last executing test programs: 2.727814738s ago: executing program 4 (id=1287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d286165732900000000000000000000000000000000040000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cc"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.616879011s ago: executing program 4 (id=1290): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x800}}, 0x10) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="16011003000000082505a8a440000102030109021b000101060005090400000007010000090521"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.860795446s ago: executing program 1 (id=1302): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040084) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x800) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001f00)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1011, &(0x7f0000001f40)=ANY=[], 0x0) socket$rxrpc(0x21, 0x2, 0x2) r4 = socket(0x15, 0x803, 0x0) sendto(r4, 0x0, 0x0, 0x20000090, 0x0, 0x0) 1.816806089s ago: executing program 1 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) 1.759671196s ago: executing program 1 (id=1305): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2f7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6d}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.61381571s ago: executing program 3 (id=1308): epoll_create(0x400) pipe(&(0x7f0000000280)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r2, &(0x7f00000001c0), 0x0, 0x1}, 0x20) close(0x3) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 1.532824943s ago: executing program 1 (id=1310): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 1.392650267s ago: executing program 1 (id=1311): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x1}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x4}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[r8], 0x0, 0x0, 0x300}) 1.217630467s ago: executing program 4 (id=1316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/95, 0x5f, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x13, 0x800, 0x70bd2b, 0x25dfdbfb, {0xa, 0xf9, 0x4, 0x8, {0x4e21, 0x4e22, [0xdefc, 0x2, 0xf, 0xc], [0xfffffff8, 0xfba2, 0x5, 0x4], 0x0, [0x80, 0x3]}, 0x9, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) 980.635786ms ago: executing program 2 (id=1320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001f40)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f00)={&(0x7f0000001580)={0x964, 0x0, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x7f}, 0x81, 0x7, 0x100, 0x7, 0x5, 'syz1\x00', "e1db9ab652fd80b91c4fedd608ad9c941efa8d5b6fe53192bb6c6269760ec028", "d6fd2caf03b516906def785097ff8dafc2a49692bc9f39f43b69490652f7c08d", [{0x4, 0x2, {0x3, 0x1ff}}, {0x80, 0xdd, {0x1, 0x1}}, {0x1, 0x8, {0x3, 0xc}}, {0x2, 0x0, {0x1, 0x2}}, {0x8, 0x4, {0x3, 0x7f}}, {0x2, 0x54f3, {0x2, 0x40}}, {0x8, 0x1, {0x1, 0x2}}, {0x1430, 0x7, {0x2, 0xd}}, {0x6, 0x200, {0x0, 0x6}}, {0x3, 0x0, {0x3, 0xff}}, {0x7, 0xffff, {0x3, 0x5}}, {0x5, 0x0, {0x0, 0x2}}, {0x8, 0xffff, {0x3, 0x81}}, {0x9, 0x8, {0x2, 0x3}}, {0xe, 0x1, {0x3, 0xffff}}, {0x0, 0x1, {0x3, 0x2}}, {0x80, 0xff80, {0x2, 0x8}}, {0x3, 0x1, {0x3, 0x3}}, {0xc850, 0x7f, {0x0, 0x4951b46b}}, {0x8001, 0xff01, {0x0, 0x7}}, {0xd3b1, 0x2, {0x3, 0x4b}}, {0x800, 0x1, {0x2, 0x80}}, {0x5, 0x8000, {0x3, 0xb5000}}, {0x6, 0x2, {0x0, 0x6}}, {0x200, 0x2, {0x2, 0x5}}, {0x6, 0xbc2, {0x3, 0x802c}}, {0x401, 0x7, {0x3, 0x81}}, {0x9, 0x3, {0x2, 0x5}}, {0x5729, 0x8000, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x10001}}, {0x1, 0x6, {0x1, 0xae79}}, {0x6, 0x1ff, {0x3, 0x4}}, {0x8000, 0x4, {0x0, 0x3c5f}}, {0x2, 0xfff7, {0x1, 0x5}}, {0x7f, 0x2, {0x0, 0x2}}, {0xfff7, 0x9f30, {0x3, 0x5}}, {0x5, 0x6, {0x3, 0xbd0b}}, {0x6, 0x3, {0x1, 0x40}}, {0x9, 0x3, {0x0, 0xd95c}}, {0x7f, 0x5, {0x1, 0x6}}]}}}, {{0x26b, 0x1, {{0x0, 0x6}, 0x3, 0x6, 0x88, 0x3, 0x5, 'syz0\x00', "9d4f2c63aff85cabd7cd7a726e81daf05ce984975b6b524e7c37e2c5973fd622", "0ab2c4525e322eb29378ed33c799bac2cc16a496a6569e5b80dda608d1308d00", [{0x81, 0x9, {0x2, 0x8}}, {0x9, 0x9, {0x1, 0xa}}, {0x1, 0x9, {0x0, 0xd7}}, {0x5, 0x800, {0x0, 0x80000001}}, {0xfa90, 0xffff, {0x3, 0x5}}, {0xfffa, 0xf, {0x1, 0x69af}}, {0x6, 0x7, {0x0, 0x3}}, {0x81, 0x6, {0x1, 0xfffffff7}}, {0x101, 0x5, {0x0, 0x7}}, {0x1, 0x9, {0x3, 0x7}}, {0xffff, 0x1, {0x0, 0x650322cc}}, {0x40, 0xfffc, {0x1, 0xfffffffe}}, {0x101, 0x7, {0x1, 0x9}}, {0x9, 0x800, {0x0, 0x6}}, {0x8, 0x4, {0x2, 0x8}}, {0x2, 0x8, {0x3, 0x7}}, {0x5f, 0x4, {0x2, 0x5}}, {0x6, 0x8, {0x0, 0x2}}, {0x3, 0x6, {0x3, 0x7}}, {0x5, 0xabef, {0x1}}, {0x6, 0x17, {0x3}}, {0x4, 0xb7b, {0x0, 0x8}}, {0x7ff, 0x7, {0x1, 0x3}}, {0x7, 0x4, {0x1, 0x4}}, {0x5, 0x4, {0x3, 0xb}}, {0x9, 0x3, {0x3, 0xfffffffb}}, {0x7f, 0x0, {0x0, 0x9}}, {0xc1, 0x0, {0x2, 0x1}}, {0x5, 0x0, {0x0, 0x3}}, {0x880, 0x2, {0x1, 0x7fffffff}}, {0x1, 0x5, {0x2, 0x7f}}, {0x3c8f, 0x43ca, {0x2, 0xe7bf}}, {0x5, 0x0, {0x0, 0x6d4}}, {0x8, 0x5, {0x3, 0x5}}, {0x3, 0x4, {0x3, 0x5}}, {0x34, 0xff, {0x1, 0x2}}, {0x7ff, 0x0, {0x3, 0x101}}, {0x5, 0xd5, {0x2, 0x6}}, {0x1ff, 0x9, {0x2, 0x2}}, {0x6, 0x5, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x2, 0x6, 0x1, 0x26, 'syz1\x00', "78ff0da71800317ce354532cf474dfce9f91e72594a8379417079348b914b586", "1fd16300b7f551a79629945778f7036548eff523ead5199fb62618c16c08ffbb", [{0xfef6, 0xb, {0x0, 0x4}}, {0x2, 0x11c, {0x3, 0x3}}, {0x6, 0xef, {0x1}}, {0x8, 0x3ff, {0x1, 0x7fffffff}}, {0xbf, 0x1, {0x0, 0x2}}, {0x0, 0x4, {0x3, 0x3ff}}, {0xf800, 0x4, {0x2}}, {0xfff2, 0xa8e, {0x3, 0x6}}, {0x8, 0x0, {0x0, 0xfffffbff}}, {0x0, 0x9, {0x1, 0x6}}, {0x7, 0xfa, {0x3, 0x8}}, {0xe, 0x3, {0x1, 0x2}}, {0x6, 0x8, {0x1, 0x8}}, {0x9, 0x10, {0x0, 0x3}}, {0x8, 0x0, {0x3, 0x200}}, {0x2, 0x4, {0x2, 0x9}}, {0xfffc, 0x7f, {0x2, 0x8}}, {0x401, 0x0, {0x0, 0x6}}, {0x8, 0x0, {0x3, 0x7}}, {0x0, 0x8, {0x2, 0x7fff}}, {0x6, 0x6, {0x0, 0x1}}, {0x87, 0x985, {0x1, 0x2}}, {0x0, 0x10, {0x3, 0xdd6}}, {0x8, 0x5, {0x0, 0x5}}, {0x9, 0x7, {0x2, 0x8}}, {0x94c, 0x1, {0x3, 0x9}}, {0x3, 0x2, {0x2, 0x5}}, {0x7, 0x4, {0x3, 0x7fffffff}}, {0x5, 0x5, {0x3, 0x9}}, {0x0, 0x6, {0x1, 0xd8}}, {0x9, 0x50, {0x1, 0x2}}, {0x1, 0xf39, {0x2, 0x6}}, {0x2, 0xfff, {0x3, 0x7fffffff}}, {0x81, 0x10, {0x0, 0x7}}, {0x2e, 0x4, {0x0, 0x5}}, {0x5, 0xa, {0x1, 0xd846}}, {0x4, 0x8000, {0x0, 0x4}}, {0x3, 0x7, {0x2, 0x2}}, {0x101, 0x4, {0x1, 0x8}}, {0x9, 0x7, {0x3, 0x101}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x1, 0xf3, 0x6, 0x5106, 0x13, 'syz0\x00', "cf621288b7c8a44fa51bbd1c360c79a8192bd3cbf6e8011fe7d36e75c5bbe7ca", "57e47cd8dd24df7f5e8d2b11df4b2de93773497a83b3d4a245831abca49f62d3", [{0x8, 0x1, {0x3, 0x9}}, {0x9, 0x4, {0x1, 0x40}}, {0xc19, 0x1, {0x3, 0x8}}, {0x9, 0x101, {0x0, 0xe23}}, {0x1000, 0x5, {0x0, 0x6}}, {0x2, 0x5, {0x2, 0x401}}, {0x7, 0xe, {0x0, 0x1ff}}, {0xe1a, 0x4, {0x0, 0x80}}, {0x4, 0x2, {0x2, 0x2}}, {0x12, 0x2, {0x2, 0xc}}, {0x8, 0x7, {0x1, 0xd00}}, {0x5, 0x6, {0x1, 0x7fff}}, {0x101, 0x7f, {0x3}}, {0x0, 0x7, {0x2, 0x9}}, {0x9b26, 0x8, {0x1, 0x1}}, {0x6, 0x7, {0x1, 0xe}}, {0xd7b5, 0xb8, {0x3, 0x8}}, {0x4, 0x9, {0x0, 0x3}}, {0x9, 0x0, {0x2, 0x8}}, {0x32, 0x2}, {0x4, 0x0, {0x1, 0x40}}, {0x2, 0x8001, {0x0, 0x800}}, {0x0, 0xeabe, {0x3, 0x2}}, {0x6, 0xffd4, {0x1, 0x9}}, {0x2, 0xf9d8, {0x3, 0x8001}}, {0x9, 0xa, {0x3, 0xfffffffd}}, {0x5, 0x1, {0x1, 0x6e}}, {0x4, 0xc3e, {0x0, 0x40}}, {0x1, 0xaa0, {0x0, 0x7933}}, {0x9, 0x7, {0x0, 0x8}}, {0x8001, 0x4, {0x0, 0x9a39}}, {0x5, 0x8, {0x1, 0xd3}}, {0x1, 0x4, {0x1, 0x4260}}, {0x0, 0x8498, {0x0, 0x2}}, {0x3, 0x8be, {0x3}}, {0x2, 0x40, {0x3, 0x4}}, {0x7, 0x8001, {0x3, 0x3}}, {0x4, 0xf6f6, {0x0, 0x1}}, {0x4, 0xb, {0x2, 0x7}}, {0x8000, 0x1, {0x1}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000001}, 0x50) 952.221058ms ago: executing program 0 (id=1321): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010001", 0x7) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getpeername$tipc(r2, &(0x7f0000000280)=@id, &(0x7f0000000300)=0x10) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32, @ANYBLOB="c300050000000000300012800b000100697036746e6c0000200002800500090004000000140003000000000000000000000000ff"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x4) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 828.467036ms ago: executing program 2 (id=1322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, 0x0, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010128bd7000ffdbdf251000000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 730.28989ms ago: executing program 2 (id=1323): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 646.983771ms ago: executing program 0 (id=1324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1ffe0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x800000, 0x0, 0x0, 0xa, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {0x0, 0xfffffffe}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {0x2}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 636.354952ms ago: executing program 3 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x24, r2, 0x101, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 492.224502ms ago: executing program 0 (id=1326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044fe0000a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) 472.962519ms ago: executing program 3 (id=1327): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa00000008000400"], 0x48}}, 0x0) 421.666294ms ago: executing program 3 (id=1328): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008"], 0x5c}}, 0x24040001) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 415.121579ms ago: executing program 0 (id=1329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d", 0x6b}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780d8e1bf9d21f0f1f2719ed31a3c18c47b3c5abb4dea4c758c7eb47b7e982793ca63b0b9d4b4611fbcc0ffad443b9ef7358117a5", 0x74}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000740)=""/125, 0x7d}], 0x3}, 0x0) 334.641539ms ago: executing program 2 (id=1330): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0) 334.095908ms ago: executing program 0 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a675, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 289.756879ms ago: executing program 4 (id=1332): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x22020400) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 243.307892ms ago: executing program 2 (id=1333): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb0, 0x29, 0x4, {0x4, 0x12, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x5e, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c"}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x6, "e80ee304ecb7"}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x78, 0x29, 0x36, {0x5e, 0xb, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0xda, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}, @generic={0x1, 0x3, "2bdb86"}]}}}], 0x1b0}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000002c0)={0x2, r0}) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 172.319634ms ago: executing program 0 (id=1334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xc, 0xb}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 164.469661ms ago: executing program 4 (id=1335): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@struct={0x5, 0x0, 0x0, 0x4, 0x0, 0xd}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x5f, 0x6f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x400}, 0x28) 155.2442ms ago: executing program 3 (id=1336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1ffe0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0xfffffffd, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x800000, 0x0, 0x0, 0xa, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {0x0, 0xfffffffe}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {0x2}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 152.867984ms ago: executing program 1 (id=1337): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000001040)=0x3, 0x4) 1.611983ms ago: executing program 3 (id=1338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xc, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x0, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 1.4078ms ago: executing program 4 (id=1339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044fe0000a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) 0s ago: executing program 2 (id=1340): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) kernel console output (not intermixed with test programs): he MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.220360][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.263890][ T5613] team0: Port device team_slave_0 added [ 65.271267][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.293415][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.300504][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.326498][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.339397][ T50] Bluetooth: hci4: command tx timeout [ 65.340323][ T5613] team0: Port device team_slave_1 added [ 65.345336][ T5612] Bluetooth: hci0: command tx timeout [ 65.357077][ T5607] Bluetooth: hci1: command tx timeout [ 65.361410][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.372793][ T5611] team0: Port device team_slave_0 added [ 65.380302][ T5611] team0: Port device team_slave_1 added [ 65.392573][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.399595][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.418261][ T5612] Bluetooth: hci2: command tx timeout [ 65.425960][ T5607] Bluetooth: hci3: command tx timeout [ 65.426338][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.466357][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.473376][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.499336][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.533379][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.540470][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.566381][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.585750][ T5604] team0: Port device team_slave_0 added [ 65.594956][ T5610] hsr_slave_0: entered promiscuous mode [ 65.601192][ T5610] hsr_slave_1: entered promiscuous mode [ 65.607703][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.614739][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.640734][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.652560][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.659605][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.685517][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.698987][ T5604] team0: Port device team_slave_1 added [ 65.741135][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.748146][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.774069][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.795111][ T5605] hsr_slave_0: entered promiscuous mode [ 65.801390][ T5605] hsr_slave_1: entered promiscuous mode [ 65.807637][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 65.813553][ T5605] Cannot create hsr debugfs directory [ 