last executing test programs: 1m26.160910006s ago: executing program 0 (id=1): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000a00)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000c00)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000d00)={0x1, 0x1}) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b00)={0x24, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003020000000276"], 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='select \n', 0x10) write(r6, &(0x7f0000000100)='file read /etc/passwd exec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) r7 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r9, 0x0) ftruncate(r9, 0x0) kexec_load(0x3, 0x4, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010400)=@newlink={0x38, 0x10, 0x200, 0x70bdac, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'pim6reg\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) write$tun(r7, &(0x7f0000000180)={@val={0x0, 0x8100}, @val={0x1, 0x1, 0xa593, 0x8000, 0xff00, 0x1}, @mpls={[{0x445, 0x0, 0x1}, {0x7}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}], @llc={@llc={0x80, 0x4e, "12", "a51698162ee7117f96211125d8f5b5c61a07aadd6407cda5e52ad8754c43d2c823d70d0edcd71fc530a7bc0577cd3ab98a6892d32455dbebf8824231021133f5476d910eb43ad68380a6de233969aa0ed276f793416e5fba8034bf0b"}}}}, 0x85) 1m25.195220718s ago: executing program 0 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc0008000000000000000000000000000600150002"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x3, 0x3, 0x0, @private1, @local, 0x7800, 0x1, 0x8, 0x9}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delqdisc={0x48, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x0, 0x9}, {0x4, 0x10}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xa040) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc0008000000000000000000000000000600150002"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x3, 0x3, 0x0, @private1, @local, 0x7800, 0x1, 0x8, 0x9}}) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delqdisc={0x48, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x2, 0xd}, {0x0, 0x9}, {0x4, 0x10}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xa040) (async) 1m25.108116058s ago: executing program 0 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) close(0x3) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1m25.107449564s ago: executing program 0 (id=19): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f000000e940)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f000000e300)=ANY=[@ANYBLOB="10000000000000000000000027000000"], 0x10}}], 0x1, 0x20044000) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r1, 0x3, 0x3, 0x8b}) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./mnt_trace/trace_pipe\x00', &(0x7f0000000080), 0x4, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}]}}) read(r0, 0x0, 0x0) 1m24.959164451s ago: executing program 0 (id=24): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r2 = syz_clone(0x9b99c080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e00010069703667726574617000000004000280"], 0x38}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b08"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000200)=r2, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000000c0)) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) (async, rerun: 32) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}}, 0x24040084) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r9 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000300)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1m11.877933618s ago: executing program 2 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$inet_opts(r0, 0x0, 0x14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "909f50c21562"}]}}}}}}, 0x0) write(r3, &(0x7f0000000040)="d42e3690dac96ed79a0ab698ef9f56fb14d96b3e1b4fda1638775199", 0x1c) 1m11.790045699s ago: executing program 2 (id=208): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5, 0x7, 0x32315659, 0x8, 0x7, [{0x7}, {0x1, 0xc}, {0x6, 0x80000001}, {0x6, 0x6}, {0xe, 0x6}, {0x6, 0x8}, {0x2, 0xffffff65}, {0x8001, 0x2}], 0x4, 0xe, 0x6, 0x0, 0x4}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x8002, 0xd2, &(0x7f0000000140)=""/210}, 0x94) syz_usb_connect$uac3(0x3, 0xe2, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0xb0, 0x30, 0xea, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0x17}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x35, 0x21727746}, [@multiply_unit={0xb, 0x24, 0xd, 0x7, 0x9, 0x1ff, 0x8}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x206, 0x5, 0x0, 0x1, 0x0, 0x450d, 0xffff, 0xf}, @source_unit={0xc, 0x24, 0xb, 0x9, 0x0, 0x3, 0x7, 0xff12}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6d, 0x400, 0x7, "76bc1afca2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x0, 0x2, "e9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xa, 0x3, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfc, 0xa1, 0x2, {0xa, 0x25, 0x25, 0xe5bf, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x177, 0xf0, "b7f1cb0e7d"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x10, 0x26, 0x4, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xba, 0x1, 0x6, {0xa, 0x25, 0x25, 0x8, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x2, 0x96, 0x91, 0x40, 0x6}, 0x59, &(0x7f0000000440)={0x5, 0xf, 0x59, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x63, 0x3, 0x7, 0xf, 0x5, [0xff00, 0x3f00, 0xff3fc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x4, 0x0, 0x9, [0x0, 0xf, 0xc0, 0xff, 0xff0000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x80, 0xf000, 0x9, [0xc0ff, 0xff0030, 0x1febe3f, 0xff3f30]}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x424}}]}) 1m9.847798556s ago: executing program 32 (id=24): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r2 = syz_clone(0x9b99c080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e00010069703667726574617000000004000280"], 0x38}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b08"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000200)=r2, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f00000000c0)) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) (async, rerun: 32) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}}, 0x24040084) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r9 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000300)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 1m8.740124163s ago: executing program 2 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000020180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x66, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000580)=""/111, 0x6f, 0x0, &(0x7f0000000600)=""/78, 0x4e}}, 0x10) r5 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x5f, 0x7, 0x20, 0x5}, 0x2f) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r8, &(0x7f0000000900)='0', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r9, &(0x7f0000000300)='md1', 0x3) r10 = signalfd(r0, &(0x7f0000000780)={[0x1]}, 0x8) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x60}, @call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x43, &(0x7f00000001c0)=""/67, 0x7b185a1df3ab6685, 0x8, '\x00', r1, @cgroup_sock=0x2, r3, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x2, &(0x7f0000000800)=[r7, r8, r9, r10, r11], &(0x7f0000000840)=[{0x5, 0x1, 0x2, 0x7}, {0x0, 0x2, 0x6, 0x2}], 0x10, 0x8}, 0x94) 1m8.520178488s ago: executing program 2 (id=237): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000096040a000200aaaaaaaaaa0c"], 0x30}}, 0x48010) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f00000001c0)) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x4) write(r5, &(0x7f0000000240)='3', 0x1) r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r11, 0x2) ioctl$UBLK_U_CMD_START_USER_RECOVERY(r4, 0xc0207510, &(0x7f00000002c0)={r11}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd) 1m7.63997589s ago: executing program 2 (id=244): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) recvmsg(r0, &(0x7f00000029c0)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/193, 0xc1}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001700)=""/84, 0x54}, {&(0x7f0000001780)=""/96, 0x60}, {&(0x7f0000001800)=""/85, 0x55}, {&(0x7f0000001880)=""/188, 0xbc}], 0x7, &(0x7f00000019c0)=""/4096, 0x1000}, 0x10000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/146, 0x92}], 0x1, 0x808, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x81, 0x0}) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x42, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x4000000000000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x100000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000280)="0f20d86635200000000f22d8827e974fcfbad10466ed440f20c066350a000000440f22c065650f011cb800088ee00f20d86635080000000f22d866b9df09000066b8ecd0254466baa0c2c92d0f302e650f78b00200", 0x55}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaad96, 0x6d, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m7.269976373s ago: executing program 2 (id=248): r0 = socket(0x10, 0x803, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) listen(r0, 0xffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r4, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8400, 0x0) r6 = openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '/dev/comedi2\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x55]}, 0x35) write(r6, &(0x7f0000000140)="925848b2", 0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @generic={0x10, "944a808fb64c946e3f41b7204609"}, @nfc={0x27, r4, 0xffffffffffffffff, 0x3}, @l2={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x62, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)='macsec0\x00', 0x4, 0x2}) r7 = dup(r1) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x1b, '\x00', @st={0x4, [{0x3, @uvalue=0xef4}, {0x0, @svalue=0x2}, {}, {0x2, @svalue=0x70dd}]}, 0xffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f0000002100)='usbip-vudc.0', 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000140)={&(0x7f0000a8c000/0x3000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000004000000000000000032a55470ffe5f052e2c9ee462fed2997c35655c07fc20eb7915cf18659d505877d187820f5c192d778bb052e67314806000000c1741d08", @ANYRES32=0x0, @ANYBLOB="00800000084400001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f0000000080), &(0x7f0000000300)}, 0x20) exit(0x9) 1m7.178947256s ago: executing program 33 (id=248): r0 = socket(0x10, 0x803, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) listen(r0, 0xffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r2, &(0x7f00000000c0)={0x27, r4, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8400, 0x0) r6 = openat(r5, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x0, 0x3a, '/dev/comedi2\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x55]}, 0x35) write(r6, &(0x7f0000000140)="925848b2", 0x4) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @generic={0x10, "944a808fb64c946e3f41b7204609"}, @nfc={0x27, r4, 0xffffffffffffffff, 0x3}, @l2={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x62, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)='macsec0\x00', 0x4, 0x2}) r7 = dup(r1) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x1b, '\x00', @st={0x4, [{0x3, @uvalue=0xef4}, {0x0, @svalue=0x2}, {}, {0x2, @svalue=0x70dd}]}, 0xffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f0000002100)='usbip-vudc.0', 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000140)={&(0x7f0000a8c000/0x3000)=nil}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400000004000000000000000032a55470ffe5f052e2c9ee462fed2997c35655c07fc20eb7915cf18659d505877d187820f5c192d778bb052e67314806000000c1741d08", @ANYRES32=0x0, @ANYBLOB="00800000084400001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r10}, &(0x7f0000000080), &(0x7f0000000300)}, 0x20) exit(0x9) 41.689542452s ago: executing program 1 (id=588): request_key(0x0, 0x0, 0x0, 0x0) (async) request_key(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x5, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @local, 0x10, 0x8, 0xd, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x3, 0xffffffff, {{0x27, 0x4, 0x0, 0x5, 0x9c, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x25}, {[@noop, @timestamp={0x44, 0x10, 0xbe, 0x0, 0x4, [0x9, 0x7, 0x6b8]}, @lsrr={0x83, 0xb, 0x56, [@broadcast, @empty]}, @rr={0x7, 0xf, 0x8c, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x50, 0x1, [{0x0, 0x8, "c15c6ce2755a"}, {0x7, 0x8, "c0c9dc372d91"}, {0x2, 0xd, "1209bc98258de65fb935c4"}, {0x1, 0xb, "0f65812010e79fa41a"}, {0x0, 0x11, "c5abd8452108a80fd6d8b4a96f78aa"}, {0x7, 0x4, '+('}, {0x7, 0xd, "70ef6289906f77f8e1a1a2"}]}, @timestamp={0x44, 0x8, 0xda, 0x0, 0x2, [0x2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'sit0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x1, 0x3ff, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x65, 0x0, 0x7f, 0x9e2c92abd87e0e0e, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x33}, {[@timestamp={0x44, 0x10, 0xb4, 0x0, 0x0, [0x0, 0xfffffffd, 0x7fff]}, @timestamp_addr={0x44, 0x14, 0xb1, 0x1, 0x0, [{@broadcast, 0x7}, {@empty, 0x3800}]}, @timestamp={0x44, 0xc, 0xb3, 0x0, 0x8, [0xfffffbff, 0x80]}, @end, @lsrr={0x83, 0x7, 0x9f, [@multicast2]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={0x1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800600050088a8000006000100010000000c000200130000001000000008000500", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'erspan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000f00)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0xff, 0x10001, {{0x39, 0x4, 0x1, 0x0, 0xe4, 0x66, 0x0, 0xc, 0x29, 0x0, @local, @empty, {[@timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x3, [{@remote, 0x4}]}, @lsrr={0x83, 0x7, 0x75, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @cipso={0x86, 0x3f, 0x3, [{0x4, 0x6, 'e\x007E'}, {0x6, 0x8, "cdb3b94b2759"}, {0x6, 0x4, "8445"}, {0x5, 0xe, "abce77d263dbf3576dc8e681"}, {0x6, 0xb, "f8a786cf1ab3689f3a"}, {0x0, 0xe, "21a32b690011925af5448844"}]}, @generic={0x44, 0x6, "52840366"}, @rr={0x7, 0x17, 0x69, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @multicast2, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x44, 0xe7, 0x1, 0x4, [{@rand_addr=0x64010101, 0x2}, {@private=0xa010100}, {@rand_addr=0x64010102, 0x1}, {@empty, 0x1}, {@multicast2, 0x2}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xffffb283}]}, @rr={0x7, 0x1b, 0xdc, [@dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x82100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2c8, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa0e}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x24004094}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'rose0\x00', &(0x7f0000000280)=@ethtool_dump={0x40, 0x88a, 0xa222, 0x46, "883dd1e5cd0ac23f6a990fecab99d81953e8fae52e138530600f6ae8d6097756852748d434a67ec49fa774f46aa0a2189fab1645498f243cde847b2ed953780dbe37db13d4eb"}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'rose0\x00', &(0x7f0000000280)=@ethtool_dump={0x40, 0x88a, 0xa222, 0x46, "883dd1e5cd0ac23f6a990fecab99d81953e8fae52e138530600f6ae8d6097756852748d434a67ec49fa774f46aa0a2189fab1645498f243cde847b2ed953780dbe37db13d4eb"}}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1a, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9}}}]}, 0x48}}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r14, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x95) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r16 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r16, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r16, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) (async) getsockopt$netlink(r16, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x111400, 0x0) (async) r17 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x111400, 0x0) read$usbfs(r17, &(0x7f0000000340)=""/44, 0x2c) sendmsg$ETHTOOL_MSG_COALESCE_SET(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c800000", @ANYRES16=r15, @ANYRESOCT=r15], 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r17, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c800000", @ANYRES16=r15, @ANYRESOCT=r15], 0x3c}, 0x1, 0x0, 0x0, 0x4920}, 0x0) 41.6001762s ago: executing program 1 (id=589): ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r5, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r6 = socket(0x10, 0x803, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000280)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@can_newroute={0x190, 0x18, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x1}, 0x0, 0x6, 0x0, 0x0, "fc010315578cf229"}}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "b902f76e9facf6ac"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x5a, 0x6e, 0x6d, 0x1, 