.842685][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.849991][ T5833] bridge_slave_0: entered allmulticast mode [ 53.856600][ T5833] bridge_slave_0: entered promiscuous mode [ 53.866688][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.873748][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.881359][ T5833] bridge_slave_1: entered allmulticast mode [ 53.887972][ T5833] bridge_slave_1: entered promiscuous mode [ 53.926977][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.933915][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.959994][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.973342][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.985025][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.022802][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.030202][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.057293][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.079717][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.090235][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.099436][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.106702][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.113828][ T5825] bridge_slave_0: entered allmulticast mode [ 54.120964][ T5825] bridge_slave_0: entered promiscuous mode [ 54.128607][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.135742][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.142853][ T5825] bridge_slave_1: entered allmulticast mode [ 54.149777][ T5825] bridge_slave_1: entered promiscuous mode [ 54.180173][ T5828] team0: Port device team_slave_0 added [ 54.186134][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.193227][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.200618][ T5818] bridge_slave_0: entered allmulticast mode [ 54.207374][ T5818] bridge_slave_0: entered promiscuous mode [ 54.225964][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.237029][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.247029][ T5828] team0: Port device team_slave_1 added [ 54.259131][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.266241][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.273299][ T5818] bridge_slave_1: entered allmulticast mode [ 54.280117][ T5818] bridge_slave_1: entered promiscuous mode [ 54.288172][ T5833] team0: Port device team_slave_0 added [ 54.313366][ T5833] team0: Port device team_slave_1 added [ 54.329657][ T5821] hsr_slave_0: entered promiscuous mode [ 54.335976][ T5821] hsr_slave_1: entered promiscuous mode [ 54.347404][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.354353][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.380515][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.397461][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.408652][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.420073][ T5825] team0: Port device team_slave_0 added [ 54.427710][ T5825] team0: Port device team_slave_1 added [ 54.433707][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.440862][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.466936][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.518672][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.525712][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.551953][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.563526][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.570527][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.596502][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.614974][ T5818] team0: Port device team_slave_0 added [ 54.622682][ T5818] team0: Port device team_slave_1 added [ 54.628938][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.636225][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.662194][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.673348][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.680304][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.706655][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.751640][ T5828] hsr_slave_0: entered promiscuous mode [ 54.757752][ T5828] hsr_slave_1: entered promiscuous mode [ 54.763501][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.771832][ T5828] Cannot create hsr debugfs directory [ 54.789534][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.796551][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.822471][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.834231][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.841303][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.867348][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.925768][ T5825] hsr_slave_0: entered promiscuous mode [ 54.931696][ T5825] hsr_slave_1: entered promiscuous mode [ 54.937849][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.946025][ T5825] Cannot create hsr debugfs directory [ 54.955849][ T5833] hsr_slave_0: entered promiscuous mode [ 54.961689][ T5833] hsr_slave_1: entered promiscuous mode [ 54.967921][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.975641][ T5833] Cannot create hsr debugfs directory [ 55.008567][ T5818] hsr_slave_0: entered promiscuous mode [ 55.014622][ T5818] hsr_slave_1: entered promiscuous mode [ 55.020373][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.028394][ T5818] Cannot create hsr debugfs directory [ 55.125222][ T5832] Bluetooth: hci0: command tx timeout [ 55.203446][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.210236][ T5831] Bluetooth: hci3: command tx timeout [ 55.210434][ T5831] Bluetooth: hci4: command tx timeout [ 55.215884][ T5822] Bluetooth: hci2: command tx timeout [ 55.221451][ T5832] Bluetooth: hci1: command tx timeout [ 55.238999][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.248595][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.261077][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.285304][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.299384][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.311292][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.321754][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.366747][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.376231][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.390714][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.408034][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.447383][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.463424][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.472673][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.490040][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.541704][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.563278][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.572583][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.592113][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.600906][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.616017][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.632621][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.647069][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.664967][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.672280][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.696759][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.704165][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.715952][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.723022][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.739845][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.746955][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.757300][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.804365][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.818851][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.833524][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.860625][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.867734][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.888824][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 55.888838][ T29] audit: type=1400 audit(1739160231.548:111): avc: denied { sys_module } for pid=5821 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.918973][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.948289][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.955409][ T3649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.988533][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.026795][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.033878][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.062525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.069671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.100716][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.128080][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.139700][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.159898][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.173126][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.198883][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.205983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.228539][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.248798][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.255865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.282263][ T5828] veth0_vlan: entered promiscuous mode [ 56.321541][ T5821] veth0_vlan: entered promiscuous mode [ 56.348768][ T5828] veth1_vlan: entered promiscuous mode [ 56.360337][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.373262][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.422873][ T5828] veth0_macvtap: entered promiscuous mode [ 56.439317][ T5821] veth1_vlan: entered promiscuous mode [ 56.450176][ T5828] veth1_macvtap: entered promiscuous mode [ 56.459576][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.492642][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.508372][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.523650][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.551395][ T5821] veth0_macvtap: entered promiscuous mode [ 56.560255][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.571365][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.592887][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.602432][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.629021][ T5821] veth1_macvtap: entered promiscuous mode [ 56.656203][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.670335][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.682237][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.694036][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.723528][ T5833] veth0_vlan: entered promiscuous mode [ 56.742464][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.759721][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.772366][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.800680][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.810266][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.819416][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.828240][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.854790][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.862728][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.872703][ T5818] veth0_vlan: entered promiscuous mode [ 56.885703][ T5833] veth1_vlan: entered promiscuous mode [ 56.910704][ T5818] veth1_vlan: entered promiscuous mode [ 56.921218][ T5825] veth0_vlan: entered promiscuous mode [ 56.940958][ T5825] veth1_vlan: entered promiscuous mode [ 56.975460][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.983312][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.991983][ T5833] veth0_macvtap: entered promiscuous mode [ 57.003335][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.018609][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.040205][ T5833] veth1_macvtap: entered promiscuous mode [ 57.047466][ T5825] veth0_macvtap: entered promiscuous mode [ 57.054392][ T5818] veth0_macvtap: entered promiscuous mode [ 57.063002][ T29] audit: type=1400 audit(1739160232.718:112): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.4u6QNk/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.076492][ T5818] veth1_macvtap: entered promiscuous mode [ 57.097951][ T29] audit: type=1400 audit(1739160232.718:113): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.105134][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.129892][ T5825] veth1_macvtap: entered promiscuous mode [ 57.135863][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.149906][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.164581][ T29] audit: type=1400 audit(1739160232.718:114): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.4u6QNk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.167976][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.192336][ T29] audit: type=1400 audit(1739160232.718:115): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.205124][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.232990][ T29] audit: type=1400 audit(1739160232.718:116): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.4u6QNk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.236686][ T5832] Bluetooth: hci0: command tx timeout [ 57.261512][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.265468][ T29] audit: type=1400 audit(1739160232.718:117): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/root/syzkaller.4u6QNk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.282376][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.304081][ T5832] Bluetooth: hci2: command tx timeout [ 57.314522][ T5822] Bluetooth: hci3: command tx timeout [ 57.315367][ T5832] Bluetooth: hci1: command tx timeout [ 57.320650][ T5822] Bluetooth: hci4: command tx timeout [ 57.326160][ T29] audit: type=1400 audit(1739160232.718:118): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.352356][ T29] audit: type=1400 audit(1739160232.788:119): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 57.376979][ T29] audit: type=1400 audit(1739160232.788:120): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="gadgetfs" ino=6785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.387877][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.416398][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.426402][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.436955][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.447481][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.458894][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.471070][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.471951][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.500627][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.511541][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.522657][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.534589][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.545729][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.555834][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.570714][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.580770][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.591612][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.601781][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.615158][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.625825][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.634990][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.643702][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.653193][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.662029][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.692065][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.705800][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.731439][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.741918][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.846554][ T5902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.990730][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.006494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.108872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.116322][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.186800][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.202753][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.231522][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.250486][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.262361][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.273002][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.285682][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.323437][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.341239][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.351774][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.367091][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.407707][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.418815][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.431882][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.442369][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.453062][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.489479][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.498427][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.507293][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.517479][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.595464][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.603287][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.614590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.623677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 58.686797][ T5915] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8'. [ 58.697068][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.697086][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.784167][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.797508][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.822158][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.834250][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.857571][ T5921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10'. [ 58.896625][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.913201][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.997827][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.013522][ T5927] syz.0.1 (5927): /proc/5926/oom_adj is deprecated, please use /proc/5926/oom_score_adj instead. [ 59.033904][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.075803][ T5927] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.150005][ T5927] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1'. [ 59.165805][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 59.354117][ T5822] Bluetooth: hci0: command tx timeout [ 59.364819][ T5822] Bluetooth: hci1: command tx timeout [ 59.370935][ T5822] Bluetooth: hci3: command tx timeout [ 59.376624][ T5832] Bluetooth: hci2: command tx timeout [ 59.382654][ T5832] Bluetooth: hci4: command tx timeout [ 61.271258][ T5863] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 61.368105][ T5824] Bluetooth: hci0: command tx timeout [ 61.382454][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 61.382467][ T29] audit: type=1400 audit(1739160237.038:313): avc: denied { block_suspend } for pid=5938 comm="syz.4.5" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.445816][ T5824] Bluetooth: hci3: command tx timeout [ 61.451579][ T5822] Bluetooth: hci4: command tx timeout [ 61.458812][ T5832] Bluetooth: hci2: command tx timeout [ 61.458826][ T5831] Bluetooth: hci1: command tx timeout [ 61.531319][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.574815][ T29] audit: type=1400 audit(1739160237.158:314): avc: denied { create } for pid=5948 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.592451][ T5951] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 61.598424][ T29] audit: type=1400 audit(1739160237.178:315): avc: denied { connect } for pid=5947 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.625169][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 61.634643][ T29] audit: type=1400 audit(1739160237.238:316): avc: denied { bind } for pid=5948 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.662679][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 61.692437][ T29] audit: type=1400 audit(1739160237.238:317): avc: denied { accept } for pid=5948 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.703643][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 61.745804][ T29] audit: type=1400 audit(1739160237.238:318): avc: denied { write } for pid=5948 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.759542][ T5863] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 61.775047][ T5863] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 61.783091][ T5863] usb 4-1: Manufacturer: syz [ 61.816862][ T5863] usb 4-1: config 0 descriptor?? [ 61.825712][ T29] audit: type=1400 audit(1739160237.318:319): avc: denied { shutdown } for pid=5947 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.861419][ T29] audit: type=1400 audit(1739160237.348:320): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2733 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.886426][ T29] audit: type=1400 audit(1739160237.348:321): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2733 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.160976][ T29] audit: type=1400 audit(1739160237.348:322): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2733 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.211502][ T5863] rc_core: IR keymap rc-hauppauge not found [ 62.239340][ T5863] Registered IR keymap rc-empty [ 62.264757][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 62.299874][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 62.404707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.543939][ T5961] netlink: 'syz.3.16': attribute type 4 has an invalid length. [ 62.635452][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 62.680369][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 62.794691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.804881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.847209][ T5969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29200 sclass=netlink_route_socket pid=5969 