65.821139][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.829720][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.842661][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.849720][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.875619][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.898881][ T5613] hsr_slave_0: entered promiscuous mode [ 65.904927][ T5613] hsr_slave_1: entered promiscuous mode [ 65.911042][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 65.916918][ T5613] Cannot create hsr debugfs directory [ 65.995550][ T5611] hsr_slave_0: entered promiscuous mode [ 66.001984][ T5611] hsr_slave_1: entered promiscuous mode [ 66.008038][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 66.013767][ T5611] Cannot create hsr debugfs directory [ 66.067630][ T5604] hsr_slave_0: entered promiscuous mode [ 66.073797][ T5604] hsr_slave_1: entered promiscuous mode [ 66.080022][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 66.085731][ T5604] Cannot create hsr debugfs directory [ 66.344825][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.359845][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.371346][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.382036][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.396027][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.405757][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.424652][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.433529][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.462420][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.472836][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.480788][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.490247][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.511965][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.521521][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.529468][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.538413][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.593690][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.602459][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.610957][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.620184][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.648288][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.657296][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.666133][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.675048][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.728969][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.740826][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.748842][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.757040][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.766062][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.774645][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.782727][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.791763][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.875273][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.883956][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.892725][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.901876][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.917228][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.926619][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.936094][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.944144][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.953998][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.004477][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.024796][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.037518][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.045136][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.068878][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.075960][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.103621][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.124796][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.132078][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.162842][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.171776][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.178890][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.217089][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.243095][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.266879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.273994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.302193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.309287][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.330353][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.339983][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.384334][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.391492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.405811][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.418642][ T5612] Bluetooth: hci1: command tx timeout [ 67.418702][ T5607] Bluetooth: hci0: command tx timeout [ 67.424584][ T50] Bluetooth: hci4: command tx timeout [ 67.437696][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.444814][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.454065][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.461176][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.497925][ T5612] Bluetooth: hci2: command tx timeout [ 67.503867][ T50] Bluetooth: hci3: command tx timeout [ 67.520806][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.527976][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.076471][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.120726][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.236765][ T5613] veth0_vlan: entered promiscuous mode [ 68.276423][ T5605] veth0_vlan: entered promiscuous mode [ 68.302998][ T5613] veth1_vlan: entered promiscuous mode [ 68.352408][ T5605] veth1_vlan: entered promiscuous mode [ 68.404984][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.432679][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.461598][ T5613] veth0_macvtap: entered promiscuous mode [ 68.493075][ T5613] veth1_macvtap: entered promiscuous mode [ 68.559964][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.569945][ T5605] veth0_macvtap: entered promiscuous mode [ 68.584965][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.596535][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.626657][ T5605] veth1_macvtap: entered promiscuous mode [ 68.652238][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.685463][ T5610] veth0_vlan: entered promiscuous mode [ 68.695937][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.707583][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.733133][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.752048][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.766974][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.784457][ T5610] veth1_vlan: entered promiscuous mode [ 68.802058][ T236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.811829][ T236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.832200][ T236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.841746][ T236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.879966][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.892854][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.925210][ T5611] veth0_vlan: entered promiscuous mode [ 68.959782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.963448][ T5611] veth1_vlan: entered promiscuous mode [ 68.973202][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.985235][ T5610] veth0_macvtap: entered promiscuous mode [ 68.994540][ T5610] veth1_macvtap: entered promiscuous mode [ 69.014537][ T5604] veth0_vlan: entered promiscuous mode [ 69.020895][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 69.020910][ T29] audit: type=1400 audit(1777644377.676:86): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.YeG5w7/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.053507][ T5604] veth1_vlan: entered promiscuous mode [ 69.092735][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.114274][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.118254][ T29] audit: type=1400 audit(1777644377.706:87): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.129418][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.152388][ T29] audit: type=1400 audit(1777644377.706:88): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.YeG5w7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.166029][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.191397][ T29] audit: type=1400 audit(1777644377.706:89): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.215430][ T29] audit: type=1400 audit(1777644377.716:90): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.YeG5w7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.244181][ T29] audit: type=1400 audit(1777644377.716:91): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.YeG5w7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.256124][ T5604] veth0_macvtap: entered promiscuous mode [ 69.277559][ T29] audit: type=1400 audit(1777644377.726:92): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.300301][ T29] audit: type=1400 audit(1777644377.736:93): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.320209][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.328073][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.341789][ T29] audit: type=1400 audit(1777644377.736:94): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="gadgetfs" ino=7037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.364120][ T29] audit: type=1400 audit(1777644377.736:95): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.368915][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.422487][ T5604] veth1_macvtap: entered promiscuous mode [ 69.434193][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.470260][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.499160][ T5612] Bluetooth: hci1: command tx timeout [ 69.504688][ T5612] Bluetooth: hci4: command tx timeout [ 69.511746][ T5612] Bluetooth: hci0: command tx timeout [ 69.533319][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.551652][ T5611] veth0_macvtap: entered promiscuous mode [ 69.575842][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.589607][ T5612] Bluetooth: hci2: command tx timeout [ 69.589615][ T5607] Bluetooth: hci3: command tx timeout [ 69.614594][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.644985][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.655399][ T5611] veth1_macvtap: entered promiscuous mode [ 69.683710][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.693340][ T5798] syzkaller0: entered promiscuous mode [ 69.699189][ T5798] syzkaller0: entered allmulticast mode [ 69.730822][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.764019][ T5802] Bluetooth: MGMT ver 1.23 [ 69.772444][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.781929][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.811248][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.822792][ T5803] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 69.885066][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 69.915800][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.928874][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.936806][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.964108][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.987600][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.053781][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.077540][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.090520][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.119629][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.141558][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.159614][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.200406][ T5814] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 70.229910][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.239842][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.324308][ T236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.371159][ T236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.483863][ T236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.507138][ T236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.147715][ T5840] syzkaller0: entered promiscuous mode [ 71.166016][ T5840] syzkaller0: entered allmulticast mode [ 71.291660][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.429091][ T5727] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.446105][ T5861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.25'. [ 71.578680][ T5612] Bluetooth: hci4: command tx timeout [ 71.584518][ T5607] Bluetooth: hci0: command tx timeout [ 71.589982][ T50] Bluetooth: hci1: command tx timeout [ 71.605512][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 71.658592][ T5612] Bluetooth: hci2: command tx timeout [ 71.660072][ T5727] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 71.668547][ T5868] netlink: 200 bytes leftover after parsing attributes in process `syz.1.29'. [ 71.682786][ T5612] Bluetooth: hci3: command tx timeout [ 71.692568][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 71.715545][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26'. [ 71.734019][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.811406][ T5727] usb 4-1: config 0 descriptor?? [ 71.891290][ T5727] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 72.055466][ T5727] usb 4-1: Detected FT232B [ 72.103490][ T5883] Zero length message leads to an empty skb [ 72.255782][ T5727] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 72.377941][ T5699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.457476][ T5727] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 72.482484][ T5727] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 72.507419][ T5727] usb 4-1: USB disconnect, device number 2 [ 72.531342][ T5727] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 72.541584][ T5699] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 72.541612][ T5699] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 72.541630][ T5699] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 72.541647][ T5699] usb 2-1: config 220 has no interface number 2 [ 72.541697][ T5699] usb 2-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x21, changing to 0x1 [ 72.556456][ T5727] ftdi_sio 4-1:0.0: device disconnected [ 72.605196][ T5699] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.641669][ T5699] usb 2-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.681329][ T5699] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 72.724837][ T5699] usb 2-1: config 220 interface 0 has no altsetting 0 [ 72.739633][ T5699] usb 2-1: config 220 interface 76 has no altsetting 0 [ 72.757421][ T5699] usb 2-1: config 220 interface 1 has no altsetting 0 [ 72.771270][ T5699] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 