0x2, "f9bdfb97593c6fe0c8cf543cadebbfed13f05df65f309cc9767fb8b3bc2e66333d2cf3a50ba5b3226a8a5ca5915a3d0fd51fd6ed9b36536e18ae92e915ef63d4bd128d62956d00ba47cc9fed6401e4cf6dc4c2efbb40b25b05737c1f60b7168e3352e4b09079ca30eafe16c476937f4b645a5d95750d9d7f3c6c7361f70a23aa2742766005549b99ad007c6daf9637621b504a7a2ac61fb956d380498247094d39550cd71c23622c9cd51250862bbcd8c17cd217208085d09a59b593ee408fb55bb890d9e00ef983c4407ea81788826290c81fc9679b968c179765388745e180b1469109165cecfa152ea81f0cc7425afe252cd9f956ebcf8d68afe2cbee5835", 0x2, "564385a783964984fb6ab68c19d074031bddd498"}}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x1, 0x0, 0x1}, {0x3}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "88caacb84659eed0"}, 0x2}}]}, 0x190}, 0x1, 0x0, 0x0, 0x2002c014}, 0x4000000) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r10 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) 41.420414251s ago: executing program 1 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000fcffffff850000004f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500"], &(0x7f0000000240)='GPL\x00'}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x3c}}, 0x40001) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000000000000000000fcffffff850000004f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500"], &(0x7f0000000240)='GPL\x00'}, 0x94) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) (async) fcntl$dupfd(r3, 0x0, r3) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x3c}}, 0x40001) (async) 41.244508806s ago: executing program 1 (id=593): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000002740)={0xa, @pix={0x0, 0x24, 0x34324d59, 0xa, 0x5, 0x8, 0x4, 0xe, 0x0, 0x3, 0x2, 0x3}}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e1e, @empty}, 0x10, &(0x7f0000005540)=[{&(0x7f00000001c0)="0800fbfaffab2be7", 0x8}], 0x8, 0x0, 0x0, 0xe0000000}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001500010028bd7000ffdbdf2500000000000000000000000000000000ac1414aa0000000000000000000000004e2100094e2300090a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00020000230a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000740)='veth0_to_bond\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x1) write$binfmt_aout(r7, &(0x7f00000029c0)=ANY=[@ANYBLOB="0b01"], 0x8ad) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r8 = fcntl$dupfd(r5, 0x0, r6) ioctl$TCFLSH(r8, 0x400455c8, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000200)='/dev/usbmon#\x00', 0x14000, &(0x7f0000000240)={@_ha_fsid={[0x62f, 0x4]}, {0x4, 0x3, 0x6, 0xb9}}, 0x1, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x4}, {[0x5, 0x4, 0x7, 0x7]}, 0x7, 0x50, &(0x7f0000000300)=""/80}) ioctl$SNDRV_PCM_IOCTL_RESET(r9, 0x4141, 0x0) ioctl$TIOCSETD(r8, 0x5412, &(0x7f0000000140)=0xffffffc0) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) 41.128387677s ago: executing program 1 (id=594): r0 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0,timeo=1,retrans=1,soft\x00') (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, 0x6, 0x4, 0x0, 0x500, 0x80, 0x40000101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000fc0)='fdinfo/3\x00') (rerun: 64) pread64(r2, &(0x7f0000000000)=""/224, 0xe0, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100040000000000001f28000000180001801400020067656e65766530"], 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x20000000) (async) r5 = dup2(r1, r1) (async, rerun: 32) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={@local, 0x9, r8}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) (async) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f0000000540)={{0x3, 0xffffffff, 0x1, 0x6b57c2df, 0x2, 0x7f}, 0x1c7, [0x4, 0xf, 0xfffeffff, 0x8f, 0x2, 0x0, 0xffff, 0x5e, 0x100, 0xf9c2, 0x7, 0x6, 0x101, 0x0, 0x1000, 0x400, 0x8, 0x8, 0x34, 0x0, 0x3, 0x3ff, 0x580a, 0x8b1, 0x5, 0x7, 0x3, 0x2, 0x10, 0xd4e4, 0xffff, 0x8, 0x0, 0x10, 0x6, 0xffff, 0x0, 0xfff, 0x5, 0x2, 0x3ff, 0x9, 0x2, 0x8, 0xe, 0x0, 0x4, 0xc, 0x542, 0x401, 0x6, 0x4, 0x2, 0x4, 0x4, 0x0, 0x2, 0x6798, 0x0, 0x9, 0xffffffff, 0x6, 0x9, 0x9, 0x3, 0x7, 0x8000, 0x7, 0x6, 0x9, 0xd, 0x81, 0x5, 0x3, 0xffffffff, 0x3, 0x6, 0x800, 0x200, 0x1e9d, 0x8, 0x0, 0x9, 0xffff, 0x3, 0xa, 0x1, 0x6, 0x0, 0x5, 0x7f, 0x7, 0xb15, 0x1, 0x9, 0x10001, 0x2, 0xf81, 0x6474, 0x1, 0x8f1, 0x7, 0x1ff, 0x5353dbf5, 0x8, 0x4, 0x7fffffff, 0x3, 0x4, 0x5, 0xb62, 0x6, 0x8839, 0x6, 0x1, 0x10, 0x2, 0xa6c9, 0xffffffff, 0x58, 0x1000, 0x7, 0x3, 0x2, 0x9, 0x118, 0x1, 0xf, 0x7, 0x9, 0x1047, 0x2, 0x3b1, 0x1, 0x508dee, 0x4, 0xfffffffa, 0x66, 0xffff5bd0, 0x6, 0x5, 0x10000, 0x2, 0x7, 0xc02, 0x5, 0x4, 0x1ff, 0x401, 0x9, 0x8, 0xffffffff, 0x6, 0x6, 0x3, 0x0, 0xffffffff, 0x2, 0x9, 0x80, 0x7, 0x8000, 0x3, 0xfffffd5f, 0x3, 0x37b7, 0xfffffffc, 0x40, 0x7, 0xfffffff7, 0x0, 0x200, 0x27, 0xb, 0x80000001, 0x6, 0xfffffffb, 0x0, 0x2, 0x29a, 0x5, 0x8, 0x5, 0x3, 0x80000001, 0x40, 0x2, 0xf, 0xbbd6, 0x5, 0x6, 0x6, 0x7, 0xf, 0x1, 0x0, 0x80000001, 0x100, 0x8, 0x2, 0x3e3324b9, 0x6, 0x3, 0x7, 0x5, 0x2, 0xd, 0x3, 0x5, 0x2, 0x81, 0xbc, 0xad56, 0x4, 0xb2c1, 0x5, 0x80, 0x7f, 0x1, 0x0, 0x8, 0x4, 0x4, 0x81, 0x5, 0x0, 0x4, 0x7, 0x1, 0x6, 0x400, 0x6, 0x2, 0x6, 0x9e35, 0x7c3, 0x7, 0x5, 0xe, 0xe, 0x8, 0x1, 0x8001, 0x7, 0xf2, 0x2, 0x8b, 0x3, 0x8, 0x5, 0x3, 0x800, 0x2, 0x9, 0xfe1, 0x3, 0x1000, 0x40, 0x28, 0xb9, 0x10, 0x8, 0xc08, 0x6, 0x7, 0xfffffffe, 0x7, 0x2, 0x0, 0x100, 0xffffffff, 0x10000, 0x4, 0x1, 0x9, 0x0, 0x4, 0x400, 0x4, 0x4, 0xffffffff, 0x0, 0x0, 0x7cf8fe17, 0xfffffff9, 0x3, 0xffff, 0x2, 0x9, 0x7fffffff, 0xfffffffe, 0xc1, 0xffff, 0x304, 0x9a, 0x3a7, 0x2, 0xff, 0x0, 0x0, 0x3, 0x8, 0x5, 0x5, 0xc, 0xc, 0x6, 0xfffffffd, 0x7fff, 0x80, 0x8000, 0x6, 0x7, 0x9, 0x3, 0xd5f, 0x5, 0x35, 0x0, 0x2, 0x0, 0x11, 0x0, 0x8, 0x80000000, 0x4, 0xf7e0, 0x7, 0x7fff, 0x7, 0x1, 0x7, 0xfffffffb, 0x2, 0x8, 0x4436, 0xf15a, 0x2, 0x192, 0x0, 0x7, 0x4, 0x9, 0x40, 0xfffffff5, 0x7fffffff, 0x0, 0x4, 0x5, 0x59a, 0xb482, 0x5, 0x5, 0x80000001, 0x8, 0x81, 0x80, 0x8, 0x7, 0x3, 0x3, 0x4, 0x5, 0x8, 0x5, 0x400, 0x7, 0x0, 0x2, 0xc, 0xa1, 0x5, 0x816, 0x7, 0x800, 0x8, 0x4f, 0x8, 0x6, 0x7, 0xd7c, 0xbbb, 0x80, 0x81, 0x8, 0x1, 0x6, 0x3, 0x3, 0x0, 0x6, 0x80, 0x4, 0x184, 0x10000, 0x101, 0x4, 0x7, 0x4, 0x5, 0x6, 0x3, 0x7ff, 0x2, 0xffff, 0x10001, 0xd6b, 0xfff, 0x1ff, 0x8, 0x5, 0x24a, 0x6, 0xfffffff5, 0x7, 0x1, 0x4a56, 0x6, 0x1ff, 0x7, 0x5, 0x949, 0x800, 0x8001, 0xa, 0xfffffffd, 0xa54, 0x8000, 0x7, 0x5, 0x401, 0x5, 0x8, 0xffffff46, 0x4, 0xfffffffa, 0xd, 0x0, 0xb429, 0x8, 0x1, 0xa, 0x3, 0x6, 0x49b0, 0x1, 0x0, 0x2, 0x100, 0x7, 0x0, 0x6, 0x3ff, 0x2, 0xff, 0x3, 0x1ff, 0xb, 0x4, 0x5, 0x6b, 0xf971, 0xb, 0x2be7, 0x4, 0x7c, 0xfcd542a, 0x6b41, 0xb, 0x2, 0x7, 0x1, 0x9, 0x7, 0xd4b, 0xc, 0xf, 0x3, 0x4, 0x9, 0xf, 0x6, 0x7, 0x9, 0x5, 0x8, 0xffff2573, 0xec9c, 0x9, 0x800, 0x5, 0x8, 0x1, 0x5, 0x3e3, 0x4, 0x1, 0x635, 0x80000000, 0x358, 0x0, 0x1, 0x40000000, 0x1, 0xb, 0xfffffffc, 0x6, 0x7, 0xffffffff, 0x5, 0x17, 0x10, 0x4, 0x909, 0x3ff, 0xff, 0x3, 0x2, 0x401, 0x1, 0x809e, 0x0, 0xb, 0x5, 0x6, 0x3, 0x7f, 0x9, 0xff, 0x3, 0xfff, 0xe, 0x3ff, 0x7, 0xad0, 0x2, 0x5, 0x8, 0x7f, 0x9, 0xf9, 0x8000, 0x2, 0x2, 0x5e8, 0x1, 0x2, 0xfff, 0x4c2c, 0xffff, 0xfffff2ae, 0x0, 0x1, 0x6, 0x6, 0x71, 0x4, 0x8, 0x200, 0xfffffffb, 0x8, 0x400, 0x3, 0x8, 0x8001, 0x7f, 0x7, 0x3, 0xfc, 0x6, 0x8, 0x1, 0x6, 0x9, 0x101, 0x5, 0x5, 0x1000000, 0x4, 0x5, 0x0, 0x800, 0x8, 0x3, 0xfff, 0x9, 0x5c3, 0x20000, 0x3, 0x1, 0x7fffffff, 0x3, 0x5, 0x2, 0x6, 0x14000000, 0x200, 0x7, 0x31, 0x1, 0x3, 0xdc4f, 0x6, 0x4, 0x6, 0x2, 0x8, 0x3, 0x7, 0x1ea4, 0xfffffff7, 0x5, 0x3, 0x5e2, 0x4, 0x0, 0x8, 0x74b3, 0x9, 0x401, 0x7, 0x9, 0xe, 0x1, 0x3, 0x1, 0x9e5, 0x1, 0x5, 0x6, 0x8, 0x3, 0x9, 0x9, 0x8, 0x400, 0x3, 0x1657, 0x0, 0xcf, 0x10000, 0x80000001, 0x2, 0x2000000, 0xfffffffe, 0x1000, 0x9, 0x7, 0x1, 0x7, 0xfffffffc, 0x101, 0x10, 0x8, 0x9, 0x9, 0xd, 0xc629, 0x59, 0x8, 0x7, 0x8, 0xf, 0x0, 0x4ba9, 0xfec9, 0x0, 0x3, 0x7ff, 0x8, 0x401, 0x2, 0xdaba, 0x1, 0x0, 0x7fff, 0x4f, 0x7, 0x0, 0x475b, 0x7fffffff, 0x3, 0x10001, 0xfffffffb, 0x9, 0x8, 0xffff0000, 0xd, 0x5, 0x4, 0x4d0d, 0x2, 0x5, 0x5, 0x5, 0xc, 0x200, 0x10000000, 0xf, 0x9, 0x8, 0x3, 0x1, 0x3fff80, 0x5, 0x400, 0x1, 0x7, 0x6047, 0x90000, 0x7b1f, 0x4, 0x8000, 0x800, 0x2, 0x3, 0x4, 0x6, 0x80000000, 0x100, 0xff, 0x9, 0x5b0, 0x1ff, 0x8, 0xffffffff, 0x8, 0x9, 0x0, 0x4, 0x9, 0x3, 0x970, 0x40, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x9, 0x7, 0x3, 0x7fffffff, 0x8a7, 0x0, 0xc4, 0x0, 0x9, 0x9, 0x44c, 0x2, 0x9, 0x8, 0xb, 0xa3, 0x5715, 0x7, 0x8b5, 0xffffffb8, 0xffff29f6, 0x10, 0x7, 0x3ff, 0x6, 0x1, 0x10, 0x100, 0x6, 0x6, 0x8, 0x8, 0x200, 0xfd3, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x7, 0x9, 0x7, 0x8, 0x9, 0x4, 0x0, 0x1, 0x8, 0xffff, 0x227, 0x3, 0x9, 0x3, 0x0, 0x800, 0x7, 0x6, 0xfffff718, 0x9, 0x1ff, 0x3, 0xffffffff, 0x3, 0xf, 0x800, 0x2, 0x6, 0x7fffffff, 0x4, 0x2, 0x4, 0x8, 0xd0, 0x1, 0x7f, 0x5, 0xf59, 0x1, 0x2e594bcc, 0xfffffcc4, 0x0, 0x400, 0x7, 0x3, 0x4, 0x7, 0x5, 0x7ff, 0x4, 0x8, 0x6, 0x8, 0x8, 0x0, 0x6, 0x4, 0x100, 0x6, 0x81, 0x9, 0x4835, 0x9, 0xfffffff7, 0x5, 0x1, 0x800, 0x0, 0x0, 0x2, 0xffffffff, 0x1, 0x14, 0xe67, 0x80000001, 0x6, 0x5, 0x9, 0x80000008, 0x0, 0xfffffff7, 0x9, 0x8, 0x1, 0x8, 0x1, 0xd, 0x0, 0x9, 0x2, 0x0, 0x493e9781, 0x8, 0xfffff632, 0x2, 0x1, 0xff, 0x6, 0xfffffffb, 0xf, 0x3, 0x3, 0x0, 0xa, 0x4, 0x4, 0x3, 0x2e4b, 0x8, 0x7, 0x8, 0x9, 0x401, 0x4, 0x1, 0x40e55, 0x6, 0x81, 0xb5550415, 0x200, 0x0, 0xe, 0x9, 0x41, 0x9, 0x1000, 0xfffff966, 0x5, 0x6, 0xffffffff, 0x4, 0x6, 0xfff, 0x2, 0xff, 0x3, 0xb67, 0x9, 0xffff, 0x18, 0xa977, 0x8, 0x4, 0x401, 0xed, 0x6, 0x6, 0x2, 0x8, 0x101, 0x81, 0x7, 0x1, 0x5, 0x3, 0x7, 0x6, 0x1, 0x1, 0x4, 0x8, 0x5, 0xe, 0x2, 0x2, 0x2, 0xffffffff, 0x1, 0x40, 0xffff8000, 0x9, 0x4, 0x2, 0x3, 0x9, 0xfffffffb, 0x1, 0x8, 0x5, 0x5, 0x4, 0x5, 0x2, 0xc, 0x8001, 0xc9e0, 0x80, 0x3, 0x4, 0x7, 0x1, 0x6, 0xfffffff3, 0x50b, 0xccad, 0x9, 0x2, 0x0, 0x3, 0x2c, 0x4, 0x3, 0x400, 0x6, 0x400, 0x18, 0x7, 0x4, 0x4, 0x6, 0x2, 0x0, 0x6, 0x9, 0x8, 0x1, 0x2, 0x4, 0x2, 0x340, 0x4, 0x1, 0x6, 0x8, 0x5, 0x1533, 0x8, 0x8, 0xd, 0xfffff2b2, 0x9, 0x1, 0x9, 0x2, 0x0, 0xb85, 0x319, 0xfff, 0x6, 0x7f, 0x4, 0x0, 0xffff, 0x9]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x4, 0x0, 0x1}, 0x40, 0x1, 0x0, 0x0, "b14edbcc85a1e6bb8823da2d2ba15db07dc61d8590f210c750fe224750bd6e8e37f6e9de1b9ff6c37b63a13f53aa79698aef992438f966985feaea0efc1b84fb"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 39.029667669s ago: executing program 1 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x4}) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0xfffffffffffffffd, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket(0x26, 0x3, 0x1000004) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000018000000000000000bd9bd98bd6076b0000000000000000", @ANYRES32=r6, @ANYBLOB="14000200ff0200000000000000000000000000010800080006070000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = fanotify_init(0x4, 0x800) fanotify_mark(r9, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="08000800070000000003140000e045f0801600000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="100000ef0920ed00dc801b51c37a8e3482caa5c3ef487c61cdc29cb10b1af1d4fdd976ab36e8dc36109e05c1d45820403a0c71f0e5677f87f2b5130f0817415f473ca9c862833d47d45b7cfca0c1a3adff3d41614180c9023101010000000000003f747c5634148264ecf51aa7297c0fcf1e18d5873e40b7dfb72456268eb833b01a2da675045a6a98da75e54bc64af3c8e00edf49f629a88f622091039aa744e5ee892b81"], 0xfdef) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r12, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r13, &(0x7f0000000140)='prev_state.function == kallsyms_lookup', 0x26) (async) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async) fsync(r4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x42, 0x0, 0x0) 38.969786727s ago: executing program 34 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x4}) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0xfffffffffffffffd, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r7 = socket(0x26, 0x3, 0x1000004) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000018000000000000000bd9bd98bd6076b0000000000000000", @ANYRES32=r6, @ANYBLOB="14000200ff0200000000000000000000000000010800080006070000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = fanotify_init(0x4, 0x800) fanotify_mark(r9, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="08000800070000000003140000e045f0801600000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="100000ef0920ed00dc801b51c37a8e3482caa5c3ef487c61cdc29cb10b1af1d4fdd976ab36e8dc36109e05c1d45820403a0c71f0e5677f87f2b5130f0817415f473ca9c862833d47d45b7cfca0c1a3adff3d41614180c9023101010000000000003f747c5634148264ecf51aa7297c0fcf1e18d5873e40b7dfb72456268eb833b01a2da675045a6a98da75e54bc64af3c8e00edf49f629a88f622091039aa744e5ee892b81"], 0xfdef) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r12, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) (async) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r13, &(0x7f0000000140)='prev_state.function == kallsyms_lookup', 0x26) (async) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) (async) fsync(r4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) syz_kvm_setup_cpu$x86(r3, r8, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x42, 0x0, 0x0) 5.199706433s ago: executing program 4 (id=929): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 5.010470078s ago: executing program 4 (id=930): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) 5.010302831s ago: executing program 4 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 4.050332337s ago: executing program 4 (id=946): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 3.960502201s ago: executing program 3 (id=947): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x15, 0x5, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000fedbdf2580200000000400050015000008000300", @ANYRES16=r7, @ANYRES64], 0x44}, 0x1, 0x0, 0x0, 0x24048005}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c000780080012400000000d0500010006000000050005000200000005000400000000000900020073797a310000000016000300"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 3.794107493s ago: executing program 6 (id=948): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0xd, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x409aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 3.639725541s ago: executing program 6 (id=949): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000880)=ANY=[], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x40, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 3.178719642s ago: executing program 4 (id=952): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000c80)=0x5, 0x4) 3.178540905s ago: executing program 6 (id=953): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006980), 0x0, 0x10041, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) socket$inet6(0xa, 0x80002, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 3.079275683s ago: executing program 3 (id=955): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0x1000000, 0x3) 2.883954314s ago: executing program 4 (id=956): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) 2.777739755s ago: executing program 3 (id=957): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 2.496956503s ago: executing program 3 (id=958): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 2.026739382s ago: executing program 6 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) ioctl(r2, 0x4038ae7a, &(0x7f0000000900)="000000000100"/56) ioctl(r2, 0x4048aec9, &(0x7f0000000a00)="00000000000000000100"/72) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) ioctl(r2, 0x4048aec9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='gadgetfs\x00', 0x41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl(r3, 0x4048aecb, &(0x7f0000000700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/54) munmap(&(0x7f0000011000/0x1000)=nil, 0x1000) ioctl(r2, 0x400caed0, &(0x7f0000000800)="0100"/12) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.730089946s ago: executing program 6 (id=968): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.228809468s ago: executing program 5 (id=971): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x550, 0x3f, 0x4, 0x1, 0x0, 0x0, {}, {}, {0x7f}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) 1.128314332s ago: executing program 5 (id=972): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c00000000000000000000000300060000000000020000000000000000000000000000000200010000eeffffffff08077fffffff030005000000000002000000ac1414aa0000000000000000020008000800"], 0x60}, 0x1, 0x7}, 0x0) 1.019947105s ago: executing program 5 (id=973): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x8810) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = socket(0x3d, 0x2, 0x10) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000280)='md', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='rai', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f0000000540), 0x0) openat(0xffffffffffffff9c, 0x0, 0x201, 0x0) openat(r5, 0x0, 0x22c1, 0x39) 897.670679ms ago: executing program 3 (id=974): socket$inet(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x3, 0xfffffff9, 0x820, 0x4, 0x0, "4b480f8b000a0000000000f64a00001ae400", 0x388, 0x1005}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) 830.476019ms ago: executing program 5 (id=975): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000001f00)="ef9764611026", 