last executing test programs: 1m30.566330771s ago: executing program 1 (id=313): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000240)=""/44, 0x7a) getdents64(r0, 0x0, 0x0) 1m30.507063132s ago: executing program 1 (id=307): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m30.447603529s ago: executing program 1 (id=310): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0x2}, 0x18) 1m30.447307742s ago: executing program 1 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c53931207348", 0xad}], 0x1, &(0x7f00000008c0)=[@iv={0x50, 0x117, 0x2, 0x3c, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d43"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec", 0x6e}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.289285969s ago: executing program 3 (id=318): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x0, 0x0) 1m30.227244794s ago: executing program 3 (id=320): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m30.156084807s ago: executing program 3 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvfrom(r0, &(0x7f0000000140)=""/146, 0x92, 0x10000, 0x0, 0x0) 1m29.08625189s ago: executing program 2 (id=327): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x7}}) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x121202, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) socket(0x20, 0x6, 0x438) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff87}}, 0x880) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) fanotify_init(0x2, 0x8000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x2c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4000, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9) unshare(0x8040480) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) 1m28.973124666s ago: executing program 1 (id=328): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 1m28.954218004s ago: executing program 3 (id=329): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x490, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x464, 0x2, [@TCA_BPF_ACT={0x460, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1d0, 0x12, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf1, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x108, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0xb5, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031bdd2ca073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x3c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "72c2816ab98a21c44007847797"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x6c, 0x9, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x4000001, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x4}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m28.624480178s ago: executing program 2 (id=331): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000040)) 1m28.503653006s ago: executing program 3 (id=332): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/198) 1m28.37291579s ago: executing program 0 (id=333): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040300"], 0xf) 1m28.213362512s ago: executing program 0 (id=334): keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.865729438s ago: executing program 2 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000100001002bbd7000fbdbdf250000000033f092db4f231fdb86ef5f24622b5d25be9068fed912d825021958c686b8474633465a62c6caefd93c40f1094d47d8a0f4bb56a163a106967e0fbff5e6946547fb09dfe1ffe4ad8032c1c4a2a2d11d0d42cd933f78f0987c4c22ca2d90425804a0070d045e11a928748bf0319275f05c2de8", @ANYRES32=0x0, @ANYBLOB="8a43010000000000180016801400018010000200ff010000df030000be00000014000300776c616e300000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6", 0x3e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000180)=0x1, 0x2) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m27.479526896s ago: executing program 0 (id=336): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 1m27.388387258s ago: executing program 2 (id=337): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000580)={0x0, 0x5b, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c}, 0x0) 1m27.234491914s ago: executing program 0 (id=338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m27.133347047s ago: executing program 2 (id=339): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) tee(r1, r0, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1ff) 1m27.02243921s ago: executing program 0 (id=340): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m25.954805988s ago: executing program 0 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tbp 2', 0x5) 1m22.165939686s ago: executing program 2 (id=342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m18.736161047s ago: executing program 3 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m2.562749938s ago: executing program 1 (id=344): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='h', 0x1) 58.323784529s ago: executing program 32 (id=341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='tbp 2', 0x5) 51.25151202s ago: executing program 33 (id=344): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='h', 0x1) 35.740833048s ago: executing program 34 (id=342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 35.11004545s ago: executing program 35 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 10.246657885s ago: executing program 6 (id=528): userfaultfd(0x80001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r1) epoll_create1(0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) fsmount(r3, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB, @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x2000800) 10.125061549s ago: executing program 6 (id=529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 9.236483615s ago: executing program 6 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) 6.300810834s ago: executing program 6 (id=557): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001010203010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='ccgx-ucsi 0x08\n\x00', 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 6.223748838s ago: executing program 5 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x1) dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x7}, {0x3, 0x2}, {0x0, 0x2}, {0x8, 0x1}, {0x9, 0x7}], "3155e9a9dad5935e"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20060802}, 0x8800) 6.156639035s ago: executing program 5 (id=562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002d00)=""/4110, 0x100e}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.482324882s ago: executing program 5 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.100278776s ago: executing program 5 (id=564): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x4000000000, 0x1, 0x17f, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x40000002, 0x0, 0xf, 0x40, 0x5, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x7, 0x2014cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x2c2}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x4000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x2000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x54000, 0x58000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0x4, 0x8, 0x5, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0xf3, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x19, 0xb0, 0x9}, {0x25000, 0x30}, {0x2, 0x7}, 0xc0010000, 0x0, 0x0, 0x2024, 0x0, 0x4400, 0x8080000, [0x9, 0x100000000000202, 0x1000, 0xb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.909820557s ago: executing program 4 (id=575): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 4.828839598s ago: executing program 4 (id=566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0) 4.043837174s ago: executing program 4 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.97904494s ago: executing program 5 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000100001002bbd7000fbdbdf250000000033f092db4f231fdb86ef5f24622b5d25be9068fed912d825021958c686b8474633465a62c6caefd93c40f1094d47d8a0f4bb56a163a106967e0fbff5e6946547fb09dfe1ffe4ad8032c1c4a2a2d11d0d42cd933f78f0987c4c22ca2d90425804a0070d045e11a928748bf0319275f05c2de8", @ANYRES32=0x0, @ANYBLOB="8a43010000000000180016801400018010000200ff010000df030000be00000014000300776c616e300000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6", 0x3e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f40)={0xffffffffffffffff, 0x0, 0x25, 0x8, @void}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.915344748s ago: executing program 4 (id=570): timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xcadbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) 2.915113513s ago: executing program 5 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9ac5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.845865154s ago: executing program 6 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x6c, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x32, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @void, @void, @val={0x5, 0x3, {0x9, 0x85, 0xfc}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.84111754s ago: executing program 4 (id=576): fanotify_init(0x40, 0x80000) syz_80211_inject_frame(0x0, 0x0, 0x5a) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) recvmsg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.735889036s ago: executing program 7 (id=579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce24, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001dc0)='-v', 0x2) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xfdef) 2.685416111s ago: executing program 7 (id=580): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 2.607128532s ago: executing program 7 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.040879129s ago: executing program 7 (id=583): r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13f, 0x0, 0x4, 0x18e}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x4000) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x10000001d, 0x8041) sendto$inet6(r2, &(0x7f0000000480)="d443", 0x2, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4, @loopback, 0xfffffffd}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 195.171179ms ago: executing program 7 (id=585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 146.826804ms ago: executing program 7 (id=586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 4.259125ms ago: executing program 4 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) keyctl$clear(0x7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45542' (ED25519) to the list of known hosts. [ 41.270564][ T5716] cgroup: Unknown subsys name 'net' [ 41.439920][ T5716] cgroup: Unknown subsys name 'cpuset' [ 41.443733][ T5716] cgroup: Unknown subsys name 'rlimit' [ 41.623366][ T5727] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 41.627790][ T42] kauditd_printk_skb: 33 callbacks suppressed Setting up swapspace version 1, size = 127995904 bytes [ 41.627800][ T42] audit: type=1400 audit(1785449624.866:154): avc: denied { relabelto } for pid=5727 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.638383][ T42] audit: type=1400 audit(1785449624.866:155): avc: denied { write } for pid=5727 comm="mkswap" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.646163][ T42] audit: type=1400 audit(1785449624.876:156): avc: denied { read } for pid=5716 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.654249][ T42] audit: type=1400 audit(1785449624.876:157): avc: denied { open } for pid=5716 comm="syz-executor" path="/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.319917][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.419513][ T42] audit: type=1400 audit(1785449628.656:158): avc: denied { execmem } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.554286][ T42] audit: type=1400 audit(1785449628.786:159): avc: denied { create } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.560531][ T42] audit: type=1400 audit(1785449628.786:160): avc: denied { read write } for pid=5735 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.568115][ T42] audit: type=1400 audit(1785449628.786:161): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.575375][ T42] audit: type=1400 audit(1785449628.786:162): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.585817][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.586526][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.587541][ T42] audit: type=1400 audit(1785449628.796:163): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[6900]" dev="sockfs" ino=6900 