72.790093][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.831749][ T5699] usb 2-1: Product: syz [ 72.847614][ T5699] usb 2-1: Manufacturer: syz [ 72.857900][ T5699] usb 2-1: SerialNumber: syz [ 73.001870][ T5904] netlink: 84 bytes leftover after parsing attributes in process `syz.0.37'. [ 73.134815][ T5699] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 73.173416][ T5699] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 73.192665][ T5699] uvcvideo 2-1:220.0: No valid video chain found. [ 73.212923][ T5699] usb 2-1: selecting invalid altsetting 0 [ 73.254022][ T5699] usb 2-1: selecting invalid altsetting 0 [ 73.276388][ T5699] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 73.312229][ T5699] usb 2-1: USB disconnect, device number 2 [ 73.336426][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 73.637911][ T5795] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.825248][ T5928] input: syz1 as /devices/virtual/input/input5 [ 73.882094][ T5795] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 73.945204][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 74.036960][ T5795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 74.101947][ T5270] veth0_macvtap: left promiscuous mode [ 74.115321][ T5795] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.159044][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.178854][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 74.178871][ T29] audit: type=1400 audit(1777644382.836:197): avc: denied { relabelfrom } for pid=5937 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 74.185078][ T5795] usb 4-1: Product: syz [ 74.185100][ T5795] usb 4-1: Manufacturer: syz [ 74.247421][ T5795] usb 4-1: SerialNumber: syz [ 74.252659][ T5938] syzkaller0: entered promiscuous mode [ 74.262949][ T5938] syzkaller0: entered allmulticast mode [ 74.273243][ T5795] usb 4-1: config 0 descriptor?? [ 74.287323][ T5917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.295480][ T29] audit: type=1400 audit(1777644382.836:198): avc: denied { relabelto } for pid=5937 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 74.560568][ T5917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.828589][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 74.873582][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.48'. [ 74.931628][ T29] audit: type=1400 audit(1777644383.576:199): avc: denied { create } for pid=5950 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.010682][ T29] audit: type=1400 audit(1777644383.616:200): avc: denied { write } for pid=5950 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.088350][ T5882] syz.2.28 (5882): drop_caches: 1 [ 75.527844][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.697987][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 75.713608][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 75.732145][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.757335][ T24] usb 1-1: config 0 descriptor?? [ 75.783906][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 75.983502][ T24] usb 1-1: Detected FT232B [ 76.184981][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 76.391583][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 76.414903][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 76.435936][ T29] audit: type=1400 audit(1777644385.086:201): avc: denied { create } for pid=5972 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.438300][ T5974] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 76.478387][ T24] usb 1-1: USB disconnect, device number 2 [ 76.511301][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 76.522986][ T29] audit: type=1400 audit(1777644385.086:202): avc: denied { write } for pid=5972 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.539117][ T24] ftdi_sio 1-1:0.0: device disconnected [ 76.558351][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.52'. [ 76.583490][ T29] audit: type=1400 audit(1777644385.086:203): avc: denied { ioctl } for pid=5972 comm="syz.1.53" path="socket:[8961]" dev="sockfs" ino=8961 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.676564][ T29] audit: type=1400 audit(1777644385.156:204): avc: denied { ioctl } for pid=5976 comm="syz.4.54" path="socket:[8965]" dev="sockfs" ino=8965 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.745373][ T29] audit: type=1400 audit(1777644385.316:205): avc: denied { read write } for pid=5982 comm="syz.1.55" name="sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.771640][ T29] audit: type=1400 audit(1777644385.316:206): avc: denied { open } for pid=5982 comm="syz.1.55" path="/dev/sg0" dev="devtmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 76.803068][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 76.873578][ T5985] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 77.027524][ T5985] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 77.090378][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 77.166553][ T5795] usb 4-1: USB disconnect, device number 3 [ 77.522297][ T6006] syzkaller0: entered promiscuous mode [ 77.537869][ T6006] syzkaller0: entered allmulticast mode [ 78.971115][ T6035] tipc: Enabling of bearer rejected, failed to enable media [ 78.988206][ T6042] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.013792][ T6052] syzkaller0: entered promiscuous mode [ 79.028297][ T6052] syzkaller0: entered allmulticast mode [ 79.206442][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 79.206458][ T29] audit: type=1400 audit(1777644387.856:228): avc: denied { shutdown } for pid=6072 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.265266][ T29] audit: type=1400 audit(1777644387.896:229): avc: denied { name_connect } for pid=6072 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 79.394537][ T29] audit: type=1400 audit(1777644388.046:230): avc: denied { connect } for pid=6081 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.514535][ T29] audit: type=1400 audit(1777644388.166:231): avc: denied { write } for pid=6077 comm="syz.1.85" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.733651][ T29] audit: type=1400 audit(1777644388.386:232): avc: denied { name_bind } for pid=6098 comm="syz.3.91" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.779536][ T6094] syzkaller0: entered promiscuous mode [ 79.790651][ T6094] syzkaller0: entered allmulticast mode [ 80.622361][ T6143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 81.188370][ T30] cfg80211: failed to load regulatory.db [ 81.623714][ T6107] tipc: Enabling of bearer rejected, failed to enable media [ 82.293266][ T6200] dummy0: entered promiscuous mode [ 82.314692][ T6200] macvlan2: entered promiscuous mode [ 82.336025][ T6200] dummy0: left promiscuous mode [ 82.419042][ T6204] syz.3.110 (6204): drop_caches: 1 [ 82.484505][ T6204] syz.3.110 (6204): drop_caches: 1 [ 82.628870][ T6214] syzkaller0: entered promiscuous mode [ 82.645386][ T6214] syzkaller0: entered allmulticast mode [ 82.964686][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 83.095809][ T6225] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.171320][ T29] audit: type=1400 audit(1777644391.816:233): avc: denied { write } for pid=6233 comm="syz.1.126" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.228488][ T6234] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.628239][ T29] audit: type=1400 audit(1777644392.276:234): avc: denied { create } for pid=6256 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.656116][ T6257] netlink: 'syz.2.132': attribute type 11 has an invalid length. [ 84.053673][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 84.127986][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 84.296708][ T6280] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.389246][ T6283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.400425][ T6296] input: syz1 as /devices/virtual/input/input7 [ 84.515408][ T29] audit: type=1400 audit(1777644393.166:235): avc: denied { ioctl } for pid=6290 comm="syz.2.146" path="socket:[10761]" dev="sockfs" ino=10761 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.518435][ T6300] Illegal XDP return value 1938710696 on prog (id 17) dev N/A, expect packet loss! [ 84.561642][ T6297] syzkaller0: entered promiscuous mode [ 84.585531][ T6297] syzkaller0: entered allmulticast mode [ 84.850119][ T29] audit: type=1400 audit(1777644393.496:236): avc: denied { bind } for pid=6314 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.256519][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.158'. [ 85.492327][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 86.151860][ T6346] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.217101][ T6347] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 86.409749][ T29] audit: type=1400 audit(1777644395.066:237): avc: denied { search } for pid=6364 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.462127][ T6372] input: syz1 as /devices/virtual/input/input8 [ 86.496526][ T29] audit: type=1400 audit(1777644395.086:238): avc: denied { search } for pid=6364 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.570226][ T29] audit: type=1400 audit(1777644395.086:239): avc: denied { search } for pid=6364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.641365][ T6377] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 86.655720][ T29] audit: type=1400 audit(1777644395.086:240): avc: denied { search } for pid=6364 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.680635][ T29] audit: type=1400 audit(1777644395.106:241): avc: denied { read open } for pid=6371 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.712754][ T29] audit: type=1400 audit(1777644395.106:242): avc: denied { getattr } for pid=6371 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.739124][ T29] audit: type=1400 audit(1777644395.306:243): avc: denied { create } for pid=6379 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.810349][ T29] audit: type=1400 audit(1777644395.336:244): avc: denied { setopt } for pid=6379 comm="syz.0.169" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.920906][ T6386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.155762][ T6393] syzkaller0: entered promiscuous mode [ 87.175866][ T6393] syzkaller0: entered allmulticast mode [ 87.206822][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 87.568076][ T6410] syz.1.178 (6410): drop_caches: 1 [ 87.743732][ T6410] syz.1.178 (6410): drop_caches: 1 [ 88.683054][ T6411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.699613][ T6415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.751422][ T6450] tipc: Started in network mode [ 88.757700][ T6450] tipc: Node identity fe0314f73c42, cluster identity 4711 [ 88.765192][ T6450] tipc: Enabled bearer , priority 0 [ 88.775877][ T6451] syzkaller0: entered promiscuous mode [ 88.791524][ T6451] syzkaller0: entered allmulticast mode [ 88.818152][ T6447] tipc: Resetting bearer [ 88.849129][ T6447] tipc: Disabling bearer [ 89.272206][ T6477] xt_CT: No such helper "syz1" [ 89.296925][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'. [ 89.585606][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 89.647006][ T6496] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.704707][ T6506] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.764407][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 89.764422][ T29] audit: type=1400 audit(1777644398.416:256): avc: denied { ioctl } for pid=6501 comm="syz.3.200" path="socket:[11053]" dev="sockfs" ino=11053 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.357137][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.207'. [ 90.913787][ T6563] syz.4.214 (6563): drop_caches: 1 [ 91.225149][ T6563] syz.4.214 (6563): drop_caches: 1 [ 91.691849][ T6597] syzkaller0: entered promiscuous mode [ 91.717891][ T6597] syzkaller0: entered allmulticast mode [ 91.853193][ T6600] syzkaller0: entered promiscuous mode [ 91.866706][ T6600] syzkaller0: entered allmulticast mode [ 91.890758][ T6607] syzkaller1: entered promiscuous mode [ 91.901871][ T29] audit: type=1400 audit(1777644400.546:257): avc: denied { ioctl } for pid=6605 comm="syz.1.233" path="socket:[12337]" dev="sockfs" ino=12337 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.927974][ T6607] syzkaller1: entered allmulticast mode [ 92.005924][ T29] audit: type=1400 audit(1777644400.656:258): avc: denied { name_bind } for pid=6611 comm="syz.0.235" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.157843][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.358653][ T30] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 92.385493][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 92.419963][ T30] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 92.457902][ T30] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.485121][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.526908][ T30] usb 4-1: Product: syz [ 92.540235][ T30] usb 4-1: Manufacturer: syz [ 92.553367][ T30] usb 4-1: SerialNumber: syz [ 92.598124][ T30] usb 4-1: config 0 descriptor?? [ 92.606598][ T6601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.715158][ T29] audit: type=1400 audit(1777644401.366:259): avc: denied { create } for pid=6631 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.771007][ T29] audit: type=1400 audit(1777644401.366:260): avc: denied { write } for pid=6631 comm="syz.1.244" path="socket:[11592]" dev="sockfs" ino=11592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.896542][ T6601] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 93.375145][ T6647] syzkaller0: entered promiscuous mode [ 93.395886][ T6647] syzkaller0: entered allmulticast mode [ 93.507005][ T6657] netlink: 'syz.4.249': attribute type 14 has an invalid length. [ 93.519198][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 93.572826][ T6656] syzkaller1: entered promiscuous mode [ 93.583307][ T6656] syzkaller1: entered allmulticast mode [ 93.611880][ T6657] bond0: option xmit_hash_policy: invalid value (191) [ 93.973083][ T29] audit: type=1400 audit(1777644402.626:261): avc: denied { create } for pid=6675 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.010470][ T29] audit: type=1400 audit(1777644402.626:262): avc: denied { bind } for pid=6675 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.032512][ T29] audit: type=1400 audit(1777644402.626:263): avc: denied { setopt } for pid=6675 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.058149][ T29] audit: type=1400 audit(1777644402.646:264): avc: denied { listen } for pid=6675 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.078900][ T5699] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.093348][ T29] audit: type=1400 audit(1777644402.656:265): avc: denied { connect } for pid=6675 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.270490][ T5699] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 94.279339][ T5699] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 94.307412][ T5699] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 94.342876][ T5699] usb 3-1: config 220 has no interface