last executing test programs: 1.069491735s ago: executing program 1 (id=612): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLL', 0x3}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}}, 0x0) 1.068448592s ago: executing program 3 (id=613): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) unshare(0x2c040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c000200d6400000000000001c0007800c"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000b4aafb036ebb6d258e0000000000000a6c000000060a0b04000000000000080000000000000004803c0001800b00010065787468647200002c000280080004400000000208000740000000090800064000000001050002000000000008000340000000040900020073797a32000000000900010073797a30000000001400000011000100000000"], 0x94}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') ioctl$NS_GET_PARENT(r4, 0x8004b706, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.068297738s ago: executing program 2 (id=614): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x8010, r0, 0x73c3f000) 1.067257373s ago: executing program 1 (id=615): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getpeername$packet(r0, 0x0, &(0x7f0000000100)) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000000)={@multicast2, @private=0xa010101, 0x1, "fde20560dd0a29cfd09046225a3512711d682c585c0f49f9e3656ef807eba8e9", 0x80000001, 0x8, 0x5, 0x200}, 0x3c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f00000000c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) socket(0x13, 0x0, 0x3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) close(r0) 1.009783042s ago: executing program 2 (id=616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) socket$netlink(0x10, 0x3, 0x14) 1.009588142s ago: executing program 3 (id=617): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$unix(0x1, 0x1, 0x0) 1.008707789s ago: executing program 2 (id=618): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 941.027904ms ago: executing program 3 (id=619): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r2, &(0x7f0000000c80)={0x1d, r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x100000005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 940.770181ms ago: executing program 1 (id=620): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000180)) r9 = socket(0x28, 0x5, 0x0) r10 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r10, 0x47bc, 0xf5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x52}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4600}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x1) 938.051953ms ago: executing program 2 (id=621): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$sequencer(r3, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 849.460475ms ago: executing program 1 (id=622): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x8000, 0x0, 0x0, 0x2, 0x0, @loopback, @loopback}, {0x16, 0x7c, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async, rerun: 32) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12020, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'team_slave_0\x00'}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x10}, &(0x7f0000000040)=0xc) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xfb76, '\x00', 0x0, r5, 0x0, 0x3, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000080)="b9ff03030018698cb89e40f089066000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 791.118297ms ago: executing program 2 (id=623): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x2, 0x0, &(0x7f0000000940)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) ftruncate(r0, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000100)) 790.882285ms ago: executing program 1 (id=624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@loopback}, {@in=@initdev={0xac, 0x1e, 0x80, 0x0}, 0x0, 0x33}, @in=@local, {}, {0xc, 0x402, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000, 0x2, 0x0, 0x0, 0xea}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x40}}, @tfcpad={0x8, 0x16, 0x4000001}]}, 0x144}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) 790.501786ms ago: executing program 2 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0xbbf, 0x74, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 721.001289ms ago: executing program 1 (id=627): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000000)=@sg0, 0xffffffffffffffff, &(0x7f0000000040)) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) close(0x3) 341.357293ms ago: executing program 0 (id=634): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000047c0)={0x34, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x200028c9) 340.909899ms ago: executing program 0 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x0, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000003471d208f24f5a4ac3ee8bcca93416d0100000080000800d05d4ad6ce1259bbd3749cc1c573dfa48f7c74962a0c4c45da95644520b9929edf650185b325a10bc7f89b6006307fec94341fcb2bbd06325fb8b6218222f02c98618a65263fb8238b1f57513ced2be4f2a5d8b99b30b9ac7a19ea49f75d3468164f356f3a3eb25614a80bd19036", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESDEC=r0, @ANYBLOB="00000000000000000000003393df5f5597c9c75df100315b97fb41000500000000000000", @ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000e1ffffff000000000000001c110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="64f3430f0636410f47db430f2059470f005afa66b8cb008ee064660fc73176f066b86f008ee8c46159c6c704c4c26ddcad00400000", 0x35}], 0x1, 0x64, 0x0, 0x0) r7 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) close(r7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000100)="f30fc7b7f7ffff7f6766440f3881120fc73b42d3641f0066b842008ed0f383c10b6567460f2361640fc739c4825596380f77", 0x32}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 160.945186ms ago: executing program 0 (id=636): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0xfff3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x32, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x40040) 159.912296ms ago: executing program 0 (id=637): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090004000000080004"], 0x6c}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 70.5754ms ago: executing program 0 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1, 0xc1cec2645649c048}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="2a000000000000000000000000a4c44d3700000000000000f6040000004270b6edcaf29e32fdcecbe61b24c5765026b34fef9c910127bc24eb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) 69.562367ms ago: executing program 3 (id=639): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000040)="51babf02ffff1c00caece525b8f20c7e9bbf044a22a6e4b807f9084adde97bc2401ee6e0a25656df31e274a241d4d540bd41658c18163ab1b61503b77af1eaabfbad4b18d98ef9ad78313f483471fc0d8add642d266e8acdbe98197583380528b4e41fefc7b670a282c1082c1d4fd6b402d444d7c169b47ee56b7acab4a1baff6aec37662582ad7500cb29da55dbcd7e543513ca689921e9317a2f17a48ca690a64ea8332316e60c8026dc51e0523a6fe66c5e91579d517d8c88688aad25b0b9a877cd336f1fb229661163c78e44be8c8c5bc8f8f0ceb5c1b25bcacbf124f5e71067ace71518") write(r0, &(0x7f0000000140)="05000000010003", 0x7) 69.363979ms ago: executing program 0 (id=640): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x11) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xfc) close(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000000)={0x1d, "67d60edc3620031d451e5aa44d3cdb5637321451672f37163f5c64b821c4b14563"}}) r4 = socket$inet6(0xa, 0x80002, 0x88) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x121080, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000140)) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x10080, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000040000008500000029000000180100002020602500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) 776.858µs ago: executing program 3 (id=641): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x440, 0x0, 0x8}, 0x18) 0s ago: executing program 3 (id=642): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_io_uring_setup(0x1e7, &(0x7f0000000040)={0x0, 0x367, 0x10100, 0x40000000, 0xc9}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xe5, 0x2, 0x6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000140), 0x0, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xec7}]}, 0x28}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_io_uring_setup(0x1e7, &(0x7f0000000040)={0x0, 0x367, 0x10100, 0x40000000, 0xc9}, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000001c0)={0xe5, 0x2, 0x6}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) kernel console output (not intermixed with test programs): [ 44.053854][ T40] audit: type=1400 audit(1770785043.079:61): avc: denied { siginh } for pid=5829 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:52979' (ED25519) to the list of known hosts. [ 46.351678][ T40] audit: type=1400 audit(1770785045.399:62): avc: denied { name_bind } for pid=5848 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.387630][ T40] audit: type=1400 audit(1770785045.439:63): avc: denied { execute } for pid=5849 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.396281][ T40] audit: type=1400 audit(1770785045.439:64): avc: denied { execute_no_trans } for pid=5849 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.679434][ T40] audit: type=1400 audit(1770785047.729:65): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.686655][ T40] audit: type=1400 audit(1770785047.739:66): avc: denied { mount } for pid=5849 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.688490][ T5849] cgroup: Unknown subsys name 'net' [ 48.875424][ T5849] cgroup: Unknown subsys name 'cpuset' [ 48.879792][ T5849] cgroup: Unknown subsys name 'rlimit' [ 49.035593][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 49.035605][ T40] audit: type=1400 audit(1770785048.089:68): avc: denied { setattr } for pid=5849 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.044601][ T40] audit: type=1400 audit(1770785048.089:69): avc: denied { create } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.051248][ T40] audit: type=1400 audit(1770785048.089:70): avc: denied { write } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.065686][ T40] audit: type=1400 audit(1770785048.089:71): avc: denied { read } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.076081][ T40] audit: type=1400 audit(1770785048.099:72): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.085362][ T40] audit: type=1400 audit(1770785048.099:73): avc: denied { mount } for pid=5849 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.094077][ T40] audit: type=1400 audit(1770785048.109:74): avc: denied { read } for pid=5638 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.100608][ T40] audit: type=1400 audit(1770785048.129:75): avc: denied { read } for pid=5638 comm="dhcpcd" name="n102" dev="tmpfs" ino=1964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.103566][ T5909] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.108530][ T40] audit: type=1400 audit(1770785048.129:76): avc: denied { open } for pid=5638 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.119890][ T40] audit: type=1400 audit(1770785048.129:77): avc: denied { getattr } for pid=5638 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 49.843342][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.658097][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.675203][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.679080][ T5930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.682273][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.685324][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.685411][ T5930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.687808][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.691181][ T5930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.692828][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.695468][ T5930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.697181][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.699791][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.700320][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.702219][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.705447][ T5940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.705601][ T5942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.706812][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.709171][ T5940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.716704][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.720735][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.986445][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 54.001404][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 54.053953][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 54.088121][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 54.154813][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.157118][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.159559][ T5926] bridge_slave_0: entered allmulticast mode [ 54.163184][ T5926] bridge_slave_0: entered promiscuous mode [ 54.167505][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.169835][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.172125][ T5926] bridge_slave_1: entered allmulticast mode [ 54.175869][ T5926] bridge_slave_1: entered promiscuous mode [ 54.197775][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.200235][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.202996][ T5925] bridge_slave_0: entered allmulticast mode [ 54.205752][ T5925] bridge_slave_0: entered promiscuous mode [ 54.209267][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.211897][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.214536][ T5925] bridge_slave_1: entered allmulticast mode [ 54.217879][ T5925] bridge_slave_1: entered promiscuous mode [ 54.254431][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.258927][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.290313][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.293170][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.295542][ T5931] bridge_slave_0: entered allmulticast mode [ 54.298314][ T5931] bridge_slave_0: entered promiscuous mode [ 54.315046][ T5926] team0: Port device team_slave_0 added [ 54.318274][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.321335][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.323915][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.326989][ T5931] bridge_slave_1: entered allmulticast mode [ 54.330893][ T5931] bridge_slave_1: entered promiscuous mode [ 54.351165][ T5926] team0: Port device team_slave_1 added [ 54.354215][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.357250][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.359635][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.361983][ T5933] bridge_slave_0: entered allmulticast mode [ 54.364774][ T5933] bridge_slave_0: entered promiscuous mode [ 54.368289][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.370729][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.373264][ T5933] bridge_slave_1: entered allmulticast mode [ 54.375971][ T5933] bridge_slave_1: entered promiscuous mode [ 54.385655][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.400867][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.403525][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.411712][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.430641][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.434339][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.437366][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.448414][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.509054][ T5926] hsr_slave_0: entered promiscuous mode [ 54.513027][ T5926] hsr_slave_1: entered promiscuous mode [ 54.517904][ T5925] team0: Port device team_slave_0 added [ 54.521584][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.537013][ T5925] team0: Port device team_slave_1 added [ 54.543543][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.558540][ T5931] team0: Port device team_slave_0 added [ 54.584207][ T5931] team0: Port device team_slave_1 added [ 54.594076][ T5933] team0: Port device team_slave_0 added [ 54.604215][ T5933] team0: Port device team_slave_1 added [ 54.615384][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.617710][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.626261][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.663858][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.666721][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.677320][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.696696][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.698846][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.708699][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.713081][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.715358][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.724214][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.733849][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.736101][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.745146][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.758617][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.761708][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.770789][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.850683][ T5931] hsr_slave_0: entered promiscuous mode [ 54.854192][ T5931] hsr_slave_1: entered promiscuous mode [ 54.857226][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 54.859802][ T5931] Cannot create hsr debugfs directory [ 54.877800][ T5925] hsr_slave_0: entered promiscuous mode [ 54.881016][ T5925] hsr_slave_1: entered promiscuous mode [ 54.883956][ T5925] debugfs: 'hsr0' already exists in 'hsr' [ 54.886081][ T5925] Cannot create hsr debugfs directory [ 54.891184][ T5933] hsr_slave_0: entered promiscuous mode [ 54.894243][ T5933] hsr_slave_1: entered promiscuous mode [ 54.897204][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 54.899573][ T5933] Cannot create hsr debugfs directory [ 55.131688][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.137676][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.143157][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.149365][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.194206][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.198956][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.204150][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.213892][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.272490][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.279848][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.289780][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.296899][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.355827][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.369730][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.376390][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.381292][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.391491][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.425066][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.436545][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.451152][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.454018][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.469169][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.477187][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.479643][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.501091][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.503918][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.529791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.532241][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.549759][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.554901][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.571973][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.589353][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.604300][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.610701][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 55.610714][ T40] audit: type=1400 audit(1770785054.659:93): avc: denied { sys_module } for pid=5926 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.623518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.626620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.630223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.632701][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.636640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.639132][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.643300][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.646233][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.678202][ T5933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.701491][ T5925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.705775][ T5925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.747905][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.778193][ T5926] veth0_vlan: entered promiscuous mode [ 55.783896][ T5940] Bluetooth: hci1: command tx timeout [ 55.783918][ T5937] Bluetooth: hci2: command tx timeout [ 55.784069][ T5926] veth1_vlan: entered promiscuous mode [ 55.787580][ T5927] Bluetooth: hci0: command tx timeout [ 55.792637][ T5937] Bluetooth: hci3: command tx timeout [ 55.807771][ T5926] veth0_macvtap: entered promiscuous mode [ 55.814419][ T5926] veth1_macvtap: entered promiscuous mode [ 55.841394][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.847189][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.853604][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.857607][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.865447][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.868827][ T1253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.871768][ T1253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.884831][ T1253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.888396][ T1253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.950157][ T5933] veth0_vlan: entered promiscuous mode [ 55.958785][ T5931] veth0_vlan: entered promiscuous mode [ 55.968762][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.970939][ T5933] veth1_vlan: entered promiscuous mode [ 55.971355][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.989317][ T5931] veth1_vlan: entered promiscuous mode [ 56.002146][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.005617][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.009680][ T5925] veth0_vlan: entered promiscuous mode [ 56.018685][ T5933] veth0_macvtap: entered promiscuous mode [ 56.020293][ T40] audit: type=1400 audit(1770785055.069:94): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.025290][ T5925] veth1_vlan: entered promiscuous mode [ 56.031189][ T40] audit: type=1400 audit(1770785055.069:95): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzkaller.pajA3d/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.045694][ T40] audit: type=1400 audit(1770785055.079:96): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.046735][ T5933] veth1_macvtap: entered promiscuous mode [ 56.055513][ T40] audit: type=1400 audit(1770785055.079:97): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzkaller.pajA3d/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.066800][ T5931] veth0_macvtap: entered promiscuous mode [ 56.069727][ T40] audit: type=1400 audit(1770785055.079:98): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/syzkaller.pajA3d/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.076432][ T5931] veth1_macvtap: entered promiscuous mode [ 56.083652][ T40] audit: type=1400 audit(1770785055.079:99): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.086490][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.102701][ T40] audit: type=1400 audit(1770785055.089:100): avc: denied { mounton } for pid=5926 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.104194][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.121753][ T40] audit: type=1400 audit(1770785055.089:101): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="gadgetfs" ino=8659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.127523][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.138180][ T5925] veth0_macvtap: entered promiscuous mode [ 56.138270][ T40] audit: type=1400 audit(1770785055.089:102): avc: denied { mount } for pid=5926 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.155810][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.158513][ T1253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.161962][ T1253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.167253][ T5925] veth1_macvtap: entered promiscuous mode [ 56.177425][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.182828][ T1253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.186091][ T1253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.203415][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.224067][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.226558][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.229443][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.243881][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.259996][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.268160][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.271173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.280304][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.284608][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.295667][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.298683][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.327350][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.330501][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.360930][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.364732][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.385044][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.387620][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.404197][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.407089][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.424580][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.426998][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.529357][ T6032] fuse: Bad value for 'rootmode' [ 56.628916][ T5927] Bluetooth: hci3: Unknown advertising packet type: 0x18 [ 56.629081][ T5927] Bluetooth: hci3: Unknown advertising packet type: 0x18 [ 56.709865][ T6053] batman_adv: batadv0: Adding interface: dummy0 [ 56.714826][ T6053] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.724144][ T6053] batman_adv: batadv0: Interface activated: dummy0 [ 56.735033][ T6053] batadv0: mtu less than device minimum [ 56.737435][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.741240][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.744977][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.748745][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.752508][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.756813][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.760714][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.764633][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.768598][ T6053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.816077][ T6059] netlink: 'syz.0.19': attribute type 13 has an invalid length. [ 56.948153][ T6071] usb usb9: usbfs: process 6071 (syz.0.23) did not claim interface 4 before use [ 57.022773][ T6069] hid-generic 0003:0627:0001.0001: pid 6069 passed too large report [ 57.495388][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 57.499852][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 57.671510][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 57.720883][ T6124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7443 sclass=netlink_route_socket pid=6124 comm=syz.1.37 [ 57.814728][ T6139] syz.2.39 uses obsolete (PF_INET,SOCK_PACKET) [ 57.824191][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.39'. [ 57.866088][ T6149] netlink: 172 bytes leftover after parsing attributes in process `syz.1.41'. [ 57.870319][ T6150] netlink: 172 bytes leftover after parsing attributes in process `syz.1.41'. [ 57.874604][ T5927] Bluetooth: hci3: command tx timeout [ 57.874654][ T5940] Bluetooth: hci2: command tx timeout [ 57.877399][ T63] Bluetooth: hci0: command tx timeout [ 57.878786][ T5937] Bluetooth: hci1: command tx timeout [ 58.808674][ T6278] qnx6: unable to set blocksize [ 58.812133][ T6278] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 58.816843][ T6278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60688 sclass=netlink_route_socket pid=6278 comm=syz.0.68 [ 58.844310][ T6273] loop7: detected capacity change from 0 to 7 [ 58.849827][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.852752][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.855714][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.858751][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.861435][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.862921][ T829] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 58.864526][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.870354][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.873386][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.876269][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.880653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.887278][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.890373][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.893425][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.896497][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.898995][ T5932] ldm_validate_partition_table(): Disk read failed. [ 58.942636][ T6279] support for the xor transformation has been removed. [ 58.946057][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.949138][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.951850][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.954939][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.957601][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.961536][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 58.964809][ T5932] Dev loop7: unable to read RDB block 0 [ 58.967722][ T5932] loop7: unable to read partition table [ 58.970162][ T5932] loop7: partition table beyond EOD, truncated [ 58.978269][ T6273] ldm_validate_partition_table(): Disk read failed. [ 58.981567][ T6273] Dev loop7: unable to read RDB block 0 [ 58.985241][ T6273] loop7: unable to read partition table [ 58.987805][ T6273] loop7: partition table beyond EOD, truncated [ 58.990432][ T6273] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 59.038385][ T829] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 59.041549][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.059361][ T829] pvrusb2: Hardware description: Terratec Grabster AV400 [ 59.062814][ T829] pvrusb2: ********** [ 59.064451][ T829] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 59.068783][ T829] pvrusb2: Important functionality might not be entirely working. [ 59.072112][ T829] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 59.076965][ T829] pvrusb2: ********** [ 59.253142][ T2490] pvrusb2: Invalid write control endpoint [ 59.285293][ T2490] pvrusb2: Invalid write control endpoint [ 59.287844][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 59.291691][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 59.295246][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 59.299101][ T2490] pvrusb2: Device being rendered inoperable [ 59.302623][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 59.305494][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 59.309224][ T2490] pvrusb2: Attached sub-driver cx25840 [ 59.311263][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 59.315167][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 