0x6) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 830.257143ms ago: executing program 5 (id=976): ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={@mcast1, @mcast2}) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x9, 0x6, 0xfffffffffffffffa, 0x1, 0x5, 0x1, 0x9, 0x1}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044044) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101383) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) 239.460954ms ago: executing program 5 (id=977): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x3b3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4de, 0x2000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 90.491725ms ago: executing program 6 (id=978): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd000905820200"], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0xb}, 0x30, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) 0s ago: executing program 3 (id=979): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_complete(0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) kernel console output (not intermixed with test programs): tman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.103596][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.106364][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.109813][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.118340][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.121053][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.127460][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.127470][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.127484][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.141481][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.143971][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.146359][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.148734][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.151103][ T6957] ldm_validate_partition_table(): Disk read failed. [ 70.153220][ T6957] Buffer I/O error on dev loop4, logical block 0, async page read [ 70.155294][ T6958] Buffer I/O error on dev loop4, logical block 73, async page read [ 70.155683][ T6957] Dev loop4: unable to read RDB block 0 [ 70.159972][ T6957] loop4: unable to read partition table [ 70.168187][ T6882] hsr_slave_0: entered promiscuous mode [ 70.172033][ T6957] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 70.172136][ T6882] hsr_slave_1: entered promiscuous mode [ 70.179093][ T6882] debugfs: 'hsr0' already exists in 'hsr' [ 70.183230][ T6882] Cannot create hsr debugfs directory [ 70.204541][ T5732] Bluetooth: hci5: command tx timeout [ 70.399551][ T5439] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.484111][ T6986] netlink: 'syz.3.272': attribute type 21 has an invalid length. [ 70.487359][ T6986] netlink: 128 bytes leftover after parsing attributes in process `syz.3.272'. [ 70.497105][ T6986] netlink: 'syz.3.272': attribute type 5 has an invalid length. [ 70.499571][ T6986] netlink: 'syz.3.272': attribute type 6 has an invalid length. [ 70.502308][ T6986] netlink: 3 bytes leftover after parsing attributes in process `syz.3.272'. [ 70.508104][ T6882] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.514644][ T6882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.517432][ T6882] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.522156][ T6882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.526491][ T6882] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.533616][ T6882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.540034][ T6882] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.557755][ T6882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.565588][ T5542] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.658398][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.670687][ T6882] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.683398][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.685892][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.695574][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.698673][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.706330][ T5439] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.738326][ T5542] usb 6-1: Using ep0 maxpacket: 32 [ 70.756364][ T5542] usb 6-1: unable to get BOS descriptor or descriptor too short [ 70.764636][ T5542] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 70.770003][ T5542] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.775683][ T5732] Bluetooth: hci3: command tx timeout [ 70.788694][ T5542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.798803][ T5542] usb 6-1: Product: syz [ 70.800621][ T5542] usb 6-1: Manufacturer: syz [ 70.807676][ T5542] usb 6-1: SerialNumber: syz [ 70.874327][ T7017] XFS (mtdblock0): Invalid superblock magic number [ 70.928371][ T7017] /dev/sr0: Can't open blockdev [ 71.053992][ T7039] can0: slcan on ttyS3. [ 71.083806][ T5542] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.092633][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.095436][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.099054][ T5542] usb 6-1: MIDIStreaming interface descriptor not found [ 71.141525][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.170492][ T5542] usb 6-1: USB disconnect, device number 2 [ 71.301439][ T6882] veth0_vlan: entered promiscuous mode [ 71.306586][ T6882] veth1_vlan: entered promiscuous mode [ 71.314131][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.323623][ T6882] veth0_macvtap: entered promiscuous mode [ 71.331988][ T6882] veth1_macvtap: entered promiscuous mode [ 71.341142][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.347402][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.399309][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.402497][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.406741][ T5806] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.413460][ T5806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.434040][ T5806] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.437759][ T5806] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.450797][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.453514][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.464007][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 71.468575][ T57] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 71.474360][ T57] usb 8-1: config 0 has no interfaces? [ 71.478465][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.481292][ T57] usb 8-1: Product: syz [ 71.482627][ T57] usb 8-1: Manufacturer: syz [ 71.485105][ T57] usb 8-1: SerialNumber: syz [ 71.496586][ T57] usb 8-1: config 0 descriptor?? [ 71.525652][ T7062] netlink: 'syz.5.255': attribute type 2 has an invalid length. [ 71.531479][ T7062] netlink: 'syz.5.255': attribute type 2 has an invalid length. [ 71.633344][ T7074] netlink: 184 bytes leftover after parsing attributes in process `syz.1.283'. [ 71.702323][ T57] usb 8-1: USB disconnect, device number 4 [ 71.816342][ T7039] can0 (unregistered): slcan off ttyS3. [ 71.822555][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.826987][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.829891][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.832791][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.835989][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.838985][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.841901][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.848128][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 71.851073][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 72.189543][ T7131] netlink: 'syz.1.299': attribute type 3 has an invalid length. [ 72.192604][ T7131] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 72.196384][ T7131] NCSI netlink: No device for ifindex 0 [ 72.284262][ T5732] Bluetooth: hci5: command tx timeout [ 72.363628][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 72.363644][ T42] audit: type=1400 audit(1787382891.769:596): avc: denied { setattr } for pid=7142 comm="syz.3.303" name="NETLINK" dev="sockfs" ino=14269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.364285][ T7143] smc: net device veth1_macvtap applied user defined pnetid SYZ2 [ 72.434510][ T7148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.438698][ T7148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.486285][ T5819] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 72.516589][ T7148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.520071][ T7148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.600202][ T7148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.604746][ T7148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.639730][ T5819] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 72.644742][ T5819] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.648335][ T5819] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.653327][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.657520][ T5819] usb 10-1: Product: syz [ 72.658991][ T5819] usb 10-1: Manufacturer: syz [ 72.660527][ T5819] usb 10-1: SerialNumber: syz [ 72.665951][ T5819] symbolserial 10-1:1.0: symbol converter detected [ 72.669917][ T5819] usb 10-1: symbol converter now attached to ttyUSB0 [ 72.715292][ T7148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.719437][ T7148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.733301][ T7161] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 72.822790][ T42] audit: type=1400 audit(1787382892.229:597): avc: denied { block_suspend } for pid=7167 comm="syz.3.310" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.844403][ T5732] Bluetooth: hci3: command tx timeout [ 72.869473][ T7134] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 72.882819][ T5542] usb 10-1: USB disconnect, device number 2 [ 72.906231][ T5542] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 72.909539][ T5542] symbolserial 10-1:1.0: device disconnected [ 72.934307][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.939347][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.943637][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.949140][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.952673][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.960723][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.964376][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.967760][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.033269][ T42] audit: type=1400 audit(1787382892.439:598): avc: denied { mount } for pid=7170 comm="syz.3.311" name="/" dev="autofs" ino=18526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 73.041770][ T42] audit: type=1400 audit(1787382892.449:599): avc: denied { write } for pid=7170 comm="syz.3.311" name="functions" dev="configfs" ino=14799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.050527][ T42] audit: type=1800 audit(1787382892.449:600): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.311" name="host_addr" dev="configfs" ino=16792 res=0 errno=0 [ 73.109065][ T42] audit: type=1400 audit(1787382892.519:601): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 73.156391][ T42] audit: type=1400 audit(1787382892.569:602): avc: denied { read } for pid=7181 comm="syz.3.315" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.164605][ T42] audit: type=1400 audit(1787382892.569:603): avc: denied { open } for pid=7181 comm="syz.3.315" path="/93/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.174911][ T42] audit: type=1400 audit(1787382892.579:604): avc: denied { map } for pid=7181 comm="syz.3.315" path="/93/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.184504][ T42] audit: type=1400 audit(1787382892.579:605): avc: denied { write } for pid=7181 comm="syz.3.315" path="/93/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 73.520178][ T7220] gretap0: refused to change device tx_queue_len [ 73.522318][ T7220] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 73.824085][ T5542] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 73.882051][ T5843] logitech-hidpp-device 0005:046D:B012.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 73.975199][ T5542] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.981007][ T5542] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.986522][ T5542] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 73.991474][ T5542] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.994186][ T5542] usb 10-1: Product: syz [ 73.995755][ T5542] usb 10-1: Manufacturer: syz [ 73.997750][ T5542] usb 10-1: SerialNumber: syz [ 74.005052][ T5542] cdc_mbim 10-1:1.0: skipping garbage [ 74.044090][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.194925][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.200295][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.204539][ T29] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 74.209008][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.212398][ T7223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 74.213336][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.223645][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.228019][ T29] usb 6-1: Product: syz [ 74.229957][ T29] usb 6-1: Manufacturer: syz [ 74.244820][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 74.247214][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 74.254496][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 74.256541][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 74.374316][ T5732] Bluetooth: hci5: command tx timeout [ 74.447603][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.455661][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.573745][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 74.573764][ T29] usb 6-1: USB disconnect, device number 3 [ 74.578267][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 74.580743][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 74.703833][ T7304] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.788603][ T7314] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 74.834291][ T7223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 74.840106][ T7318] validate_nla: 3 callbacks suppressed [ 74.840116][ T7318] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 74.843465][ T5542] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 74.846195][ T7318] netlink: 'syz.4.354': attribute type 2 has an invalid length. [ 74.850517][ T7319] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 74.852942][ T7319] netlink: 'syz.4.354': attribute type 2 has an invalid length. [ 74.855560][ T7318] ima: policy update failed [ 74.859995][ T5542] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 74.880719][ T5542] wwan wwan0: port wwan0mbim0 attached [ 74.899031][ T5542] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, da:69:6a:f1:26:b8 [ 74.925237][ T5732] Bluetooth: hci3: command tx timeout [ 75.048407][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 75.050580][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 75.052780][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 75.054947][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 75.057198][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 75.059345][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 75.062120][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 75.064331][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 75.066871][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 75.069643][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 75.071897][ C0] cdc_mbim 10-1:1.0: nonzero urb status received: -71 [ 75.073968][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - 0 bytes [ 75.075973][ C0] cdc_mbim 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 75.081190][ T29] usb 10-1: USB disconnect, device number 3 [ 75.085865][ T29] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 75.134106][ T57] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.157765][ T7339] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 75.178913][ T29] wwan wwan0: port wwan0mbim0 disconnected [ 75.297091][ T57] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 75.302557][ T57] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.306353][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.522929][ T57] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 75.529941][ T57] wwan wwan0: port wwan0qmi0 attached [ 75.731849][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.744742][ T7321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.846173][ T57] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, fe:a7:ef:7e:11:62 [ 75.851899][ T57] usb 8-1: USB disconnect, device number 5 [ 75.860083][ T57] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 75.945900][ T57] wwan wwan0: port wwan0qmi0 disconnected [ 76.124544][ T29] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 76.274852][ T29] usb 