number 2 [ 94.365936][ T5699] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 94.409829][ T5699] usb 3-1: config 220 interface 0 has no altsetting 0 [ 94.436769][ T5699] usb 3-1: config 220 interface 76 has no altsetting 0 [ 94.447346][ T6689] syzkaller0: entered promiscuous mode [ 94.466491][ T6689] syzkaller0: entered allmulticast mode [ 94.473720][ T5699] usb 3-1: config 220 interface 1 has no altsetting 0 [ 94.494551][ T5699] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 94.507712][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.534988][ T5699] usb 3-1: Product: syz [ 94.554557][ T5699] usb 3-1: Manufacturer: syz [ 94.573808][ T5699] usb 3-1: SerialNumber: syz [ 94.759851][ T30] usb 4-1: USB disconnect, device number 4 [ 94.859195][ T5699] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 94.908742][ T5699] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 94.924190][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 94.924206][ T29] audit: type=1400 audit(1777644403.576:269): avc: denied { append } for pid=6701 comm="syz.3.265" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.967540][ T5699] uvcvideo 3-1:220.0: No valid video chain found. [ 94.977118][ T5699] usb 3-1: selecting invalid altsetting 0 [ 95.023933][ T5699] usb 3-1: selecting invalid altsetting 0 [ 95.057976][ T5699] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 95.077132][ T6708] syzkaller1: entered promiscuous mode [ 95.102795][ T6708] syzkaller1: entered allmulticast mode [ 95.110893][ T5699] usb 3-1: USB disconnect, device number 2 [ 95.497403][ T29] audit: type=1400 audit(1777644404.146:270): avc: denied { create } for pid=6728 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 95.509773][ T6711] syz.4.264 (6711): drop_caches: 1 [ 95.590166][ T29] audit: type=1400 audit(1777644404.186:271): avc: denied { write } for pid=6728 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.643298][ T29] audit: type=1400 audit(1777644404.196:272): avc: denied { read } for pid=6728 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.691195][ T29] audit: type=1400 audit(1777644404.206:273): avc: denied { write } for pid=6728 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 95.937405][ T6711] syz.4.264 (6711): drop_caches: 1 [ 96.102582][ T6752] syzkaller1: entered promiscuous mode [ 96.116832][ T6752] syzkaller1: entered allmulticast mode [ 96.212794][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 96.291765][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'. [ 96.735168][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.291'. [ 96.958358][ T6792] syzkaller0: entered promiscuous mode [ 96.979098][ T6792] syzkaller0: entered allmulticast mode [ 97.024748][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.102897][ T6798] syzkaller1: entered promiscuous mode [ 97.121067][ T6798] syzkaller1: entered allmulticast mode [ 97.168821][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 97.267300][ T6813] netlink: 68 bytes leftover after parsing attributes in process `syz.1.300'. [ 97.335490][ T6809] netem: change failed [ 97.868605][ T6842] netlink: 'syz.0.312': attribute type 4 has an invalid length. [ 97.899674][ T6842] netlink: 156 bytes leftover after parsing attributes in process `syz.0.312'. [ 97.957652][ T6842] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.026921][ T6846] syzkaller1: entered promiscuous mode [ 98.038267][ T6846] syzkaller1: entered allmulticast mode [ 98.253944][ T6858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.319'. [ 98.300515][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 98.562444][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'. [ 98.770336][ T6873] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.873997][ T6881] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.899913][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.333'. [ 99.773153][ T6920] syzkaller1: entered promiscuous mode [ 99.779572][ T6920] syzkaller1: entered allmulticast mode [ 99.897418][ T6928] xt_hashlimit: size too large, truncated to 1048576 [ 99.906253][ T6925] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.965077][ T29] audit: type=1400 audit(1777644408.616:274): avc: denied { setopt } for pid=6927 comm="syz.0.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.982268][ T6928] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 100.141366][ T6930] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.228824][ T6946] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.499596][ T6957] syzkaller0: entered promiscuous mode [ 100.510881][ T6957] syzkaller0: entered allmulticast mode [ 100.771963][ T6964] syzkaller1: entered promiscuous mode [ 100.789097][ T6964] syzkaller1: entered allmulticast mode [ 100.892693][ T5795] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.935777][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.057922][ T5795] usb 3-1: Using ep0 maxpacket: 32 [ 101.078958][ T5795] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 101.093865][ T5795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.109450][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 101.119155][ T5795] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 101.125436][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 101.138053][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.151319][ T5795] usb 3-1: Product: syz [ 101.158702][ T5795] usb 3-1: Manufacturer: syz [ 101.159533][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.183520][ T5795] usb 3-1: SerialNumber: syz [ 101.190267][ T24] usb 1-1: Product: syz [ 101.204988][ T5795] usb 3-1: config 0 descriptor?? [ 101.221614][ T5795] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 101.225155][ T24] usb 1-1: Manufacturer: syz [ 101.258042][ T24] usb 1-1: SerialNumber: syz [ 101.279178][ T24] usb 1-1: config 0 descriptor?? [ 101.287373][ T6984] __nla_validate_parse: 3 callbacks suppressed [ 101.287412][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 101.305917][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 101.362247][ T6984] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.420152][ T6982] syzkaller0: entered promiscuous mode [ 101.425675][ T6982] syzkaller0: entered allmulticast mode [ 101.452525][ T6984] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.519808][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 102.642219][ T7005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.370'. [ 102.978286][ T5862] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.140793][ T5862] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 103.150259][ T5862] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 103.160417][ T5862] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 103.179565][ T5862] usb 5-1: config 220 has no interface number 2 [ 103.190214][ T5862] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 103.204591][ T5862] usb 5-1: config 220 interface 0 has no altsetting 0 [ 103.211888][ T5862] usb 5-1: config 220 interface 76 has no altsetting 0 [ 103.219079][ T5862] usb 5-1: config 220 interface 1 has no altsetting 0 [ 103.227722][ T5862] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 103.237711][ T5795] gspca_sunplus: reg_r err -71 [ 103.242269][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.246793][ T5795] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 103.251686][ T5862] usb 5-1: Product: syz [ 103.262762][ T5862] usb 5-1: Manufacturer: syz [ 103.267390][ T5862] usb 5-1: SerialNumber: syz [ 103.283694][ T5795] usb 3-1: USB disconnect, device number 3 [ 103.415112][ T7028] syzkaller0: entered promiscuous mode [ 103.424129][ T7028] syzkaller0: entered allmulticast mode [ 103.494019][ T5862] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 103.504726][ T5862] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 103.512395][ T5862] uvcvideo 5-1:220.0: No valid video chain found. [ 103.521579][ T5862] usb 5-1: selecting invalid altsetting 0 [ 103.551211][ T5862] usb 5-1: selecting invalid altsetting 0 [ 103.558265][ T5862] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 103.576951][ T5862] usb 5-1: USB disconnect, device number 2 [ 103.710729][ T24] usb 1-1: USB disconnect, device number 3 [ 104.069998][ T29] audit: type=1400 audit(1777644412.726:275): avc: denied { bind } for pid=7048 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.211203][ T29] audit: type=1400 audit(1777644412.866:276): avc: denied { bind } for pid=7059 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.241776][ T29] audit: type=1400 audit(1777644412.896:277): avc: denied { create } for pid=7059 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.265734][ T29] audit: type=1400 audit(1777644412.916:278): avc: denied { connect } for pid=7059 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.316849][ T29] audit: type=1400 audit(1777644412.966:279): avc: denied { write } for pid=7059 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.120557][ T7070] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 105.238545][ T7070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7070 comm=syz.2.389 [ 105.358919][ T7081] netlink: 104 bytes leftover after parsing attributes in process `syz.2.389'. [ 105.359098][ T7070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.374642][ T29] audit: type=1400 audit(1777644414.016:280): avc: denied { nlmsg_read } for pid=7068 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.397895][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.410963][ T29] audit: type=1400 audit(1777644414.026:281): avc: denied { ioctl } for pid=7068 comm="syz.2.389" path="socket:[14450]" dev="sockfs" ino=14450 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.441820][ T7070] bond1: (slave bond2): making interface the new active one [ 105.452790][ T7070] bond1: (slave bond2): Enslaving as an active interface with an up link [ 105.549144][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 105.571496][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 105.592717][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.615976][ T24] usb 1-1: Product: syz [ 105.625738][ T24] usb 1-1: Manufacturer: syz [ 105.636286][ T24] usb 1-1: SerialNumber: syz [ 105.652965][ T24] usb 1-1: config 0 descriptor?? [ 105.670945][ T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 105.728109][ T5727] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.869546][ T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 105.900881][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 105.925260][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 105.941089][ T5727] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 105.963657][ T7109] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 105.964302][ T5727] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.981551][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.989853][ T5727] usb 5-1: Product: syz [ 105.994184][ T5727] usb 5-1: Manufacturer: syz [ 106.000131][ T5727] usb 5-1: SerialNumber: syz [ 106.008294][ T5727] usb 5-1: config 0 descriptor?? [ 106.016529][ T7092] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.128646][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 106.192022][ T7111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.239304][ T7111] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.256032][ T7088] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 106.377951][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.527811][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 106.541813][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 106.558142][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.584138][ T24] usb 4-1: config 0 descriptor?? [ 106.607486][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 106.806847][ T24] usb 4-1: Detected FT232B [ 106.920850][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 106.945650][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.406'. [ 107.213855][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 107.240982][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.268659][ T24] usb 4-1: USB disconnect, device number 5 [ 107.283938][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.312733][ T24] ftdi_sio 4-1:0.0: device disconnected [ 107.412242][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 108.087356][ T7191] syz.2.416 (7191): drop_caches: 1 [ 108.195243][ T7191] syz.2.416 (7191): drop_caches: 1 [ 108.203353][ T30] usb 1-1: USB disconnect, device number 4 [ 108.295962][ T7211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.341199][ T29] audit: type=1400 audit(1777644416.986:282): avc: denied { listen } for pid=7212 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.389346][ T29] audit: type=1400 audit(1777644416.986:283): avc: denied { connect } for pid=7212 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.445163][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.460626][ T24] usb 5-1: USB disconnect, device number 3 [ 108.678363][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 108.695884][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.431'. [ 108.808747][ T29] audit: type=1400 audit(1777644417.456:284): avc: denied { getopt } for pid=7228 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.052894][ T29] audit: type=1400 audit(1777644417.706:285): avc: denied { setopt } for pid=7246 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.210065][ T7257] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 109.505895][ T7266] syzkaller0: entered promiscuous mode [ 109.521738][ T7266] syzkaller0: entered allmulticast mode [ 109.561062][ T7253] syz.1.438 (7253): drop_caches: 1 [ 109.654681][ T7253] syz.1.438 (7253): drop_caches: 1 [ 110.117177][ T29] audit: type=1400 audit(1777644418.766:286): avc: denied { accept } for pid=7293 comm="syz.0.452" lport=53324 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.184294][ T29] audit: type=1400 audit(1777644418.796:287): avc: denied { getopt } for pid=7293 comm="syz.0.452" lport=53324 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 111.087284][ T29] audit: type=1400 audit(1777644419.736:288): avc: denied { shutdown } for pid=7312 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.097860][ T5612] Bluetooth: hci4: command tx timeout [ 111.186709][ T7319] netlink: 96 bytes leftover after parsing attributes in process `syz.4.462'. [ 111.235575][ T7323] fuse: Unknown parameter 'user_id00000000000000000000' [ 111.319768][ T7326] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 112.095719][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 112.105730][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 112.261221][ T29] audit: type=1400 audit(1777644420.916:289): avc: denied { create } for pid=7333 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.282573][ T29] audit: type=1400 audit(1777644420.916:290): avc: denied { bind } for pid=7333 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.325708][ T7337] netlink: 'syz.4.468': attribute