59.454602][ T6252] pvrusb2: Attempted to execute control transfer when device not ok [ 59.458223][ T6252] Cannot find set identified by id 3 to match [ 59.464580][ T6010] usb 6-1: USB disconnect, device number 2 [ 59.887919][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.890978][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.940212][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.946355][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.950361][ T6306] Zero length message leads to an empty skb [ 59.952904][ T5937] Bluetooth: hci0: command tx timeout [ 59.953099][ T63] Bluetooth: hci3: command tx timeout [ 59.955149][ T5937] Bluetooth: hci1: command tx timeout [ 59.957387][ T63] Bluetooth: hci2: command tx timeout [ 59.986172][ T6313] netlink: 'syz.3.76': attribute type 2 has an invalid length. [ 59.994331][ T6313] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 60.001319][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 60.048204][ T6319] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.78'. [ 60.084250][ T6315] netlink: 766 bytes leftover after parsing attributes in process `syz.1.77'. [ 60.087169][ T6317] netlink: 766 bytes leftover after parsing attributes in process `syz.1.77'. [ 60.092679][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.102784][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.109782][ T75] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.118259][ T75] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.155351][ T6329] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 60.158975][ T6327] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 60.163697][ T6327] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 60.181883][ T6331] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.185176][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 60.188058][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 60.191038][ T6331] IPv6: NLM_F_CREATE should be set when creating new route [ 60.221592][ T6331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=6331 comm=syz.3.81 [ 60.333512][ T6338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.450238][ T6348] kAFS: unparsable volume name [ 60.589755][ T6362] netlink: 'syz.1.89': attribute type 1 has an invalid length. [ 60.616921][ T40] kauditd_printk_skb: 289 callbacks suppressed [ 60.616937][ T40] audit: type=1400 audit(1770785059.669:392): avc: denied { create } for pid=6364 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.632464][ T40] audit: type=1400 audit(1770785059.679:393): avc: denied { allowed } for pid=6364 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.640695][ T40] audit: type=1400 audit(1770785059.679:394): avc: denied { allowed } for pid=6364 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.647551][ T6362] bond1: (slave geneve2): making interface the new active one [ 60.648506][ T40] audit: type=1400 audit(1770785059.679:395): avc: denied { create } for pid=6364 comm="syz.3.90" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.652997][ T6366] overlay: ./file0 is not a directory [ 60.658920][ T40] audit: type=1400 audit(1770785059.689:396): avc: denied { create } for pid=6364 comm="syz.3.90" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.667287][ T40] audit: type=1400 audit(1770785059.689:397): avc: denied { map } for pid=6364 comm="syz.3.90" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.672886][ T6362] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.674849][ T40] audit: type=1400 audit(1770785059.689:398): avc: denied { read write } for pid=6364 comm="syz.3.90" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.680420][ T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 60.699389][ T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 60.699514][ T40] audit: type=1400 audit(1770785059.709:399): avc: denied { mounton } for pid=6364 comm="syz.3.90" path="/32/file0/bus" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.710114][ T60] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 60.710149][ T60] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 60.749764][ T40] audit: type=1400 audit(1770785059.739:400): avc: denied { prog_load } for pid=6364 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.770358][ T40] audit: type=1400 audit(1770785059.749:401): avc: denied { ioctl } for pid=6364 comm="syz.3.90" path="socket:[10599]" dev="sockfs" ino=10599 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.905487][ T6392] netlink: 'syz.0.98': attribute type 28 has an invalid length. [ 60.975526][ T6398] netlink: 'syz.1.100': attribute type 12 has an invalid length. [ 61.245925][ T6416] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.872469][ T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 61.913421][ T6457] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 61.916409][ T6457] ALSA: mixer_oss: invalid index 1374389 [ 62.023993][ T63] Bluetooth: hci1: command tx timeout [ 62.024053][ T5940] Bluetooth: hci3: command tx timeout [ 62.024080][ T5942] Bluetooth: hci0: command tx timeout [ 62.025970][ T5937] Bluetooth: hci2: command tx timeout [ 62.033421][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 62.036821][ T59] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 62.040036][ T59] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.044142][ T59] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 62.047759][ T59] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.051600][ T59] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.056471][ T59] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 62.060296][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.195865][ T5927] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 62.410941][ T6483] capability: warning: `syz.1.124' uses deprecated v2 capabilities in a way that may be insecure [ 62.595190][ T6498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 62.837157][ T6510] __nla_validate_parse: 4 callbacks suppressed [ 62.837173][ T6510] netlink: 76 bytes leftover after parsing attributes in process `syz.1.131'. [ 62.852558][ T839] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.875323][ T6512] Bluetooth: MGMT ver 1.23 [ 62.879893][ T6512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.132'. [ 62.913204][ T29] usb 7-1: USB disconnect, device number 2 [ 63.024331][ T6523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.024783][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.027020][ T6523] IPv6: NLM_F_CREATE should be set when creating new route [ 63.027084][ T6523] IPv6: NLM_F_CREATE should be set when creating new route [ 63.031867][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.034147][ T6523] IPv6: NLM_F_CREATE should be set when creating new route [ 63.038796][ T839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.048744][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 63.061052][ T839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.066204][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.067050][ T6523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=6523 comm=syz.1.135 [ 63.074064][ T839] usb 5-1: config 0 descriptor?? [ 63.229456][ T6525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.136'. [ 63.449218][ T6529] bridge_slave_1: left allmulticast mode [ 63.452510][ T6529] bridge_slave_1: left promiscuous mode [ 63.455033][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.465517][ T6529] bridge_slave_0: left allmulticast mode [ 63.467470][ T6529] bridge_slave_0: left promiscuous mode [ 63.469256][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.485412][ T839] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 63.507908][ T839] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 63.618048][ T6531] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 63.621298][ T6531] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 63.789165][ T10] usb 5-1: USB disconnect, device number 2 [ 63.807156][ T6536] net_ratelimit: 64 callbacks suppressed [ 63.807171][ T6536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.942176][ T6544] netlink: 14 bytes leftover after parsing attributes in process `syz.1.140'. [ 63.961836][ T6544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.970794][ T6544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.976063][ T6544] bond0 (unregistering): Released all slaves [ 64.172432][ T6553] capability: warning: `syz.1.143' uses 32-bit capabilities (legacy support in use) [ 64.496794][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 64.496794][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 64.503276][ T6569] bridge0: entered promiscuous mode [ 64.505319][ T6569] macsec1: entered promiscuous mode [ 64.617680][ T6577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.620417][ T6577] IPv6: NLM_F_CREATE should be set when creating new route [ 64.623216][ T6577] IPv6: NLM_F_CREATE should be set when creating new route [ 64.625482][ T6577] IPv6: NLM_F_CREATE should be set when creating new route [ 64.632132][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 64.758802][ T6597] fuse: Bad value for 'fd' [ 64.974207][ T6607] netlink: 260 bytes leftover after parsing attributes in process `syz.3.161'. [ 65.062635][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 65.112730][ T6617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.163'. [ 65.419930][ T6626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.544077][ T6632] netlink: 'syz.1.169': attribute type 3 has an invalid length. [ 65.547236][ T6632] netlink: 'syz.1.169': attribute type 3 has an invalid length. [ 65.623132][ T40] kauditd_printk_skb: 25434 callbacks suppressed [ 65.623149][ T40] audit: type=1326 audit(2000000004.569:25823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.635789][ T40] audit: type=1326 audit(2000000004.569:25824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.643957][ T40] audit: type=1326 audit(2000000004.579:25825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.653448][ T40] audit: type=1326 audit(2000000004.579:25826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.663575][ T40] audit: type=1326 audit(2000000004.579:25827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.671948][ T40] audit: type=1326 audit(2000000004.579:25828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.681131][ T40] audit: type=1326 audit(2000000004.579:25829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.691554][ T40] audit: type=1326 audit(2000000004.579:25830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.701972][ T40] audit: type=1326 audit(2000000004.579:25831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.711799][ T40] audit: type=1326 audit(2000000004.579:25832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz.2.134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136ed9bf79 code=0x50000 [ 65.991036][ T6656] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 65.996544][ T6656] overlayfs: missing 'lowerdir' [ 66.003222][ T6655] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.007609][ T6655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.011283][ T6655] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 66.015562][ T6655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 66.020927][ T6658] MTD: Couldn't look up '': -22 [ 66.024216][ T6658] : Can't lookup blockdev [ 66.356991][ T6704] bridge_slave_1: left allmulticast mode [ 66.359238][ T6704] bridge_slave_1: left promiscuous mode [ 66.361729][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.367258][ T6704] bridge_slave_0: left allmulticast mode [ 66.369532][ T6704] bridge_slave_0: left promiscuous mode [ 66.371878][ T6701] process 'syz.1.187' launched './file0' with NULL argv: empty string added [ 66.371884][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.663452][ T5927] Bluetooth: hci1: command 0x0406 tx timeout [ 66.687276][ T6725] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 66.898815][ T6743] hsr_slave_1 (unregistering): left promiscuous mode [ 66.993339][ T6749] overlayfs: failed to resolve './bus': -2 [ 66.995734][ T6747] kernel read not supported for file /policy (pid: 6747 comm: syz.2.205) [ 67.033373][ T6754] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 67.052104][ T6754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6754 comm=syz.0.208 [ 67.058198][ T6754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6754 comm=syz.0.208 [ 67.372373][ T6791] sctp: [Deprecated]: syz.2.219 (pid 6791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.372373][ T6791] Use struct sctp_sack_info instead [ 67.392218][ T6795] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 67.754895][ T6837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.828371][ T6843] xt_hashlimit: size too large, truncated to 1048576 [ 67.883488][ T6853] gfs2: not a GFS2 filesystem [ 67.891036][ T6853] gfs2: not a GFS2 filesystem [ 68.180062][ T6872] afs: Unknown parameter 'dn' [ 68.334624][ T6877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.341353][ T6877] __nla_validate_parse: 12 callbacks suppressed [ 68.341369][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 68.394662][ T6879] loop5: detected capacity change from 0 to 7 [ 68.541959][ T6879] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 68.552064][ T6895] tmpfs: Cannot disable swap on remount [ 68.562958][ T6895] binder: 6894:6895 ioctl c018620c 200000000000 returned -22 [ 68.588122][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.603104][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.628408][ T6904] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 68.633175][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 68.735734][ T6918] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 68.739447][ T6901] kvm: kvm [6900]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 68.753217][ T6901] kvm: kvm [6900]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 68.922781][ T6937] QAT: Stopping all acceleration devices. [ 69.068989][ T6949] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 69.126288][ T6957] sp0: Synchronizing with TNC [ 69.212495][ T829] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.291880][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 69.341239][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.265'. [ 69.372444][ T6985] netlink: 100 bytes leftover after parsing attributes in process `syz.2.268'. [ 69.374871][ T829] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 69.379457][ T829] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 69.383334][ T829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 69.386969][ T829] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 69.389882][ T829] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 69.392575][ T829] usb 8-1: Product: syz [ 69.393964][ T829] usb 8-1: Manufacturer: syz [ 69.395556][ T829] usb 8-1: SerialNumber: syz [ 69.398646][ T829] usb 8-1: config 0 descriptor?? [ 69.412550][ T829] hub 8-1:0.0: bad descriptor, ignoring hub [ 69.414447][ T829] hub 8-1:0.0: probe with driver hub failed with error -5 [ 69.420573][ T829] usb 8-1: selecting invalid altsetting 0 [ 69.448008][ T6988] tipc: Started in network mode [ 69.449911][ T6988] tipc: Node identity , cluster identity 4711 [ 69.513033][ T6992] : renamed from lo [ 69.601159][ T7005] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 69.637100][ T7005] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.641149][ T7005] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 69.934678][ T7030] netem: change failed [ 70.116245][ T7044] netlink: 'syz.2.284': attribute type 5 has an invalid length. [ 70.353810][ T6941] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 70.355070][ T7062] can0: slcan on pty22. [ 70.422698][ T6010] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.517312][ T6941] usb 8-1: device firmware changed [ 70.528076][ T829] usb 8-1: USB disconnect, device number 2 [ 70.572591][ T6010] usb 5-1: Using ep0 maxpacket: 8 [ 70.575574][ T6010] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.578225][ T6010] usb 5-1: config 179 has no interface number 0 [ 70.580369][ T6010] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 70.584251][ T6010] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 70.587849][ T6010] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 70.591616][ T6010] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 70.595910][ T6010] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 70.600037][ T6010] usb 5-1: config 179 interface 65 has no altsetting 0 [ 70.604421][ T6010] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 70.608092][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.612533][ T839] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 70.623094][ T7052] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 70.636945][ T6010] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input8 [ 70.647746][ T40] kauditd_printk_skb: 2584 callbacks suppressed [ 70.647762][ T40] audit: type=1400 audit(2000000009.599:28417): avc: denied { read } for pid=5321 comm="acpid" name="js0" dev="devtmpfs" ino=2888 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.660889][ T40] audit: type=1400 audit(2000000009.599:28418): avc: denied { open } for pid=5321 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2888 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.683908][ T5321] input input8: unable to receive magic message: -110 [ 70.693219][ T5321] input input8: unable to receive magic message: -32 [ 70.696980][ T5321] input input8: unable to receive magic message: -32 [ 70.701214][ T5321] input input8: unable to receive magic message: -32 [ 70.702042][ T40] audit: type=1400 audit(2000000009.649:28419): avc: denied { ioctl } for pid=5321 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2892 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.712461][ T829] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.720533][ T5932] input input8: unable to receive magic message: -32 [ 70.732922][ T5321] input input8: unable to receive magic message: -32 [ 70.739763][ T5321] input input8: unable to receive magic message: -32 [ 70.774260][ T839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.778538][ T839] usb 6-1: config 0 has no interfaces? [ 70.783212][ T839] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 70.787016][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.790336][ T839] usb 6-1: Product: syz [ 70.792128][ T839] usb 6-1: Manufacturer: syz [ 70.794184][ T839] usb 6-1: SerialNumber: syz [ 70.798446][ T839] usb 6-1: config 0 descriptor?? [ 70.834013][ T40] audit: type=1400 audit(2000000009.789:28420): avc: denied { read } for pid=7039 comm="syz.0.282" name="event4" dev="devtmpfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.834098][ T7040] input input8: unable to receive magic message: -32 [ 70.844112][ T40] audit: type=1400 audit(2000000009.789:28421): avc: denied { read open } for pid=7039 comm="syz.0.282" path="/dev/input/event4" dev="devtmpfs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.858080][ T40] audit: type=1400 audit(2000000009.809:28422): avc: denied { ioctl } for pid=7039 comm="syz.0.282" path="/dev/input/event4" dev="devtmpfs" ino=2892 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.858351][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 70.872411][ T829] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 70.875053][ T829] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.878075][ T829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.882453][ T829] usb 8-1: string descriptor 0 read error: -22 [ 70.884498][ T829] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.887337][ T829] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 70.893413][ T829] usb 8-1: config 0 descriptor?? [ 70.898581][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 70.901630][ T6010] usb 5-1: USB disconnect, device number 3 [ 70.902208][ T829] hub 8-1:0.0: bad descriptor, ignoring hub [ 70.905639][ T829] hub 8-1:0.0: probe with driver hub failed with error -5 [ 70.909403][ T829] usb 8-1: selecting invalid altsetting 0 [ 71.003458][ T59] usb 6-1: USB disconnect, device number 3 [ 71.037655][ T40] audit: type=1400 audit(2000000009.989:28423): avc: denied { create } for pid=7071 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.048682][ T40] audit: type=1400 audit(2000000009.989:28424): avc: denied { write open } for pid=7071 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=3082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.059938][ T40] audit: type=1400 audit(2000000009.989:28425): avc: denied { append } for pid=7071 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=3082 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.072368][ T40] audit: type=1400 audit(2000000009.989:28426): avc: denied { getattr } for pid=7071 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.083222][ T7062] can0 (unregistered): slcan off pty22. [ 71.222735][ T59] usb 8-1: USB disconnect, device number 3 [ 71.385100][ T7099] netlink: zone id is out of range [ 71.386914][ T7099] netlink: zone id is out of range [ 71.388876][ T7099] netlink: zone id is out of range [ 71.390999][ T7099] netlink: set zone limit has 8 unknown bytes [ 71.417722][ T7099] program syz.2.