10-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 76.279224][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 76.283137][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 76.286966][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.294146][ T29] spcp8x5 10-1:1.0: SPCP8x5 converter detected [ 76.299409][ T29] usb 10-1: SPCP8x5 converter now attached to ttyUSB0 [ 76.395597][ T7373] 9pnet_virtio: no channels available for device syz [ 76.398670][ T7373] 9pnet_virtio: no channels available for device syz [ 76.401662][ T7373] 9pnet_virtio: no channels available for device syz [ 76.408764][ T7373] 9pnet_virtio: no channels available for device syz [ 76.411814][ T7373] 9pnet_virtio: no channels available for device syz [ 76.415298][ T7373] 9pnet_virtio: no channels available for device syz [ 76.418276][ T7373] 9pnet_virtio: no channels available for device syz [ 76.421361][ T7373] 9pnet_virtio: no channels available for device syz [ 76.425477][ T7373] 9pnet_virtio: no channels available for device syz [ 76.428469][ T7373] 9pnet_virtio: no channels available for device syz [ 76.431478][ T7373] 9pnet_virtio: no channels available for device syz [ 76.445303][ T7373] 9pnet_virtio: no channels available for device syz [ 76.450062][ T7373] 9pnet_virtio: no channels available for device syz [ 76.454542][ T7373] 9pnet_virtio: no channels available for device syz [ 76.458714][ T7373] 9pnet_virtio: no channels available for device syz [ 76.664342][ T7357] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 76.668606][ T7357] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 76.671969][ T7357] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 76.752411][ T7357] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 76.760961][ T7357] SPCP8x5 ttyUSB0: Set UART format 0x1700 failed (error = -32) [ 76.765516][ T7357] SPCP8x5 ttyUSB0: failed to set work mode: -32 [ 76.894613][ T7385] syzkaller0: entered promiscuous mode [ 76.896551][ T7385] syzkaller0: entered allmulticast mode [ 77.004079][ T5732] Bluetooth: hci3: command tx timeout [ 77.082179][ T7390] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.120634][ T7403] selinux_netlink_send: 7085 callbacks suppressed [ 78.120646][ T7403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=7403 comm=syz.1.373 [ 78.474163][ T5542] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.624085][ T5542] usb 6-1: Using ep0 maxpacket: 16 [ 78.627099][ T5542] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.635015][ T5542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.640069][ T5542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.644398][ T5542] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.650345][ T5542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.656851][ T5542] usb 6-1: config 0 descriptor?? [ 78.857149][ T7375] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 78.862292][ T57] usb 10-1: USB disconnect, device number 4 [ 78.866817][ T57] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 78.869854][ T57] spcp8x5 10-1:1.0: device disconnected [ 78.871619][ T5542] usbhid 6-1:0.0: can't add hid device: -71 [ 78.876601][ T5542] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 78.883107][ T5542] usb 6-1: USB disconnect, device number 4 [ 79.006042][ T7421] __nla_validate_parse: 29 callbacks suppressed [ 79.006054][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.379'. [ 79.026908][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 79.026919][ T42] audit: type=1400 audit(1787382898.439:655): avc: denied { mmap_zero } for pid=7420 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 79.364279][ T5542] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.383543][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.5.383'. [ 79.517610][ T5542] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 79.523069][ T42] audit: type=1400 audit(1787382898.929:656): avc: denied { listen } for pid=7434 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.531899][ T5542] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.533462][ T42] audit: type=1400 audit(1787382898.929:657): avc: denied { accept } for pid=7434 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.540674][ T5542] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 79.544196][ T42] audit: type=1400 audit(1787382898.929:658): avc: denied { setopt } for pid=7434 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.547241][ T5542] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.564308][ T5542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 79.574029][ T5542] usb 6-1: Product: syz [ 79.574140][ T7437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7437 comm=syz.4.385 [ 79.575574][ T5542] usb 6-1: Manufacturer: syz [ 79.582562][ T7423] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.587812][ T7437] netlink: 'syz.4.385': attribute type 2 has an invalid length. [ 79.591039][ T7437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 79.592837][ T5542] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 79.604768][ T5542] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 79.606979][ T7437] : entered promiscuous mode [ 79.705852][ T106] IPVS: starting estimator thread 0... [ 79.751279][ T7445] kvm: kvm [7442]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 79.754966][ T7445] kvm: kvm [7442]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 79.794004][ T57] usb 6-1: USB disconnect, device number 5 [ 79.794042][ T7446] IPVS: using max 45 ests per chain, 108000 per kthread [ 79.799407][ T5732] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 79.807437][ T7423] macvlan0: entered promiscuous mode [ 79.816874][ T57] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 79.822036][ T57] garmin_gps 6-1:1.0: device disconnected [ 80.015846][ T42] audit: type=1400 audit(1787382899.429:659): avc: denied { map } for pid=7450 comm="syz.5.390" path="/24/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 80.024707][ T7455] input: syz1 as /devices/virtual/input/input8 [ 80.028116][ T7455] input: failed to attach handler leds to device input8, error: -6 [ 80.130159][ T7455] syz.5.390 (7455): drop_caches: 2 [ 80.323548][ T7470] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.395'. [ 80.331602][ T7469] ima: policy update failed [ 80.333756][ T42] audit: type=1802 audit(1787382899.739:660): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.4.395" res=0 errno=0 [ 80.388450][ T7472] Console: switching to colour dummy device 80x25 [ 81.297676][ T42] audit: type=1400 audit(1787382900.709:661): avc: denied { mounton } for pid=7484 comm="syz.1.401" path="/136/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 81.297693][ T7485] overlay: Unknown parameter '/dev/snd/seq' [ 81.342588][ T9] cfg80211: failed to load regulatory.db [ 81.368048][ T7490] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 81.378166][ T7490] CIFS mount error: No usable UNC path provided in device string! [ 81.378166][ T7490] [ 81.382615][ T7490] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 81.591992][ T42] audit: type=1400 audit(1787382900.999:662): avc: denied { bpf } for pid=7501 comm="syz.1.405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.598633][ T42] audit: type=1400 audit(1787382900.999:663): avc: denied { read write } for pid=7501 comm="syz.1.405" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.605689][ T42] audit: type=1400 audit(1787382900.999:664): avc: denied { open } for pid=7501 comm="syz.1.405" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.823786][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 82.494050][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.654060][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 82.658373][ T5843] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.661622][ T5843] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 82.666100][ T5843] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 82.668752][ T5843] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 82.671245][ T5843] usb 6-1: config 14 has no interface number 0 [ 82.673395][ T5843] usb 6-1: config 14 has no interface number 1 [ 82.675700][ T5843] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 82.679302][ T5843] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 82.683114][ T5843] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 82.686854][ T5843] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 82.691424][ T5843] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 82.695785][ T5843] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.700918][ T5843] usb 6-1: config 14 interface 57 has no altsetting 0 [ 82.703565][ T5843] usb 6-1: config 14 interface 228 has no altsetting 0 [ 82.707886][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.710554][ T5843] usb 6-1: Product: syz [ 82.711981][ T5843] usb 6-1: Manufacturer: syz [ 82.713624][ T5843] usb 6-1: SerialNumber: syz [ 83.085234][ T5732] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 83.124895][ T5843] legousbtower 6-1:14.57: interrupt endpoints not found [ 83.128308][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.410'. [ 83.132587][ T7535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7535 comm=syz.5.410 [ 83.526290][ T5843] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 83.535454][ T5843] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 83.610062][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 83.613051][ T7570] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 83.617940][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 83.704598][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.425'. [ 83.761054][ T7584] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.878703][ T7594] event trace: Could not enable event p [ 83.944981][ T7597] mmap: syz.4.428 (7597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.085898][ T74] usb 6-1: USB disconnect, device number 6 [ 84.090016][ T7604] Bluetooth: MGMT ver 1.23 [ 84.101078][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 84.101092][ T42] audit: type=1400 audit(1787382903.509:680): avc: denied { create } for pid=7520 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.110131][ T42] audit: type=1400 audit(1787382903.509:681): avc: denied { ioctl } for pid=7520 comm="syz.1.409" path="socket:[17401]" dev="sockfs" ino=17401 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 84.117571][ T74] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 84.150464][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 84.354012][ T5819] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 84.529649][ T5819] usb 10-1: unable to get BOS descriptor or descriptor too short [ 84.532187][ T5819] usb 10-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 84.535368][ T5819] usb 10-1: no configurations [ 84.536911][ T5819] usb 10-1: can't read configurations, error -22 [ 84.866947][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 84.951492][ T7620] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 84.954599][ T7620] CIFS: VFS: Malformed UNC in devname [ 84.957302][ T42] audit: type=1400 audit(1787382904.369:682): avc: denied { getopt } for pid=7619 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.226851][ T7636] dlm: non-version read from control device 4096 [ 85.379654][ T42] audit: type=1400 audit(1787382904.789:683): avc: denied { setopt } for pid=7649 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.469233][ T42] audit: type=1400 audit(1787382904.879:684): avc: denied { ioctl } for pid=7668 comm="syz.5.446" path="socket:[18985]" dev="sockfs" ino=18985 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.488321][ T42] audit: type=1400 audit(1787382904.899:685): avc: denied { getopt } for pid=7668 comm="syz.5.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 85.555714][ T7683] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.555888][ T7684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.556952][ T42] audit: type=1400 audit(1787382904.969:686): avc: denied { mounton } for pid=7682 comm="syz.5.451" path="/44/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 85.574714][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.5.451'. [ 85.575848][ T7686] 9p: Invalid gid '0x00000000ffffffff' [ 85.577584][ T42] audit: type=1400 audit(1787382904.989:687): avc: denied { getopt } for pid=7685 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.586453][ T7683] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 85.590810][ T42] audit: type=1400 audit(1787382904.999:688): avc: denied { map } for pid=7682 comm="syz.5.451" path="socket:[18999]" dev="sockfs" ino=18999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 85.599833][ T42] audit: type=1400 audit(1787382905.009:689): avc: denied { create } for pid=7685 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.634700][ T7689] overlayfs: failed to resolve './file0': -2 [ 85.671352][ T7691] lo: entered allmulticast mode [ 85.674740][ T7691] tunl0: entered allmulticast mode [ 85.677564][ T7691] gre0: entered allmulticast mode [ 85.682166][ T7691] gretap0: entered allmulticast mode [ 85.685883][ T7691] erspan0: entered allmulticast mode [ 85.689840][ T7691] ip_vti0: entered allmulticast mode [ 85.692558][ T7691] ip6_vti0: entered allmulticast mode [ 85.698131][ T7691] sit0: entered allmulticast mode [ 85.703322][ T7691] ip6tnl0: entered allmulticast mode [ 85.707354][ T7691] ip6gre0: entered allmulticast mode [ 85.713497][ T7691] syz_tun: entered allmulticast mode [ 85.721488][ T7691] ip6gretap0: entered allmulticast mode [ 85.726420][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.730326][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.734313][ T7691] bridge0: entered allmulticast mode [ 85.739156][ T7691] vcan0: entered allmulticast mode [ 85.742453][ T7691] bond0: entered allmulticast mode [ 85.744739][ T7691] bond_slave_0: entered allmulticast mode [ 85.746995][ T7691] bond_slave_1: entered allmulticast mode [ 85.750787][ T7691] team0: entered allmulticast mode [ 85.752647][ T7691] team_slave_0: entered allmulticast mode [ 85.755970][ T7691] team_slave_1: entered allmulticast mode [ 85.759685][ T7691] dummy0: entered allmulticast mode [ 85.768339][ T7691] nlmon0: entered allmulticast mode [ 85.771154][ T7691] batadv0: entered allmulticast mode [ 85.776688][ T7691] vxcan0: entered allmulticast mode [ 85.779759][ T7691] vxcan1: entered allmulticast mode [ 85.783167][ T7691] veth0: entered allmulticast mode [ 85.787147][ T7691] veth1: entered allmulticast mode [ 85.795210][ T7691] wg0: entered allmulticast mode [ 85.798409][ T7691] wg1: entered allmulticast mode [ 85.801341][ T7691] wg2: entered allmulticast mode [ 85.804380][ T7691] veth0_to_bridge: entered allmulticast mode [ 85.808952][ T7691] veth1_to_bridge: entered allmulticast mode [ 85.813780][ T7691] veth0_to_bond: entered allmulticast mode [ 85.822940][ T7691] veth1_to_bond: entered allmulticast mode [ 85.830194][ T7691] veth0_to_team: entered allmulticast mode [ 85.836125][ T7691] veth1_to_team: entered allmulticast mode [ 85.842278][ T7691] veth0_to_batadv: entered allmulticast mode [ 85.846943][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.850045][ T7691] batadv_slave_0: entered allmulticast mode [ 85.857855][ T7691] veth1_to_batadv: entered allmulticast mode [ 85.862360][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.865938][ T7691] batadv_slave_1: entered allmulticast mode [ 85.870507][ T7691] xfrm0: entered allmulticast mode [ 85.874050][ T7691] veth0_to_hsr: entered allmulticast mode [ 85.878500][ T7691] hsr_slave_0: entered allmulticast mode [ 85.881947][ T7691] veth1_to_hsr: entered allmulticast mode [ 85.886398][ T7691] hsr_slave_1: entered allmulticast mode [ 85.889820][ T7691] hsr0: entered allmulticast mode [ 85.893814][ T7691] veth1_virt_wifi: entered allmulticast mode [ 85.898112][ T7691] veth0_virt_wifi: entered allmulticast mode [ 85.902831][ T7691] virt_wifi0: entered allmulticast mode [ 85.905189][ T7691] veth1_vlan: entered allmulticast mode [ 85.908601][ T7691] veth0_vlan: entered allmulticast mode [ 85.912537][ T7691] vlan0: entered allmulticast mode [ 85.917742][ T7691] vlan1: entered allmulticast mode [ 85.923997][ T7691] macvlan0: entered allmulticast mode [ 85.929576][ T7691] macvlan1: entered allmulticast mode [ 85.936196][ T7691] ipvlan0: entered allmulticast mode [ 85.938668][ T7691] ipvlan1: entered allmulticast mode [ 85.941155][ T7691] veth1_macvtap: entered allmulticast mode [ 85.946051][ T7691] veth0_macvtap: entered allmulticast mode [ 85.950109][ T7703] xt_hashlimit: size too large, truncated to 1048576 [ 85.953428][ T7691] macvtap0: entered allmulticast mode [ 85.964849][ T7691] macsec0: entered allmulticast mode [ 85.969660][ T7691] geneve0: entered allmulticast mode [ 85.974347][ T7691] geneve1: entered allmulticast mode [ 85.981542][ T7691] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 85.990766][ T7691] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 85.997931][ T7691] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 86.001329][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 86.005273][ T7691] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 86.034672][ T7691] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 86.050700][ T7691] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 86.104139][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.106814][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.109497][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.112183][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.288736][ T7722] binder: 7721:7722 ioctl c0805841 2000000001c0 returned -22 [ 86.349283][ T7731] jffs2: notice: (7731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 86.364904][ T5843] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.388933][ T7733] input: syz1 as /devices/virtual/input/input9 [ 86.396140][ T7733] input: failed to attach handler leds to device input9, error: -6 [ 86.424283][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 86.428600][ T7735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7735 comm=syz.1.466 [ 86.456565][ T7736] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 86.503992][ T5843] usb 8-1: device descriptor read/64, error -71 [ 86.637243][ T7743] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 86.754253][ T5843] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 86.904118][ T5843] usb 8-1: device descriptor read/64, error -71 [ 86.936653][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 86.940185][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 87.024760][ T5843] usb usb8-port1: attempt power cycle [ 87.166421][ T7763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=7763 comm=syz.5.472 [ 87.188766][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 87.374101][ T5843] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.414405][ T5843] usb 8-1: device descriptor read/8, error -71 [ 87.645737][ T7780] genirq: Flags mismatch irq 2. 