type 4 has an invalid length. [ 112.333483][ T7337] netlink: 156 bytes leftover after parsing attributes in process `syz.4.468'. [ 112.344763][ T7337] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 112.432973][ T29] audit: type=1400 audit(1777644421.086:291): avc: denied { setopt } for pid=7338 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.443928][ T7339] geneve2: entered promiscuous mode [ 112.457600][ T7339] geneve2: entered allmulticast mode [ 112.465540][ T753] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.477457][ T753] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.486599][ T753] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.495854][ T753] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.516462][ T7270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.919175][ T7361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.479'. [ 113.058026][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.482'. [ 113.198327][ T7375] netlink: 'syz.0.486': attribute type 39 has an invalid length. [ 113.276058][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 113.325320][ T29] audit: type=1400 audit(1777644421.976:292): avc: denied { ioctl } for pid=7379 comm="syz.4.488" path="socket:[14242]" dev="sockfs" ino=14242 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.433544][ T5612] Bluetooth: hci4: link tx timeout [ 113.447084][ T5612] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 113.551817][ T7394] netlink: 'syz.3.493': attribute type 4 has an invalid length. [ 113.559602][ T7394] netlink: 156 bytes leftover after parsing attributes in process `syz.3.493'. [ 113.591997][ T7396] netlink: 96 bytes leftover after parsing attributes in process `syz.2.494'. [ 113.599016][ T7394] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 113.648989][ T7398] syzkaller0: entered promiscuous mode [ 113.654934][ T7398] syzkaller0: entered allmulticast mode [ 113.848598][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 114.018125][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 114.187441][ T7421] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.230027][ T7421] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 114.521966][ T29] audit: type=1400 audit(1777644423.176:293): avc: denied { setopt } for pid=7442 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.034458][ T7465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.090253][ T7465] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.503282][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 115.780432][ T7503] fuse: Unknown parameter '0x0000000000000003' [ 115.964326][ T7512] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.024649][ T7512] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.143753][ T7525] syzkaller0: entered promiscuous mode [ 116.155672][ T7525] syzkaller0: entered allmulticast mode [ 116.198256][ T30] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 116.281642][ T29] audit: type=1400 audit(1777644424.926:294): avc: denied { setopt } for pid=7530 comm="syz.1.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.359860][ T30] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.378598][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.390298][ T30] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 116.408982][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.434863][ T30] usb 5-1: config 0 descriptor?? [ 116.460783][ T30] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 116.851120][ T29] audit: type=1400 audit(1777644425.506:295): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.31 dest=32998 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 116.907586][ T29] audit: type=1400 audit(1777644425.556:296): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.953594][ T29] audit: type=1400 audit(1777644425.556:297): avc: denied { open } for pid=5613 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.002377][ T29] audit: type=1400 audit(1777644425.566:298): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.079699][ T7563] netlink: 'syz.3.560': attribute type 4 has an invalid length. [ 117.532948][ T7563] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 117.753063][ T7573] fuse: Unknown parameter '0x0000000000000003' [ 117.854327][ T7580] fuse: Bad value for 'fd' [ 118.069751][ T7595] __nla_validate_parse: 8 callbacks suppressed [ 118.069768][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 118.262583][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.269249][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.277534][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.284957][ T7608] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.302808][ T7608] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.320530][ T7608] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.335937][ T7608] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.348806][ T7608] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 118.371795][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.382217][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.389457][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.396123][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.403878][ T7608] wg1 speed is unknown, defaulting to 1000 [ 118.766824][ T7628] syzkaller0: entered promiscuous mode [ 118.777276][ T7628] syzkaller0: entered allmulticast mode [ 118.965392][ T24] usb 5-1: USB disconnect, device number 4 [ 119.010289][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 119.195409][ T7651] fuse: Unknown parameter '0x0000000000000003' [ 119.342154][ T7665] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 119.480933][ T7669] Failed to initialize the IGMP autojoin socket (err -2) [ 119.491273][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 119.524665][ T29] audit: type=1400 audit(1777644428.176:299): avc: denied { create } for pid=7668 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 120.423918][ T7733] fuse: Unknown parameter '0x0000000000000003' [ 120.434402][ T7734] netlink: 'syz.0.626': attribute type 17 has an invalid length. [ 120.445774][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 120.745946][ T7755] syzkaller0: entered promiscuous mode [ 120.764192][ T7755] syzkaller0: entered allmulticast mode [ 121.085295][ T7780] netlink: 'syz.3.642': attribute type 17 has an invalid length. [ 121.102994][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 121.280841][ T29] audit: type=1400 audit(1777644429.936:300): avc: denied { read } for pid=7788 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.366503][ T7797] netlink: 'syz.4.647': attribute type 4 has an invalid length. [ 121.387115][ T7797] netlink: 156 bytes leftover after parsing attributes in process `syz.4.647'. [ 121.410416][ T7797] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 121.482932][ T7777] syz.2.639 (7777): drop_caches: 1 [ 121.829380][ T7777] syz.2.639 (7777): drop_caches: 1 [ 122.156321][ T7834] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.655'. [ 122.214654][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 122.273750][ T7844] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 122.293213][ T7844] netlink: 156 bytes leftover after parsing attributes in process `syz.1.659'. [ 122.348270][ T7844] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 122.472861][ T7858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.663'. [ 122.504668][ T7858] team_slave_0: entered promiscuous mode [ 122.642930][ T7865] syzkaller0: entered promiscuous mode [ 122.660292][ T7865] syzkaller0: entered allmulticast mode [ 123.247158][ T7909] syzkaller0: entered promiscuous mode [ 123.269728][ T7909] syzkaller0: entered allmulticast mode [ 123.570871][ T7927] __nla_validate_parse: 3 callbacks suppressed [ 123.570887][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 123.832388][ T7949] netlink: 'syz.1.690': attribute type 13 has an invalid length. [ 123.867112][ T7955] netlink: 68 bytes leftover after parsing attributes in process `syz.4.692'. [ 123.988586][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.092737][ T24] wg1 speed is unknown, defaulting to 1000 [ 124.102511][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 124.161038][ T30] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 124.200795][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 124.214241][ T30] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 124.251501][ T30] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.267243][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.286963][ T30] usb 4-1: Product: syz [ 124.303742][ T30] usb 4-1: Manufacturer: syz [ 124.308101][ T5828] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 124.316303][ T30] usb 4-1: SerialNumber: syz [ 124.337274][ T30] usb 4-1: config 0 descriptor?? [ 124.374261][ T7946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.505409][ T5828] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.530248][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.558316][ T5828] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 124.577559][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.603113][ T7946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.612388][ T5828] usb 1-1: config 0 descriptor?? [ 124.641878][ T5828] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 124.710364][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 124.898500][ T5699] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.061236][ T5699] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 125.081476][ T5699] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 125.104948][ T5699] usb 5-1: config 220 has no interface number 2 [ 125.120617][ T8018] syzkaller0: entered promiscuous mode [ 125.123717][ T5699] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 125.126240][ T8018] syzkaller0: entered allmulticast mode [ 125.152542][ T5699] usb 5-1: config 220 interface 0 has no altsetting 0 [ 125.160817][ T5699] usb 5-1: config 220 interface 76 has no altsetting 0 [ 125.174637][ T5699] usb 5-1: config 220 interface 1 has no altsetting 0 [ 125.195062][ T5699] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 125.205869][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.216020][ T5699] usb 5-1: Product: syz [ 125.220796][ T5699] usb 5-1: Manufacturer: syz [ 125.225472][ T5699] usb 5-1: SerialNumber: syz [ 125.458925][ T5699] usb 5-1: selecting invalid altsetting 0 [ 125.479988][ T5699] usb 5-1: selecting invalid altsetting 0 [ 125.495245][ T5699] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 125.511328][ T5699] uvcvideo 5-1:220.0: No valid video chain found. [ 125.530546][ T5699] usb 5-1: selecting invalid altsetting 0 [ 125.536635][ T5699] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 125.583182][ T5699] usb 5-1: USB disconnect, device number 5 [ 125.844205][ T8053] syzkaller0: entered promiscuous mode [ 125.853861][ T8053] syzkaller0: entered allmulticast mode [ 126.063923][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 126.237682][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 126.375766][ T8085] netlink: 'syz.2.728': attribute type 4 has an invalid length. [ 126.403986][ T8085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.728'. [ 126.421775][ T8077] "syz.4.726" (8077) uses obsolete ecb(arc4) skcipher [ 126.441300][ T8085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.547069][ T8093] "syz.4.731" (8093) uses obsolete ecb(arc4) skcipher [ 126.748240][ T5699] usb 4-1: USB disconnect, device number 6 [ 126.928091][ T5795] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.104545][ T5795] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 127.107924][ T5862] usb 1-1: USB disconnect, device number 5 [ 127.145796][ T5795] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.187440][ T5795] usb 2-1: config 220 has no interface number 2 [ 127.222877][ T5795] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 127.261525][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.267993][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.297636][ T5795] usb 2-1: config 220 interface 0 has no altsetting 0 [ 127.337484][ T5795] usb 2-1: config 220 interface 76 has no altsetting 0 [ 127.373371][ T5795] usb 2-1: config 220 interface 1 has no altsetting 0 [ 127.410596][ T5795] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.436737][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.476260][ T5795] usb 2-1: Product: syz [ 127.488084][ T5795] usb 2-1: Manufacturer: syz [ 127.525304][ T5795] usb 2-1: SerialNumber: syz [ 127.569764][ T8153] fuse: Unknown parameter 'fd0x0000000000000003' [ 127.783863][ T5795] usb 2-1: selecting invalid altsetting 0 [ 127.798069][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.826444][ T5795] usb 2-1: selecting invalid altsetting 0 [ 127.857227][ T5795] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 127.876580][ T5795] uvcvideo 2-1:220.0: No valid video chain found. [ 127.912061][ T5795] usb 2-1: selecting invalid altsetting 0 [ 127.921295][ T5795] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 127.954420][ T5795] usb 2-1: USB disconnect, device number 3 [ 127.971322][ T30] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 127.995710][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 128.007716][ T30] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 128.026367][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.039425][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.056466][ T30] usb 3-1: Product: syz [ 128.066633][ T30] usb 3-1: Manufacturer: syz [ 128.080133][ T30] usb 3-1: SerialNumber: syz [ 128.108630][ T30] usb 3-1: config 0 descriptor?? [ 128.120653][ T8151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.157905][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 128.321893][ T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.345115][ T8151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.360862][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.373737][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 128.388637][ T8194] netlink: 'syz.1.760': attribute type 4 has an invalid length. [ 128.406429][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.414390][ T8194] netlink: 156 bytes leftover after parsing attributes in process `syz.1.760'. [ 128.432642][ T9] usb 1-1: config 0 descriptor?? [ 128.455362][ T8194] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.493455][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 129.076776][ T8226] syzkaller0: entered promiscuous mode [ 129.090943][ T8226] syzkaller0: entered allmulticast mode [ 129.161630][ T8229] syzkaller0: entered promiscuous mode [ 129.175024][ T8229] syzkaller0: entered allmulticast mode [ 129.273269][ T8235] fuse: Unknown parameter 'fd0x0000000000000003' [ 129.381121][ T8243] netlink: 'syz.4.774': attribute type 4 has an invalid length. [ 129.389624][ T8243] netlink: 156 bytes leftover after parsing attributes in process `syz.4.774'. [ 129.400928][ T8243] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.722121][ T8259] syzkaller0: entered promiscuous mode [ 129.727614][ T8259] syzkaller0: entered allmulticast mode [ 129.840135][ T29] audit: type=1400 audit(1777644438.496:301): avc: denied { getopt } for pid=8262 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 129.957266][ T8269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.786'. [ 130.136355][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 130.245452][ T8283] syzkaller0: entered promiscuous mode [ 130.261289][ T8283] syzkaller0: entered allmulticast mode [ 130.373806][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 130.506470][ T5699] usb 3-1: USB disconnect, device number 4 [ 130.594555][ T29] audit: type=1400 audit(1777644439.246:302): avc: denied { bind } for pid=8301 comm="syz.4.