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.532745][ T7108] netlink: 68 bytes leftover after parsing attributes in process `syz.1.297'. [ 71.588246][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'. [ 71.591749][ T7112] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 71.604734][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 71.654854][ T7118] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 71.687273][ T7122] netlink: 144 bytes leftover after parsing attributes in process `syz.0.302'. [ 71.768679][ T7122] batman_adv: batadv0: Adding interface: dummy0 [ 71.772066][ T7122] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.783181][ T7122] batman_adv: batadv0: Interface activated: dummy0 [ 71.791541][ T7122] batadv0: mtu less than device minimum [ 71.796211][ T7122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.800205][ T7122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.804472][ T7122] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.840104][ T7130] delete_channel: no stack [ 71.842573][ T6010] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.928795][ T7139] loop7: detected capacity change from 0 to 7 [ 71.934497][ C0] blk_print_req_error: 25 callbacks suppressed [ 71.934511][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.941253][ C0] buffer_io_error: 25 callbacks suppressed [ 71.941266][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.947324][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.951695][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.958807][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.963338][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.967002][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.971157][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.975099][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.979280][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.983215][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.987212][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.990671][ T7139] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 71.996619][ T7139] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.000213][ T7139] ldm_validate_partition_table(): Disk read failed. [ 72.003276][ T7139] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.007588][ T7139] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.011237][ T7139] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.012388][ T6010] usb 6-1: Using ep0 maxpacket: 16 [ 72.015477][ T7139] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.021341][ T7139] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 72.022640][ T6010] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 72.028257][ T7139] Buffer I/O error on dev loop7, logical block 0, async page read [ 72.029880][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.034655][ T7139] Dev loop7: unable to read RDB block 0 [ 72.036533][ T6010] usb 6-1: Product: syz [ 72.039197][ T7139] loop7: unable to read partition table [ 72.041054][ T6010] usb 6-1: Manufacturer: syz [ 72.043872][ T7139] loop7: partition table beyond EOD, [ 72.045733][ T6010] usb 6-1: SerialNumber: syz [ 72.050869][ T7139] truncated [ 72.052419][ T7139] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 72.055156][ T6010] r8152-cfgselector 6-1: Unknown version 0x0000 [ 72.061132][ T6010] r8152-cfgselector 6-1: config 0 descriptor?? [ 72.102633][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 72.222562][ T7150] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 72.242453][ T7150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.783127][ T6010] r8152-cfgselector 6-1: Unknown version 0x0000 [ 72.787709][ T6010] r8152-cfgselector 6-1: bad CDC descriptors [ 72.796363][ T6010] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 73.079971][ T7160] 9p: Unknown access argument 18446744073709551615: -34 [ 73.138188][ T7160] kvm: MWAIT instruction emulated as NOP! [ 73.286621][ T7172] tmpfs: Cannot disable swap on remount [ 73.288392][ T7173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.295406][ T7173] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.465114][ T7197] __nla_validate_parse: 2 callbacks suppressed [ 73.465132][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 73.469510][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 73.575242][ T7209] program syz.0.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.582632][ T7208] syzkaller0: entered promiscuous mode [ 73.584840][ T7208] syzkaller0: entered allmulticast mode [ 73.686317][ T7213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.704141][ T7215] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 73.713462][ T7215] bond2 (unregistering): Released all slaves [ 73.791814][ T7215] netlink: 48 bytes leftover after parsing attributes in process `syz.2.328'. [ 73.796508][ T7219] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.329'. [ 73.801029][ T7219] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.806689][ T7219] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 73.921339][ T7240] xt_hashlimit: size too large, truncated to 1048576 [ 73.942455][ T5927] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.942514][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 74.610697][ T7265] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.748463][ T7277] netlink: 'syz.1.345': attribute type 2 has an invalid length. [ 75.628901][ T7297] random: crng reseeded on system resumption [ 75.639068][ T7297] No memory to map [ 75.942598][ T6268] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.095957][ T6268] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 76.099635][ T6268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.103025][ T6268] usb 7-1: Product: syz [ 76.104710][ T6268] usb 7-1: Manufacturer: syz [ 76.106429][ T6268] usb 7-1: SerialNumber: syz [ 76.118011][ T6268] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 76.150981][ T40] kauditd_printk_skb: 250 callbacks suppressed [ 76.150995][ T40] audit: type=1400 audit(2000000015.099:28677): avc: denied { firmware_load } for pid=829 comm="kworker/0:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 76.159316][ T829] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 76.265498][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.267504][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.718190][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.722487][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.833780][ T7231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.872371][ T40] audit: type=1400 audit(2000000015.819:28678): avc: denied { connect } for pid=7303 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.879866][ T40] audit: type=1400 audit(2000000015.819:28679): avc: denied { name_connect } for pid=7303 comm="syz.3.353" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 76.881246][ T7308] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.892418][ T40] audit: type=1400 audit(2000000015.829:28680): avc: denied { read } for pid=7307 comm="syz.0.354" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.899809][ T40] audit: type=1400 audit(2000000015.829:28681): avc: denied { getopt } for pid=7303 comm="syz.3.353" laddr=::ffff:172.20.20.170 lport=52276 faddr=::ffff:172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.911215][ T40] audit: type=1400 audit(2000000015.829:28682): avc: denied { open } for pid=7307 comm="syz.0.354" path="net:[4026532904]" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.916614][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 76.921281][ T40] audit: type=1400 audit(2000000015.829:28683): avc: denied { bind } for pid=7307 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.923932][ T7308] bridge_slave_1: left allmulticast mode [ 76.932561][ T40] audit: type=1400 audit(2000000015.829:28684): avc: denied { create } for pid=7303 comm="syz.3.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.932941][ T7308] bridge_slave_1: left promiscuous mode [ 76.939279][ T40] audit: type=1400 audit(2000000015.829:28685): avc: denied { ioctl } for pid=7303 comm="syz.3.353" path="socket:[17124]" dev="sockfs" ino=17124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.939314][ T40] audit: type=1400 audit(2000000015.849:28686): avc: denied { ioctl } for pid=7307 comm="syz.0.354" path="socket:[17747]" dev="sockfs" ino=17747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.959084][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.969961][ T7308] bridge_slave_0: left allmulticast mode [ 76.973465][ T7308] bridge_slave_0: left promiscuous mode [ 76.976611][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.038544][ T7321] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.124522][ T5937] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 77.146247][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.150178][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.222407][ T829] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 77.225342][ T829] ath9k_htc: Failed to initialize the device [ 77.246342][ T829] usb 7-1: ath9k_htc: USB layer deinitialized [ 77.253339][ T7341] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.363'. [ 77.368467][ T7354] QAT: failed to copy from user cfg_data. [ 77.463300][ T829] usb 7-1: USB disconnect, device number 4 [ 77.510660][ T7375] input: syz1 as /devices/virtual/input/input10 [ 77.514825][ T7375] input: failed to attach handler leds to device input10, error: -6 [ 77.535302][ T7375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=7375 comm=syz.1.371 [ 77.645541][ T7388] __vm_enough_memory: pid: 7388, comm: syz.3.375, bytes: 4503599627366400 not enough memory for the allocation [ 77.814634][ T7405] mmap: syz.3.381 (7405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.890178][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.894872][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.936710][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 77.939677][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.386'. [ 77.990909][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 78.012852][ T7429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.062807][ T7434] autofs4:pid:7434:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 78.062833][ T7434] autofs4:pid:7434:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 78.073714][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 78.132424][ T6010] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.284538][ T6010] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.288258][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.293315][ T6010] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 