00200000 (pcmmio) vs. 00200000 (pcl816) [ 87.674163][ T5843] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 87.704480][ T5843] usb 8-1: device descriptor read/8, error -71 [ 87.814343][ T5843] usb usb8-port1: unable to enumerate USB device [ 87.826385][ T7784] netlink: 'syz.5.482': attribute type 1 has an invalid length. [ 87.843157][ T7784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.868675][ T7784] bond1: (slave geneve2): making interface the new active one [ 87.872942][ T7784] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 87.904144][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.908900][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.912934][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.917562][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.994275][ T7801] openvswitch: netlink: IP tunnel dst address not specified [ 87.997889][ T7801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.065906][ T7809] input: syz0 as /devices/virtual/input/input10 [ 88.267454][ T7814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.274992][ T7814] tmpfs: Unknown parameter 'nr_inoSes' [ 88.279123][ T7814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.551595][ T7842] netlink: 48 bytes leftover after parsing attributes in process `syz.5.499'. [ 88.624380][ T7852] binder: 7851:7852 ioctl 4018620d 0 returned -22 [ 88.642380][ T7852] binder: 7851:7852 ioctl c0306201 200000000640 returned -22 [ 88.648145][ T7857] bad cache= option: none [ 88.648145][ T7857] nr_mlock 0 [ 88.648145][ T7857] nr_zspages 0 [ 88.648145][ T7857] nr_free_cma 0 [ 88.648145][ T7857] numa_hit 637391 [ 88.648145][ T7857] numa_miss 15065 [ 88.648145][ T7857] numa_foreign 15065 [ 88.648145][ T7857] numa_interleave 7094 [ 88.648145][ T7857] numa_local 633285 [ 88.648145][ T7857] numa_other 19171 [ 88.648145][ T7857] nr_inactive_anon 16458 [ 88.648145][ T7857] nr_active_anon 13061 [ 88.648145][ T7857] nr_inactive_file 61860 [ 88.648145][ T7857] nr_active_file 147 [ 88.648145][ T7857] nr_unevictable 0 [ 88.648145][ T7857] nr_slab_reclaimable 7871 [ 88.648145][ T7857] nr_slab_unreclaimable 70795 [ 88.648145][ T7857] nr_isolated_anon 0 [ 88.648145][ T7857] nr_isolated_file 0 [ 88.648145][ T7857] workingset_nodes 1 [ 88.648145][ T7857] workingset_refault_anon 47 [ 88.648145][ T7857] workingset_refault_file 996 [ 88.648145][ T7857] workingset_activate_anon 0 [ 88.648145][ T7857] workingset_activate_file 1 [ 88.648145][ T7857] workingset_restore_anon 0 [ 88.648145][ T7857] workingset_restore_file 1 [ 88.648145][ T7857] workingset_nodereclaim 18 [ 88.648145][ T7857] nr_anon_pages 12551 [ 88.648145][ T7857] nr_mapped 30661 [ 88.648145][ T7857] nr_file_pages 79014 [ 88.648145][ T7857] nr_dirty 698 [ 88.648145][ T7857] nr_writeback 0 [ 88.648145][ T7857] nr_shmem 17011 [ 88.648145][ T7857] nr_shmem_hugepages 0 [ 88.648145][ T7857] nr_shmem_pmdmapped 0 [ 88.648145][ T7857] nr_file_hugepages 0 [ 88.648145][ T7857] nr_file_pmdmapped 0 [ 88.648145][ T7857] nr_anon_transparent_hugepages 0 [ 88.648145][ T7857] nr_vmscan_write 178 [ 88.648145][ T7857] nr_vmscan_immediate_reclaim 7 [ 88.648145][ T7857] nr_dirtied 3570 [ 88.648145][ T7857] nr_written 2872 [ 88.648145][ T7857] nr_throttled_written 264 [ 88.648145][ T7857] nr_kernel_misc_reclaimable 0 [ 88.648145][ T7857] nr_foll_pin_acquired 2116 [ 88.648145][ T7857] nr_foll_pin_released 2116 [ 88.648383][ T7857] CIFS: VFS: bad cache= option: none [ 88.648383][ T7857] nr_mlock 0 [ 88.648383][ T7857] nr_zspages 0 [ 88.648383][ T7857] nr_free_cma 0 [ 88.648383][ T7857] numa_hit 637391 [ 88.648383][ T7857] numa_miss 15065 [ 88.648383][ T7857] numa_foreign 15065 [ 88.648383][ T7857] numa_interleave 7094 [ 88.648383][ T7857] numa_local 633285 [ 88.648383][ T7857] numa_other 19171 [ 88.648383][ T7857] nr_inactive_anon 16458 [ 88.648383][ T7857] nr_active_anon 13061 [ 88.648383][ T7857] nr_inactive_file 61860 [ 88.648383][ T7857] nr_active_file 147 [ 88.648383][ T7857] nr_unevictable 0 [ 88.648383][ T7857] nr_slab_reclaimable 7871 [ 88.648383][ T7857] nr_slab_unreclaimable 70795 [ 88.648383][ T7857] nr_isolated_anon 0 [ 88.648383][ T7857] nr_isolated_file 0 [ 88.648383][ T7857] workingset_nodes 1 [ 88.648383][ T7857] workingset_refault_anon 47 [ 88.648383][ T7857] workingset_refault_file 996 [ 88.648383][ T7857] workingset_activate_anon 0 [ 88.648383][ T7857] workingset_activate_file 1 [ 88.648383][ T7857] workingset_restore_anon 0 [ 88.648383][ T7857] workingset_restore_file 1 [ 88.648383][ T7857] workingset_nodereclaim 18 [ 88.648383][ T7857] nr_anon_pages 12551 [ 88.648383][ T7857] nr_mapped 30661 [ 88.648383][ T7857] nr_file_pages 79014 [ 88.648383][ T7857] nr_dirty 698 [ 88.648383][ T7857] nr_writeback 0 [ 88.648383][ T7857] nr_shmem 17011 [ 88.648383][ T7857] nr_shmem_hugepages 0 [ 88.648383][ T7857] nr_shmem_pmdmapped 0 [ 88.648383][ T7857] nr_file_hugepages 0 [ 88.648383][ T7857] nr_file_pmdmapped 0 [ 88.648383][ T7857] nr_anon_transparent_hugepages 0 [ 88.648383][ T7857] nr_vmscan_write 178 [ 88.648383][ T7857] nr_vmscan_immediate_reclaim 7 [ 88.648383][ T7857] nr_dirtied 3570 [ 88.648383][ T7857] nr_written 2872 [ 88.648383][ T7857] nr_throttled_written 264 [ 88.648383][ T7857] nr_kernel_misc_reclaimable 0 [ 88.648383][ T7857] nr_foll_pin_acquired 2116 [ 88.648383][ T7857] nr_foll_pin_released 2116 [ 88.654212][ T7852] binder: 7851:7852 ioctl c018937c 200000000040 returned -22 [ 88.699646][ T7858] device-mapper: ioctl: Invalid data size in the ioctl structure: 1953521509 [ 88.761984][ T7859] openvswitch: netlink: Key type 240 is out of range max 32 [ 88.872898][ T7870] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 88.875945][ T7870] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 88.881027][ T7870] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 88.886826][ T7870] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 88.911223][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.508'. [ 89.166821][ T7891] netlink: 64 bytes leftover after parsing attributes in process `syz.3.513'. [ 89.167027][ T7892] CIFS: Attempting to mount //127.0.0.1/share [ 89.217825][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 89.217841][ T42] audit: type=1400 audit(1787382908.629:742): avc: denied { create } for pid=7895 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.243893][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.252801][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.258735][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.263894][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.269145][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.274345][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.279509][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.284567][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.289922][ T7900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7900 comm=syz.1.516 [ 89.361958][ T7903] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 89.366492][ T7903] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 89.690637][ T42] audit: type=1400 audit(1787382909.099:743): avc: denied { read } for pid=7914 comm="syz.3.521" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.701175][ T42] audit: type=1400 audit(1787382909.099:744): avc: denied { open } for pid=7914 comm="syz.3.521" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.871358][ T7892] CIFS: VFS: Error connecting to socket. Aborting operation. [ 89.874280][ T7892] CIFS: VFS: cifs_mount failed w/return code = -4 [ 90.018834][ T42] audit: type=1400 audit(1787382909.429:745): avc: denied { create } for pid=7919 comm="syz.5.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 90.109225][ T7923] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 90.188273][ T42] audit: type=1400 audit(1787382909.599:746): avc: denied { read write } for pid=7924 comm="syz.1.524" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.195676][ T42] audit: type=1400 audit(1787382909.599:747): avc: denied { open } for pid=7924 comm="syz.1.524" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.400553][ T42] audit: type=1800 audit(1787382909.809:748): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.529" name="/newroot/74/file0" dev="tmpfs" ino=428 res=0 errno=0 [ 90.402307][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.529'. [ 90.411479][ T7940] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 90.565508][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 90.641938][ T42] audit: type=1400 audit(1787382910.049:749): avc: denied { bind } for pid=7972 comm="syz.5.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.664123][ T7975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.540'. [ 90.698577][ T7973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.732511][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.539'. [ 90.809104][ T7973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.923458][ T7973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.019793][ T42] audit: type=1400 audit(1787382910.429:750): avc: denied { read } for pid=7989 comm="syz.1.545" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.029462][ T42] audit: type=1400 audit(1787382910.439:751): avc: denied { open } for pid=7989 comm="syz.1.545" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.057338][ T7973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.134891][ T7999] process 'syz.4.548' launched './file1' with NULL argv: empty string added [ 91.232371][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.244524][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.247150][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.249614][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477314][ T8025] netlink: 'syz.5.556': attribute type 2 has an invalid length. [ 91.479752][ T8025] netlink: 228 bytes leftover after parsing attributes in process `syz.5.556'. [ 91.492401][ T8028] syzkaller0: entered promiscuous mode [ 91.495258][ T8028] syzkaller0: entered allmulticast mode [ 92.767635][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.944062][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 93.029185][ T8060] kAFS: unable to lookup cell '1' [ 93.208230][ T6206] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.211142][ T6206] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.430957][ T8094] netlink: 112 bytes leftover after parsing attributes in process `syz.3.578'. [ 93.474433][ T8106] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 93.495281][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.608827][ T8112] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 93.612028][ T8112] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 93.625464][ T8112] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 93.633584][ T8112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.637002][ T8112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.644894][ T8112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.673996][ T1478] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 93.807498][ T1478] usb 8-1: device descriptor read/64, error -71 [ 93.944072][ T8132] syzkaller0: entered promiscuous mode [ 93.946426][ T8132] syzkaller0: entered allmulticast mode [ 93.950145][ T8132] netlink: 68 bytes leftover after parsing attributes in process `syz.5.586'. [ 94.044234][ T1478] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 94.044715][ T8137] libceph: Failed to parse secret: -22 [ 94.049601][ T8134] cgroup: fork rejected by pids controller in /syz5 [ 94.054621][ T8135] pim6reg: entered allmulticast mode [ 94.059415][ T8139] vlan2: entered promiscuous mode [ 94.061963][ T8139] bridge0: entered promiscuous mode [ 94.089068][ T8137] pim6reg: left allmulticast mode [ 94.184078][ T1478] usb 8-1: device descriptor read/64, error -71 [ 94.295191][ T1478] usb usb8-port1: attempt power cycle [ 94.388995][ T13] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.495690][ T13] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.500529][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 94.500544][ T42] audit: type=1400 audit(1787382913.909:763): avc: denied { nlmsg_read } for pid=8254 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.510272][ T42] audit: type=1400 audit(1787382913.919:764): avc: denied { ioctl } for pid=8254 comm="syz.1.593" path="socket:[22405]" dev="sockfs" ino=22405 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.531586][ T42] audit: type=1400 audit(1787382913.939:765): avc: denied { write } for pid=8254 comm="syz.1.593" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 94.538443][ T42] audit: type=1400 audit(1787382913.939:766): avc: denied { open } for pid=8254 comm="syz.1.593" path="/200/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 94.560450][ T55] Bluetooth: Error in BCSP hdr checksum [ 94.560741][ T5739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.572154][ T5739] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.575789][ T5739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.583251][ T5739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.589453][ T5739] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.591642][ T42] audit: type=1400 audit(1787382913.999:767): avc: denied { read } for pid=5728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.602071][ T13] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.602111][ T5728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.604336][ T42] audit: type=1400 audit(1787382913.999:768): avc: denied { open } for pid=5728 comm="syz-executor" path="/200/my_tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.604366][ T42] audit: type=1400 audit(1787382913.999:769): avc: denied { read } for pid=5728 comm="syz-executor" name="instances" dev="tracefs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.604386][ T42] audit: type=1400 audit(1787382913.999:770): avc: denied { write } for pid=5728 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.604407][ T42] audit: type=1400 audit(1787382913.999:771): avc: denied { read } for pid=5728 comm="syz-executor" name="instances" dev="tracefs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 94.654066][ T1478] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 94.675226][ T1478] usb 8-1: device descriptor read/8, error -71 [ 94.725789][ T13] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.931363][ T13] bridge_slave_1: left promiscuous mode [ 94.934304][ T1478] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 94.935253][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.941676][ T13] bridge_slave_0: left promiscuous mode [ 94.943878][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.964694][ T1478] usb 8-1: device descriptor read/8, error -71 [ 95.064231][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 95.086973][ T1478] usb usb8-port1: unable to enumerate USB device [ 95.196433][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.201301][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.205531][ T13] bond0 (unregistering): Released all slaves [ 95.213723][ T13] bond1 (unregistering): Released all slaves [ 95.235205][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 95.247413][ T5732] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.248479][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 95.252200][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.255677][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.258712][ T8256] bridge_slave_0: entered allmulticast mode [ 95.261917][ T8256] bridge_slave_0: entered promiscuous mode [ 95.265041][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.267226][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.269194][ T8256] bridge_slave_1: entered allmulticast mode [ 95.271595][ T8256] bridge_slave_1: entered promiscuous mode [ 95.288241][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.297026][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.321000][ T8256] team0: Port device team_slave_0 added [ 95.327480][ T8256] team0: Port device team_slave_1 added [ 95.369245][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.371408][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.380161][ T8256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.384504][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.386689][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.397893][ T8256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.420395][ T1129] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 95.423997][ T1129] ata1: failed to read log page 10h (errno=-5) [ 95.425928][ T1129] ata1.00: exception Emask 0x1 SAct 0x10 SErr 0x0 action 0x0 [ 95.428422][ T1129] ata1.00: irq_stat 0x40000000 [ 95.430374][ T1129] ata1.00: failed command: READ FPDMA QUEUED [ 95.432784][ T1129] ata1.00: cmd 60/01:20:00:00:00/00:00:fd:00:00/c0 tag 4 ncq dma 512 in [ 95.432784][ T1129] res 41/04:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 95.440143][ T1129] ata1.00: status: { DRDY ERR } [ 95.441760][ T1129] ata1.00: error: { ABRT } [ 95.450029][ T1129] ata1.00: configured for UDMA/100 [ 95.456346][ T1129] ata1: EH complete [ 95.463694][ T8256] hsr_slave_0: entered promiscuous mode [ 95.467046][ T8256] hsr_slave_1: entered promiscuous mode [ 95.469770][ T8256] debugfs: 'hsr0' already exists in 'hsr' [ 95.471945][ T8256] Cannot create hsr debugfs directory [ 95.495457][ T8293] bridge_slave_0: left allmulticast mode [ 95.497312][ T8293] bridge_slave_0: left promiscuous mode [ 95.500121][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.507241][ T8293] bridge_slave_1: left allmulticast mode [ 95.509222][ T8293] bridge_slave_1: left promiscuous mode [ 95.511143][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.526296][ T8293] bond0: (slave bond_slave_0): Releasing backup interface [ 95.531681][ T8293] bond0: (slave bond_slave_1): Releasing backup interface [ 95.545881][ T8293] team0: Port device team_slave_0 removed [ 95.552199][ T8293] team0: Port device team_slave_1 removed [ 95.557047][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.560059][ T8293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.565562][ T8293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.568575][ T8293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.573327][ T8293] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.590803][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 95.612310][ T13] hsr_slave_0: left promiscuous mode [ 95.615312][ T13] hsr_slave_1: left promiscuous mode [ 95.617500][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.620428][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.644098][ T5732] Bluetooth: hci5: command 0x0c1a tx timeout [ 95.748239][ T13] team0 (unregistering): Port device team_slave_1 removed [ 95.758196][ T13] team0 (unregistering): Port device team_slave_0 removed [ 96.084008][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 96.085187][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.093690][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.098162][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.101745][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.105001][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.108245][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.111335][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.115451][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.118983][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.122273][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.125591][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.128634][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.131798][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.139157][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.142439][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.145997][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.149168][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.152327][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.155683][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.158998][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.162186][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.165941][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.169288][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.172601][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.176566][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.179865][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.183050][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.186327][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.190382][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.193643][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.197114][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.200359][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.203536][ T5732] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 96.391677][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 96.399146][ T8320] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 96.534404][ T8338] ufs: You didn't specify the type of your ufs filesystem [ 96.534404][ T8338] [ 96.534404][ T8338] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 96.534404][ T8338] [ 96.534404][ T8338] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 96.571710][ T8338] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 96.605354][ T8338] team0 (unregistering): Port device team_slave_0 removed [ 96.610027][ T8338] team0 (unregistering): Port device team_slave_1 removed [ 96.614404][ T5738] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 96.615323][ T5732] Bluetooth: hci3: command 0x1003 tx timeout [ 96.663395][ T8342] netlink: 84 bytes leftover after parsing attributes in process `syz.3.607'. [ 96.668825][ T8256] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.672580][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 96.684882][ T5738] Bluetooth: hci6: command tx timeout [ 96.685875][ T8256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.705599][ T8256] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.711286][ T8256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.715840][ T8256] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.719918][ T8256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.722597][ T8256] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.730540][ T8256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.751290][ T5806] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.754678][ T5806] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.829581][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.847555][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.860695][ T5732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.870576][ T5732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.872094][ T5806] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.874850][ T5732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.877795][ T5806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.882717][ T5732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.892508][ T5732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.898257][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.900721][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.905455][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.908520][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.967201][ T5806] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.975811][ T5806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.061612][ T5806] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.065565][ T5806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.087738][ T8376] (syz.4.613,8376,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 97.092193][ T8376] (syz.4.613,8376,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 97.276907][ T5806] bridge_slave_1: left allmulticast mode [ 97.278740][ T5806] bridge_slave_1: left promiscuous mode [ 97.281205][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.285981][ T5806] bridge_slave_0: left allmulticast mode [ 97.288418][ T5806] bridge_slave_0: left promiscuous mode [ 97.290883][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.303330][ T5806] dvmrp8: left allmulticast mode [ 97.454810][ T5806] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.460432][ T5806] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.466772][ T5806] .` (unregistering): Released all slaves [ 97.471933][ T5806] bond0 (unregistering): Released all slaves [ 97.497552][ T8256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.615105][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.617478][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.619870][ T8357] bridge_slave_0: entered allmulticast mode [ 97.622685][ T8357] bridge_slave_0: entered promiscuous mode [ 97.627067][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.629436][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.632166][ T8357] bridge_slave_1: entered allmulticast mode [ 97.636650][ T8357] bridge_slave_1: entered promiscuous mode [ 97.666997][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.682411][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 97.693525][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.735237][ T5738] Bluetooth: hci5: command 0x0c1a tx timeout [ 97.744043][ T8357] team0: Port device team_slave_0 added [ 97.750924][ T8357] team0: Port device team_slave_1 added [ 97.784047][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.786992][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.797855][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.807627][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.810758][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.822007][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.858469][ T5806] hsr_slave_0: left promiscuous mode [ 97.863375][ T5806] hsr_slave_1: left promiscuous mode [ 97.866295][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.868889][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.872322][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.875473][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.885125][ T5806] veth1_macvtap: left promiscuous mode [ 97.887492][ T5806] veth0_macvtap: left promiscuous mode [ 97.890050][ T5806] veth1_vlan: left promiscuous mode [ 97.892246][ T5806] veth0_vlan: left promiscuous mode [ 98.127527][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 98.131177][ T8256] veth0_vlan: entered promiscuous mode [ 98.152404][ T8357] hsr_slave_0: entered promiscuous mode [ 98.157364][ T8357] hsr_slave_1: entered promiscuous mode [ 98.159301][ T8357] debugfs: 'hsr0' already exists in 'hsr' [ 98.160969][ T8357] Cannot create hsr debugfs directory [ 98.175102][ T8256] veth1_vlan: entered promiscuous mode [ 98.252957][ T8256] veth0_macvtap: entered promiscuous mode [ 98.257231][ T8256] veth1_macvtap: entered promiscuous mode [ 98.282866][ T8256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.293538][ T8256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.345769][ T8357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 98.358650][ T8357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.361640][ T8357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.369075][ T8357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.373323][ T8357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.392995][ T8357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.401913][ T8357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.407309][ T8357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.410428][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 98.444569][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.479610][ T8439] dlm: no locking on control device [ 98.484497][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.484538][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.484567][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.486937][ T6210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.486949][ T6210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.521385][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.527031][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.556601][ T8357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.568641][ T8357] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.579582][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 98.582401][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.592'. [ 98.583455][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.587385][ T8445] netlink: 'syz.5.592': attribute type 7 has an invalid length. [ 98.588181][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.596404][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.598627][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.612057][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 98.633698][ T8357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.749911][ T8464] MTDSB: Device #1 doesn't appear to exist [ 98.749911][ T8464] [ 98.764569][ T5738] Bluetooth: hci6: command tx timeout [ 98.851318][ T8357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.925742][ T8474] binder: 8473:8474 ioctl c0306201 2000000004c0 returned -14 [ 99.001612][ T8357] veth0_vlan: entered promiscuous mode [ 99.004369][ T5738] Bluetooth: hci0: command tx timeout [ 99.009265][ T8357] veth1_vlan: entered promiscuous mode [ 99.026235][ T8357] veth0_macvtap: entered promiscuous mode [ 99.030314][ T8357] veth1_macvtap: entered promiscuous mode [ 99.041905][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.048186][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.074121][ T5806] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.078157][ T5806] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.080889][ T5806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.083545][ T5806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.120545][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.123227][ T8483] Bluetooth: MGMT ver 1.23 [ 99.126700][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.149462][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.153360][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.516944][ T8500] bridge0: port 3(netdevsim0) entered blocking state [ 99.520381][ T8500] bridge0: port 3(netdevsim0) entered disabled state [ 99.522532][ T8500] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 99.526136][ T8500] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 99.528729][ T8500] bridge0: port 3(netdevsim0) entered blocking state [ 99.530845][ T8500] bridge0: port 3(netdevsim0) entered forwarding state [ 99.544284][ T74] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 99.704686][ T74] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 99.714678][ T74] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 99.723326][ T74] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 99.728617][ T74] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.733756][ T8494] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 99.736964][ T8494] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 99.748476][ T74] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 99.759273][ T74] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 99.804400][ T5738] Bluetooth: hci5: command 0x0c1a tx timeout [ 99.969550][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.6.633'. [ 99.973010][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.633'. [ 99.994051][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.000074][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.005563][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.014205][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.252712][ T1478] usb 10-1: USB disconnect, device number 7 [ 100.259598][ T1478] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 100.264226][ T1478] cyberjack 10-1:1.0: device disconnected [ 100.803355][ T42] kauditd_printk_skb: 234 callbacks suppressed [ 100.803372][ T42] audit: type=1400 audit(1787382920.209:1004): avc: denied { connect } for pid=8548 comm="syz.5.