comm=syz.0.15 [ 62.869920][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 62.966590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.473345][ T5964] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 63.513992][ T5961] syz.3.16 (5961) used greatest stack depth: 21472 bytes left [ 63.566358][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.595967][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.655004][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.695629][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.717658][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.769711][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.796778][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.817791][ T5984] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 63.829116][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.831407][ T5868] IPVS: starting estimator thread 0... [ 63.888811][ T5863] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 63.914830][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.916255][ T5863] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 63.950987][ T5863] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 63.974652][ T5985] IPVS: using max 28 ests per chain, 67200 per kthread [ 64.006665][ T5863] usb 4-1: USB disconnect, device number 2 [ 64.044852][ T57] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.138365][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 64.178948][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 64.188306][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.207113][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.210101][ T9] usb 5-1: Product: syz [ 64.224522][ T57] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.232804][ T9] usb 5-1: Manufacturer: syz [ 64.249130][ T9] usb 5-1: SerialNumber: syz [ 64.250151][ T57] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 64.264407][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.264985][ T9] usb 5-1: config 0 descriptor?? [ 64.277218][ T57] usb 3-1: config 0 descriptor?? [ 64.356068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 64.616932][ T9] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 64.624605][ T5863] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 64.731486][ T57] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.740531][ T57] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 64.789098][ T5863] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 64.799530][ T57] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input7 [ 64.844642][ T5863] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 64.898289][ T5863] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 64.946428][ T57] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 64.989078][ T5863] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 65.002980][ T9] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 65.032522][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 65.056141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.059220][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 65.064944][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 65.165066][ T5863] usb 4-1: string descriptor 0 read error: -22 [ 65.190054][ T5863] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 65.233800][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.279414][ T9] usb 5-1: USB disconnect, device number 2 [ 65.283541][ T5863] usb 4-1: config 0 descriptor?? [ 65.327249][ T5990] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 65.352818][ T5863] hub 4-1:0.0: bad descriptor, ignoring hub [ 65.433967][ T5863] hub 4-1:0.0: probe with driver hub failed with error -5 [ 65.477129][ T5863] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 65.509312][ T6004] netlink: 'syz.2.21': attribute type 3 has an invalid length. [ 66.494601][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 67.302457][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 67.302474][ T29] audit: type=1400 audit(1739160242.108:350): avc: denied { map_read map_write } for pid=6020 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 67.603580][ T8] usb 4-1: USB disconnect, device number 3 [ 67.869202][ T9] usb 3-1: USB disconnect, device number 2 [ 67.921025][ T29] audit: type=1400 audit(1739160243.578:351): avc: denied { ioctl } for pid=6035 comm="syz.3.38" path="socket:[9363]" dev="sockfs" ino=9363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.023798][ T6036] warning: `syz.1.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.103258][ T29] audit: type=1400 audit(1739160243.738:352): avc: denied { read } for pid=6042 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.242661][ T29] audit: type=1400 audit(1739160243.898:353): avc: denied { name_connect } for pid=6048 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 68.271273][ T29] audit: type=1400 audit(1739160243.928:354): avc: denied { listen } for pid=6048 comm="syz.1.44" lport=56291 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.770155][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.794588][ T29] audit: type=1400 audit(1739160244.038:355): avc: denied { accept } for pid=6048 comm="syz.1.44" lport=56291 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.794847][ T5863] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.994509][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 69.007045][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.018271][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.028247][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 69.031048][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 69.045723][ T6068] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.049090][ T5863] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 69.057625][ T29] audit: type=1400 audit(1739160244.708:356): avc: denied { create } for pid=6066 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.094591][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.115327][ T8] usb 4-1: config 0 descriptor?? [ 69.119836][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.154228][ T29] audit: type=1400 audit(1739160244.758:357): avc: denied { setopt } for pid=6066 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.166150][ T5863] usb 2-1: config 0 has no interface number 0 [ 69.209046][ T5863] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 69.224178][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.231569][ T29] audit: type=1400 audit(1739160244.888:358): avc: denied { create } for pid=6071 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.252684][ T5863] usb 2-1: Product: syz [ 69.257470][ T29] audit: type=1400 audit(1739160244.918:359): avc: denied { read } for pid=6071 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.262606][ T5863] usb 2-1: Manufacturer: syz [ 69.304547][ T5863] usb 2-1: SerialNumber: syz [ 69.313311][ T5863] usb 2-1: config 0 descriptor?? [ 69.320557][ T5863] usb 2-1: Found UVC 0.00 device syz (046c:14e8) [ 69.335141][ T5863] usb 2-1: No valid video chain found. [ 69.556371][ T8] kye 0003:0458:5016.0002: control desc unexpectedly large [ 69.635262][ T8] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0002/input/input9 [ 69.657084][ T57] usb 2-1: USB disconnect, device number 2 [ 69.742268][ T8] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0002/input/input10 [ 69.753516][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 69.832787][ T8] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 69.907134][ T8] usb 4-1: USB disconnect, device number 4 [ 70.188609][ T6107] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET) [ 70.227804][ T8] hid-generic 0005:16C0:05E3.0003: item fetching failed at offset 0/1 [ 70.248271][ T8] hid-generic 0005:16C0:05E3.0003: probe with driver hid-generic failed with error -22 [ 70.351275][ T6115] team0: No ports can be present during mode change [ 70.924611][ T6157] Zero length message leads to an empty skb [ 71.054917][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.061732][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.233984][ T6175] ip6erspan0: entered promiscuous mode [ 71.325465][ T6181] ip6_vti0: Master is either lo or non-ether device [ 71.345758][ T6183] netlink: 'syz.3.100': attribute type 12 has an invalid length. [ 71.353521][ T6183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.100'. [ 71.410031][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 71.521847][ T6196] delete_channel: no stack [ 71.923336][ T6210] syz.0.112 (6210) used greatest stack depth: 18448 bytes left [ 71.985882][ T6224] netlink: 68 bytes leftover after parsing attributes in process `syz.4.117'. [ 72.328782][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 72.328795][ T29] audit: type=1400 audit(1739160247.988:402): avc: denied { read } for pid=6247 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.390520][ T29] audit: type=1400 audit(1739160248.048:403): avc: denied { write } for pid=6254 comm="syz.0.133" lport=38057 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 72.623446][ T29] audit: type=1400 audit(1739160248.278:404): avc: denied { setopt } for pid=6266 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.679658][ T29] audit: type=1400 audit(1739160248.338:405): avc: denied { setopt } for pid=6271 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.725117][ T29] audit: type=1400 audit(1739160248.338:406): avc: denied { write } for pid=6271 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.784910][ T29] audit: type=1400 audit(1739160248.368:407): avc: denied { name_bind } for pid=6266 comm="syz.4.138" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.805855][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.872242][ T29] audit: type=1400 audit(1739160248.528:408): avc: denied { connect } for pid=6284 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.906575][ T29] audit: type=1400 audit(1739160248.558:409): avc: denied { write } for pid=6284 comm="syz.3.145" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.990963][ T29] audit: type=1400 audit(1739160248.558:410): avc: denied { ioctl } for pid=6284 comm="syz.3.145" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.047572][ T29] audit: type=1400 audit(1739160248.618:411): avc: denied { create } for pid=6286 comm="syz.4.