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.588566][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.592282][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.592452][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.592814][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.593490][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.593730][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.598000][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.598439][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.599070][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.599515][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.602815][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.604852][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.607463][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.611528][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.612142][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.615130][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.617037][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.619045][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.075794][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.078719][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.081187][ T5736] bridge_slave_0: entered allmulticast mode [ 46.084000][ T5736] bridge_slave_0: entered promiscuous mode [ 46.089041][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.091771][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.094963][ T5736] bridge_slave_1: entered allmulticast mode [ 46.097785][ T5736] bridge_slave_1: entered promiscuous mode [ 46.155698][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.158096][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.160341][ T5737] bridge_slave_0: entered allmulticast mode [ 46.162955][ T5737] bridge_slave_0: entered promiscuous mode [ 46.167056][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.169816][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.172107][ T5737] bridge_slave_1: entered allmulticast mode [ 46.174749][ T5737] bridge_slave_1: entered promiscuous mode [ 46.179936][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.184414][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.233239][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.237368][ T5736] team0: Port device team_slave_0 added [ 46.240929][ T5736] team0: Port device team_slave_1 added [ 46.253486][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.256211][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.260056][ T5735] bridge_slave_0: entered allmulticast mode [ 46.262775][ T5735] bridge_slave_0: entered promiscuous mode [ 46.266066][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.268379][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.270614][ T5735] bridge_slave_1: entered allmulticast mode [ 46.274319][ T5735] bridge_slave_1: entered promiscuous mode [ 46.278267][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.297906][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.300912][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.303834][ T5746] bridge_slave_0: entered allmulticast mode [ 46.307490][ T5746] bridge_slave_0: entered promiscuous mode [ 46.323324][ T5737] team0: Port device team_slave_0 added [ 46.325423][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.328535][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.331474][ T5746] bridge_slave_1: entered allmulticast mode [ 46.335131][ T5746] bridge_slave_1: entered promiscuous mode [ 46.344823][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.347340][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.356099][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.361553][ T5737] team0: Port device team_slave_1 added [ 46.375678][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.380211][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.383552][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.385794][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.393781][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.423910][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.426158][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.434160][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.439129][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.450115][ T5735] team0: Port device team_slave_0 added [ 46.452700][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.454907][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.462634][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.467213][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.478005][ T5735] team0: Port device team_slave_1 added [ 46.503313][ T5746] team0: Port device team_slave_0 added [ 46.521640][ T5736] hsr_slave_0: entered promiscuous mode [ 46.524020][ T5736] hsr_slave_1: entered promiscuous mode [ 46.527295][ T5746] team0: Port device team_slave_1 added [ 46.529430][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.531671][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.540059][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.549477][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.551692][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.559730][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.582072][ T5737] hsr_slave_0: entered promiscuous mode [ 46.584290][ T5737] hsr_slave_1: entered promiscuous mode [ 46.586329][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 46.588172][ T5737] Cannot create hsr debugfs directory [ 46.601316][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.603418][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.610973][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.614925][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.617083][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.624986][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.695079][ T5735] hsr_slave_0: entered promiscuous mode [ 46.697761][ T5735] hsr_slave_1: entered promiscuous mode [ 46.699986][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 46.701790][ T5735] Cannot create hsr debugfs directory [ 46.736935][ T5746] hsr_slave_0: entered promiscuous mode [ 46.739222][ T5746] hsr_slave_1: entered promiscuous mode [ 46.741349][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 46.743153][ T5746] Cannot create hsr debugfs directory [ 46.918566][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.924602][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.931628][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.936381][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.939120][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.942693][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.957559][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.961415][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.001757][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.006466][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.009707][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.013663][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.016300][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.020542][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.023894][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.028474][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.091146][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.095395][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.104361][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.110118][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.114074][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.120096][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.130159][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.134615][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.170117][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.199127][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.202835][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.206943][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.211219][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.214001][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.217559][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.220069][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.224700][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.232192][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.247884][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.251005][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.256151][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.271411][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.273946][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.291294][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.305344][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.308146][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.312830][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.314972][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.339178][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.357128][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.374777][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.377125][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.386938][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.389380][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.400088][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.418848][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.432625][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.434987][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.439687][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.441978][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.574030][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.604973][ T5737] veth0_vlan: entered promiscuous mode [ 47.611095][ T5737] veth1_vlan: entered promiscuous mode [ 47.617927][ T5751] Bluetooth: hci2: command tx timeout [ 47.617994][ T5743] Bluetooth: hci0: command tx timeout [ 47.619900][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.636896][ T5737] veth0_macvtap: entered promiscuous mode [ 47.645935][ T5737] veth1_macvtap: entered promiscuous mode [ 47.664146][ T5735] veth0_vlan: entered promiscuous mode [ 47.668288][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.674580][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.679945][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.685527][ T5735] veth1_vlan: entered promiscuous mode [ 47.688079][ T5743] Bluetooth: hci3: command tx timeout [ 47.698314][ T5743] Bluetooth: hci1: command tx timeout [ 47.710961][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.737728][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.743269][ T5735] veth0_macvtap: entered promiscuous mode [ 47.772493][ T5735] veth1_macvtap: entered promiscuous mode [ 47.782363][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.783684][ T5736] veth0_vlan: entered promiscuous mode [ 47.785768][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.806985][ T5736] veth1_vlan: entered promiscuous mode [ 47.816540][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.825780][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.829591][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.829643][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.835991][ T5746] veth0_vlan: entered promiscuous mode [ 47.846846][ T5746] veth1_vlan: entered promiscuous mode [ 47.848181][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 47.848191][ T42] audit: type=1400 audit(1785449631.086:169): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.858578][ T42] audit: type=1400 audit(1785449631.086:170): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.GrqqBu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.866225][ T42] audit: type=1400 audit(1785449631.086:171): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.873447][ T42] audit: type=1400 audit(1785449631.096:172): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.GrqqBu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.882063][ T42] audit: type=1400 audit(1785449631.096:173): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/syzkaller.GrqqBu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 47.892499][ T42] audit: type=1400 audit(1785449631.096:174): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.894091][ T5736] veth0_macvtap: entered promiscuous mode [ 47.894926][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.898965][ T42] audit: type=1400 audit(1785449631.106:175): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.912862][ T42] audit: type=1400 