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.615640][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.803'. [ 130.808157][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 130.950147][ T5699] usb 1-1: USB disconnect, device number 6 [ 130.970976][ T24] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.990391][ T24] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 131.022335][ T8325] syzkaller0: entered promiscuous mode [ 131.028003][ T24] usb 4-1: config 220 has no interface number 2 [ 131.038528][ T8325] syzkaller0: entered allmulticast mode [ 131.044534][ T24] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 131.077237][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 131.084908][ T24] usb 4-1: config 220 interface 76 has no altsetting 0 [ 131.102570][ T24] usb 4-1: config 220 interface 1 has no altsetting 0 [ 131.118226][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.128456][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.137403][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 131.154172][ T24] usb 4-1: Product: syz [ 131.162647][ T24] usb 4-1: Manufacturer: syz [ 131.167687][ T24] usb 4-1: SerialNumber: syz [ 131.360798][ T8337] Failed to initialize the IGMP autojoin socket (err -2) [ 131.412421][ T24] usb 4-1: selecting invalid altsetting 0 [ 131.418908][ T5699] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.435481][ T24] usb 4-1: selecting invalid altsetting 0 [ 131.470151][ T24] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 131.510128][ T24] uvcvideo 4-1:220.0: No valid video chain found. [ 131.544147][ T24] usb 4-1: selecting invalid altsetting 0 [ 131.553870][ T24] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 131.571954][ T24] usb 4-1: USB disconnect, device number 7 [ 131.593160][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 131.615379][ T8349] netlink: 'syz.4.821': attribute type 4 has an invalid length. [ 131.621584][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 131.635179][ T8349] netlink: 156 bytes leftover after parsing attributes in process `syz.4.821'. [ 131.674401][ T5699] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 131.692594][ T8349] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 131.721586][ T5699] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.731502][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.747926][ T5699] usb 1-1: Product: syz [ 131.752182][ T5699] usb 1-1: Manufacturer: syz [ 131.756983][ T5699] usb 1-1: SerialNumber: syz [ 131.771386][ T5699] usb 1-1: config 0 descriptor?? [ 131.777729][ T8329] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.014289][ T8329] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.072873][ T8351] syz.1.822 (8351): drop_caches: 1 [ 132.089648][ T8362] syzkaller0: entered promiscuous mode [ 132.103356][ T8362] syzkaller0: entered allmulticast mode [ 132.139845][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 132.222943][ T8351] syz.1.822 (8351): drop_caches: 1 [ 132.397015][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 132.584651][ T8378] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.654652][ T8386] "syz.2.834" (8386) uses obsolete ecb(arc4) skcipher [ 132.680262][ T8384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.716992][ T8378] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.793141][ T8378] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.971626][ T8378] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.172370][ T130] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.201017][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.256701][ T130] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.277940][ T130] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.330267][ T8409] syzkaller0: entered promiscuous mode [ 133.344999][ T8409] syzkaller0: entered allmulticast mode [ 133.450389][ T5795] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.633481][ T5795] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 133.645395][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 133.656821][ T5795] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 133.680465][ T5795] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.689708][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.698192][ T5795] usb 4-1: Product: syz [ 133.702526][ T5795] usb 4-1: Manufacturer: syz [ 133.707193][ T5795] usb 4-1: SerialNumber: syz [ 133.719379][ T5795] usb 4-1: config 0 descriptor?? [ 133.734451][ T8400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.951383][ T8400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.022515][ T24] usb 1-1: USB disconnect, device number 7 [ 134.218934][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 134.891066][ T8441] netlink: 96 bytes leftover after parsing attributes in process `syz.2.849'. [ 135.046737][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 135.127424][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 135.195826][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 135.240434][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 135.441038][ T8467] syzkaller0: entered promiscuous mode [ 135.467418][ T8467] syzkaller0: entered allmulticast mode [ 135.506513][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 135.722015][ T29] audit: type=1400 audit(1777644444.376:303): avc: denied { setopt } for pid=8488 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.042947][ T24] usb 4-1: USB disconnect, device number 8 [ 136.163537][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 136.865868][ T8479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.991414][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 137.113052][ T8526] netlink: 184 bytes leftover after parsing attributes in process `syz.3.872'. [ 137.477845][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 137.529536][ T8554] Bluetooth: MGMT ver 1.23 [ 137.534050][ T8550] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.644473][ T8558] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.755257][ T8558] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.879390][ T8558] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.913920][ T8573] syzkaller0: entered promiscuous mode [ 137.921694][ T8573] syzkaller0: entered allmulticast mode [ 137.971617][ T8558] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.060240][ T5795] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.130395][ T130] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.191030][ T130] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.226857][ T8592] "syz.2.898" (8592) uses obsolete ecb(arc4) skcipher [ 138.238181][ T5795] usb 5-1: Using ep0 maxpacket: 16 [ 138.246979][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.269032][ T5795] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 138.285045][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.313792][ T5795] usb 5-1: config 0 descriptor?? [ 138.322036][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.332565][ T5795] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 138.531929][ T5795] usb 5-1: Detected FT232B [ 138.740807][ T8619] syzkaller0: entered promiscuous mode [ 138.746618][ T8619] syzkaller0: entered allmulticast mode [ 138.778973][ T5828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.933332][ T5795] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 138.945941][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 138.965226][ T5828] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 138.981399][ T5795] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 138.991793][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.018154][ T5828] usb 2-1: Product: syz [ 139.023166][ T5795] usb 5-1: USB disconnect, device number 6 [ 139.037226][ T5828] usb 2-1: Manufacturer: syz [ 139.054279][ T8637] netlink: 'syz.3.914': attribute type 4 has an invalid length. [ 139.064779][ T5828] usb 2-1: SerialNumber: syz [ 139.071682][ T5795] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 139.088286][ T5828] usb 2-1: config 0 descriptor?? [ 139.093479][ T8637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 139.110407][ T5795] ftdi_sio 5-1:0.0: device disconnected [ 139.127291][ T5828] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 139.555998][ T8664] "syz.0.926" (8664) uses obsolete ecb(arc4) skcipher [ 140.146194][ T8663] syz.3.923 (8663): drop_caches: 1 [ 140.155062][ T8696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.157334][ T5828] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 140.177513][ T8696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.210243][ T8663] syz.3.923 (8663): drop_caches: 1 [ 140.233333][ T8700] syzkaller0: entered promiscuous mode [ 140.246474][ T8700] syzkaller0: entered allmulticast mode [ 140.335508][ T8696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.363922][ T8696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.463760][ T8696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.477602][ T8709] "syz.3.939" (8709) uses obsolete ecb(arc4) skcipher [ 140.478543][ T8696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.549846][ T5828] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.572707][ T8696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.588321][ T8696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 140.679162][ T130] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 140.689821][ T130] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.710483][ T753] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 140.729282][ T5828] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 140.734459][ T8719] netlink: 'syz.3.943': attribute type 4 has an invalid length. [ 140.740845][ T753] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.745405][ T8719] __nla_validate_parse: 4 callbacks suppressed [ 140.745418][ T8719] netlink: 156 bytes leftover after parsing attributes in process `syz.3.943'. [ 140.753772][ T5828] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 140.780765][ T5828] usb 3-1: config 220 has no interface number 2 [ 140.781357][ T8719] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.787071][ T5828] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 140.817195][ T5828] usb 3-1: config 220 interface 0 has no altsetting 0 [ 140.824180][ T5828] usb 3-1: config 220 interface 76 has no altsetting 0 [ 140.827702][ T130] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 140.840332][ T5828] usb 3-1: config 220 interface 1 has no altsetting 0 [ 140.849178][ T5828] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 140.852134][ T130] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 140.858544][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.868342][ T30] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.883927][ T5828] usb 3-1: Product: syz [ 140.888693][ T5828] usb 3-1: Manufacturer: syz [ 140.903382][ T5828] usb 3-1: SerialNumber: syz [ 140.926854][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 140.936888][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 141.054348][ T30] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 141.076143][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 141.094021][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 141.116286][ T8727] syzkaller0: entered promiscuous mode [ 141.125872][ T30] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.130627][ T5828] usb 3-1: selecting invalid altsetting 0 [ 141.144315][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.149840][ T8727] syzkaller0: entered allmulticast mode [ 141.158340][ T30] usb 1-1: Product: syz [ 141.158925][ T5828] usb 3-1: selecting invalid altsetting 0 [ 141.168747][ T30] usb 1-1: Manufacturer: syz [ 141.168766][ T30] usb 1-1: SerialNumber: syz [ 141.170751][ T30] usb 1-1: config 0 descriptor?? [ 141.185348][ T5828] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 141.194452][ T5828] uvcvideo 3-1:220.0: No valid video chain found. [ 141.217318][ T8713] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 141.243941][ T5828] usb 3-1: selecting invalid altsetting 0 [ 141.253108][ T5828] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 141.273061][ T5828] usb 3-1: USB disconnect, device number 5 [ 141.361820][ T8736] "syz.4.951" (8736) uses obsolete ecb(arc4) skcipher [ 141.438371][ T8713] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 141.518758][ T8745] netlink: 44 bytes leftover after parsing attributes in process `syz.4.954'. [ 141.560645][ T5828] usb 2-1: USB disconnect, device number 4 [ 141.880649][ T8762] netlink: 96 bytes leftover after parsing attributes in process `syz.3.961'. [ 141.994587][ T8773] "syz.4.964" (8773) uses obsolete ecb(arc4) skcipher [ 142.136253][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.967'. [ 142.328627][ T5828] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.460679][ T8781] syz.3.965 (8781): drop_caches: 1 [ 142.488613][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 142.510560][ T5828] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 142.537379][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.561280][ T5828] usb 3-1: Product: syz [ 142.570739][ T5828] usb 3-1: Manufacturer: syz [ 142.579485][ T5828] usb 3-1: SerialNumber: syz [ 142.606475][ T5828] usb 3-1: config 0 descriptor?? [ 142.641760][ T5828] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 142.643587][ T8801] netlink: 44 bytes leftover after parsing attributes in process `syz.4.975'. [ 142.685134][ T8781] syz.3.965 (8781): drop_caches: 1 [ 142.789204][ T8805] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 142.812937][ T8805] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 142.949297][ T8806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.968335][ T804] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 143.000376][ T8805] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.014962][ T8805] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 143.086852][ T8805] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.101143][ T8805] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 143.140913][ T804] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.153059][ T804] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.175711][ T8805] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.186871][ T804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.197405][ T804] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 143.206685][ T8805] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 143.224050][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.241121][ T804] usb 2-1: config 0 descriptor?? [ 143.484588][ T8827] "syz.3.985" (8827) uses obsolete ecb(arc4) skcipher [ 143.584839][ T5795] usb 1-1: USB disconnect, device number 8 [ 143.611015][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 143.642274][ T5828] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 143.660539][ T804] usbhid 2-1:0.0: can't add hid device: -71 [ 143.666950][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 143.704163][ T804] usb 2-1: USB disconnect, device number 5 [ 143.894963][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 144.078402][ T8852] "syz.3.997" (8852) uses obsolete ecb(arc4) skcipher [ 144.115513][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 144.125140][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.998'. [ 144.157837][ T804] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.174274][ T8856] "syz.3.999" (8856) uses obsolete ecb(arc4) skcipher [ 144.231099][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 144.256951][ T8860] syzkaller0: entered promiscuous mode [ 144.262466][ T8860] syzkaller0: entered allmulticast mode [ 144.339477][ T804] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.352948][ T804] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.366511][ T804] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.379899][ T804] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 144.389016][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.403335][ T8845] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 145.099084][ T5727] usb 3-1: USB disconnect, device number 6 [ 145.239409][ T804] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 145.269066][ T804] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 145.489631][ T8414] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.498742][ T8414] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.518214][ T8414] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.526592][ T8414] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.562190][ T8414] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.580277][ T8414] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 145.645256][ T8414] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 145.679731][ T8414] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.086379][ T8904] syzkaller0: entered promiscuous mode [ 146.103819][ T8904] syzkaller0: entered allmulticast mode [ 146.187295][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 146.630167][ T8926] syzkaller0: entered promiscuous mode [ 146.648075][ T8926] syzkaller0: entered allmulticast mode [ 146.951819][ T5828] usb 1-1: USB disconnect, device number 9 [ 146.955149][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 147.038917][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 147.220686][ T29] audit: type=1400 audit(1777644455.876:304): avc: denied { create } for pid=8960 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 147.259423][ T29] audit: type=1400 audit(1777644455.896:305): avc: denied { write } for pid=8960 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 147.405034][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1039'. [ 147.527816][ T804] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 147.691577][ T804] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.715884][ T804] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.748677][ T804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.759973][ T804] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 147.770286][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.795007][ T804] usb 2-1: config 0 descriptor?? [ 148.229322][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 148.236731][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 148.244150][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 148.251386][ T804] usbhid 2-1:0.0: can't add hid device: -32 [ 148.258507][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 148.289443][ T804] usb 2-1: USB disconnect, device number 6 [ 148.533788][ T8941] syzkaller0: entered promiscuous mode [ 148.539451][ T8941] syzkaller0: entered allmulticast mode [ 148.579760][ T5699] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.618019][ T5699] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.302834][ T753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 149.333237][ T9023] syzkaller0: entered promiscuous mode [ 149.350068][ T9023] syzkaller0: entered allmulticast mode [ 149.626456][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 149.670899][ T9044] syzkaller0: entered promiscuous mode [ 149.683042][ T9044] syzkaller0: entered allmulticast mode [ 149.736028][ T9057] "syz.2.1067" (9057) uses obsolete ecb(arc4) skcipher [ 149.875458][ T9054] syz.3.1061 (9054): drop_caches: 1 [ 150.010240][ T9054] syz.3.1061 (9054): drop_caches: 1 [ 151.602958][ T753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.612281][ T753] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.686202][ T9120] syzkaller0: entered promiscuous mode [ 151.702593][ T9120] syzkaller0: entered allmulticast mode [ 151.833488][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 152.314668][ T9155] syzkaller0: entered promiscuous mode [ 152.321559][ T9155] syzkaller0: entered allmulticast mode [ 152.458123][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.608021][ T5699] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.795432][ T5699] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 152.814180][ T9175] "syz.0.1088" (9175) uses obsolete ecb(arc4) skcipher [ 152.833809][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 152.891818][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 152.987411][ T5699] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.023698][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.047294][ T5699] usb 2-1: Product: syz [ 153.053176][ T5699] usb 2-1: Manufacturer: syz [ 153.076613][ T5699] usb 2-1: SerialNumber: syz [ 153.124963][ T5699] usb 2-1: config 0 descriptor?? [ 153.144632][ T9154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.403501][ T9154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.531529][ T9190] syz.0.1092 (9190): drop_caches: 1 [ 153.614984][ T9190] syz.0.1092 (9190): drop_caches: 1 [ 155.000320][ T9213] syzkaller0: entered promiscuous mode [ 155.008817][ T9213] syzkaller0: entered allmulticast mode [ 155.081269][ T9219] "syz.0.1100" (9219) uses obsolete ecb(arc4) skcipher [ 155.186161][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 155.337889][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.365977][ T9228] syzkaller0: entered promiscuous mode [ 155.371646][ T9228] syzkaller0: entered allmulticast mode [ 155.493239][ T5699] usb 2-1: USB disconnect, device number 7 [ 156.891441][ T9260] tipc: Started in network mode [ 156.909527][ T9260] tipc: Node identity d21305179983, cluster identity 4711 [ 156.925335][ T9260] tipc: Enabled bearer , priority 0 [ 156.977914][ T9260] syzkaller0: entered promiscuous mode [ 156.983519][ T9260] syzkaller0: entered allmulticast mode [ 156.991305][ T9260] tipc: Resetting bearer [ 157.028743][ T9268] syzkaller0: entered promiscuous mode [ 157.046459][ T9268] syzkaller0: entered allmulticast mode [ 157.069700][ T9259] tipc: Resetting bearer [ 157.214796][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 158.153693][ T9259] tipc: Disabling bearer [ 158.161816][ T9264] syzkaller0: entered promiscuous mode [ 158.167402][ T9264] syzkaller0: entered allmulticast mode [ 158.180021][ T9281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.307642][ T804] tipc: Node number set to 1267729687 [ 158.681321][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1133'. [ 158.712311][ T9322] syzkaller0: entered promiscuous mode [ 158.728684][ T9322] syzkaller0: entered allmulticast mode [ 158.771284][ T9320] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.864352][ T9328] syzkaller0: entered promiscuous mode [ 158.871751][ T9328] syzkaller0: entered allmulticast mode [ 159.085041][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 159.402584][ T9340] syz.1.1141 (9340): drop_caches: 1 [ 159.523972][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 159.547476][ T9340] syz.1.1141 (9340): drop_caches: 1 [ 159.562830][ T9362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.692266][ T9369] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 159.817228][ T9371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.914711][ T9362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.944554][ T9375] syzkaller0: entered promiscuous mode [ 159.951788][ T9375] syzkaller0: entered allmulticast mode [ 160.025878][ T9362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.110099][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 160.147069][ T9400] netlink: 'syz.2.1161': attribute type 39 has an invalid length. [ 160.191620][ T9362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.302151][ T9409] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1164'. [ 160.323647][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1164'. [ 160.446617][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.510152][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.582107][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 160.591374][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.592330][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 160.628182][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.637162][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1169'. [ 160.735643][ T9424] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.257917][ T5699] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 161.321884][ T29] audit: type=1400 audit(1777644469.976:306): avc: denied { create } for pid=9473 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.346902][ T29] audit: type=1400 audit(1777644469.996:307): avc: denied { bind } for pid=9473 comm="syz.0.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.393438][ T29] audit: type=1400 audit(1777644470.026:308): avc: denied { bind } for pid=9477 comm="syz.1.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.450146][ T5699] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.460333][ T29] audit: type=1400 audit(1777644470.046:309): avc: denied { execute } for pid=9479 comm="syz.3.1195" path="/246/cgroup.controllers" dev="tmpfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.495452][ T5699] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.520862][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.525856][ T29] audit: type=1804 audit(1777644470.046:310): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1195" name="/newroot/246/cgroup.controllers" dev="tmpfs" ino=1263 res=1 errno=0 [ 161.543057][ T5699] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 161.607432][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.626055][ T29] audit: type=1800 audit(1777644470.076:311): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1195" name="cgroup.controllers" dev="tmpfs" ino=1263 res=0 errno=0 [ 161.640684][ T5699] usb 3-1: config 0 descriptor?? [ 161.703572][ T29] audit: type=1800 audit(1777644470.086:312): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1195" name="cgroup.controllers" dev="tmpfs" ino=1263 res=0 errno=0 [ 161.939882][ T29] audit: type=1400 audit(1777644470.596:313): avc: denied { getopt } for pid=9508 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.149960][ T29] audit: type=1400 audit(1777644470.806:314): avc: denied { block_suspend } for pid=9519 comm="syz.4.1212" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.295352][ T5699] usbhid 3-1:0.0: can't add hid device: -71 [ 162.315491][ T5699] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 162.323948][ T9516] syz.0.1207 (9516): drop_caches: 1 [ 162.334719][ T5699] usb 3-1: USB disconnect, device number 7 [ 162.436723][ T9516] syz.0.1207 (9516): drop_caches: 1 [ 163.097904][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.105550][ T9573] __nla_validate_parse: 12 callbacks suppressed [ 163.105566][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 163.122945][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1229'. [ 163.132277][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 163.141606][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1229'. [ 163.476655][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 163.486624][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1242'. [ 163.512896][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 163.526340][ T9598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1242'. [ 163.558150][ T5699] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 163.569444][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 163.624729][ T9604] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.730073][ T5699] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.753851][ T5699] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.764599][ T5699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.772614][ T5699] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 163.782091][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.807055][ T5699] usb 1-1: config 0 descriptor?? [ 164.153048][ T9632] syzkaller0: entered promiscuous mode [ 164.164829][ T9632] syzkaller0: entered allmulticast mode [ 164.178454][ T29] audit: type=1400 audit(1777644472.826:315): avc: denied { bind } for pid=9633 comm="syz.4.