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.023326][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 74.077728][ T6319] netlink: 596 bytes leftover after parsing attributes in process `syz.2.158'. [ 74.180812][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 74.393758][ T6341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6341 comm=syz.0.170 [ 74.458703][ T6345] block nbd2: not configured, cannot reconfigure [ 74.668658][ T6362] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 74.750339][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.183'. [ 74.768834][ T6369] netlink: 'syz.4.183': attribute type 7 has an invalid length. [ 74.778381][ T6369] netlink: 'syz.4.183': attribute type 8 has an invalid length. [ 74.790404][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 74.828904][ T6369] erspan0: entered promiscuous mode [ 74.853342][ T6369] batadv_slave_1: entered promiscuous mode [ 74.878206][ T6369] gretap0: entered promiscuous mode [ 75.693265][ T6439] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 75.714679][ T6433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.741969][ T6443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.789280][ T6439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.839420][ T6445] bond1: (slave gretap1): making interface the new active one [ 75.854984][ T6445] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 75.881784][ T6433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.001814][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 76.067417][ T6433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.171673][ T971] cfg80211: failed to load regulatory.db [ 76.180381][ T6433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.328845][ T6433] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.343147][ T6433] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356938][ T6433] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.371537][ T6433] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.500756][ T6487] lo: entered allmulticast mode [ 76.508161][ T6487] tunl0: entered allmulticast mode [ 76.520447][ T6487] gre0: entered allmulticast mode [ 76.572702][ T6487] gretap0: entered allmulticast mode [ 76.580883][ T6487] erspan0: entered allmulticast mode [ 76.588136][ T6487] ip_vti0: entered allmulticast mode [ 76.595074][ T6487] ip6_vti0: entered allmulticast mode [ 76.602368][ T6487] sit0: entered allmulticast mode [ 76.610070][ T6487] ip6tnl0: entered allmulticast mode [ 76.617375][ T6487] ip6gre0: entered allmulticast mode [ 76.633972][ T6487] syz_tun: entered allmulticast mode [ 76.649997][ T6487] ip6gretap0: entered allmulticast mode [ 76.675375][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.683486][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.714982][ T6487] bridge0: entered allmulticast mode [ 76.723197][ T6487] vcan0: entered allmulticast mode [ 76.740071][ T6487] bond0: entered allmulticast mode [ 76.755491][ T6487] bond_slave_0: entered allmulticast mode [ 76.761252][ T6487] bond_slave_1: entered allmulticast mode [ 76.771528][ T6487] team0: entered allmulticast mode [ 76.777078][ T6487] team_slave_0: entered allmulticast mode [ 76.783037][ T6487] team_slave_1: entered allmulticast mode [ 76.809426][ T6487] dummy0: entered allmulticast mode [ 76.816667][ T6487] nlmon0: entered allmulticast mode [ 76.822706][ T6487] caif0: entered allmulticast mode [ 76.828480][ T6487] batadv0: entered allmulticast mode [ 76.836142][ T6487] vxcan0: entered allmulticast mode [ 76.841868][ T6487] vxcan1: entered allmulticast mode [ 76.850234][ T6487] veth0: entered allmulticast mode [ 76.858699][ T6487] veth1: entered allmulticast mode [ 76.878172][ T6487] wg0: entered allmulticast mode [ 76.889164][ T6487] wg1: entered allmulticast mode [ 76.908838][ T6487] wg2: entered allmulticast mode [ 76.918562][ T6487] veth0_to_bridge: entered allmulticast mode [ 76.932126][ T6487] veth1_to_bridge: entered allmulticast mode [ 76.947802][ T6487] veth0_to_bond: entered allmulticast mode [ 76.957580][ T6487] veth1_to_bond: entered allmulticast mode [ 76.967692][ T6487] veth0_to_team: entered allmulticast mode [ 76.978779][ T6487] veth1_to_team: entered allmulticast mode [ 76.988252][ T6487] veth0_to_batadv: entered allmulticast mode [ 76.995399][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.003070][ T6487] batadv_slave_0: entered allmulticast mode [ 77.011687][ T6487] veth1_to_batadv: entered allmulticast mode [ 77.019496][ T6487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.027720][ T6487] batadv_slave_1: entered allmulticast mode [ 77.035109][ T6487] xfrm0: entered allmulticast mode [ 77.041969][ T6487] veth0_to_hsr: entered allmulticast mode [ 77.049529][ T6487] hsr_slave_0: entered allmulticast mode [ 77.057062][ T6487] veth1_to_hsr: entered allmulticast mode [ 77.063941][ T6487] hsr_slave_1: entered allmulticast mode [ 77.071801][ T6487] hsr0: entered allmulticast mode [ 77.078526][ T6487] veth1_virt_wifi: entered allmulticast mode [ 77.087030][ T6487] veth0_virt_wifi: entered allmulticast mode [ 77.093933][ T6487] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 77.101573][ T6487] veth1_vlan: entered allmulticast mode [ 77.108840][ T6487] veth0_vlan: entered allmulticast mode [ 77.118937][ T6487] vlan0: entered allmulticast mode [ 77.124130][ T6487] vlan1: entered allmulticast mode [ 77.133300][ T6487] macvlan0: entered allmulticast mode [ 77.140304][ T6487] macvlan1: entered allmulticast mode [ 77.147452][ T6487] ipvlan0: entered allmulticast mode [ 77.152812][ T6487] ipvlan1: entered allmulticast mode [ 77.159676][ T6487] veth1_macvtap: entered allmulticast mode [ 77.167616][ T6487] veth0_macvtap: entered allmulticast mode [ 77.175895][ T6487] macvtap0: entered allmulticast mode [ 77.182648][ T6487] macsec0: entered allmulticast mode [ 77.193022][ T6487] geneve0: entered allmulticast mode [ 77.199815][ T6487] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.208698][ T6487] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.217053][ T6487] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.225407][ T6487] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.233870][ T6487] geneve1: entered allmulticast mode [ 77.247736][ T6487] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 77.260262][ T6487] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 77.270097][ T6487] bond1: entered allmulticast mode [ 77.275584][ T6487] netdevsim netdevsim0 eth0: entered allmulticast mode [ 77.282503][ T6487] netdevsim netdevsim0 eth1: entered allmulticast mode [ 77.289605][ T6487] netdevsim netdevsim0 eth2: entered allmulticast mode [ 77.296621][ T6487] netdevsim netdevsim0 eth3: entered allmulticast mode [ 77.513775][ T6517] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 77.614280][ T6518] netlink: 112 bytes leftover after parsing attributes in process `syz.4.241'. [ 77.813695][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 77.813708][ T29] audit: type=1400 audit(1739160253.468:428): avc: denied { ioctl } for pid=6519 comm="syz.0.242" path="socket:[10709]" dev="sockfs" ino=10709 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.869026][ T29] audit: type=1400 audit(1739160253.518:429): avc: denied { relabelfrom } for pid=6519 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.894535][ T29] audit: type=1400 audit(1739160253.518:430): avc: denied { relabelto } for pid=6519 comm="syz.0.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 78.107050][ T29] audit: type=1400 audit(1739160253.768:431): avc: denied { read } for pid=6535 comm="syz.4.248" dev="sockfs" ino=11569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.422025][ T6537] syz.3.247: attempt to access beyond end of device [ 78.422025][ T6537] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 78.440489][ T29] audit: type=1400 audit(1739160254.058:432): avc: denied { mounton } for pid=6533 comm="syz.3.247" path="/37/file1" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.469761][ T6537] syz.3.247: attempt to access beyond end of device [ 78.469761][ T6537] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 78.497772][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 78.520504][ T6537] syz.3.247: attempt to access beyond end of device [ 78.520504][ T6537] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 78.547926][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 78.557800][ T6537] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 78.565767][ T6537] UDF-fs: Scanning with blocksize 512 failed [ 78.599699][ T6537] syz.3.247: attempt to access beyond end of device [ 78.599699][ T6537] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 78.652634][ T6537] syz.3.247: attempt to access beyond end of device [ 78.652634][ T6537] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 78.696167][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 78.773921][ T6537] syz.3.247: attempt to access beyond end of device [ 78.773921][ T6537] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 78.791352][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 78.801827][ T6537] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 78.811591][ T6537] UDF-fs: Scanning with blocksize 1024 failed [ 78.818729][ T6537] syz.3.247: attempt to access beyond end of device [ 78.818729][ T6537] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 78.835387][ T6537] syz.3.247: attempt to access beyond end of device [ 78.835387][ T6537] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 78.860969][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 78.893210][ T6537] syz.3.247: attempt to access beyond end of device [ 78.893210][ T6537] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 78.923041][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 78.951884][ T6537] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 78.965528][ T6537] UDF-fs: Scanning with blocksize 2048 failed [ 78.986051][ T6537] syz.3.247: attempt to access beyond end of device [ 78.986051][ T6537] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 79.003584][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 79.020994][ T6537] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 79.030706][ T6537] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 79.038374][ T6537] UDF-fs: Scanning with blocksize 4096 failed [ 79.045950][ T6537] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 79.105778][ T117] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.255734][ T117] usb 3-1: Using ep0 maxpacket: 16 [ 79.273265][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.284326][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.308410][ T117] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 79.321664][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.337663][ T117] usb 3-1: config 0 descriptor?? [ 79.757461][ T117] kye 0003:0458:5016.0004: control desc unexpectedly large [ 79.779792][ T117] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0004/input/input12 [ 79.875826][ T117] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0004/input/input13 [ 79.916337][ T29] audit: type=1400 audit(1739160255.578:433): avc: denied { append } for pid=6553 comm="syz.0.253" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.967315][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 80.014790][ T117] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 80.114561][ T5868] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.157531][ T117] usb 3-1: USB disconnect, device number 3 [ 80.444834][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 80.458269][ T5868] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 80.496805][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.505114][ T6564] netlink: 'syz.4.256': attribute type 4 has an invalid length. [ 80.564981][ T5868] usb 2-1: config 0 descriptor?? [ 81.032838][ T6577] ======================================================= [ 81.032838][ T6577] WARNING: The mand mount option has been deprecated and [ 81.032838][ T6577] and is ignored by this