audit(1785449631.106:176): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="gadgetfs" ino=7981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 47.920397][ T42] audit: type=1400 audit(1785449631.106:177): avc: denied { mount } for pid=5737 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.926446][ T5736] veth1_macvtap: entered promiscuous mode [ 47.927930][ T42] audit: type=1400 audit(1785449631.106:178): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 47.938616][ T5746] veth0_macvtap: entered promiscuous mode [ 47.959145][ T5746] veth1_macvtap: entered promiscuous mode [ 47.965502][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.968532][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.972412][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.981310][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.995961][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.000857][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.003438][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.009582][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.062597][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.065762][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.067539][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.071332][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088366][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.091701][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.100482][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.107667][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.111830][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.139028][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.140186][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.141644][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.144157][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.147788][ T5894] syzkaller0: entered promiscuous mode [ 48.150613][ T5894] syzkaller0: entered allmulticast mode [ 48.157685][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.160638][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.177634][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.180677][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.183532][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.207803][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.210608][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.213419][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.216012][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.219202][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.352288][ T5903] xt_hashlimit: size too large, truncated to 1048576 [ 48.638328][ T5920] ceph: No mds server is up or the cluster is laggy [ 48.641210][ T50] libceph: connect (1)[c::]:6789 error -101 [ 48.643661][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 48.835528][ T5742] bridge0: entered promiscuous mode [ 48.873171][ T5743] Bluetooth: hci2: adv larger than maximum supported [ 49.188741][ T5947] 0: reclassify loop, rule prio 0, protocol 03 [ 49.664458][ T5984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34'. [ 49.667421][ T5984] Zero length message leads to an empty skb [ 49.689124][ T5751] Bluetooth: hci0: command tx timeout [ 49.691156][ T5743] Bluetooth: hci2: command tx timeout [ 49.842318][ T5988] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.35'. [ 49.846183][ T5986] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.35'. [ 49.849942][ T5987] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.35'. [ 50.046283][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36'. [ 50.095372][ T5992] netlink: 'syz.1.37': attribute type 8 has an invalid length. [ 50.098013][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 50.104126][ T5992] bond0: entered promiscuous mode [ 50.105790][ T5992] bond_slave_0: entered promiscuous mode [ 50.108156][ T5992] bond_slave_1: entered promiscuous mode [ 50.112144][ T5992] gretap0: entered promiscuous mode [ 50.115040][ T5992] team0: entered promiscuous mode [ 50.116721][ T5992] team_slave_0: entered promiscuous mode [ 50.119359][ T5992] team_slave_1: entered promiscuous mode [ 50.123096][ T5992] hsr1: entered promiscuous mode [ 50.390198][ T5999] syzkaller0: entered promiscuous mode [ 50.392043][ T5999] syzkaller0: entered allmulticast mode [ 50.397208][ T5999] tipc: Started in network mode [ 50.399197][ T5999] tipc: Node identity 56b742ab1916, cluster identity 4711 [ 50.402122][ T5999] tipc: Enabled bearer , priority 0 [ 50.405339][ T5997] tipc: Resetting bearer [ 50.413183][ T5997] tipc: Disabling bearer [ 50.537181][ T6002] syzkaller0: entered promiscuous mode [ 50.540678][ T6002] syzkaller0: entered allmulticast mode [ 50.817512][ T5751] Bluetooth: hci3: command tx timeout [ 51.185298][ T6009] bond1: (slave ip6gretap1): making interface the new active one [ 51.188477][ T6009] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 51.330424][ T6020] netlink: 84 bytes leftover after parsing attributes in process `syz.3.49'. [ 51.333740][ T6020] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 51.468309][ T34] IPVS: starting estimator thread 0... [ 51.519532][ T5751] Bluetooth: hci0: unexpected cc 0x0c2d length: 5 > 4 [ 51.527758][ T5751] Bluetooth: hci1: command tx timeout [ 51.550874][ T6032] mmap: syz.2.53 (6032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.567358][ T6027] IPVS: using max 44 ests per chain, 105600 per kthread [ 51.767381][ T5751] Bluetooth: hci2: command tx timeout [ 51.988584][ T6050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.61'. [ 51.993494][ T6050] syz_tun: entered allmulticast mode [ 52.001063][ T6049] syz_tun: left allmulticast mode [ 52.128128][ T6058] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 52.346314][ T6072] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 52.347155][ T29] IPVS: starting estimator thread 0... [ 52.389830][ T6072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.70'. [ 52.399966][ T6072] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 52.405794][ T6072] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 52.451220][ T6075] IPVS: using max 27 ests per chain, 64800 per kthread [ 52.556545][ T6087] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.568076][ T6087] xfrm0: entered promiscuous mode [ 52.572082][ T6087] team0: Device xfrm0 is of different type [ 52.586655][ T6087] tipc: Started in network mode [ 52.590375][ T6087] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 52.593130][ T6087] tipc: Enabled bearer , priority 0 [ 52.780834][ T6102] syzkaller0: entered promiscuous mode [ 52.782695][ T6102] syzkaller0: entered allmulticast mode [ 52.793039][ T6100] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 52.795542][ T34] IPVS: starting estimator thread 0... [ 52.799968][ T6103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 52.834494][ T6100] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 52.845426][ T6100] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 52.887799][ T5751] Bluetooth: hci3: command tx timeout [ 52.898311][ T6104] IPVS: using max 44 ests per chain, 105600 per kthread [ 52.903209][ T6108] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 53.001135][ T6111] syzkaller0: entered promiscuous mode [ 53.003013][ T6111] syzkaller0: entered allmulticast mode [ 53.123278][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 53.123288][ T42] audit: type=1400 audit(1785449636.356:233): avc: denied { mount } for pid=6119 comm="syz.0.86" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.132861][ T42] audit: type=1400 audit(1785449636.356:234): avc: denied { mount } for pid=6119 comm="syz.0.86" name="/" dev="configfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.140197][ T42] audit: type=1400 audit(1785449636.356:235): avc: denied { search } for pid=6119 comm="syz.0.86" name="/" dev="configfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.146930][ T42] audit: type=1400 audit(1785449636.356:236): avc: denied { search } for pid=6119 comm="syz.0.86" name="usb_gadget" dev="configfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.147861][ T6120] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.154470][ T42] audit: type=1400 audit(1785449636.356:237): avc: denied { write search } for pid=6119 comm="syz.0.86" name="usb_gadget" dev="configfs" ino=1888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.156191][ T6120] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 53.164761][ T42] audit: type=1400 audit(1785449636.366:238): avc: denied { add_name } for pid=6119 comm="syz.0.86" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.172518][ T6120] audit: backlog limit exceeded [ 53.174706][ T42] audit: type=1400 audit(1785449636.366:239): avc: denied { create } for pid=6119 comm="syz.0.86" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 53.199501][ T6120] Config c/1 of g1 needs at least one function. [ 53.202969][ T6120] udc dummy_udc.0: failed to start g1: -22 [ 53.205432][ T6120] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 53.213929][ T6120] UDC core: g1: couldn't find an available UDC or it's busy [ 53.528336][ T5751] Bluetooth: hci0: command tx timeout [ 53.668779][ T6145] syzkaller0: entered promiscuous mode [ 53.670590][ T6145] syzkaller0: entered allmulticast mode [ 53.709038][ T5818] tipc: Node number set to 11578026 [ 53.847386][ T5751] Bluetooth: hci2: command tx timeout [ 54.078723][ T6181] Config c/1 of g1 needs at least one function. [ 54.081008][ T6181] udc dummy_udc.0: failed to start g1: -22 [ 54.083933][ T6181] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 54.092169][ T6181] UDC core: g1: couldn't find an available UDC or it's busy [ 54.403548][ T5751] Bluetooth: hci2: unexpected cc 0x0c2d length: 5 > 4 [ 54.699581][ T6234] bridge_slave_0: left allmulticast mode [ 54.701553][ T6234] bridge_slave_0: left promiscuous mode [ 54.704288][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.716091][ T6234] bridge_slave_1: left allmulticast mode [ 54.721282][ T6234] bridge_slave_1: left promiscuous mode [ 54.723253][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.732930][ T6234] bond0: (slave veth0_to_bond): Releasing backup interface [ 54.737894][ T6234] bond0: (slave bond_slave_0): Releasing backup interface [ 54.750845][ T6234] bond0: (slave bond_slave_1): Releasing backup interface [ 54.762215][ T6234] team0: Port device team_slave_0 removed [ 54.766653][ T6234] team0: Port device team_slave_1 removed [ 54.770362][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.772765][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.776091][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.778868][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.783615][ T6234] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.803416][ T6237] team0: Port device xfrm0 added [ 54.828313][ T6234] tipc: Enabled bearer , priority 0 [ 54.946128][ T6247] netlink: 'syz.0.138': attribute type 10 has an invalid length. [ 54.949081][ T6247] __nla_validate_parse: 1 callbacks suppressed [ 54.949095][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.138'. [ 54.953880][ T6247] batadv0: entered promiscuous mode [ 54.955602][ T6247] batadv0: entered allmulticast mode [ 54.957949][ T6247] bridge0: port 3(batadv0) entered blocking state [ 54.960108][ T6247] bridge0: port 3(batadv0) entered disabled state [ 54.963846][ T6247] bridge0: port 3(batadv0) entered blocking state [ 54.965974][ T6247] bridge0: port 3(batadv0) entered forwarding state [ 55.008221][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.026566][ T5751] Bluetooth: Unexpected continuation frame (len 16) [ 55.139766][ T5751] Bluetooth: hci3: Malformed LE Event: 0x0d [ 55.178344][ T62] usb 6-1: Using ep0 maxpacket: 32 [ 55.186783][ T62] usb 6-1: config 139 has an invalid interface number: 49 but max is 0 [ 55.191855][ T62] usb 6-1: config 139 has no interface number 0 [ 55.197353][ T62] usb 6-1: config 139 interface 49 has no altsetting 0 [ 55.201807][ T62] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 55.204894][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.207701][ T62] usb 6-1: Product: syz [ 55.210152][ T62] usb 6-1: Manufacturer: syz [ 55.212314][ T62] usb 6-1: SerialNumber: syz [ 55.268110][ T5816] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 55.272137][ T5816] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 55.431334][ T62] radio-usb-si4713 6-1:139.49: Si4713 development board discovered: (10C4:8244) [ 55.444136][ T62] radio-usb-si4713 6-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 55.448574][ T62] usbhid 6-1:139.49: couldn't find an input interrupt endpoint [ 55.459499][ T62] usb 6-1: USB disconnect, device number 2 [ 