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 164.190522][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 164.337550][ T9645] "syz.2.1258" (9645) uses obsolete ecb(arc4) skcipher [ 164.442874][ T5699] usbhid 1-1:0.0: can't add hid device: -71 [ 164.453907][ T5699] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.488644][ T5699] usb 1-1: USB disconnect, device number 10 [ 165.357845][ T5828] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.539342][ T5828] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 165.547960][ T5828] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 165.557020][ T5828] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 165.568763][ T5828] usb 3-1: config 220 has no interface number 2 [ 165.575097][ T5828] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 165.588734][ T5828] usb 3-1: config 220 interface 0 has no altsetting 0 [ 165.595543][ T5828] usb 3-1: config 220 interface 76 has no altsetting 0 [ 165.602525][ T5828] usb 3-1: config 220 interface 1 has no altsetting 0 [ 165.611243][ T5828] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 165.620572][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.628635][ T5828] usb 3-1: Product: syz [ 165.632899][ T5828] usb 3-1: Manufacturer: syz [ 165.637640][ T5828] usb 3-1: SerialNumber: syz [ 165.876702][ T5828] usb 3-1: selecting invalid altsetting 0 [ 165.891570][ T5828] usb 3-1: selecting invalid altsetting 0 [ 165.904499][ T5828] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 165.917830][ T5828] uvcvideo 3-1:220.0: No valid video chain found. [ 165.936663][ T5828] usb 3-1: selecting invalid altsetting 0 [ 165.951507][ T5828] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 165.983567][ T5828] usb 3-1: USB disconnect, device number 8 [ 166.659398][ T29] audit: type=1400 audit(1777644475.316:316): avc: denied { connect } for pid=9712 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.670452][ T9713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=9713 comm=syz.4.1283 [ 166.743885][ T29] audit: type=1400 audit(1777644475.396:317): avc: denied { ioctl } for pid=9712 comm="syz.4.1283" path="socket:[24951]" dev="sockfs" ino=24951 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 166.954101][ T9725] "syz.0.1289" (9725) uses obsolete ecb(arc4) skcipher [ 167.230107][ T5828] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.406919][ T5607] Bluetooth: hci4: link tx timeout [ 167.412136][ T5607] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 167.422951][ T5828] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.432144][ T5828] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 167.441385][ T5828] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.451942][ T5828] usb 5-1: config 220 has no interface number 2 [ 167.458443][ T5828] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.472103][ T5828] usb 5-1: config 220 interface 0 has no altsetting 0 [ 167.479597][ T5828] usb 5-1: config 220 interface 76 has no altsetting 0 [ 167.486521][ T5828] usb 5-1: config 220 interface 1 has no altsetting 0 [ 167.501608][ T5828] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.515825][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.524138][ T5828] usb 5-1: Product: syz [ 167.530691][ T5828] usb 5-1: Manufacturer: syz [ 167.535990][ T5828] usb 5-1: SerialNumber: syz [ 167.595049][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.767293][ T9745] syz.2.1297 (9745): drop_caches: 1 [ 167.771077][ T5828] usb 5-1: selecting invalid altsetting 0 [ 167.789951][ T5828] usb 5-1: selecting invalid altsetting 0 [ 167.809489][ T5828] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 167.832927][ T5828] uvcvideo 5-1:220.0: No valid video chain found. [ 167.874576][ T9766] veth0_macvtap: Caught tx_queue_len zero misconfig [ 167.875246][ T5828] usb 5-1: selecting invalid altsetting 0 [ 167.901120][ T5828] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 167.934887][ T5828] usb 5-1: USB disconnect, device number 7 [ 168.051167][ T9745] syz.2.1297 (9745): drop_caches: 1 [ 168.109497][ T9772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.253859][ T9772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.405927][ T9772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.406674][ T9793] "syz.4.1316" (9793) uses obsolete ecb(arc4) skcipher [ 168.521608][ T9795] __nla_validate_parse: 14 callbacks suppressed [ 168.521628][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'. [ 168.551278][ T9772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.739666][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1322'. [ 168.760332][ T130] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.769290][ T130] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.802510][ T8414] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.829508][ T8414] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.884969][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 168.955480][ T9811] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 168.981709][ T29] audit: type=1400 audit(1777644477.636:318): avc: denied { egress } for pid=804 comm="kworker/1:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 169.025612][ T29] audit: type=1400 audit(1777644477.636:319): avc: denied { sendto } for pid=804 comm="kworker/1:2" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 169.504674][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 169.569183][ T5828] ================================================================== [ 169.577277][ T5828] BUG: KASAN: slab-use-after-free in __mutex_lock+0x1887/0x1b10 [ 169.584917][ T5828] Read of size 8 at addr ffff88807de28ae8 by task kworker/0:7/5828 [ 169.592804][ T5828] [ 169.595129][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 169.595156][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.595168][ T5828] Workqueue: events l2cap_chan_timeout [ 169.595191][ T5828] Call Trace: [ 169.595197][ T5828] [ 169.595204][ T5828] dump_stack_lvl+0x100/0x190 [ 169.595227][ T5828] print_report+0x13d/0x4b0 [ 169.595252][ T5828] ? __virt_addr_valid+0x239/0x430 [ 169.595274][ T5828] ? __mutex_lock+0x1887/0x1b10 [ 169.595293][ T5828] kasan_report+0xdf/0x1d0 [ 169.595313][ T5828] ? __mutex_lock+0x1887/0x1b10 [ 169.595335][ T5828] __mutex_lock+0x1887/0x1b10 [ 169.595355][ T5828] ? l2cap_chan_timeout+0x6d/0x330 [ 169.595372][ T5828] ? add_lock_to_list+0x99/0x110 [ 169.595391][ T5828] ? __pfx___mutex_lock+0x10/0x10 [ 169.595413][ T5828] ? debug_object_deactivate+0x2e4/0x3b0 [ 169.595442][ T5828] ? l2cap_chan_timeout+0x6d/0x330 [ 169.595458][ T5828] l2cap_chan_timeout+0x6d/0x330 [ 169.595477][ T5828] process_one_work+0xa0e/0x1980 [ 169.595505][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 169.595532][ T5828] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 169.595551][ T5828] worker_thread+0x5ef/0xe50 [ 169.595576][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 169.595599][ T5828] ? kthread+0x13a/0x450 [ 169.595618][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 169.595639][ T5828] kthread+0x370/0x450 [ 169.595658][ T5828] ? __pfx_kthread+0x10/0x10 [ 169.595679][ T5828] ret_from_fork+0x72b/0xd50 [ 169.595701][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 169.595723][ T5828] ? __switch_to+0x800/0x1100 [ 169.595750][ T5828] ? __pfx_kthread+0x10/0x10 [ 169.595770][ T5828] ret_from_fork_asm+0x1a/0x30 [ 169.595801][ T5828] [ 169.595807][ T5828] [ 169.762199][ T5828] Allocated by task 5612: [ 169.766501][ T5828] kasan_save_stack+0x30/0x50 [ 169.771167][ T5828] kasan_save_track+0x14/0x30 [ 169.775828][ T5828] __kasan_kmalloc+0xaa/0xb0 [ 169.780405][ T5828] l2cap_conn_add.part.0+0x60/0xb00 [ 169.785591][ T5828] l2cap_connect_cfm+0x43e/0xf80 [ 169.790502][ T5828] hci_remote_features_evt+0x4f4/0x9b0 [ 169.795945][ T5828] hci_event_packet+0x8e9/0xcd0 [ 169.800771][ T5828] hci_rx_work+0x451/0xfc0 [ 169.805161][ T5828] process_one_work+0xa0e/0x1980 [ 169.810079][ T5828] worker_thread+0x5ef/0xe50 [ 169.814664][ T5828] kthread+0x370/0x450 [ 169.818730][ T5828] ret_from_fork+0x72b/0xd50 [ 169.823308][ T5828] ret_from_fork_asm+0x1a/0x30 [ 169.828069][ T5828] [ 169.830379][ T5828] Freed by task 5612: [ 169.834338][ T5828] kasan_save_stack+0x30/0x50 [ 169.839003][ T5828] kasan_save_track+0x14/0x30 [ 169.843663][ T5828] kasan_save_free_info+0x3b/0x70 [ 169.848669][ T5828] __kasan_slab_free+0x5f/0x80 [ 169.853408][ T5828] kfree+0x223/0x6c0 [ 169.857287][ T5828] l2cap_conn_del+0x57f/0x710 [ 169.861958][ T5828] l2cap_connect_cfm+0x9bb/0xf80 [ 169.866870][ T5828] hci_conn_failed+0x188/0x360 [ 169.871612][ T5828] hci_abort_conn_sync+0x7d9/0xb20 [ 169.876704][ T5828] abort_conn_sync+0x142/0x350 [ 169.881447][ T5828] hci_cmd_sync_work+0x1c0/0x470 [ 169.886366][ T5828] process_one_work+0xa0e/0x1980 [ 169.891287][ T5828] worker_thread+0x5ef/0xe50 [ 169.895864][ T5828] kthread+0x370/0x450 [ 169.899921][ T5828] ret_from_fork+0x72b/0xd50 [ 169.904507][ T5828] ret_from_fork_asm+0x1a/0x30 [ 169.909260][ T5828] [ 169.911565][ T5828] Last potentially related work creation: [ 169.917258][ T5828] kasan_save_stack+0x30/0x50 [ 169.921926][ T5828] kasan_record_aux_stack+0xa7/0xc0 [ 169.927113][ T5828] insert_work+0x36/0x230 [ 169.931425][ T5828] __queue_work+0x9a2/0x1130 [ 169.935998][ T5828] call_timer_fn+0x19a/0x640 [ 169.940565][ T5828] __run_timers+0x583/0xaf0 [ 169.945134][ T5828] run_timer_base+0x114/0x190 [ 169.949789][ T5828] run_timer_softirq+0x1a/0x50 [ 169.954531][ T5828] handle_softirqs+0x1ea/0xa00 [ 169.959278][ T5828] __irq_exit_rcu+0x162/0x210 [ 169.963935][ T5828] irq_exit_rcu+0x9/0x30 [ 169.968165][ T5828] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 169.973773][ T5828] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 169.979732][ T5828] [ 169.982036][ T5828] Second to last potentially related work creation: [ 169.988594][ T5828] kasan_save_stack+0x30/0x50 [ 169.993259][ T5828] kasan_record_aux_stack+0xa7/0xc0 [ 169.998438][ T5828] insert_work+0x36/0x230 [ 170.002746][ T5828] __queue_work+0x3fd/0x1130 [ 170.007313][ T5828] queue_work_on+0x180/0x1e0 [ 170.011886][ T5828] l2cap_connect_cfm+0x99e/0xf80 [ 170.016799][ T5828] hci_remote_features_evt+0x4f4/0x9b0 [ 170.022239][ T5828] hci_event_packet+0x8e9/0xcd0 [ 170.027066][ T5828] hci_rx_work+0x451/0xfc0 [ 170.031460][ T5828] process_one_work+0xa0e/0x1980 [ 170.036377][ T5828] worker_thread+0x5ef/0xe50 [ 170.040947][ T5828] kthread+0x370/0x450 [ 170.044995][ T5828] ret_from_fork+0x72b/0xd50 [ 170.049563][ T5828] ret_from_fork_asm+0x1a/0x30 [ 170.054315][ T5828] [ 170.056615][ T5828] The buggy address belongs to the object at ffff88807de28800 [ 170.056615][ T5828] which belongs to the cache kmalloc-1k of size 1024 [ 170.070642][ T5828] The buggy address is located 744 bytes inside of [ 170.070642][ T5828] freed 1024-byte region [ffff88807de28800, ffff88807de28c00) [ 170.084504][ T5828] [ 170.086805][ T5828] The buggy address belongs to the physical page: [ 170.093211][ T5828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807de2e000 pfn:0x7de28 [ 170.103250][ T5828] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.111722][ T5828] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 170.120222][ T5828] page_type: f5(slab) [ 170.124179][ T5828] raw: 00fff00000000240 ffff88813fe34dc0 ffffea00014fd010 ffffea00014e0810 [ 170.132739][ T5828] raw: ffff88807de2e000 0000000800100002 00000000f5000000 0000000000000000 [ 170.141303][ T5828] head: 00fff00000000240 ffff88813fe34dc0 ffffea00014fd010 ffffea00014e0810 [ 170.149949][ T5828] head: ffff88807de2e000 0000000800100002 00000000f5000000 0000000000000000 [ 170.158596][ T5828] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 170.167243][ T5828] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 170.175882][ T5828] page dumped because: kasan: bad access detected [ 170.182269][ T5828] page_owner tracks the page as allocated [ 170.187955][ T5828] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5604, tgid 5604 (syz-executor), ts 63311304882, free_ts 63108649617 [ 170.208505][ T5828] post_alloc_hook+0x153/0x170 [ 170.213252][ T5828] get_page_from_freelist+0x11a6/0x33b0 [ 170.218779][ T5828] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 170.224655][ T5828] new_slab+0xa6/0x6c0 [ 170.228705][ T5828] refill_objects+0x277/0x420 [ 170.233366][ T5828] __pcs_replace_empty_main+0x375/0x650 [ 170.238914][ T5828] __kmalloc_noprof+0x688/0x850 [ 170.243755][ T5828] tomoyo_init_log+0x1224/0x20c0 [ 170.248691][ T5828] tomoyo_supervisor+0x506/0x1340 [ 170.253701][ T5828] tomoyo_path_number_perm+0x445/0x580 [ 170.259139][ T5828] security_file_ioctl+0xd3/0x230 [ 170.264157][ T5828] __x64_sys_ioctl+0xb7/0x210 [ 170.268827][ T5828] do_syscall_64+0x10b/0xf80 [ 170.273398][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.279272][ T5828] page last free pid 5601 tgid 5601 stack trace: [ 170.285572][ T5828] __free_frozen_pages+0x747/0x1040 [ 170.290765][ T5828] qlist_free_all+0x47/0xf0 [ 170.295779][ T5828] kasan_quarantine_reduce+0x1a0/0x1f0 [ 170.301236][ T5828] __kasan_slab_alloc+0x69/0x90 [ 170.306071][ T5828] __kmalloc_noprof+0x2b9/0x850 [ 170.310905][ T5828] tomoyo_realpath_from_path+0xb6/0x690 [ 170.316436][ T5828] tomoyo_path_number_perm+0x23c/0x580 [ 170.321872][ T5828] security_file_ioctl+0xd3/0x230 [ 170.326879][ T5828] __x64_sys_ioctl+0xb7/0x210 [ 170.331533][ T5828] do_syscall_64+0x10b/0xf80 [ 170.336107][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.341994][ T5828] [ 170.344303][ T5828] Memory state around the buggy address: [ 170.349911][ T5828] ffff88807de28980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.357964][ T5828] ffff88807de28a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.366001][ T5828] >ffff88807de28a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.374050][ T5828] ^ [ 170.381745][ T5828] ffff88807de28b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.389783][ T5828] ffff88807de28b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.397820][ T5828] ================================================================== [ 170.406567][ T5828] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.413770][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 170.423134][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.433193][ T5828] Workqueue: events l2cap_chan_timeout [ 170.438644][ T5828] Call Trace: [ 170.441906][ T5828] [ 170.444820][ T5828] dump_stack_lvl+0x100/0x190 [ 170.449479][ T5828] vpanic+0x552/0x970 [ 170.453443][ T5828] ? __pfx_vpanic+0x10/0x10 [ 170.457924][ T5828] ? mark_held_locks+0x40/0x70 [ 170.462671][ T5828] ? __mutex_lock+0x1887/0x1b10 [ 170.467503][ T5828] panic+0xd1/0xe0 [ 170.471202][ T5828] ? __pfx_panic+0x10/0x10 [ 170.475597][ T5828] ? check_panic_on_warn+0x1f/0x90 [ 170.480688][ T5828] check_panic_on_warn.cold+0x19/0x34 [ 170.486042][ T5828] end_report.part.0+0x3a/0x90 [ 170.490791][ T5828] kasan_report.cold+0xe/0x18 [ 170.495450][ T5828] ? __mutex_lock+0x1887/0x1b10 [ 170.500284][ T5828] __mutex_lock+0x1887/0x1b10 [ 170.504942][ T5828] ? l2cap_chan_timeout+0x6d/0x330 [ 170.510031][ T5828] ? add_lock_to_list+0x99/0x110 [ 170.514951][ T5828] ? __pfx___mutex_lock+0x10/0x10 [ 170.519957][ T5828] ? debug_object_deactivate+0x2e4/0x3b0 [ 170.525577][ T5828] ? l2cap_chan_timeout+0x6d/0x330 [ 170.530665][ T5828] l2cap_chan_timeout+0x6d/0x330 [ 170.535580][ T5828] process_one_work+0xa0e/0x1980 [ 170.540504][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 170.545948][ T5828] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 170.551473][ T5828] worker_thread+0x5ef/0xe50 [ 170.556054][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 170.561150][ T5828] ? kthread+0x13a/0x450 [ 170.565372][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 170.570463][ T5828] kthread+0x370/0x450 [ 170.574510][ T5828] ? __pfx_kthread+0x10/0x10 [ 170.579084][ T5828] ret_from_fork+0x72b/0xd50 [ 170.583656][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 170.588747][ T5828] ? __switch_to+0x800/0x1100 [ 170.593407][ T5828] ? __pfx_kthread+0x10/0x10 [ 170.597976][ T5828] ret_from_fork_asm+0x1a/0x30 [ 170.602729][ T5828] [ 170.606206][ T5828] Kernel Offset: disabled [ 170.610501][ T5828] Rebooting in 86400 seconds..