kernel. Remove the mand [ 81.032838][ T6577] option from the mount to silence this warning. [ 81.032838][ T6577] ======================================================= [ 81.103265][ T29] audit: type=1400 audit(1739160256.688:434): avc: denied { mount } for pid=6569 comm="syz.4.258" name="/" dev="configfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.342902][ T29] audit: type=1400 audit(1739160256.748:435): avc: denied { accept } for pid=6569 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.374326][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 81.434036][ T29] audit: type=1400 audit(1739160257.088:436): avc: denied { write } for pid=6582 comm="syz.3.261" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.667175][ T29] audit: type=1400 audit(1739160257.318:437): avc: denied { setattr } for pid=6551 comm="syz.1.252" name="ALG" dev="sockfs" ino=11633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.015248][ T5868] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 83.629635][ T5868] asix 2-1:0.0: probe with driver asix failed with error -71 [ 83.719276][ T5868] usb 2-1: USB disconnect, device number 3 [ 84.208552][ T6615] FAULT_INJECTION: forcing a failure. [ 84.208552][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.222225][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.1.269 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 84.222246][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.222255][ T6615] Call Trace: [ 84.222260][ T6615] [ 84.222266][ T6615] dump_stack_lvl+0x16c/0x1f0 [ 84.222297][ T6615] should_fail_ex+0x50a/0x650 [ 84.222324][ T6615] _copy_from_user+0x2e/0xd0 [ 84.222341][ T6615] get_user_ifreq+0xf1/0x250 [ 84.222365][ T6615] sock_ioctl+0x58c/0x6c0 [ 84.222381][ T6615] ? __pfx_sock_ioctl+0x10/0x10 [ 84.222403][ T6615] ? selinux_file_ioctl+0x180/0x270 [ 84.222426][ T6615] ? selinux_file_ioctl+0xb4/0x270 [ 84.222450][ T6615] ? __pfx_sock_ioctl+0x10/0x10 [ 84.222467][ T6615] __x64_sys_ioctl+0x190/0x200 [ 84.222491][ T6615] do_syscall_64+0xcd/0x250 [ 84.222511][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.222534][ T6615] RIP: 0033:0x7f0eab38cde9 [ 84.222547][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.222561][ T6615] RSP: 002b:00007f0eac121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.222577][ T6615] RAX: ffffffffffffffda RBX: 00007f0eab5a6080 RCX: 00007f0eab38cde9 [ 84.222587][ T6615] RDX: 0000400000000300 RSI: 00000000000089f3 RDI: 0000000000000008 [ 84.222597][ T6615] RBP: 00007f0eac121090 R08: 0000000000000000 R09: 0000000000000000 [ 84.222606][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.222615][ T6615] R13: 0000000000000000 R14: 00007f0eab5a6080 R15: 00007fff737cc938 [ 84.222636][ T6615] [ 84.382354][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.445026][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 84.451605][ T29] audit: type=1400 audit(1739160259.838:440): avc: denied { bind } for pid=6611 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.048736][ T29] audit: type=1400 audit(1739160259.848:441): avc: denied { setopt } for pid=6611 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.067964][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.181536][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 85.605670][ T971] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.884709][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 86.221760][ T971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.235183][ T971] usb 5-1: config 7 has an invalid interface number: 244 but max is 0 [ 86.256206][ T971] usb 5-1: config 7 has no interface number 0 [ 86.279305][ T971] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=2a.4e [ 86.288578][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.296611][ T971] usb 5-1: Product: syz [ 86.304992][ T971] usb 5-1: Manufacturer: syz [ 86.332562][ T971] usb 5-1: SerialNumber: syz [ 86.541095][ T6646] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 86.882319][ T29] audit: type=1400 audit(1739160262.248:442): avc: denied { create } for pid=6644 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 87.009309][ T29] audit: type=1400 audit(1739160262.668:443): avc: denied { read } for pid=6648 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.043104][ T971] mdc800 5-1:7.244: probe fails -> wrong Interface [ 87.054322][ T29] audit: type=1400 audit(1739160262.718:444): avc: denied { read } for pid=6650 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.084813][ T971] usb 5-1: USB disconnect, device number 3 [ 87.097577][ T29] audit: type=1326 audit(1739160262.718:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.1.281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eab38cde9 code=0x0 [ 87.114598][ T5826] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.276011][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.290546][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.305296][ T5826] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 87.324730][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.343283][ T5826] usb 3-1: config 0 descriptor?? [ 87.478769][ T6659] tipc: Started in network mode [ 87.483846][ T6659] tipc: Node identity a2db84caa82d, cluster identity 4711 [ 87.492981][ T6659] tipc: Enabled bearer , priority 0 [ 87.518550][ T6659] syzkaller0: entered promiscuous mode [ 87.524050][ T6659] syzkaller0: entered allmulticast mode [ 87.530141][ T6659] tipc: Resetting bearer [ 87.579754][ T6658] tipc: Resetting bearer [ 87.782873][ T5826] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 87.802063][ T5826] pyra 0003:1E7D:2CF6.0005: unknown main item tag 0x0 [ 87.819730][ T5826] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 87.896511][ T29] audit: type=1400 audit(1739160263.548:446): avc: denied { ioctl } for pid=6666 comm="syz.1.288" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.341713][ T5826] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 88.359629][ T5826] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 88.377713][ T5826] pyra 0003:1E7D:2CF6.0005: probe with driver pyra failed with error -71 [ 88.388267][ T5826] usb 3-1: USB disconnect, device number 4 [ 88.566007][ T5826] tipc: Node number set to 183928010 [ 89.055975][ T6686] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 89.109653][ T6687] netlink: 112 bytes leftover after parsing attributes in process `syz.2.294'. [ 89.484269][ T29] audit: type=1400 audit(1739160265.138:447): avc: denied { connect } for pid=6689 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.793588][ T29] audit: type=1400 audit(1739160265.448:448): avc: denied { write } for pid=6689 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.840104][ T29] audit: type=1400 audit(1739160265.478:449): avc: denied { read } for pid=6689 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.924887][ T6658] tipc: Disabling bearer [ 91.215367][ T29] audit: type=1400 audit(1739160266.878:450): avc: denied { read write } for pid=6695 comm="syz.2.297" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 91.345287][ T29] audit: type=1400 audit(1739160266.878:451): avc: denied { open } for pid=6695 comm="syz.2.297" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 92.774006][ T29] audit: type=1400 audit(1739160268.428:452): avc: denied { ioctl } for pid=6725 comm="syz.2.308" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11857 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.398143][ T6733] syzkaller1: entered promiscuous mode [ 93.403671][ T6733] syzkaller1: entered allmulticast mode [ 93.533546][ T29] audit: type=1400 audit(1739160269.098:453): avc: denied { create } for pid=6746 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 93.683573][ T29] audit: type=1400 audit(1739160269.098:454): avc: denied { ioctl } for pid=6746 comm="syz.4.311" path="socket:[11117]" dev="sockfs" ino=11117 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.304813][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.214949][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.242054][ T5863] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 95.254001][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.262702][ T5863] usb 4-1: Product: syz [ 95.267838][ T5863] usb 4-1: Manufacturer: syz [ 95.336173][ T6766] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 95.347949][ T5863] usb 4-1: SerialNumber: syz [ 95.348905][ T6768] netlink: 112 bytes leftover after parsing attributes in process `syz.4.316'. [ 95.354067][ T5863] usb 4-1: config 0 descriptor?? [ 95.392582][ T5863] vmk80xx 4-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 96.795314][ T5863] usb 4-1: USB disconnect, device number 5 [ 96.894483][ T6794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.322'. [ 96.925340][ T29] audit: type=1400 audit(1739160272.568:455): avc: denied { sqpoll } for pid=6791 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 97.224612][ T5868] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.405416][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 97.412327][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.423493][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.441010][ T5868] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 97.499355][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.524201][ T5868] usb 5-1: config 0 descriptor?? [ 97.868533][ T29] audit: type=1400 audit(1739160273.528:456): avc: denied { ioctl } for pid=6835 comm="syz.0.331" path="socket:[11227]" dev="sockfs" ino=11227 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.949164][ T5868] kye 0003:0458:5016.0006: control desc unexpectedly large [ 97.959399][ T5868] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0006/input/input16 [ 98.674246][ T5868] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0006/input/input17 [ 98.677337][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 98.806793][ T6845] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 98.814680][ T6845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 98.824261][ T6845] bridge0: port 3(batadv0) entered blocking state [ 98.831134][ T6845] bridge0: port 3(batadv0) entered disabled state [ 98.846337][ T6845] batadv0: entered promiscuous mode [ 99.128467][ T5868] kye 0003:0458:5016.0006: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 99.143209][ T5868] usb 5-1: USB disconnect, device number 4 [ 99.215985][ T6849] FAULT_INJECTION: forcing a failure. [ 99.215985][ T6849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.229914][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.3.334 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 99.229936][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 99.229944][ T6849] Call Trace: [ 99.229949][ T6849] [ 99.229954][ T6849] dump_stack_lvl+0x16c/0x1f0 [ 99.229971][ T6849] should_fail_ex+0x50a/0x650 [ 99.229989][ T6849] _copy_to_user+0x32/0xd0 [ 99.230000][ T6849] simple_read_from_buffer+0xd0/0x160 [ 99.230016][ T6849] proc_fail_nth_read+0x198/0x270 [ 99.230030][ T6849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.230044][ T6849] ? rw_verify_area+0xcf/0x680 [ 99.230058][ T6849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.230071][ T6849] vfs_read+0x1df/0xbf0 [ 99.230086][ T6849] ? __fget_files+0x1fc/0x3a0 [ 99.230096][ T6849] ? __pfx___mutex_lock+0x10/0x10 [ 99.230108][ T6849] ? __pfx_vfs_read+0x10/0x10 [ 99.230126][ T6849] ? __fget_files+0x206/0x3a0 [ 99.230138][ T6849] ksys_read+0x12b/0x250 [ 99.230152][ T6849] ? __pfx_ksys_read+0x10/0x10 [ 99.230170][ T6849] do_syscall_64+0xcd/0x250 [ 99.230182][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.230197][ T6849] RIP: 0033:0x7f32fed8b7fc [ 99.230205][ T6849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.230214][ T6849] RSP: 002b:00007f32ffc30030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.230224][ T6849] RAX: ffffffffffffffda RBX: 00007f32fefa6080 RCX: 00007f32fed8b7fc [ 99.230230][ T6849] RDX: 000000000000000f RSI: 00007f32ffc300a0 RDI: 0000000000000006 [ 99.230235][ T6849] RBP: 00007f32ffc30090 R08: 0000000000000000 R09: 0000000000000000 [ 99.230240][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.230245][ T6849] R13: 0000000000000000 R14: 00007f32fefa6080 R15: 00007ffe4a43a648 [ 99.230257][ T6849] [ 99.414975][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.426534][ T6824] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.436064][ T6824] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 99.719312][ T29] audit: type=1400 audit(1739160275.378:457): avc: denied { audit_write } for pid=6854 comm="syz.0.338" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.829341][ T6859] fuse: Bad value for 'rootmode' [ 100.063768][ T29] audit: type=1400 audit(1739160275.508:458): avc: denied { nlmsg_read } for pid=6854 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.534032][ T29] audit: type=1400 audit(1739160277.188:459): avc: denied { setopt } for pid=6886 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.583679][ T29] audit: type=1400 audit(1739160277.198:460): avc: denied { listen } for pid=6886 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.705572][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 101.738292][ T6895] netlink: 'syz.0.352': attribute type 30 has an invalid length. [ 102.477397][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'. [ 102.564899][ T29] audit: type=1400 audit(1739160278.218:461): avc: denied { write } for pid=971 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12406 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.589509][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.799103][ T29] audit: type=1326 audit(1739160278.438:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6880 comm="syz.1.346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0eab38cde9 code=0x0 [ 102.885117][ T6930] fuse: Unknown parameter '0x000000000000000a00000000000000000000' [ 103.680806][ T29] audit: type=1400 audit(1739160279.338:463): avc: denied { map } for pid=6943 comm="syz.4.371" path="socket:[12277]" dev="sockfs" ino=12277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.703967][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.749261][ T6944] Invalid ELF header len 8 [ 103.774397][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.782177][ T6955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.819322][ T29] audit: type=1400 audit(1739160279.338:464): avc: denied { read } for pid=6943 comm="syz.4.371" path="socket:[12277]" dev="sockfs" ino=12277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.885872][ T29] audit: type=1400 audit(1739160279.408:465): avc: denied { module_load } for pid=6943 comm="syz.4.371" path="/82/bus" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 103.908551][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.132166][ T29] audit: type=1400 audit(1739160279.768:466): avc: denied { read } for pid=6952 comm="syz.1.373" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.155516][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.846427][ T29] audit: type=1400 audit(1739160279.768:467): avc: denied { open } for pid=6952 comm="syz.1.373" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.870335][ T29] audit: type=1400 audit(1739160279.768:468): avc: denied { ioctl } for pid=6952 comm="syz.1.373" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.896086][ T29] audit: type=1400 audit(1739160279.928:469): avc: denied { unlink } for pid=6959 comm="syz.0.376" name="#1" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.918998][ T29] audit: type=1400 audit(1739160279.948:470): avc: denied { mount } for pid=6959 comm="syz.0.376" name="/" dev="overlay" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.940778][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.056539][ T6972] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 105.084060][ T6972] team0: Port device dummy0 added [ 105.323559][ T6992] netlink: 'syz.3.390': attribute type 4 has an invalid length. [ 105.668509][ T6996] overlayfs: failed to resolve './file1': -2 [ 105.758046][ T117] hid-generic 0009:0005:80000000.0007: unknown main item tag 0x3 [ 105.779390][ T117] hid-generic 0009:0005:80000000.0007: item fetching failed at offset 3/6 [ 105.815020][ T117] hid-generic 0009:0005:80000000.0007: probe with driver hid-generic failed with error -22 [ 106.055000][ T5863] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.304577][ T117] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 106.874259][ T5863] usb 3-1: too many configurations: 137, using maximum allowed: 8 [ 106.910760][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 106.924527][ T5863] usb 3-1: can't read configurations, error -61 [ 106.945047][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 106.962021][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.976259][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.987818][ T117] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 106.999457][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.025591][ T117] usb 2-1: config 0 descriptor?? [ 107.138011][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 107.164540][ T5863] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 107.316031][ T5863] usb 3-1: too many configurations: 137, using maximum allowed: 8 [ 107.375803][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 107.390897][ T5863] usb 3-1: can't read configurations, error -61 [ 107.439372][ T5863] usb usb3-port1: attempt power cycle [ 107.705200][ T117] kye 0003:0458:5016.0008: control desc unexpectedly large [ 107.723701][ T117] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0008/input/input18 [ 107.872962][ T5863] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.898619][ T5863] usb 3-1: too many configurations: 137, using maximum allowed: 8 [ 107.899799][ T117] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0008/input/input19 [ 107.907321][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 107.987161][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 108.008445][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.060828][ T5863] usb 3-1: can't read configurations, error -61 [ 108.245803][ T5863] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.392865][ T5863] usb 3-1: too many configurations: 137, using maximum allowed: 8 [ 108.421377][ T5863] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 108.432865][ T5863] usb 3-1: can't read configurations, error -61 [ 108.451381][ T117] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 108.453709][ T5863] usb usb3-port1: unable to enumerate USB device [ 108.481551][ T117] usb 2-1: USB disconnect, device number 4 [ 108.758302][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 109.914636][ T117] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 110.036973][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 110.036986][ T29] audit: type=1400 audit(1739160285.698:478): avc: denied { append } for pid=7097 comm="syz.3.427" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.121757][ T7099] FAULT_INJECTION: forcing a failure. [ 110.121757][ T7099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.125455][ T117] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.148036][ T7099] CPU: 1 UID: 0 PID: 7099 Comm: syz.3.427 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 110.148059][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 110.148068][ T7099] Call Trace: [ 110.148073][ T7099] [ 110.148080][ T7099] dump_stack_lvl+0x16c/0x1f0 [ 110.148103][ T7099] should_fail_ex+0x50a/0x650 [ 110.148131][ T7099] _copy_from_user+0x2e/0xd0 [ 110.148147][ T7099] kstrtouint_from_user+0xd7/0x1c0 [ 110.148167][ T7099] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 110.148196][ T7099] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 110.148222][ T7099] proc_fail_nth_write+0x84/0x250 [ 110.148245][ T7099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.148265][ T7099] ? ksys_write+0x12b/0x250 [ 110.148293][ T7099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.148312][ T7099] vfs_write+0x24c/0x1150 [ 110.148334][ T7099] ? __fget_files+0x1fc/0x3a0 [ 110.148347][ T7099] ? __pfx___mutex_lock+0x10/0x10 [ 110.148365][ T7099] ? __pfx_vfs_write+0x10/0x10 [ 110.148397][ T7099] ? __fget_files+0x206/0x3a0 [ 110.148418][ T7099] ksys_write+0x12b/0x250 [ 110.148441][ T7099] ? __pfx_ksys_write+0x10/0x10 [ 110.148473][ T7099] do_syscall_64+0xcd/0x250 [ 110.148493][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.148516][ T7099] RIP: 0033:0x7f32fed8b89f [ 110.148530][ T7099] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 110.148546][ T7099] RSP: 002b:00007f32ffc30030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 110.148560][ T7099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f32fed8b89f [ 110.148571][ T7099] RDX: 0000000000000001 RSI: 00007f32ffc300a0 RDI: 0000000000000004 [ 110.148579][ T7099] RBP: 00007f32ffc30090 R08: 0000000000000000 R09: 0000000000000000 [ 110.148592][ T7099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 110.148604][ T7099] R13: 0000000000000001 R14: 00007f32fefa6080 R15: 00007ffe4a43a648 [ 110.148627][ T7099] [ 110.206674][ T117] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 110.425746][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.433777][ T117] usb 2-1: Product: syz [ 110.438659][ T117] usb 2-1: Manufacturer: syz [ 110.443262][ T117] usb 2-1: SerialNumber: syz [ 110.449491][ T117] usb 2-1: config 0 descriptor?? [ 110.457698][ T117] option 2-1:0.0: GSM modem (1-port) converter detected [ 110.509920][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 110.549261][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 110.615254][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 111.095408][ T7104] netlink: 'syz.2.429': attribute type 30 has an invalid length. [ 111.114272][ T7106] netlink: 'syz.3.430': attribute type 30 has an invalid length. [ 111.151391][ T5863] usb 2-1: USB disconnect, device number 5 [ 111.161451][ T5863] option 2-1:0.0: device disconnected [ 111.867251][ T29] audit: type=1400 audit(1739160287.498:479): avc: denied { read write } for pid=7125 comm="syz.3.439" path="socket:[13611]" dev="sockfs" ino=13611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.387829][ T29] audit: type=1326 audit(1739160288.048:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fed8cde9 code=0x7fc00000 [ 