55.593517][ T6284] syzkaller0: entered promiscuous mode [ 55.595973][ T6284] syzkaller0: entered allmulticast mode [ 55.615930][ T5751] Bluetooth: hci2: Malformed LE Event: 0x0d [ 55.856923][ T5751] Bluetooth: hci3: unexpected cc 0x0c2d length: 5 > 4 [ 55.947350][ T5818] tipc: Node number set to 1335968427 [ 55.957653][ T5751] Bluetooth: hci1: Malformed LE Event: 0x0d [ 56.020232][ T5751] Bluetooth: hci0: Malformed Event: 0x02 [ 56.077333][ T6327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.172'. [ 56.081777][ T6327] syz_tun: entered allmulticast mode [ 56.086652][ T6326] syz_tun: left allmulticast mode [ 56.259161][ T6346] comedi comedi4: bad chanlist[0]=0x0000000d chan=13 range length=2 [ 56.315152][ T6357] comedi comedi2: adq12b: I/O base address or length out of range [ 56.356730][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 56.425472][ T5751] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 56.470566][ T5751] Bluetooth: hci0: connection err: -111 [ 56.503654][ T5751] Bluetooth: hci2: unexpected cc 0x0c2d length: 5 > 4 [ 56.571373][ T6395] ±ÿ: renamed from lo (while UP) [ 56.754005][ T6410] netlink: 44 bytes leftover after parsing attributes in process `syz.2.209'. [ 56.760374][ T6410] syz_tun: entered allmulticast mode [ 56.763951][ T6409] syz_tun: left allmulticast mode [ 56.979859][ T6438] netlink: 44 bytes leftover after parsing attributes in process `syz.3.218'. [ 56.985256][ T6438] syz_tun: entered allmulticast mode [ 56.995693][ T6437] syz_tun: left allmulticast mode [ 57.009040][ T6434] syzkaller0: entered promiscuous mode [ 57.010850][ T6434] syzkaller0: entered allmulticast mode [ 57.211446][ T6465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.231'. [ 57.215857][ T6465] syz_tun: entered allmulticast mode [ 57.219169][ T6461] syz_tun: left allmulticast mode [ 57.226275][ T5751] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 57.461711][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.245'. [ 57.473314][ T6496] syz_tun: entered allmulticast mode [ 57.483717][ T6495] syz_tun: left allmulticast mode [ 57.635439][ T6513] ip_tables: iptables: counters copy to user failed while replacing table [ 57.683671][ T6515] comedi comedi2: adq12b: I/O base address or length out of range [ 57.724357][ T5751] Bluetooth: Unexpected continuation frame (len 16) [ 57.794018][ T6525] netlink: 'syz.0.254': attribute type 12 has an invalid length. [ 57.796526][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'. [ 57.860763][ T6531] tc_dump_action: action bad kind [ 58.128522][ T6548] netlink: 44 bytes leftover after parsing attributes in process `syz.3.265'. [ 58.138507][ T6548] syz_tun: entered allmulticast mode [ 58.144434][ T6547] syz_tun: left allmulticast mode [ 58.265330][ T42] kauditd_printk_skb: 116 callbacks suppressed [ 58.265412][ T42] audit: type=1400 audit(1785449641.496:356): avc: denied { connect } for pid=6553 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.274471][ T42] audit: type=1400 audit(1785449641.506:357): avc: denied { setopt } for pid=6553 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.710557][ T6575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.275'. [ 58.714935][ T6575] syz_tun: entered allmulticast mode [ 58.720159][ T6574] syz_tun: left allmulticast mode [ 59.032871][ T6582] tipc: Enabling not permitted [ 59.035221][ T6582] tipc: Enabling of bearer rejected, failed to enable media [ 59.101376][ T42] audit: type=1400 audit(1785449642.336:358): avc: denied { append } for pid=6585 comm="syz.0.280" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.110494][ T42] audit: type=1400 audit(1785449642.346:359): avc: denied { create } for pid=6585 comm="syz.0.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.348950][ T5751] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 59.405482][ T42] audit: type=1400 audit(1785449642.636:360): avc: denied { append } for pid=6593 comm="syz.3.284" name="cec0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.580658][ T42] audit: type=1400 audit(1785449642.816:361): avc: denied { name_bind } for pid=6608 comm="syz.1.291" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 59.683651][ T42] audit: type=1400 audit(1785449642.916:362): avc: denied { map } for pid=6615 comm="syz.3.294" path="/dev/vbi5" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 59.762382][ T42] audit: type=1400 audit(1785449642.996:363): avc: denied { read } for pid=6627 comm="syz.1.300" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.770888][ T5751] Bluetooth: hci3: adv larger than maximum supported [ 59.770912][ T5751] Bluetooth: hci3: Malformed LE Event: 0x0d [ 59.779849][ T42] audit: type=1400 audit(1785449643.016:364): avc: denied { open } for pid=6627 comm="syz.1.300" path="/dev/rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.789452][ T42] audit: type=1400 audit(1785449643.016:365): avc: denied { ioctl } for pid=6627 comm="syz.1.300" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.129739][ T6654] hid-generic 0003:0627:0001.0001: pid 6654 passed too short report [ 60.190141][ T5751] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 60.277416][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 60.281020][ T6671] block nbd0: not configured, cannot reconfigure [ 60.307850][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 60.325284][ T5751] Bluetooth: hci2: unexpected cc 0x0c2d length: 5 > 4 [ 60.470392][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.473672][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 60.476493][ T24] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 60.479447][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.488561][ T24] usb 7-1: config 0 descriptor?? [ 60.494182][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 60.496533][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 60.504766][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 60.507988][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 60.510262][ T24] usb 7-1: media controller created [ 60.513065][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.524830][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 60.527793][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 60.532744][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 60.540545][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 60.542818][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 60.698632][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 60.699339][ T34] usb 7-1: USB disconnect, device number 2 [ 60.700967][ T24] dvb-usb: error while querying for an remote control event. [ 60.725689][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 62.221397][ T5751] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 62.398396][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.409397][ T5751] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 62.409822][ T5751] Bluetooth: hci2: Malformed LE Event: 0x02 [ 62.557348][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 62.565541][ T50] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 62.571309][ T50] usb 8-1: config 0 has no interface number 0 [ 62.573287][ T50] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 62.593712][ T50] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 62.609898][ T50] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 62.626486][ T50] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.650393][ T50] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 62.665406][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.688240][ T50] usb 8-1: Product: syz [ 62.689647][ T50] usb 8-1: Manufacturer: syz [ 62.697330][ T50] usb 8-1: SerialNumber: syz [ 62.702770][ T6714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.335'. [ 62.710581][ T50] usb 8-1: config 0 descriptor?? [ 62.720759][ T6714] syz_tun: entered allmulticast mode [ 62.724031][ T6706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.740616][ T50] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input6 [ 62.758391][ T5132] usb 8-1: BOGUS urb xfer, pipe 1 != type 3 [ 62.893841][ T6713] syz_tun: left allmulticast mode [ 63.031081][ T849] usb 8-1: USB disconnect, device number 2 [ 63.286329][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 63.286341][ T42] audit: type=1400 audit(1785449646.516:373): avc: denied { mount } for pid=6727 comm="syz.0.341" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 63.305954][ T42] audit: type=1400 audit(1785449646.536:374): avc: denied { search } for pid=6727 comm="syz.0.341" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 63.336123][ T42] audit: type=1400 audit(1785449646.536:375): avc: denied { write } for pid=6727 comm="syz.0.341" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 63.361971][ T42] audit: type=1400 audit(1785449646.536:376): avc: denied { open } for pid=6727 comm="syz.0.341" path="/75/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 66.984439][ C0] sched: DL replenish lagged too much [ 72.823874][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.833684][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.371504][ T1046] cfg80211: failed to load regulatory.db [ 91.191778][ T42] audit: type=1400 audit(1785449673.196:377): avc: denied { execute } for pid=6730 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 92.419750][ T42] audit: type=1400 audit(1785449675.586:378): avc: denied { execute_no_trans } for pid=6730 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 115.514880][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.529293][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.534778][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.538547][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.541240][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.542364][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.550748][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.553925][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.554121][ T5754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.558605][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.561523][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.563630][ T5754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.570108][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.574069][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.578612][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.579354][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.585409][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.585604][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.588585][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.599782][ T5744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.940903][ T5816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.046119][ T5816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.147903][ T5816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.192252][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.194769][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.197111][ T6745] bridge_slave_0: entered allmulticast mode [ 116.202224][ T6745] bridge_slave_0: entered promiscuous mode [ 116.205617][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.207963][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.210298][ T6745] bridge_slave_1: entered allmulticast mode [ 116.212959][ T6745] bridge_slave_1: entered promiscuous mode [ 116.251075][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.253435][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.255761][ T6752] bridge_slave_0: entered allmulticast mode [ 116.259512][ T6752] bridge_slave_0: entered promiscuous mode [ 116.266332][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.269145][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.271440][ T6747] bridge_slave_0: entered allmulticast mode [ 116.274198][ T6747] bridge_slave_0: entered promiscuous mode [ 116.288409][ T5816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.305105][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.307550][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.310005][ T6752] bridge_slave_1: entered allmulticast mode [ 116.313061][ T6752] bridge_slave_1: entered promiscuous mode [ 116.326611][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.328987][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.331273][ T6747] bridge_slave_1: entered allmulticast mode [ 116.335766][ T6747] bridge_slave_1: entered promiscuous mode [ 116.339983][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.358775][ T6749] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.361117][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.363427][ T6749] bridge_slave_0: entered allmulticast mode [ 116.366102][ T6749] bridge_slave_0: entered promiscuous mode [ 116.370169][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.374393][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.383046][ T6749] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.385872][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.388613][ T6749] bridge_slave_1: entered allmulticast mode [ 116.391353][ T6749] bridge_slave_1: entered promiscuous mode [ 116.410468][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.420032][ T6747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.432743][ T6749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.448175][ T6747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.454225][ T6749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.464656][ T6745] team0: Port device team_slave_0 added [ 116.467797][ T6752] team0: Port device team_slave_0 added [ 116.471045][ T6752] team0: Port device team_slave_1 added [ 116.494330][ T6745] team0: Port device team_slave_1 added [ 116.517923][ T6747] team0: Port device team_slave_0 added [ 116.531269][ T6749] team0: Port device team_slave_0 added [ 116.535855][ T6749] team0: Port device team_slave_1 added [ 116.562111][ T6747] team0: Port device team_slave_1 added [ 116.578269][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.581294][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.589614][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.594298][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.596615][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.604797][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.619871][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.622090][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.630235][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.653120][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.655368][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.663422][ T6749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.668229][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.670555][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.678735][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.702424][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.704651][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.712910][ T6747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.717724][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.720001][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.728463][ T6747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.732389][ T6749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.734651][ T6749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.743244][ T6749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.769549][ T6752] hsr_slave_0: entered promiscuous mode [ 116.771814][ T6752] hsr_slave_1: entered promiscuous mode [ 116.773896][ T6752] debugfs: 'hsr0' already exists in 'hsr' [ 116.775813][ T6752] Cannot create hsr debugfs directory [ 116.814021][ T5816] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.837129][ T6745] hsr_slave_0: entered promiscuous mode [ 116.839620][ T6745] hsr_slave_1: entered promiscuous mode [ 116.841805][ T6745] debugfs: 'hsr0' already exists in 'hsr' [ 116.843645][ T6745] Cannot create hsr debugfs directory [ 116.848315][ T6749] hsr_slave_0: entered promiscuous mode [ 116.851040][ T6749] hsr_slave_1: entered promiscuous mode [ 116.853573][ T6749] debugfs: 'hsr0' already exists in 'hsr' [ 116.855793][ T6749] Cannot create hsr debugfs directory [ 116.869552][ T42] audit: type=1400 audit(1785449700.106:379): avc: denied { search } for pid=5449 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.877460][ T42] audit: type=1400 audit(1785449700.106:380): avc: denied { search } for pid=5449 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.888825][ T42] audit: type=1400 audit(1785449700.106:381): avc: denied { search } for pid=5449 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.944322][ T6747] hsr_slave_0: entered promiscuous mode [ 116.947615][ T6747] hsr_slave_1: entered promiscuous mode [ 116.950419][ T6747] debugfs: 'hsr0' already exists in 'hsr' [ 116.952671][ T6747] Cannot create hsr debugfs directory [ 116.985620][ T5816] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.003367][ T42] audit: type=1400 audit(1785449700.236:382): avc: denied { read } for pid=6815 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.011248][ T42] audit: type=1400 audit(1785449700.236:383): avc: denied { read open } for pid=6815 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.020709][ T42] audit: type=1400 audit(1785449700.236:384): avc: denied { getattr } for pid=6815 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.029650][ T42] audit: type=1400 audit(1785449700.256:385): avc: denied { write } for pid=6814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.038852][ T42] audit: type=1400 audit(1785449700.256:386): avc: denied { add_name } for pid=6814 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.045756][ T42] audit: type=1400 audit(1785449700.256:387): avc: denied { create } for pid=6814 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.053474][ T42] audit: type=1400 audit(1785449700.256:388): avc: denied { write } for pid=6814 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=3464 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 117.096308][ T5816] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.107623][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.177783][ T5816] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.249625][ T6752] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.254173][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.256888][ T6752] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.261299][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.264250][ T6752] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 117.269092][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.271702][ T6752] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 117.275317][ T6752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.349606][ T6745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.357097][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.360511][ T6745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.364495][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.367768][ T6745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.372193][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.376438][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 117.388136][ T5816] bridge_slave_1: left allmulticast mode [ 117.390776][ T5816] bridge_slave_1: left promiscuous mode [ 117.394058][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.400331][ T5816] bridge_slave_0: left allmulticast mode [ 117.402600][ T5816] bridge_slave_0: left promiscuous mode [ 117.404916][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.458719][ T5816] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 117.481945][ T5816] team0: Port device xfrm0 removed [ 117.511484][ T5816] bond0 (unregistering): Released all slaves [ 117.516057][ T5816] bond1 (unregistering): Released all slaves [ 117.573511][ T5816] gretap0 (unregistering): left promiscuous mode [ 117.591895][ T5816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.594915][ T5816] bond_slave_0: left promiscuous mode [ 117.598465][ T5816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.601522][ T5816] bond_slave_1: left promiscuous mode [ 117.603777][ T5816] bond0 (unregistering): Released all slaves [ 117.607825][ T5753] Bluetooth: hci0: command tx timeout [ 117.607836][ T5743] Bluetooth: hci1: command tx timeout [ 117.633504][ T6745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.639316][ T6745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.658297][ T61] tipc: Resetting bearer [ 117.688499][ T5753] Bluetooth: hci5: command tx timeout [ 117.688561][ T5743] Bluetooth: hci4: command tx timeout [ 117.716225][ T6749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.731806][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.735297][ T6749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.744414][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.747905][ T6749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.754779][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.758594][ T5816] tipc: Disabling bearer [ 117.760974][ T5816] tipc: Left network mode [ 117.779694][ T6749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.783632][ T6749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.793048][ T5816] tipc: Disabling bearer [ 117.794979][ T5816] tipc: Left network mode [ 117.820933][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.824255][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 117.887064][ T6747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 117.893065][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.896170][ T6747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 117.901382][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.904870][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.911764][ T6747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 117.919272][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.923260][ T6747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 117.930063][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.969279][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.972051][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.989740][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.992587][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.000606][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.024804][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.066161][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 118.071023][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.073235][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.083716][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.085973][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.105506][ T6752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.159278][ T6749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.177996][ T6747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.184629][ T6749] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.194674][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.196916][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.201822][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.214606][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.216792][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.221974][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.224292][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.240115][ T5816] hsr_slave_0: left promiscuous mode [ 118.242696][ T5816] hsr_slave_1: left promiscuous mode [ 118.245647][ T5816] team0: left promiscuous mode [ 118.247167][ T5816] team_slave_0: left promiscuous mode [ 118.249080][ T5816] team_slave_1: left promiscuous mode [ 118.254557][ T5816] hsr_slave_0: left promiscuous mode [ 118.256632][ T5816] hsr_slave_1: left promiscuous mode [ 118.260845][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.263199][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.266026][ T5816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.269327][ T5816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.280161][ T5816] veth1_macvtap: left promiscuous mode [ 118.282002][ T5816] veth0_macvtap: left promiscuous mode [ 118.283729][ T5816] veth1_vlan: left promiscuous mode [ 118.285387][ T5816] veth0_vlan: left promiscuous mode [ 118.288984][ T5816] veth1_macvtap: left promiscuous mode [ 118.291213][ T5816] veth0_macvtap: left promiscuous mode [ 118.292974][ T5816] veth1_vlan: left promiscuous mode [ 118.294610][ T5816] veth0_vlan: left promiscuous mode [ 118.568585][ T5816] team0 (unregistering): Port device team_slave_1 removed [ 118.576022][ T5816] team0 (unregistering): Port device team_slave_0 removed [ 118.632117][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.634374][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.642997][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 118.722113][ T6747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.768719][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.853237][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.946234][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 118.949068][ T6752] veth0_vlan: entered promiscuous mode [ 118.956224][ T6752] veth1_vlan: entered promiscuous mode [ 118.977106][ T6747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.980492][ T6752] veth0_macvtap: entered promiscuous mode [ 118.987233][ T6752] veth1_macvtap: entered promiscuous mode [ 118.998823][ T6749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.018935][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.027466][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.067539][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.073239][ T6745] veth0_vlan: entered promiscuous mode [ 119.085885][ T6745] veth1_vlan: entered promiscuous mode [ 119.123601][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 119.138771][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.141318][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.154979][ T6745] veth0_macvtap: entered promiscuous mode [ 119.170290][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.170780][ T6745] veth1_macvtap: entered promiscuous mode [ 119.172821][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.196557][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.202825][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.208593][ T6831] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.214315][ T6747] veth0_vlan: entered promiscuous mode [ 119.240591][ T6747] veth1_vlan: entered promiscuous mode [ 119.245702][ T6749] veth0_vlan: entered promiscuous mode [ 119.257528][ T6875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.262075][ T6875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.268844][ T5816] IPVS: stop unused estimator thread 0... [ 119.269580][ T6749] veth1_vlan: entered promiscuous mode [ 119.296161][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.297863][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.298754][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.304996][ T6747] veth0_macvtap: entered promiscuous mode [ 119.319669][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 119.325763][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.325800][ T6747] veth1_macvtap: entered promiscuous mode [ 119.329507][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.332939][ T6749] veth0_macvtap: entered promiscuous mode [ 119.339074][ T6749] veth1_macvtap: entered promiscuous mode [ 119.350355][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.354493][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.360032][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.366879][ T6749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.409444][ T6875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.434937][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.438432][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.455389][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.460856][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.469777][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.472111][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.494217][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.496554][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.498511][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.508512][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.520985][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.538479][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.538543][ T5742] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 119.549862][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.559041][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.565448][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.567021][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.349'. [ 119.568221][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.568243][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.568261][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.609912][ T6978] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 119.613292][ T6978] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 119.641169][ T6980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.644064][ T6980] IPv6: NLM_F_CREATE should be set when creating new route [ 119.689061][ T5743] Bluetooth: hci0: command tx timeout [ 119.689454][ T5753] Bluetooth: hci1: command tx timeout [ 119.707449][ T5742] usb 12-1: Using ep0 maxpacket: 16 [ 119.711832][ T5742] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.715700][ T5742] usb 12-1: config 0 has no interfaces? [ 119.719640][ T5742] usb 12-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 119.722960][ T5742] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.725833][ T5742] usb 12-1: Product: syz [ 119.727128][ T5742] usb 12-1: Manufacturer: syz [ 119.728796][ T5742] usb 12-1: SerialNumber: syz [ 119.732707][ T5742] usb 12-1: config 0 descriptor?? [ 119.767648][ T5753] Bluetooth: hci5: command tx timeout [ 119.769294][ T5743] Bluetooth: hci4: command tx timeout [ 119.945095][ T24] usb 12-1: USB disconnect, device number 2 [ 120.271806][ T6991] webusb: landingPage URL too long [ 120.557484][ T849] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 120.707367][ T849] usb 10-1: Using ep0 maxpacket: 8 [ 120.710321][ T849] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 120.713021][ T849] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.716126][ T849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.719910][ T849] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.723612][ T849] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.729305][ T849] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.732211][ T849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.802847][ T7015] warning: `syz.6.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.871376][ T7023] pim6reg1: entered promiscuous mode [ 120.873142][ T7023] pim6reg1: entered allmulticast mode [ 120.942888][ T849] usb 10-1: usb_control_msg returned -32 [ 120.945059][ T849] usbtmc 10-1:16.0: can't read capabilities [ 121.148661][ T7041] syz.6.374 (7041): drop_caches: 2 [ 121.325818][ T7059] syz.6.381 uses obsolete (PF_INET,SOCK_PACKET) [ 121.649711][ T7084] usbtmc 10-1:16.0: usb_clear_halt returned -32 [ 121.767375][ T5743] Bluetooth: hci0: command tx timeout [ 121.778596][ T5743] Bluetooth: hci1: command tx timeout [ 121.847382][ T5743] Bluetooth: hci4: command tx timeout [ 121.847547][ T5753] Bluetooth: hci5: command tx timeout [ 121.850523][ T5742] usb 10-1: USB disconnect, device number 2 [ 122.013866][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 122.013882][ T42] audit: type=1400 audit(1785449705.246:430): avc: denied { connect } for pid=7095 comm="syz.7.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.014842][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.397'. [ 122.016276][ T42] audit: type=1400 audit(1785449705.246:431): avc: denied { write } for pid=7095 comm="syz.7.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.109849][ T7098] i2c i2c-0: delete_device: Can't find device in list [ 122.224145][ T7100] kvm: pic: non byte write [ 122.433730][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 122.480140][ T42] audit: type=1400 audit(1785449705.716:432): avc: denied { read write } for pid=7107 comm="syz.5.402" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.487190][ T42] audit: type=1400 audit(1785449705.716:433): avc: denied { open } for pid=7107 comm="syz.5.402" path="/4/file0/file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.498423][ T42] audit: type=1400 audit(1785449705.736:434): avc: denied { ioctl } for pid=7107 comm="syz.5.402" path="/4/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 122.585774][ T42] audit: type=1400 audit(1785449705.816:435): avc: denied { create } for pid=7114 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.598305][ T42] audit: type=1400 audit(1785449705.836:436): avc: denied { write } for pid=7114 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.604726][ T42] audit: type=1400 audit(1785449705.836:437): avc: denied { nlmsg_write } for pid=7114 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.611353][ T42] audit: type=1400 audit(1785449705.836:438): avc: denied { setopt } for pid=7116 comm="syz.6.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 122.872470][ T42] audit: type=1400 audit(1785449706.106:439): avc: denied { mount } for pid=7129 comm="syz.6.411" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 123.108375][ T41] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 123.204563][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.418'. [ 123.258707][ T41] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 123.267443][ T41] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 123.275116][ T41] usb 11-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 123.278829][ T41] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.281274][ T41] usb 11-1: Product: syz [ 123.282595][ T41] usb 11-1: Manufacturer: syz [ 123.284103][ T41] usb 11-1: SerialNumber: syz [ 123.288614][ T7130] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 123.297019][ T7130] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 123.305480][ T41] kl5kusb105 11-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 123.322782][ T41] usb 11-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 123.324805][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.570866][ C3] kl5kusb105d ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 123.687842][ T62] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 123.837640][ T62] usb 12-1: Using ep0 maxpacket: 8 [ 123.840540][ T62] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 123.843201][ T62] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.846254][ T62] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.850263][ T62] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.853441][ T62] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.857482][ T5753] Bluetooth: hci1: command tx timeout [ 123.857862][ T62] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.858113][ T5743] Bluetooth: hci0: command tx timeout [ 123.864315][ T62] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.894078][ T7164] bridge_slave_0: left allmulticast mode [ 123.896253][ T7164] bridge_slave_0: left promiscuous mode [ 123.899767][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.905534][ T7164] bridge_slave_1: left allmulticast mode [ 123.907481][ T7164] bridge_slave_1: left promiscuous mode [ 123.910748][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.919429][ T7164] bond0: (slave bond_slave_0): Releasing backup interface [ 123.926033][ T7164] bond0: (slave bond_slave_1): Releasing backup interface [ 123.928436][ T5753] Bluetooth: hci5: command tx timeout [ 123.937343][ T5753] Bluetooth: hci4: command tx timeout [ 123.939526][ T7164] team0: Port device team_slave_0 removed [ 123.944911][ T7164] team0: Port device team_slave_1 removed [ 123.947562][ T7164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.949950][ T7164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.953283][ T7164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.955711][ T7164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.959975][ T7164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.078766][ T62] usb 12-1: usb_control_msg returned -32 [ 124.080644][ T62] usbtmc 12-1:16.0: can't read capabilities [ 124.838375][ T7169] usbtmc 12-1:16.0: usb_control_msg returned -32 [ 125.042581][ T62] usb 12-1: USB disconnect, device number 3 [ 125.575970][ T7173] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.647885][ T7158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.926375][ T7202] netlink: 'syz.5.432': attribute type 1 has an invalid length. [ 127.007451][ T5832] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 127.159903][ T5832] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 127.162474][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.166086][ T5832] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.169735][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.173390][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.179228][ T5832] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 127.182060][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.185592][ T5832] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.189661][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.193301][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.198324][ T5832] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 127.201111][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 127.204705][ T5832] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.208482][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 127.212121][ T5832] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 127.219330][ T5832] usb 9-1: string descriptor 0 read error: -22 [ 127.221461][ T5832] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.224589][ T5832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.240547][ T5832] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 127.545921][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 127.545938][ T42] audit: type=1400 audit(1785449710.776:450): avc: denied { setopt } for pid=7204 comm="syz.7.