78.296957][ T6010] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.301564][ T6010] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.306133][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.310299][ T6010] usb 5-1: config 0 descriptor?? [ 78.550055][ T7484] __vm_enough_memory: pid: 7484, comm: syz.2.405, bytes: 4503599627366400 not enough memory for the allocation [ 78.561801][ T7475] __nla_validate_parse: 4 callbacks suppressed [ 78.561857][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'. [ 78.585991][ T7488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7488 comm=syz.2.406 [ 78.589996][ T7488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7488 comm=syz.2.406 [ 78.656379][ T7494] net_ratelimit: 16 callbacks suppressed [ 78.656391][ T7494] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 78.682418][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 78.722988][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.725364][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.727749][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.730114][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.735020][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.738189][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.740998][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.743524][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.745861][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.749739][ T6010] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 78.756819][ T6010] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 78.842753][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 78.849018][ T24] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.852211][ T24] usb 8-1: config 0 has no interface number 0 [ 78.855471][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.859796][ T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.863516][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.868527][ T24] usb 8-1: config 0 descriptor?? [ 78.875551][ T24] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 78.915301][ T7518] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 78.931655][ T7518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 78.939096][ T7518] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 78.941539][ T7518] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 78.948207][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 78.951851][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 78.961053][ T7518] vlan2: entered allmulticast mode [ 78.963382][ T7518] macsec0: entered allmulticast mode [ 78.966049][ T7518] bond3: (slave vlan2): Error -34 calling dev_set_mtu [ 78.971945][ T7511] veth1_to_bond: entered promiscuous mode [ 78.973895][ T7511] veth1_to_bond: entered allmulticast mode [ 78.994440][ T6296] usb 5-1: USB disconnect, device number 4 [ 79.060727][ T7524] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.414'. [ 79.074070][ T829] usb 8-1: USB disconnect, device number 4 [ 79.295737][ T7533] 9pnet_fd: Insufficient options for proto=fd [ 79.848167][ T7556] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 79.851097][ T7556] overlayfs: missing 'lowerdir' [ 79.853847][ T7557] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 79.856852][ T7557] overlayfs: missing 'lowerdir' [ 80.033259][ T7577] SELinux: Context Sm5Όf{6(#߉m\sSxA~>K2}m.̧kN` is not valid (left unmapped). [ 80.080669][ T7586] geneve1: entered allmulticast mode [ 80.088928][ T7586] QAT: Invalid ioctl -2144835806 [ 80.150871][ T7597] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.435'. [ 80.155873][ T7597] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 80.158778][ T7597] /dev/nullb0: Can't open blockdev [ 80.191606][ T7602] xt_hashlimit: max too large, truncated to 1048576 [ 80.255350][ T7606] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 80.368873][ T7619] pim6reg: entered allmulticast mode [ 80.406607][ T7621] tmpfs: Cannot change global quota limit on remount [ 80.441905][ T7625] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 80.557921][ T7634] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 80.565279][ T7634] netlink: get zone limit has 4 unknown bytes [ 80.630204][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 80.634153][ T7645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.449'. [ 80.826267][ T7661] team0: Device gtp0 is of different type [ 81.044740][ T7685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.462'. [ 81.075076][ T7687] warning: `syz.0.463' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.192166][ T40] kauditd_printk_skb: 371 callbacks suppressed [ 81.192183][ T40] audit: type=1400 audit(2000000020.139:29058): avc: denied { recv } for pid=5849 comm="syz-executor" saddr=127.0.0.1 src=46330 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 81.211715][ T40] audit: type=1400 audit(2000000020.159:29059): avc: denied { read write } for pid=7690 comm="syz.2.464" name="vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.219296][ T40] audit: type=1400 audit(2000000020.159:29060): avc: denied { open } for pid=7690 comm="syz.2.464" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.259274][ T40] audit: type=1400 audit(2000000020.209:29061): avc: denied { bind } for pid=7692 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.266854][ T40] audit: type=1400 audit(2000000020.209:29062): avc: denied { name_bind } for pid=7692 comm="syz.2.465" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.274827][ T40] audit: type=1400 audit(2000000020.209:29063): avc: denied { node_bind } for pid=7692 comm="syz.2.465" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 81.281946][ T40] audit: type=1400 audit(2000000020.209:29064): avc: denied { listen } for pid=7692 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.288448][ T40] audit: type=1400 audit(2000000020.219:29065): avc: denied { read } for pid=5638 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 81.295775][ T40] audit: type=1400 audit(2000000020.229:29066): avc: denied { search } for pid=5638 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.302941][ T40] audit: type=1400 audit(2000000020.229:29067): avc: denied { search } for pid=5638 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.561137][ T7717] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 81.591701][ T7657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.811525][ T7729] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 81.814529][ T7729] netlink: 'syz.3.475': attribute type 2 has an invalid length. [ 81.817626][ T7729] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 81.820719][ T7729] netlink: 'syz.3.475': attribute type 3 has an invalid length. [ 81.824328][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.475'. [ 81.834588][ T7729] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 81.889021][ T7731] netlink: 'syz.1.476': attribute type 3 has an invalid length. [ 81.891540][ T7731] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 81.984104][ T7744] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 81.987157][ T7744] overlayfs: missing 'lowerdir' [ 82.154034][ T7772] syzkaller0: entered promiscuous mode [ 82.155958][ T7772] syzkaller0: entered allmulticast mode [ 82.161669][ T7772] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 82.182720][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.401399][ T7802] binder_alloc: binder_alloc_mmap_handler: 7797 2000000c0000-2000000c2000 already mapped failed -16 [ 82.515048][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.668398][ T7836] openvswitch: netlink: IP tunnel dst address not specified [ 82.685047][ T7842] ======================================================= [ 82.685047][ T7842] WARNING: The mand mount option has been deprecated and [ 82.685047][ T7842] and is ignored by this kernel. Remove the mand [ 82.685047][ T7842] option from the mount to silence this warning. [ 82.685047][ T7842] ======================================================= [ 82.822482][ T5937] Bluetooth: hci0: command 0x0406 tx timeout [ 82.923872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.926686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.929466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.952142][ T7874] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 82.955334][ T7874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.963366][ T7874] vhci_hcd vhci_hcd.0: Device attached [ 82.971413][ T7880] veth1: entered promiscuous mode [ 82.974171][ T7880] veth1: entered allmulticast mode [ 83.012678][ T7875] vhci_hcd: connection closed [ 83.029442][ T7369] vhci_hcd vhci_hcd.0: stop threads [ 83.039672][ T7369] vhci_hcd vhci_hcd.0: release socket [ 83.039714][ T7369] vhci_hcd vhci_hcd.0: disconnect device [ 83.055657][ T7887] xfs: Unknown parameter 'usrquota [ 83.055657][ T7887]  !"#$%&'()*+' [ 83.087945][ T5937] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 83.099306][ T839] IPVS: starting estimator thread 0... [ 83.102962][ T7891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.135373][ T7899] xt_hashlimit: size too large, truncated to 1048576 [ 83.182900][ T7894] IPVS: using max 43 ests per chain, 103200 per kthread [ 83.194561][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.197188][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.210083][ T7901] batman_adv: batadv0: Interface deactivated: dummy0 [ 83.359283][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.366605][ T7901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.457390][ T7905] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.461894][ T7905] batman_adv: batadv0: Adding interface: gretap1 [ 83.464091][ T7905] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.471936][ T7905] batman_adv: batadv0: Interface activated: gretap1 [ 83.483924][ T7915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.491162][ T7360] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.494207][ T7360] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.526087][ T7360] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.534971][ T7360] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.640302][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.532'. [ 83.724972][ T7946] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.726046][ T7947] efs: cannot read volume header [ 83.814625][ T59] IPVS: starting estimator thread 0... [ 83.818226][ T7950] tipc: Started in network mode [ 83.819900][ T7950] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.827325][ T7950] tipc: Enabled bearer , priority 10 [ 83.846015][ T7965] 9p: Unknown uid 00000000004294967295 [ 83.912456][ T7960] IPVS: using max 