112.507238][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 112.516335][ T29] audit: type=1326 audit(1739160288.048:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32fed8cde9 code=0x7fc00000 [ 112.566422][ T7152] netlink: 'syz.3.449': attribute type 30 has an invalid length. [ 113.194555][ T29] audit: type=1326 audit(1739160288.048:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fed8cde9 code=0x7fc00000 [ 113.275163][ T29] audit: type=1326 audit(1739160288.048:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32fed8cde9 code=0x7fc00000 [ 113.673161][ T29] audit: type=1400 audit(1739160289.328:484): avc: denied { ioctl } for pid=7164 comm="syz.1.455" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.959702][ T117] hid-generic 0009:0005:80000000.0009: unknown main item tag 0x3 [ 113.981607][ T117] hid-generic 0009:0005:80000000.0009: item fetching failed at offset 3/6 [ 114.011736][ T117] hid-generic 0009:0005:80000000.0009: probe with driver hid-generic failed with error -22 [ 114.259789][ T7180] netlink: 80 bytes leftover after parsing attributes in process `syz.0.459'. [ 114.367100][ T7185] syzkaller1: entered promiscuous mode [ 114.375423][ T7185] syzkaller1: entered allmulticast mode [ 115.082031][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 115.091725][ T7193] netlink: 'syz.0.466': attribute type 30 has an invalid length. [ 115.753235][ T29] audit: type=1400 audit(1739160291.398:485): avc: denied { watch watch_reads } for pid=7196 comm="syz.0.468" path="/91" dev="tmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.822719][ T117] hid-generic 0009:0005:80000000.000A: unknown main item tag 0x3 [ 115.836458][ T117] hid-generic 0009:0005:80000000.000A: item fetching failed at offset 3/6 [ 115.854814][ T117] hid-generic 0009:0005:80000000.000A: probe with driver hid-generic failed with error -22 [ 116.195688][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 116.668891][ T29] audit: type=1326 audit(1739160292.328:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd998cde9 code=0x7fc00000 [ 116.710316][ T29] audit: type=1326 audit(1739160292.328:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cd998cde9 code=0x7fc00000 [ 117.047454][ T29] audit: type=1326 audit(1739160292.328:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd998cde9 code=0x7fc00000 [ 117.193363][ T29] audit: type=1326 audit(1739160292.328:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd998cde9 code=0x7fc00000 [ 117.261448][ T29] audit: type=1326 audit(1739160292.328:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7204 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd998cde9 code=0x7fc00000 [ 117.786661][ T7257] overlayfs: failed to resolve './file1': -2 [ 117.886491][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 118.869938][ T7278] bio_check_eod: 2 callbacks suppressed [ 118.869969][ T7278] syz.0.498: attempt to access beyond end of device [ 118.869969][ T7278] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 118.892050][ T7278] syz.0.498: attempt to access beyond end of device [ 118.892050][ T7278] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 118.905231][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.929020][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 118.939342][ T7278] syz.0.498: attempt to access beyond end of device [ 118.939342][ T7278] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 118.955672][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 119.011994][ T7278] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 119.021454][ T7278] UDF-fs: Scanning with blocksize 512 failed [ 119.068132][ T7278] syz.0.498: attempt to access beyond end of device [ 119.068132][ T7278] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 119.083363][ T7278] syz.0.498: attempt to access beyond end of device [ 119.083363][ T7278] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 119.100951][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 119.125243][ T9] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 119.134752][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.143360][ T9] usb 5-1: Product: syz [ 119.151607][ T7278] syz.0.498: attempt to access beyond end of device [ 119.151607][ T7278] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 119.174491][ T9] usb 5-1: Manufacturer: syz [ 119.179305][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 119.184542][ T9] usb 5-1: SerialNumber: syz [ 119.214548][ T9] usb 5-1: config 0 descriptor?? [ 119.214724][ T7278] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 119.237241][ T9] gspca_main: touptek-2.14.0 probing 0547:6801 [ 119.361540][ T7278] UDF-fs: Scanning with blocksize 1024 failed [ 119.376256][ T7278] syz.0.498: attempt to access beyond end of device [ 119.376256][ T7278] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 119.406654][ T7278] syz.0.498: attempt to access beyond end of device [ 119.406654][ T7278] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 119.421772][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 119.447250][ T7278] syz.0.498: attempt to access beyond end of device [ 119.447250][ T7278] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 119.464405][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 119.475311][ T7278] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 119.485117][ T7278] UDF-fs: Scanning with blocksize 2048 failed [ 119.674909][ T117] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.702598][ T7278] syz.0.498: attempt to access beyond end of device [ 119.702598][ T7278] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 119.905147][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 119.929687][ T7278] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 119.969989][ T7278] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 119.989218][ T117] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.004527][ T117] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.017356][ T5863] usb 5-1: USB disconnect, device number 5 [ 120.118048][ T7278] UDF-fs: Scanning with blocksize 4096 failed [ 120.124147][ T7278] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 120.132761][ T117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.146443][ T117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.209934][ T117] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.282984][ T29] audit: type=1400 audit(1739160295.908:491): avc: denied { mounton } for pid=7301 comm="syz.1.506" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 120.680874][ T29] audit: type=1400 audit(1739160295.938:492): avc: denied { ioctl } for pid=7292 comm="syz.2.504" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.683150][ T117] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.714282][ T117] usb 3-1: Product: syz [ 120.719138][ T117] usb 3-1: Manufacturer: syz [ 120.729687][ T117] cdc_wdm 3-1:1.0: skipping garbage [ 120.735360][ T117] cdc_wdm 3-1:1.0: skipping garbage [ 120.752107][ T117] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 120.758180][ T117] cdc_wdm 3-1:1.0: Unknown control protocol [ 120.960590][ T117] usb 3-1: USB disconnect, device number 9 [ 121.141635][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 121.598767][ T29] audit: type=1400 audit(1739160297.258:493): avc: denied { watch } for pid=7326 comm="syz.0.515" path="/100/file0" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.222999][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 122.240841][ T7340] netlink: 'syz.3.519': attribute type 30 has an invalid length. [ 122.325273][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 122.995327][ T117] hid-generic 0009:0005:80000000.000B: unknown main item tag 0x3 [ 123.003213][ T117] hid-generic 0009:0005:80000000.000B: item fetching failed at offset 3/6 [ 123.012400][ T117] hid-generic 0009:0005:80000000.000B: probe with driver hid-generic failed with error -22 [ 123.569495][ T7368] mmap: syz.0.532 (7368): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 123.689158][ T117] hid-generic 0009:0005:80000000.000C: unknown main item tag 0x3 [ 123.729339][ T117] hid-generic 0009:0005:80000000.000C: item fetching failed at offset 3/6 [ 123.748997][ T117] hid-generic 0009:0005:80000000.000C: probe with driver hid-generic failed with error -22 [ 123.834542][ T29] audit: type=1400 audit(1739160299.478:494): avc: denied { read write } for pid=7380 comm="syz.4.536" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.878591][ T29] audit: type=1400 audit(1739160299.478:495): avc: denied { open } for pid=7380 comm="syz.4.536" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.054953][ T5863] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.707853][ T5863] usb 5-1: device descriptor read/64, error -71 [ 124.893960][ T7404] netlink: 2716 bytes leftover after parsing attributes in process `syz.0.543'. [ 125.064586][ T5863] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.195430][ T5863] usb 5-1: device descriptor read/64, error -71 [ 125.266278][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.547'. [ 125.305306][ T5863] usb usb5-port1: attempt power cycle [ 125.596604][ T971] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.658897][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 125.668209][ T5863] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.708563][ T5863] usb 5-1: device descriptor read/8, error -71 [ 125.754981][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 125.779067][ T971] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 125.788550][ T971] usb 1-1: config 0 has no interface number 0 [ 125.798175][ T971] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 125.811572][ T971] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 125.831261][ T971] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 125.841290][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.852497][ T971] usb 1-1: Product: syz [ 125.857565][ T971] usb 1-1: Manufacturer: syz [ 125.862243][ T971] usb 1-1: SerialNumber: syz [ 125.871766][ T971] usb 1-1: config 0 descriptor?? [ 125.954982][ T5863] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.975786][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.554'. [ 125.985599][ T5863] usb 5-1: device descriptor read/8, error -71 [ 125.997619][ T7431] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 230.994398][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 231.001371][ C1] rcu: 0-...!: (1 ticks this GP) idle=cff4/1/0x4000000000000000 softirq=17949/17949 fqs=3 [ 231.012096][ C1] rcu: (detected by 1, t=10502 jiffies, g=13581, q=151 ncpus=2) [ 231.019808][ C1] Sending NMI from CPU 1 to CPUs 0: [ 231.019832][ C0] NMI backtrace for cpu 0 [ 231.019841][ C0] CPU: 0 UID: 0 PID: 7397 Comm: syz.1.544 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 231.019855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.019862][ C0] RIP: 0010:lock_is_held_type+0x54/0x150 [ 231.019881][ C0] Code: 25 ac 74 85 c0 0f 85 ce 00 00 00 65 4c 8b 25 63 73 ad 74 41 8b 94 24 ec 0a 00 00 85 d2 0f 85 b6 00 00 00 48 89 fd 41 89 f6 9c <8f> 04 24 fa 48 c7 c7 e0 ef 6c 8b 45 31 ff e8 09 17 00 00 4d 8d ac [ 231.019892][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00000046 [ 231.019903][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 231.019911][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff888031bee300 [ 231.019919][ C0] RBP: ffff888031bee300 R08: 0000000000000005 R09: 0000000000000000 [ 231.019926][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880323c8000 [ 231.019933][ C0] R13: 00000000ffffffff R14: 00000000ffffffff R15: ffff888035c18000 [ 231.019941][ C0] FS: 0000555593686500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 231.019954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.019963][ C0] CR2: 0000000000000008 CR3: 000000002824a000 CR4: 00000000003526f0 [ 231.019970][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.019977][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.019985][ C0] Call Trace: [ 231.019989][ C0] [ 231.019995][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 231.020014][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 231.020030][ C0] ? nmi_handle+0x1ac/0x5d0 [ 231.020047][ C0] ? lock_is_held_type+0x54/0x150 [ 231.020060][ C0] ? default_do_nmi+0x6a/0x160 [ 231.020075][ C0] ? exc_nmi+0x170/0x1e0 [ 231.020090][ C0] ? end_repeat_nmi+0xf/0x53 [ 231.020110][ C0] ? lock_is_held_type+0x54/0x150 [ 231.020122][ C0] ? lock_is_held_type+0x54/0x150 [ 231.020135][ C0] ? lock_is_held_type+0x54/0x150 [ 231.020147][ C0] [ 231.020150][ C0] [ 231.020156][ C0] advance_sched+0x707/0xc60 [ 231.020174][ C0] ? timerqueue_del+0x83/0x150 [ 231.020190][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 231.020202][ C0] ? __pfx_advance_sched+0x10/0x10 [ 231.020217][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 231.020233][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 231.020244][ C0] ? read_tsc+0x9/0x20 [ 231.020259][ C0] hrtimer_interrupt+0x392/0x8e0 [ 231.020275][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 231.020294][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 231.020311][ C0] [ 231.020315][ C0] [ 231.020319][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.020336][ C0] RIP: 0010:lockdep_unregister_key+0x1b2/0x2b0 [ 231.020350][ C0] Code: 54 fd ff ff 48 89 df e8 9c c3 ff ff 89 c3 e8 05 d9 ff ff 9c 58 f6 c4 02 0f 85 92 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 84 db <75> 4f 5b 5d 41 5c 41 5d 41 5e 41 5f e9 cd 99 0a 00 48 c7 c0 34 69 [ 231.020361][ C0] RSP: 0018:ffffc9000478fa20 EFLAGS: 00000246 [ 231.020370][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 231.020377][ C0] RDX: dffffc0000000000 RSI: ffffffff8b6cefe0 RDI: ffffffff8bd34e00 [ 231.020385][ C0] RBP: ffff88804869c298 R08: ffffffff93884190 R09: 000000000002b408 [ 231.020393][ C0] R10: ffffffff96e9f3ef R11: 0000000000000001 R12: 0000000000000000 [ 231.020400][ C0] R13: 0000000000000246 R14: ffffffff9704fa28 R15: ffff88804869c2a0 [ 231.020413][ C0] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 231.020431][ C0] __qdisc_destroy+0x11a/0x4b0 [ 231.020443][ C0] qdisc_put+0xab/0xe0 [ 231.020454][ C0] shutdown_scheduler_queue+0xa5/0x160 [ 231.020466][ C0] dev_shutdown+0xad/0x430 [ 231.020479][ C0] unregister_netdevice_many_notify+0x9fb/0x1f30 [ 231.020500][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 231.020517][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 231.020532][ C0] ? skb_queue_purge_reason+0x2c3/0x410 [ 231.020550][ C0] ? find_held_lock+0x2d/0x110 [ 231.020563][ C0] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 231.020582][ C0] ? skb_queue_purge_reason+0x2c3/0x410 [ 231.020609][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.020620][ C0] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 231.020639][ C0] unregister_netdevice_queue+0x307/0x3f0 [ 231.020655][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 231.020674][ C0] __tun_detach+0x1241/0x1530 [ 231.020693][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 231.020708][ C0] tun_chr_close+0xc2/0x230 [ 231.020722][ C0] __fput+0x3ff/0xb70 [ 231.020738][ C0] task_work_run+0x14e/0x250 [ 231.020755][ C0] ? __pfx_task_work_run+0x10/0x10 [ 231.020770][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 231.020785][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 231.020798][ C0] do_syscall_64+0xda/0x250 [ 231.020811][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.020826][ C0] RIP: 0033:0x7f0eab38cde9 [ 231.020837][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.020847][ C0] RSP: 002b:00007fff737cca98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 231.020859][ C0] RAX: 0000000000000000 RBX: 000000000001e4db RCX: 00007f0eab38cde9 [ 231.020866][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 231.020873][ C0] RBP: 00007f0eab5a7ba0 R08: 0000000000000001 R09: 0000000d737ccd8f [ 231.020881][ C0] R10: 00007f0eab200000 R11: 0000000000000246 R12: 00007f0eab5a5fac [ 231.020888][ C0] R13: 00007f0eab5a5fa0 R14: ffffffffffffffff R15: 00007fff737ccbb0 [ 231.020900][ C0] [ 231.021826][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g13581 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 231.579721][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 231.589678][ C1] rcu: RCU grace-period kthread stack dump: [ 231.595551][ C1] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 231.609031][ C1] Call Trace: [ 231.612299][ C1] [ 231.615226][ C1] __schedule+0xf43/0x5890 [ 231.619642][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 231.624856][ C1] ? __pfx___schedule+0x10/0x10 [ 231.629706][ C1] ? schedule+0x298/0x350 [ 231.634037][ C1] ? __pfx_lock_release+0x10/0x10 [ 231.639062][ C1] ? lock_acquire+0x2f/0xb0 [ 231.643561][ C1] ? schedule+0x1fd/0x350 [ 231.647895][ C1] schedule+0xe7/0x350 [ 231.651962][ C1] schedule_timeout+0x124/0x280 [ 231.656812][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 231.662186][ C1] ? __pfx_process_timeout+0x10/0x10 [ 231.667466][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 231.673271][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 231.678733][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 231.683497][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 231.688779][ C1] ? rcu_gp_init+0xc82/0x1630 [ 231.693455][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 231.698659][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.704469][ C1] rcu_gp_kthread+0x271/0x380 [ 231.709147][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.714345][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.719537][ C1] ? __kthread_parkme+0x148/0x220 [ 231.724552][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.729749][ C1] kthread+0x3af/0x750 [ 231.733813][ C1] ? __pfx_kthread+0x10/0x10 [ 231.738405][ C1] ? __pfx_kthread+0x10/0x10 [ 231.742992][ C1] ret_from_fork+0x45/0x80 [ 231.747405][ C1] ? __pfx_kthread+0x10/0x10 [ 231.751989][ C1] ret_from_fork_asm+0x1a/0x30 [ 231.756757][ C1] [ 231.759765][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 231.766076][ C1] CPU: 1 UID: 0 PID: 6818 Comm: kworker/u8:27 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 231.776998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.787044][ C1] Workqueue: events_unbound toggle_allocation_gate [ 231.793543][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 231.800212][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 231.819812][ C1] RSP: 0018:ffffc9001046f928 EFLAGS: 00000293 [ 231.825872][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81adcf0a [ 231.833833][ C1] RDX: ffff88807bde4880 RSI: ffffffff81adcee4 RDI: 0000000000000005 [ 231.841800][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 231.849761][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41 [ 231.857722][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 231.865682][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 231.874604][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.881179][ C1] CR2: 0000001b2fa0dff8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 231.889144][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.897104][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.905067][ C1] Call Trace: [ 231.908335][ C1] [ 231.911172][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 231.917492][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 231.922685][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 231.928145][ C1] ? timekeeping_advance+0x72e/0xa90 [ 231.933426][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 231.939054][ C1] ? __asan_memcpy+0x3c/0x60 [ 231.943652][ C1] ? rcu_is_watching+0x12/0xc0 [ 231.948411][ C1] ? update_process_times+0x178/0x2d0 [ 231.953781][ C1] ? __pfx_update_process_times+0x10/0x10 [ 231.959499][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 231.964950][ C1] ? update_wall_time+0x1c/0x40 [ 231.969800][ C1] ? tick_nohz_handler+0x376/0x530 [ 231.974905][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 231.980355][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 231.985726][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 231.991436][ C1] ? read_tsc+0x9/0x20 [ 231.995505][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 232.000618][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 232.006773][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 232.012580][ C1] [ 232.015509][ C1] [ 232.018433][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.024623][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 232.030681][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 232.036739][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 232.042800][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 232.048872][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 232.053892][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 232.058997][ C1] text_poke_bp_batch+0x22b/0x760 [ 232.064020][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 232.069041][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 232.074582][ C1] ? text_poke_queue+0xef/0x180 [ 232.079431][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 232.085676][ C1] text_poke_finish+0x30/0x40 [ 232.090352][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 232.096327][ C1] jump_label_update+0x1d7/0x400 [ 232.101265][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 232.107154][ C1] static_key_enable+0x1a/0x20 [ 232.111943][ C1] toggle_allocation_gate+0xfc/0x260 [ 232.117231][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 232.123119][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 232.128312][ C1] ? process_one_work+0x921/0x1ba0 [ 232.133420][ C1] ? lock_acquire+0x2f/0xb0 [ 232.137920][ C1] ? process_one_work+0x921/0x1ba0 [ 232.143030][ C1] process_one_work+0x9c5/0x1ba0 [ 232.147971][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 232.153607][ C1] ? __pfx_process_one_work+0x10/0x10 [ 232.158982][ C1] ? assign_work+0x1a0/0x250 [ 232.163572][ C1] worker_thread+0x6c8/0xf00 [ 232.168169][ C1] ? __pfx_worker_thread+0x10/0x10 [ 232.173277][ C1] kthread+0x3af/0x750 [ 232.177341][ C1] ? __pfx_kthread+0x10/0x10 [ 232.181925][ C1] ? lock_acquire+0x2f/0xb0 [ 232.186429][ C1] ? __pfx_kthread+0x10/0x10 [ 232.191016][ C1] ret_from_fork+0x45/0x80 [ 232.195429][ C1] ? __pfx_kthread+0x10/0x10 [ 232.200015][ C1] ret_from_fork_asm+0x1a/0x30 [ 232.204782][ C1]