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.547942][ T6734] IPVS: starting estimator thread 0... [ 127.637353][ T7207] IPVS: using max 44 ests per chain, 105600 per kthread [ 128.459715][ T7214] netlink: 'syz.7.436': attribute type 1 has an invalid length. [ 128.823337][ T7129] kl5kusb105d ttyUSB0: failed to disable read: -110 [ 128.831429][ T5832] usb 11-1: USB disconnect, device number 2 [ 128.849257][ T42] audit: type=1400 audit(1785449712.086:451): avc: denied { unmount } for pid=6747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 128.861327][ T5832] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 128.867412][ T5832] kl5kusb105 11-1:1.0: device disconnected [ 129.036037][ T42] audit: type=1400 audit(1785449712.266:452): avc: denied { create } for pid=7226 comm="syz.6.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.037162][ T5816] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 129.114338][ T42] audit: type=1400 audit(1785449712.346:453): avc: denied { allowed } for pid=7237 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.223518][ T42] audit: type=1400 audit(1785449712.456:454): avc: denied { read } for pid=7244 comm="syz.7.445" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.235943][ T42] audit: type=1400 audit(1785449712.456:455): avc: denied { open } for pid=7244 comm="syz.7.445" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.243817][ T42] audit: type=1400 audit(1785449712.466:456): avc: denied { ioctl } for pid=7244 comm="syz.7.445" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.255403][ T42] audit: type=1400 audit(1785449712.466:457): avc: denied { set_context_mgr } for pid=7244 comm="syz.7.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.262718][ T42] audit: type=1400 audit(1785449712.476:458): avc: denied { write } for pid=7244 comm="syz.7.445" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.272924][ T42] audit: type=1400 audit(1785449712.476:459): avc: denied { map } for pid=7244 comm="syz.7.445" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.517703][ T7252] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.521427][ T7252] block device autoloading is deprecated and will be removed. [ 129.611180][ T50] usb 9-1: USB disconnect, device number 2 [ 129.875739][ T7261] netlink: 'syz.4.451': attribute type 10 has an invalid length. [ 129.880816][ T7261] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.884032][ T7261] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.461323][ T7275] netlink: 44 bytes leftover after parsing attributes in process `syz.7.452'. [ 130.466251][ T7275] syz_tun: entered allmulticast mode [ 130.469275][ T7273] syz_tun: left allmulticast mode [ 131.771955][ T7328] netlink: 44 bytes leftover after parsing attributes in process `syz.7.462'. [ 131.776142][ T7328] syz_tun: entered allmulticast mode [ 131.779425][ T7328] syz_tun: left allmulticast mode [ 131.807446][ T7330] netlink: 'syz.7.463': attribute type 4 has an invalid length. [ 131.815905][ T7330] netlink: 'syz.7.463': attribute type 4 has an invalid length. [ 131.848070][ T5887] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.953275][ T7227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.993967][ T7341] e1000e 0000:00:02.0 eth1: removed PHC [ 132.020733][ T5887] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 132.023725][ T5887] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 132.031119][ T5887] usb 9-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 132.034156][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.036586][ T5887] usb 9-1: Product: syz [ 132.038047][ T5887] usb 9-1: Manufacturer: syz [ 132.039704][ T5887] usb 9-1: SerialNumber: syz [ 132.044264][ T7322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.046596][ T7322] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.050059][ T5887] kl5kusb105 9-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 132.055282][ T5887] usb 9-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 132.103435][ T7345] md: superblock version 12389 not known [ 132.107153][ T7345] md: couldn't set array info. -22 [ 132.109431][ T7341] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 132.282470][ T7348] cdns2-pci 0000:00:02.0: probe with driver cdns2-pci failed with error -22 [ 132.333919][ C0] kl5kusb105d ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 132.375969][ T7372] netlink: 44 bytes leftover after parsing attributes in process `syz.6.472'. [ 132.651622][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.653961][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.827425][ T7378] syz_tun: entered allmulticast mode [ 133.829578][ T7379] syz_tun: left allmulticast mode [ 133.887528][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 133.887540][ T42] audit: type=1400 audit(1785449717.126:500): avc: denied { write } for pid=7381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.900509][ T7387] netlink: 'syz.6.473': attribute type 4 has an invalid length. [ 133.926047][ T7387] netlink: 'syz.6.473': attribute type 4 has an invalid length. [ 133.934958][ T42] audit: type=1400 audit(1785449717.166:501): avc: denied { bind } for pid=7389 comm="syz.7.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.980402][ T42] audit: type=1400 audit(1785449717.216:502): avc: denied { write } for pid=7391 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.030521][ T42] audit: type=1400 audit(1785449717.266:503): avc: denied { read write } for pid=7395 comm="syz.6.476" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 134.030642][ T7397] syzkaller0: entered promiscuous mode [ 134.074313][ T7397] syzkaller0: entered allmulticast mode [ 134.093637][ T42] audit: type=1400 audit(1785449717.266:504): avc: denied { open } for pid=7395 comm="syz.6.476" path="/31/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 134.111837][ T42] audit: type=1400 audit(1785449717.316:505): avc: denied { ioctl } for pid=7395 comm="syz.6.476" path="/31/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 134.136577][ T42] audit: type=1400 audit(1785449717.366:506): avc: denied { write } for pid=7399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.153270][ T7402] netlink: 'syz.5.478': attribute type 39 has an invalid length. [ 134.193787][ T42] audit: type=1400 audit(1785449717.426:507): avc: denied { write } for pid=7406 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.314224][ T42] audit: type=1400 audit(1785449717.546:508): avc: denied { write } for pid=7411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.366462][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.386197][ T42] audit: type=1400 audit(1785449717.616:509): avc: denied { write } for pid=7419 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.438137][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.494035][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.085455][ T5816] syzkaller0: tun_net_xmit 76 [ 135.089143][ T7452] syzkaller0: tun_net_xmit 1500 [ 135.093015][ T5816] syzkaller0: tun_net_xmit 48 [ 135.129390][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 135.277664][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 135.280597][ T29] usb 10-1: config 0 has no interfaces? [ 135.282389][ T29] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 135.285447][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.294051][ T29] usb 10-1: config 0 descriptor?? [ 136.933674][ T7465] binder: 7464:7465 ioctl c0306201 200000000180 returned -14 [ 137.033650][ T7467] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 137.047036][ T7467] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 137.050497][ T7467] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 137.055938][ T7467] kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 137.060293][ T7467] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 137.064284][ T7467] kvm: requested 195276 ns i8254 timer period limited to 200000 ns [ 137.068273][ T7467] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 137.073519][ T7467] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 137.076944][ T7467] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 137.081015][ T7467] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 137.608422][ T7321] kl5kusb105d ttyUSB0: failed to disable read: -110 [ 137.623499][ T5891] usb 9-1: USB disconnect, device number 3 [ 137.635919][ T5891] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 137.639664][ T5891] kl5kusb105 9-1:1.0: device disconnected [ 137.895193][ T5742] usb 10-1: USB disconnect, device number 3 [ 138.068298][ T7499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 138.273924][ T7507] netlink: 44 bytes leftover after parsing attributes in process `syz.6.509'. [ 138.280897][ T7507] syz_tun: entered allmulticast mode [ 138.288779][ T7506] syz_tun: left allmulticast mode [ 138.481638][ T7515] MTRR 0 not used [ 138.497666][ T7512] md: superblock version 12389 not known [ 138.499548][ T7512] md: couldn't set array info. -22 [ 138.921828][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 138.921861][ T42] audit: type=1400 audit(1785449722.156:525): avc: denied { map } for pid=7527 comm="syz.7.516" path="socket:[18285]" dev="sockfs" ino=18285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.975097][ T42] audit: type=1400 audit(1785449722.206:526): avc: denied { sqpoll } for pid=7527 comm="syz.7.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.067331][ T5742] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 139.220008][ T5742] usb 9-1: Using ep0 maxpacket: 8 [ 139.224924][ T5742] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 139.228203][ T5742] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.231481][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.234506][ T5742] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.237899][ T5742] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.242052][ T5742] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.244953][ T5742] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.457946][ T5742] usb 9-1: usb_control_msg returned -32 [ 139.459803][ T5742] usbtmc 9-1:16.0: can't read capabilities [ 139.722749][ T7537] netlink: 44 bytes leftover after parsing attributes in process `syz.5.518'. [ 139.726961][ T7537] syz_tun: entered allmulticast mode [ 139.729945][ T7536] syz_tun: left allmulticast mode [ 139.997592][ T1352] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 140.092685][ T7572] netlink: 'syz.6.524': attribute type 10 has an invalid length. [ 140.095726][ T7572] syz_tun: entered promiscuous mode [ 140.101343][ T7572] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 140.111363][ T5816] bond0: (slave bond_slave_0): interface is now down [ 140.116881][ T5816] bond0: (slave bond_slave_1): interface is now down [ 140.119757][ T5816] bond0: (slave syz_tun): interface is now down [ 140.125417][ T5816] bond0: now running without any active interface! [ 140.157436][ T1352] usb 10-1: Using ep0 maxpacket: 16 [ 140.162174][ T1352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.166859][ T1352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 140.171410][ T1352] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 140.175385][ T1352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.182357][ T1352] usb 10-1: config 0 descriptor?? [ 140.241099][ T7574] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 140.293581][ T42] audit: type=1400 audit(1785449723.526:527): avc: denied { transfer } for pid=7579 comm="syz.6.