43 ests per chain, 103200 per kthread [ 83.955726][ T7979] binder: 7977:7979 ioctl c00c620f 200000000180 returned -22 [ 83.974412][ T7981] netlink: 'syz.2.549': attribute type 27 has an invalid length. [ 83.978530][ T7983] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.550'. [ 83.981406][ T7983] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 83.986130][ T7983] netlink: 68 bytes leftover after parsing attributes in process `syz.3.550'. [ 83.994537][ T7981] veth1: left promiscuous mode [ 83.996205][ T7981] veth1: left allmulticast mode [ 83.996619][ T7976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.019414][ T7981] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 84.021720][ T7981] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 84.063499][ T7986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.066478][ T7986] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.070428][ T7986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.084518][ T7981] overlayfs: maximum fs stacking depth exceeded [ 84.121706][ T7998] usb 1-1: USB disconnect, device number 2 [ 84.172776][ T7998] usb usb1: check_ctrlrecip: process 7998 (syz.1.554) requesting ep 01 but needs 81 [ 84.176331][ T7998] Cannot find add_set index 2 as target [ 84.196426][ T8004] netlink: 372 bytes leftover after parsing attributes in process `syz.3.557'. [ 84.276386][ T8009] netlink: 'syz.0.559': attribute type 28 has an invalid length. [ 84.276415][ T8011] netlink: 'syz.0.559': attribute type 28 has an invalid length. [ 84.278976][ T8009] netlink: 'syz.0.559': attribute type 3 has an invalid length. [ 84.281428][ T8011] netlink: 'syz.0.559': attribute type 3 has an invalid length. [ 84.284081][ T8009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.559'. [ 84.286299][ T8011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.559'. [ 84.322925][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 84.446808][ T8032] fuse: Unknown parameter '' [ 84.634093][ T8065] netlink: 'syz.3.576': attribute type 13 has an invalid length. [ 84.666999][ T8069] netlink: 56 bytes leftover after parsing attributes in process `syz.3.577'. [ 84.698192][ T8078] i2c i2c-1: dtv_property_process_set: SET cmd 0x29c11179 undefined [ 84.834252][ T59] tipc: Node number set to 2886997162 [ 84.867742][ T8099] fuse: Invalid rootmode [ 85.330921][ T8138] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 85.333885][ T8138] netlink: 228 bytes leftover after parsing attributes in process `syz.2.598'. [ 85.339280][ T8137] nfs4: Unknown parameter 'rdma' [ 85.407882][ T8142] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 85.410326][ T8142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.417413][ T8142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.600'. [ 85.424388][ T8142] ip6gre1: entered promiscuous mode [ 85.426196][ T8142] ip6gre1: entered allmulticast mode [ 85.573764][ T8149] tmpfs: Cannot change global quota limit on remount [ 85.709910][ T8157] netlink: 'syz.1.603': attribute type 15 has an invalid length. [ 85.719334][ T8102] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 85.966013][ T8183] netlink: 'syz.1.612': attribute type 1 has an invalid length. [ 86.002819][ T8186] nbd: socks must be embedded in a SOCK_ITEM attr [ 86.193300][ T40] kauditd_printk_skb: 556 callbacks suppressed [ 86.193311][ T40] audit: type=1400 audit(2000000025.149:29624): avc: denied { prog_run } for pid=8208 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.237739][ T40] audit: type=1400 audit(2000000025.189:29625): avc: denied { ioctl } for pid=8208 comm="syz.1.622" path="socket:[20007]" dev="sockfs" ino=20007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.245374][ T40] audit: type=1400 audit(2000000025.189:29626): avc: denied { create } for pid=8208 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.251405][ T40] audit: type=1400 audit(2000000025.189:29627): avc: denied { getopt } for pid=8208 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.278219][ T40] audit: type=1400 audit(2000000025.229:29628): avc: denied { create } for pid=8215 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.285378][ T40] audit: type=1400 audit(2000000025.229:29629): avc: denied { write } for pid=8215 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.294473][ T40] audit: type=1400 audit(2000000025.229:29630): avc: denied { write } for pid=8215 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.300988][ T40] audit: type=1400 audit(2000000025.229:29631): avc: denied { nlmsg_write } for pid=8215 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.314407][ T40] audit: type=1400 audit(2000000025.269:29632): avc: denied { append } for pid=8220 comm="syz.0.626" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 86.321940][ T40] audit: type=1400 audit(2000000025.269:29633): avc: denied { mount } for pid=8220 comm="syz.0.626" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.334533][ T8223] can0: slcan on ttyS3. [ 86.515352][ T1347] cfg80211: failed to load regulatory.db [ 86.523707][ T8245] can0 (unregistered): slcan off ttyS3. [ 86.619532][ T8260] xt_hashlimit: max too large, truncated to 1048576 [ 86.871007][ T8272] lo: Caught tx_queue_len zero misconfig [ 86.983448][ T5937] Bluetooth: hci3: command 0x0406 tx timeout [ 86.994740][ T8283] can0: slcan on ttyS3. [ 87.010833][ T8283] sp0: Synchronizing with TNC [ 87.065055][ T5927] ------------[ cut here ]------------ [ 87.067784][ T5927] refcnt < 0 [ 87.067795][ T5927] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u33:2/5927 [ 87.073468][ T5927] Modules linked in: [ 87.075801][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.075859][ T8283] can0 (unregistered): slcan off ttyS3. [ 87.080159][ T5927] Tainted: [L]=SOFTLOCKUP [ 87.080185][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.080197][ T5927] Workqueue: hci3 hci_conn_timeout [ 87.080222][ T5927] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 87.080240][ T5927] Code: 44 0f b6 2d 7b 86 3d 06 31 ff 41 83 e5 40 44 89 ee e8 5a 58 91 f7 45 84 ed 0f 84 02 ff ff ff e9 7c bb fb f6 e8 f7 5d 91 f7 90 <0f> 0b 90 e8 ee 5d 91 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 87.080254][ T5927] RSP: 0018:ffffc900027efc20 EFLAGS: 00010293 [ 87.080267][ T5927] RAX: 0000000000000000 RBX: ffff888034f60a40 RCX: ffffffff8a75e20f [ 87.080278][ T5927] RDX: ffff8880301da480 RSI: ffffffff8a75e309 RDI: ffff8880301da480 [ 87.080289][ T5927] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 87.080298][ T5927] R10: 00000000ffffffff R11: 00000000000075e9 R12: ffff888034f60000 [ 87.080308][ T5927] R13: ffff8880301da904 R14: 0000000000000000 R15: ffff88802acda400 [ 87.080318][ T5927] FS: 0000000000000000(0000) GS:ffff8880d65b6000(0000) knlGS:0000000000000000 [ 87.080348][ T5927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.080360][ T5927] CR2: 000055c0fabd7300 CR3: 0000000026256000 CR4: 0000000000352ef0 [ 87.080370][ T5927] DR0: 000000000000a000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.080379][ T5927] DR3: 000000000000002e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 87.080389][ T5927] Call Trace: [ 87.080395][ T5927] [ 87.080404][ T5927] process_one_work+0x9c2/0x1840 [ 87.080436][ T5927] ? __pfx_process_one_work+0x10/0x10 [ 87.080464][ T5927] ? assign_work+0x19c/0x250 [ 87.080486][ T5927] worker_thread+0x5da/0xe40 [ 87.080521][ T5927] ? kthread+0x13a/0x450 [ 87.122335][ T8283] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 87.123994][ T5927] ? __pfx_worker_thread+0x10/0x10 [ 87.145950][ T5927] kthread+0x370/0x450 [ 87.147596][ T5927] ? __pfx_kthread+0x10/0x10 [ 87.149355][ T5927] ret_from_fork+0x754/0xd80 [ 87.150843][ T5927] ? __pfx_ret_from_fork+0x10/0x10 [ 87.152668][ T5927] ? __switch_to+0x7b9/0x10c0 [ 87.154190][ T5927] ? __pfx_kthread+0x10/0x10 [ 87.155702][ T5927] ret_from_fork_asm+0x1a/0x30 [ 87.157223][ T5927] [ 87.158226][ T5927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.160545][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.164013][ T5927] Tainted: [L]=SOFTLOCKUP [ 87.165394][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.168555][ T5927] Workqueue: hci3 hci_conn_timeout [ 87.170216][ T5927] Call Trace: [ 87.171558][ T5927] [ 87.172782][ T5927] dump_stack_lvl+0x100/0x190 [ 87.174697][ T5927] vpanic+0x20d/0x630 [ 87.176356][ T5927] panic+0xd1/0xd1 [ 87.177885][ T5927] ? __pfx_panic+0x10/0x10 [ 87.179586][ T5927] ? check_panic_on_warn+0x1f/0x90 [ 87.181374][ T5927] check_panic_on_warn.cold+0x19/0x34 [ 87.183075][ T5927] ? hci_conn_timeout+0x16a/0x230 [ 87.184720][ T5927] __warn.cold+0x191/0x2f8 [ 87.186414][ T5927] __report_bug+0x296/0x3d0 [ 87.187974][ T5927] ? hci_conn_timeout+0x16a/0x230 [ 87.189686][ T5927] ? __pfx___report_bug+0x10/0x10 [ 87.191622][ T5927] ? add_lock_to_list+0x99/0x110 [ 87.193649][ T5927] ? hci_conn_timeout+0x16a/0x230 [ 87.195522][ T5927] report_bug+0xb2/0x220 [ 87.197216][ T5927] ? hci_conn_timeout+0x16a/0x230 [ 87.199125][ T5927] handle_bug+0x166/0x2a0 [ 87.200871][ T5927] exc_invalid_op+0x17/0x50 [ 87.202736][ T5927] asm_exc_invalid_op+0x1a/0x20 [ 87.204682][ T5927] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 87.206958][ T5927] Code: 44 0f b6 2d 7b 86 3d 06 31 ff 41 83 e5 40 44 89 ee e8 5a 58 91 f7 45 84 ed 0f 84 02 ff ff ff e9 7c bb fb f6 e8 f7 5d 91 f7 90 <0f> 0b 90 e8 ee 5d 91 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 87.214465][ T5927] RSP: 0018:ffffc900027efc20 EFLAGS: 00010293 [ 87.216640][ T5927] RAX: 0000000000000000 RBX: ffff888034f60a40 RCX: ffffffff8a75e20f [ 87.219881][ T5927] RDX: ffff8880301da480 RSI: ffffffff8a75e309 RDI: ffff8880301da480 [ 87.222971][ T5927] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 87.225950][ T5927] R10: 00000000ffffffff R11: 00000000000075e9 R12: ffff888034f60000 [ 87.229141][ T5927] R13: ffff8880301da904 R14: 0000000000000000 R15: ffff88802acda400 [ 87.232218][ T5927] ? hci_conn_timeout+0x6f/0x230 [ 87.234212][ T5927] ? hci_conn_timeout+0x169/0x230 [ 87.236237][ T5927] process_one_work+0x9c2/0x1840 [ 87.238176][ T5927] ? __pfx_process_one_work+0x10/0x10 [ 87.240396][ T5927] ? assign_work+0x19c/0x250 [ 87.242143][ T5927] worker_thread+0x5da/0xe40 [ 87.244047][ T5927] ? kthread+0x13a/0x450 [ 87.245802][ T5927] ? __pfx_worker_thread+0x10/0x10 [ 87.247846][ T5927] kthread+0x370/0x450 [ 87.249508][ T5927] ? __pfx_kthread+0x10/0x10 [ 87.251412][ T5927] ret_from_fork+0x754/0xd80 [ 87.253221][ T5927] ? __pfx_ret_from_fork+0x10/0x10 [ 87.255299][ T5927] ? __switch_to+0x7b9/0x10c0 [ 87.257131][ T5927] ? __pfx_kthread+0x10/0x10 [ 87.258750][ T5927] ret_from_fork_asm+0x1a/0x30 [ 87.260460][ T5927] [ 87.262500][ T5927] Kernel Offset: disabled [ 87.264235][ T5927] Rebooting in 86400 seconds..