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.844171][ T5738] Bluetooth: hci6: command tx timeout [ 101.094297][ T5738] Bluetooth: hci0: command tx timeout [ 101.247128][ T42] audit: type=1400 audit(1787382920.659:1005): avc: denied { write } for pid=8590 comm="syz.6.647" name="/" dev="9p" ino=88080497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.265268][ T42] audit: type=1400 audit(1787382920.659:1006): avc: denied { write } for pid=8590 comm="syz.6.647" name="/" dev="9p" ino=88080497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.274159][ T42] audit: type=1400 audit(1787382920.659:1007): avc: denied { rename } for pid=8590 comm="syz.6.647" name="file0" dev="9p" ino=88080501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 101.421496][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.648'. [ 101.863353][ T8577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 101.865506][ T8577] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 101.867887][ T8577] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 101.871890][ T8577] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 101.878535][ T8577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.881089][ T8577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.884792][ T8577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.933089][ T8604] ALSA: mixer_oss: invalid OSS volume 'V¯Î`q O' [ 101.939048][ T8604] ALSA: mixer_oss: invalid OSS volume '' [ 102.082723][ T42] audit: type=1400 audit(1787382921.489:1008): avc: denied { append } for pid=8620 comm="syz.4.657" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.117879][ T42] audit: type=1400 audit(1787382921.529:1009): avc: denied { bind } for pid=8623 comm="syz.4.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.126959][ T42] audit: type=1400 audit(1787382921.539:1010): avc: denied { accept } for pid=8622 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.134245][ T5733] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 102.137732][ T42] audit: type=1400 audit(1787382921.539:1011): avc: denied { bind } for pid=8622 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.157962][ T42] audit: type=1400 audit(1787382921.539:1012): avc: denied { listen } for pid=8622 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.164319][ T42] audit: type=1400 audit(1787382921.539:1013): avc: denied { connect } for pid=8622 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.207868][ T8641] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 102.210760][ T8641] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.248452][ T8639] binder: 8638:8639 ioctl ae47 0 returned -22 [ 102.294467][ T5733] usb 11-1: Using ep0 maxpacket: 16 [ 102.302131][ T5733] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.309116][ T5733] usb 11-1: config 1 interface 0 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.314681][ T5733] usb 11-1: config 1 interface 0 has no altsetting 0 [ 102.318605][ T5733] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.321202][ T5733] usb 11-1: Product: syz [ 102.322859][ T5733] usb 11-1: Manufacturer: syz [ 102.325416][ T5733] usb 11-1: SerialNumber: syz [ 102.331458][ T8597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 102.332898][ T8654] sctp: [Deprecated]: syz.4.666 (pid 8654) Use of int in maxseg socket option. [ 102.332898][ T8654] Use struct sctp_assoc_value instead [ 102.334536][ T8597] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 102.573098][ T5733] usb 11-1: No union descriptors [ 102.578752][ T5733] usb 11-1: USB disconnect, device number 2 [ 102.920502][ T8678] SELinux: syz.4.673 (8678) wrote to user. This is no longer supported. [ 102.936558][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.674'. [ 103.165406][ T5738] Bluetooth: hci5: command 0x0c1a tx timeout [ 103.306099][ T5733] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 103.445931][ T5733] usb 10-1: device descriptor read/64, error -71 [ 103.694112][ T5733] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 103.774675][ T8732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8732 comm=syz.4.689 [ 103.834102][ T5733] usb 10-1: device descriptor read/64, error -71 [ 103.884197][ T5738] Bluetooth: hci6: command 0x0c1a tx timeout [ 103.884305][ T5732] Bluetooth: hci0: command 0x0419 tx timeout [ 103.910495][ T8738] xt_hashlimit: size too large, truncated to 1048576 [ 103.944417][ T5733] usb usb10-port1: attempt power cycle [ 104.294221][ T5733] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 104.326546][ T5733] usb 10-1: device descriptor read/8, error -71 [ 104.377379][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.6.698'. [ 104.574036][ T5733] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 104.605508][ T5733] usb 10-1: device descriptor read/8, error -71 [ 104.725538][ T5733] usb usb10-port1: unable to enumerate USB device [ 104.971127][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 105.036535][ T29] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 105.063380][ T8790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 105.078083][ T8803] fido_id[8803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.394730][ T8826] input: syz0 as /devices/virtual/input/input13 [ 105.492949][ T8835] netlink: 84 bytes leftover after parsing attributes in process `syz.4.715'. [ 105.530820][ T8835] e1000e 0000:00:02.0 eth1: removed PHC [ 105.557099][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.715'. [ 105.670822][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671034][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671047][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671059][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671071][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671083][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671095][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.671107][ T5835] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 105.673690][ T5835] hid-generic 0000:0000:0001.0005: hidraw1: HID v0.10 Device [syz0] on syz1 [ 105.703579][ T8835] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 105.776075][ T8861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8861 comm=syz.6.722 [ 105.807814][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 105.807831][ T42] audit: type=1400 audit(1787382925.219:1032): avc: denied { write } for pid=8862 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.872775][ T42] audit: type=1400 audit(1787382925.279:1033): avc: denied { write } for pid=8867 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.903292][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.723'. [ 105.907790][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.723'. [ 105.917978][ T42] audit: type=1400 audit(1787382925.329:1034): avc: denied { write } for pid=8869 comm="syz.6.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.955455][ T42] audit: type=1400 audit(1787382925.359:1035): avc: denied { write } for pid=8871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.966005][ T5732] Bluetooth: hci6: command 0x0c1a tx timeout [ 105.966123][ T5738] Bluetooth: hci0: command 0x0419 tx timeout [ 105.972155][ T8839] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 105.981491][ T8839] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 106.000498][ T42] audit: type=1400 audit(1787382925.409:1036): avc: denied { write } for pid=8874 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.072326][ T42] audit: type=1400 audit(1787382925.479:1037): avc: denied { write } for pid=8876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.096200][ T8884] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 106.127317][ T42] audit: type=1400 audit(1787382925.539:1038): avc: denied { write } for pid=8885 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.185498][ T42] audit: type=1400 audit(1787382925.599:1039): avc: denied { write } for pid=8891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.198855][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.726'. [ 106.206977][ T8894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8894 comm=syz.5.728 [ 106.214861][ T8894] jffs2: notice: (8894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 106.224146][ T42] audit: type=1400 audit(1787382925.629:1040): avc: denied { write } for pid=8893 comm="syz.5.728" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.266642][ T42] audit: type=1400 audit(1787382925.679:1041): avc: denied { write } for pid=8898 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.292113][ T8901] fuse: Bad value for 'rootmode' [ 106.661405][ T8928] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 106.667941][ T8928] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 106.955023][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 107.089837][ T8942] vidtv vidtv.0: Successfully removed vidtv [ 107.494929][ T8959] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 107.508256][ T8959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.586855][ T8962] xt_hashlimit: size too large, truncated to 1048576 [ 107.777636][ T8975] kernel profiling enabled (shift: 9) [ 107.808362][ T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 107.818102][ T9] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 108.045428][ T5738] Bluetooth: hci6: command 0x0c1a tx timeout [ 108.046077][ T5732] Bluetooth: hci0: command 0x0419 tx timeout [ 108.298292][ T8985] tipc: Started in network mode [ 108.300448][ T8985] tipc: Node identity 4, cluster identity 4711 [ 108.303002][ T8985] tipc: Node number set to 4 [ 108.715539][ T8991] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 110.065352][ T5732] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 110.893732][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 110.893787][ T42] audit: type=1400 audit(1787382930.299:1060): avc: denied { write } for pid=9061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.923784][ T9064] Invalid ELF header magic: != ELF [ 110.934051][ T9064] overlay: Unknown parameter '/' [ 110.980177][ T42] audit: type=1400 audit(1787382930.329:1061): avc: denied { module_load } for pid=9055 comm="syz.4.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 111.177435][ T42] audit: type=1400 audit(1787382930.589:1062): avc: denied { write } for pid=9067 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.464042][ T5835] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 111.494090][ T5733] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 111.622803][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.778'. [ 111.635843][ T5835] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.639753][ T5835] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.644834][ T5835] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 111.648070][ T5835] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 111.651001][ T5835] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 111.654166][ T5733] usb 8-1: Using ep0 maxpacket: 16 [ 111.656196][ T5835] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 111.658311][ T5733] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.663303][ T5835] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.673071][ T5733] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.680794][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.689043][ T5733] usb 8-1: Product: syz [ 111.690826][ T5733] usb 8-1: Manufacturer: syz [ 111.695061][ T5733] usb 8-1: SerialNumber: syz [ 111.703823][ T5733] usb 8-1: config 0 descriptor?? [ 111.713196][ T5733] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.716811][ T5733] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 111.740161][ T5835] usb 11-1: Product: syz [ 111.742758][ T5835] usb 11-1: Manufacturer: syz [ 111.751013][ T5835] cdc_wdm 11-1:1.0: skipping garbage [ 111.753318][ T5835] cdc_wdm 11-1:1.0: skipping garbage [ 111.756938][ T5835] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 111.758840][ T5835] cdc_wdm 11-1:1.0: Unknown control protocol [ 112.045921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 112.144084][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 112.294575][ T9] usb 10-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 112.299208][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.303048][ T9] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 112.308950][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.312156][ T9] usb 10-1: Product: syz [ 112.313893][ T9] usb 10-1: Manufacturer: syz [ 112.315900][ T9] usb 10-1: SerialNumber: syz [ 112.316831][ T5733] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 112.560461][ T5835] usb 11-1: USB disconnect, device number 3 [ 112.732928][ T5733] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.735496][ T5733] em28xx 8-1:0.0: board has no eeprom [ 112.814509][ T42] audit: type=1400 audit(1787382932.229:1063): avc: denied { block_suspend } for pid=9105 comm="syz.4.789" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.928832][ C0] usb 10-1: invalid arpc response id received: 55087 [ 113.129788][ T9] usb 10-1: failed to send ARPC request 1: -71 [ 113.138926][ T9] usb 10-1: failed to execute ARPC: -71 [ 113.140785][ T9] usb 10-1: failed to set connected state for cport 0: -71 [ 113.143108][ T9] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 113.149703][ T9120] netlink: 312 bytes leftover after parsing attributes in process `syz.6.796'. [ 113.150040][ T9] usb 10-1: failed to send ARPC request 3: -71 [ 113.156434][ T9] usb 10-1: failed to execute ARPC: -71 [ 113.158371][ T9] usb 10-1: failed to clear cport 0: -71 [ 113.160260][ T9] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 113.173005][ T9] es2_ap_driver 10-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 113.180175][ T9] usb 10-1: USB disconnect, device number 12 [ 113.240240][ T42] audit: type=1400 audit(1787382932.649:1064): avc: denied { read write } for pid=9123 comm="syz.6.798" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.247506][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.250642][ T42] audit: type=1400 audit(1787382932.649:1065): avc: denied { open } for pid=9123 comm="syz.6.798" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.258502][ T42] audit: type=1400 audit(1787382932.659:1066): avc: denied { ioctl } for pid=9123 comm="syz.6.798" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.848044][ T9077] em28xx 8-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 113.884001][ T5733] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.887255][ T5733] em28xx 8-1:0.0: dvb set to bulk mode. [ 113.891090][ T57] em28xx 8-1:0.0: Binding DVB extension [ 113.903098][ T5733] usb 8-1: USB disconnect, device number 14 [ 113.905724][ T5733] em28xx 8-1:0.0: Disconnecting em28xx [ 113.936540][ T57] em28xx 8-1:0.0: Registering input extension [ 113.939491][ T5733] em28xx 8-1:0.0: Closing input extension [ 114.054804][ T5733] em28xx: Freeing device [ 114.125602][ T5732] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 114.128828][ T5732] Bluetooth: hci0: Injecting HCI hardware error event [ 114.135652][ T5738] Bluetooth: hci0: hardware error 0x00 [ 114.196826][ T9143] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 114.202074][ T9143] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 114.207475][ T9143] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 114.223619][ T9143] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.239268][ T9143] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 115.315824][ T9158] binder: 9157:9158 ioctl c0306201 0 returned -14 [ 115.593099][ T9162] netlink: 32 bytes leftover after parsing attributes in process `syz.3.810'. [ 116.206234][ T5738] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 116.454315][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.816'. [ 116.457282][ T9186] netlink: 288 bytes leftover after parsing attributes in process `syz.4.816'. [ 116.927539][ T9135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.932573][ T9183] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 117.177678][ T9196] overlayfs: failed to resolve './file1/file0': -2 [ 117.743834][ T9207] kvm: kvm [9206]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 117.749196][ T9207] kvm: kvm [9206]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 118.077018][ T9211] overlayfs: missing 'lowerdir' [ 118.246875][ T42] audit: type=1400 audit(1787382937.659:1067): avc: denied { associate } for pid=9219 comm="syz.6.829" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 118.294366][ T9220] netlink: 44 bytes leftover after parsing attributes in process `syz.3.830'. [ 119.095781][ T9241] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 119.134683][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 119.304722][ T9] usb 