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.332355][ T7584] netlink: 'syz.7.527': attribute type 39 has an invalid length. [ 140.442784][ T62] usb 9-1: USB disconnect, device number 4 [ 140.491758][ T1352] usbhid 10-1:0.0: can't add hid device: -71 [ 140.493822][ T1352] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 140.508348][ T1352] usb 10-1: USB disconnect, device number 4 [ 140.534277][ T7592] netlink: 44 bytes leftover after parsing attributes in process `syz.7.530'. [ 140.540746][ T7592] syz_tun: entered allmulticast mode [ 140.543345][ T7591] syz_tun: left allmulticast mode [ 140.596335][ T42] audit: type=1400 audit(1785449723.826:528): avc: denied { connect } for pid=7595 comm="syz.7.532" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.154353][ T7609] overlayfs: missing 'lowerdir' [ 141.159422][ T42] audit: type=1400 audit(1785449724.396:529): avc: denied { write } for pid=7608 comm="syz.5.536" name="functions" dev="configfs" ino=9838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.166912][ T42] audit: type=1400 audit(1785449724.396:530): avc: denied { create } for pid=7608 comm="syz.5.536" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 141.177117][ T5753] Bluetooth: hci4: adv larger than maximum supported [ 141.177142][ T5753] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 141.179658][ T5753] Bluetooth: hci4: Malformed LE Event: 0x0d [ 141.214103][ T7616] netlink: 44 bytes leftover after parsing attributes in process `syz.5.539'. [ 141.220761][ T7616] syz_tun: entered allmulticast mode [ 141.223167][ T7613] syz_tun: left allmulticast mode [ 141.260116][ T42] audit: type=1400 audit(1785449724.496:531): avc: denied { write } for pid=7618 comm="syz.5.540" name="functions" dev="configfs" ino=9838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.271350][ T7619] usbip-vudc usbip-vudc.0: gadget not bound [ 141.278160][ T42] audit: type=1400 audit(1785449724.506:532): avc: denied { write } for pid=7618 comm="syz.5.540" name="c.1" dev="configfs" ino=9848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.278943][ T5816] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 141.289541][ T42] audit: type=1400 audit(1785449724.506:533): avc: denied { write } for pid=7618 comm="syz.5.540" name="c.1" dev="configfs" ino=9848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.886512][ T7646] ======================================================= [ 142.886512][ T7646] WARNING: The mand mount option has been deprecated and [ 142.886512][ T7646] and is ignored by this kernel. Remove the mand [ 142.886512][ T7646] option from the mount to silence this warning. [ 142.886512][ T7646] ======================================================= [ 142.950655][ T7648] netlink: 44 bytes leftover after parsing attributes in process `syz.5.549'. [ 142.954547][ T7648] syz_tun: entered allmulticast mode [ 142.958399][ T7647] syz_tun: left allmulticast mode [ 143.114877][ T42] audit: type=1400 audit(1785449726.346:534): avc: denied { create } for pid=7651 comm="syz.5.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.119027][ T5891] IPVS: starting estimator thread 0... [ 143.208531][ T7653] IPVS: using max 43 ests per chain, 103200 per kthread [ 143.214009][ T7655] create_pit_timer: 96 callbacks suppressed [ 143.214021][ T7655] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 143.219848][ T7655] kvm: requested 115657 ns i8254 timer period limited to 200000 ns [ 143.227216][ T7655] kvm: requested 108952 ns i8254 timer period limited to 200000 ns [ 143.231089][ T7655] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 143.234981][ T7655] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 143.238662][ T7655] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 143.242752][ T7655] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 143.246301][ T7655] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 143.252188][ T7655] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 143.255914][ T7655] kvm: requested 90514 ns i8254 timer period limited to 200000 ns [ 144.214918][ T7612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.305048][ T7672] netlink: 44 bytes leftover after parsing attributes in process `syz.4.558'. [ 144.309147][ T7672] syz_tun: entered allmulticast mode [ 144.311840][ T7671] syz_tun: left allmulticast mode [ 144.321656][ T7675] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 144.547343][ T5891] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 144.710210][ T5891] usb 11-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 144.713384][ T5891] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.716366][ T5891] usb 11-1: Product: syz [ 144.718199][ T5891] usb 11-1: Manufacturer: syz [ 144.719911][ T5891] usb 11-1: SerialNumber: syz [ 144.729792][ T5891] i2c-tiny-usb 11-1:1.0: version 1.00 found at bus 011 address 003 [ 145.030697][ T5891] (null): failure reading functionality [ 145.045018][ T5891] i2c i2c-2: failure reading functionality [ 145.053530][ T5891] i2c i2c-2: connected i2c-tiny-usb device [ 145.128440][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.844352][ T7705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.887136][ T29] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 145.891664][ T29] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 145.900984][ T1167] wlan1: authenticated [ 145.902717][ T7705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.920901][ T1167] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 145.962734][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.965983][ T1167] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 145.968864][ T1167] wlan1: associated [ 146.604349][ T7711] kvm: pic: non byte write [ 146.610081][ T7714] netlink: 44 bytes leftover after parsing attributes in process `syz.5.569'. [ 146.615007][ T7714] syz_tun: entered allmulticast mode [ 146.620087][ T7713] syz_tun: left allmulticast mode [ 147.137711][ T7673] i2c i2c-2: failure reading status [ 147.140542][ T7673] ucsi_ccg 2-0008: i2c_transfer failed -5 [ 147.143200][ T7673] ucsi_ccg 2-0008: ucsi_ccg_init failed - -5 [ 147.146042][ T7673] ucsi_ccg 2-0008: probe with driver ucsi_ccg failed with error -5 [ 147.150150][ T7673] i2c i2c-2: new_device: Instantiated device ccgx-ucsi at 0x08 [ 147.160989][ T29] usb 11-1: USB disconnect, device number 3 [ 147.676074][ T7718] netlink: 44 bytes leftover after parsing attributes in process `syz.7.581'. [ 147.688421][ T7718] syz_tun: entered allmulticast mode [ 147.694063][ T7717] syz_tun: left allmulticast mode [ 147.710597][ T7720] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.811837][ T7731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.814213][ T7731] IPv6: NLM_F_CREATE should be set when creating new route [ 148.596069][ T7725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.797351][ T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 148.947378][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 148.950817][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.954367][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.957614][ T9] usb 12-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.960510][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.964539][ T9] usb 12-1: config 0 descriptor?? [ 148.967973][ T9] hub 12-1:0.0: USB hub found [ 149.174397][ T9] hub 12-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 149.589465][ T9] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 149.593208][ T9] hid-generic 0003:046D:C31C.0002: probe with driver hid-generic failed with error -22 [ 149.939606][ T29] usb 12-1: USB disconnect, device number 4 [ 150.399345][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 150.399359][ T42] audit: type=1400 audit(1785449733.636:536): avc: denied { mount } for pid=7745 comm="syz.7.586" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 150.409060][ T42] audit: type=1400 audit(1785449733.636:537): avc: denied { read write } for pid=7745 comm="syz.7.586" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.416125][ T42] audit: type=1400 audit(1785449733.636:538): avc: denied { open } for pid=7745 comm="syz.7.586" path="/79/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 150.478238][ T7746] smpboot: CPU 1 is now offline [ 150.599818][ T7747] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 150.623002][ T0] Disabled fast string operations [ 150.625222][ T0] ------------[ cut here ]------------ [ 150.627490][ T0] alternatives_patched [ 150.627500][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 150.633720][ T0] Modules linked in: [ 150.635527][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.639765][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 150.641849][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.645963][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 150.648305][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 d5 71 0f 31 ff 89 ee e8 a8 c5 59 00 85 ed 0f 84 7d fd ff ff e8 2b cb 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 15 cb 59 00 8b [ 150.656210][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 150.658752][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 150.662005][ T0] RDX: ffff88801eaf2540 RSI: ffffffff81b095d5 RDI: ffff88801eaf2540 [ 150.665307][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 150.668570][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 150.671824][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 150.675076][ T0] FS: 0000000000000000(0000) GS:ffff8880d5eda000(0000) knlGS:0000000000000000 [ 150.678742][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.681480][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 150.684751][ T0] Call Trace: [ 150.686158][ T0] [ 150.687404][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 150.689658][ T0] ? _printk+0xcf/0x110 [ 150.691434][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 150.693976][ T0] ? early_init_intel.cold+0x129/0x1eb [ 150.696237][ T0] early_init_intel.cold+0x13f/0x1eb [ 150.698433][ T0] init_intel+0x1c/0x7b0 [ 150.700211][ T0] identify_cpu+0x8b0/0x1c30 [ 150.702152][ T0] ? __pfx_cpu_init+0x10/0x10 [ 150.704136][ T0] identify_secondary_cpu+0x178/0x270 [ 150.706367][ T0] start_secondary+0xcf/0x2d0 [ 150.708354][ T0] ? __pfx_start_secondary+0x10/0x10 [ 150.710563][ T0] common_startup_64+0x13e/0x158 [ 150.712674][ T0] [ 150.714004][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.716997][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT(full) [ 150.721255][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 150.723240][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.727373][ T0] Call Trace: [ 150.728795][ T0] [ 150.730047][ T0] dump_stack_lvl+0x100/0x190 [ 150.732041][ T0] vpanic+0x552/0x970 [ 150.733732][ T0] ? __pfx_vpanic+0x10/0x10 [ 150.735662][ T0] panic+0xd1/0xe0 [ 150.737245][ T0] ? __pfx_panic+0x10/0x10 [ 150.739219][ T0] ? check_panic_on_warn+0x1f/0x90 [ 150.741407][ T0] check_panic_on_warn.cold+0x19/0x34 [ 150.743667][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 150.745802][ T0] __warn.cold+0x191/0x318 [ 150.747672][ T0] __report_bug+0x30f/0x440 [ 150.749655][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 150.751760][ T0] ? __pfx___report_bug+0x10/0x10 [ 150.753859][ T0] ? prb_read_valid+0x78/0xa0 [ 150.755863][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 150.758288][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 150.760585][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 150.762714][ T0] report_bug+0xb2/0x220 [ 150.764518][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 150.766619][ T0] handle_bug+0x16a/0x2a0 [ 150.768450][ T0] exc_invalid_op+0x17/0x50 [ 150.770356][ T0] asm_exc_invalid_op+0x1a/0x20 [ 150.772384][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 150.774747][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 d5 71 0f 31 ff 89 ee e8 a8 c5 59 00 85 ed 0f 84 7d fd ff ff e8 2b cb 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 15 cb 59 00 8b [ 150.782622][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 150.785119][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 150.788353][ T0] RDX: ffff88801eaf2540 RSI: ffffffff81b095d5 RDI: ffff88801eaf2540 [ 150.791632][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 150.794910][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 150.797916][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 150.800518][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 150.802203][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 150.803881][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 150.805562][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 150.807334][ T0] ? _printk+0xcf/0x110 [ 150.808732][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 150.810727][ T0] ? early_init_intel.cold+0x129/0x1eb [ 150.812571][ T0] early_init_intel.cold+0x13f/0x1eb [ 150.814646][ T0] init_intel+0x1c/0x7b0 [ 150.816055][ T0] identify_cpu+0x8b0/0x1c30 [ 150.817742][ T0] ? __pfx_cpu_init+0x10/0x10 [ 150.819477][ T0] identify_secondary_cpu+0x178/0x270 [ 150.821250][ T0] start_secondary+0xcf/0x2d0 [ 150.822816][ T0] ? __pfx_start_secondary+0x10/0x10 [ 150.824574][ T0] common_startup_64+0x13e/0x158 [ 150.826226][ T0] [ 150.827859][ T0] Kernel Offset: disabled [ 150.829297][ T0] Rebooting in 86400 seconds..