10-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 119.312528][ T9] usb 10-1: config 0 has no interfaces? [ 119.320189][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.325914][ T9] usb 10-1: Product: syz [ 119.329318][ T9] usb 10-1: Manufacturer: syz [ 119.331947][ T9] usb 10-1: SerialNumber: syz [ 119.357726][ T9] usb 10-1: config 0 descriptor?? [ 119.674811][ T57] usb 10-1: USB disconnect, device number 13 [ 120.250253][ T42] audit: type=1400 audit(1787382939.659:1068): avc: denied { read } for pid=9254 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.304033][ T5843] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 120.454042][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 120.456366][ T5843] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 120.460009][ T5843] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.463202][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.467345][ T5843] usb 8-1: config 0 descriptor?? [ 120.471159][ T5843] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 120.874105][ T5542] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 121.025340][ T5542] usb 11-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 121.029419][ T5542] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.033581][ T5542] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.037270][ T5542] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.041862][ T5542] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.048825][ T5542] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.051706][ T5542] usb 11-1: Product: syz [ 121.053104][ T5542] usb 11-1: Manufacturer: syz [ 121.054642][ T5542] usb 11-1: SerialNumber: syz [ 121.785685][ T9284] ushc 11-1:1.0: probe with driver ushc failed with error -110 [ 121.860552][ T29] usb 11-1: USB disconnect, device number 4 [ 121.926417][ T5843] gspca_vc032x: reg_w err -71 [ 121.927970][ T5843] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 121.934715][ T5843] usb 8-1: USB disconnect, device number 15 [ 122.158831][ T5738] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 122.508367][ T42] audit: type=1326 audit(1787382941.919:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.519498][ T42] audit: type=1326 audit(1787382941.919:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.529303][ T42] audit: type=1326 audit(1787382941.939:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d3135e90e code=0x7ffc0000 [ 122.542882][ T42] audit: type=1326 audit(1787382941.939:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.552591][ T42] audit: type=1326 audit(1787382941.939:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.561973][ T5843] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 122.565699][ T42] audit: type=1326 audit(1787382941.949:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.578385][ T42] audit: type=1326 audit(1787382941.949:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.590350][ T42] audit: type=1326 audit(1787382941.949:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9314 comm="syz.6.866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3139e0d9 code=0x7ffc0000 [ 122.591748][ T9317] gadgetfs: bound to dummy_udc driver [ 122.724035][ T5843] usb 10-1: Using ep0 maxpacket: 32 [ 122.727609][ T5843] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 122.731969][ T5843] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 122.736732][ T5843] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 122.741354][ T5843] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.746633][ T5843] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 122.757074][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.769012][ T5843] usb 10-1: Product: syz [ 122.770822][ T5843] usb 10-1: Manufacturer: syz [ 122.775481][ T5843] usb 10-1: SerialNumber: syz [ 122.826985][ C3] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 122.893680][ T5843] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input15 [ 123.003997][ T5843] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 123.012987][ T5843] (id 0x00) [ 123.055891][ T5843] rc_core: IR keymap rc-imon-pad not found [ 123.060718][ T5843] Registered IR keymap rc-empty [ 123.064733][ T5843] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 123.074029][ T5843] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 123.270536][ T5843] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 123.283676][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.6.875'. [ 123.286209][ T5843] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input16 [ 123.293482][ T9342] CIFS: Attempting to mount //127.0.0.1/test [ 123.298994][ T9342] CIFS: VFS: Error connecting to socket. Aborting operation. [ 123.303135][ T9342] CIFS: VFS: cifs_mount failed w/return code = -111 [ 123.336546][ T5843] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:14> initialized [ 123.356416][ T9343] netlink: 68 bytes leftover after parsing attributes in process `syz.4.876'. [ 123.499465][ T29] usb 10-1: USB disconnect, device number 14 [ 124.111364][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.881'. [ 124.114187][ T9353] netlink: 6 bytes leftover after parsing attributes in process `syz.6.881'. [ 124.246112][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 124.246122][ T42] audit: type=1400 audit(1787382943.659:1078): avc: denied { write } for pid=9365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.292749][ T42] audit: type=1400 audit(1787382943.699:1079): avc: denied { write } for pid=9376 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.344310][ T12] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.346877][ T12] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.349728][ T12] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.352498][ T12] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.355350][ T12] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.358818][ T12] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.364002][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.366665][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.374103][ T5843] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 124.413781][ T42] audit: type=1400 audit(1787382943.819:1080): avc: denied { write } for pid=9383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.473365][ T42] audit: type=1400 audit(1787382943.879:1081): avc: denied { write } for pid=9388 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.744412][ T5843] usb 8-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 124.747957][ T5843] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.751287][ T5843] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.755341][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 124.757817][ T5843] usb 8-1: Product: syz [ 124.759066][ T5843] usb 8-1: Manufacturer: syz [ 124.860278][ T42] audit: type=1400 audit(1787382944.269:1082): avc: denied { write } for pid=9394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.905285][ T42] audit: type=1400 audit(1787382944.319:1083): avc: denied { write } for pid=9397 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.974083][ T5843] usb 8-1: USB disconnect, device number 16 [ 124.992735][ T42] audit: type=1400 audit(1787382944.399:1084): avc: denied { write } for pid=9400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.036970][ T42] audit: type=1400 audit(1787382944.449:1085): avc: denied { write } for pid=9403 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.134984][ T42] audit: type=1400 audit(1787382944.539:1086): avc: denied { write } for pid=9406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.186873][ T42] audit: type=1400 audit(1787382944.599:1087): avc: denied { write } for pid=9409 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.514114][ T5733] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 125.618845][ T9429] file system registered [ 125.707943][ T5733] usb 10-1: unable to get BOS descriptor or descriptor too short [ 125.711196][ T5733] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 125.730625][ T5733] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.756091][ T5733] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.785552][ T5733] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 125.793537][ T5733] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 125.798499][ T5733] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 125.812795][ T5733] usb 10-1: config 1 interface 1 has no altsetting 0 [ 125.815154][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 125.829779][ T5733] usb 10-1: string descriptor 0 read error: -22 [ 125.832913][ T5733] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.207784][ T9440] nvmet_tcp: address family 255 not supported [ 126.289749][ T9444] netlink: 104 bytes leftover after parsing attributes in process `syz.6.901'. [ 126.374746][ T9450] overlayfs: missing 'workdir' [ 127.014215][ T5733] usb 10-1: 2:0: failed to get current value for ch 1 (-71) [ 127.038090][ T5733] usb 10-1: USB disconnect, device number 15 [ 127.554514][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 128.576457][ T9481] xt_hashlimit: max too large, truncated to 1048576 [ 128.883531][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 128.886611][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 128.913506][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 128.915684][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 128.934045][ T50] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 129.085426][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 129.087587][ T50] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 129.091215][ T50] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 129.095445][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.098052][ T50] usb 8-1: Product: syz [ 129.099396][ T50] usb 8-1: Manufacturer: syz [ 129.102043][ T50] usb 8-1: SerialNumber: syz [ 129.106238][ T50] usb 8-1: config 0 descriptor?? [ 129.112772][ T50] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 129.115744][ T50] usb 8-1: setting power ON [ 129.117466][ T50] dvb-usb: bulk message failed: -22 (2/0) [ 129.122825][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.126271][ T50] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 129.129296][ T50] usb 8-1: media controller created [ 129.138494][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.149874][ T50] usb 8-1: selecting invalid altsetting 6 [ 129.151799][ T50] usb 8-1: digital interface selection failed (-22) [ 129.153819][ T50] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 129.159927][ T50] usb 8-1: setting power OFF [ 129.163744][ T50] dvb-usb: bulk message failed: -22 (2/0) [ 129.166199][ T50] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 129.169449][ T50] (NULL device *): no alternate interface [ 129.175201][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 129.182171][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 129.186504][ T50] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 129.311393][ T50] usb 8-1: USB disconnect, device number 17 [ 129.334322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 129.623716][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 129.652614][ T9494] ceph: No mds server is up or the cluster is laggy [ 130.095330][ T9516] geneve1: left allmulticast mode [ 130.100826][ T9516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.103299][ T9516] bond0: left promiscuous mode [ 130.105715][ T9516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.108528][ T9516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.110985][ T9516] erspan0: entered promiscuous mode [ 130.116159][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.119268][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.541515][ T9526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.575686][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 130.575703][ T42] audit: type=1400 audit(1787382949.989:1105): avc: denied { mount } for pid=9527 comm="syz.4.929" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.586840][ T42] audit: type=1400 audit(1787382949.989:1106): avc: denied { write } for pid=9527 comm="syz.4.929" name="instances" dev="tracefs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.596070][ T42] audit: type=1400 audit(1787382949.989:1107): avc: denied { add_name } for pid=9527 comm="syz.4.929" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.606181][ T42] audit: type=1400 audit(1787382949.989:1108): avc: denied { create } for pid=9527 comm="syz.4.929" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 130.705599][ T42] audit: type=1400 audit(1787382950.119:1109): avc: denied { unmount } for pid=6789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.835817][ T9539] netlink: 'syz.6.934': attribute type 1 has an invalid length. [ 130.851289][ T9539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.860802][ T9539] gretap1: entered promiscuous mode [ 130.865563][ T9539] bond1: (slave gretap1): making interface the new active one [ 130.868566][ T9539] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 130.907004][ T42] audit: type=1400 audit(1787382950.319:1110): avc: denied { write } for pid=9543 comm="syz.6.935" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.342254][ T42] audit: type=1400 audit(1787382950.749:1111): avc: denied { lock } for pid=9557 comm="syz.5.939" path="socket:[31243]" dev="sockfs" ino=31243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 131.429017][ T5835] kernel read not supported for file /dsp (pid: 5835 comm: kworker/1:4) [ 131.940724][ T9582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.947'. [ 132.527024][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.529062][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.642404][ T42] audit: type=1400 audit(1787382952.049:1112): avc: denied { append } for pid=9594 comm="syz.5.954" name="nbd5" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.656793][ T9601] netlink: zone id is out of range [ 132.658580][ T9601] netlink: zone id is out of range [ 133.591178][ T42] audit: type=1400 audit(1787382952.999:1113): avc: denied { write } for pid=9616 comm="syz.5.962" name="functions" dev="configfs" ino=14799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.611102][ T42] audit: type=1400 audit(1787382953.019:1114): avc: denied { write } for pid=9616 comm="syz.5.962" name="c.1" dev="configfs" ino=16403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.641962][ T9617] configfs-gadget.g1 gadget.0: HOST MAC 16:60:30:62:41:ce [ 133.656260][ T9617] configfs-gadget.g1 gadget.0: MAC 1e:a0:b5:79:a2:87 [ 133.733057][ T9621] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 133.758261][ T9621] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 133.832517][ T9625] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 133.867011][ T9625] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.924208][ T57] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.084300][ T57] usb 5-1: New USB device found, idVendor=0000, idProduct=0104, bcdDevice= 7.02 [ 134.104934][ T57] usb 5-1: Dual-Role OTG device on HNP port [ 134.111249][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.146620][ T57] cdc_ncm 5-1:1.0: MAC-Address: 16:60:30:62:41:ce [ 134.157756][ T57] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 16:60:30:62:41:ce [ 134.173883][ T57] cdc_acm 5-1:1.2: ttyACM0: USB ACM device [ 134.304374][ T5807] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 134.636477][ T5807] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.668549][ T5807] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.678890][ T5807] usb 11-1: config 0 has no interface number 0 [ 134.691460][ T5807] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.713498][ T5807] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 134.736316][ T5807] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 134.757211][ T5807] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 134.799402][ T5807] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 134.822063][ T5807] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.835128][ T5807] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.851680][ T5807] usb 11-1: config 0 descriptor?? [ 134.854234][ T9638] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 134.858946][ T9638] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 134.872569][ T5807] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 135.049077][ T9666] dummy_hcd dummy_hcd.0: remove, state 1 [ 135.054731][ T9666] usb usb5: USB disconnect, device number 1 [ 135.058070][ T9666] usb 5-1: USB disconnect, device number 2 [ 135.093762][ T9666] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 135.098560][ T9671] ldusb 11-1:0.55: Write buffer overflow, 2147479472 bytes dropped [ 135.100074][ T29] usb 11-1: USB disconnect, device number 5 [ 135.101199][ C1] ldusb 11-1:0.55: usb_submit_urb failed (-19) [ 135.103861][ T9671] ldusb 11-1:0.55: Write buffer overflow, 2147479472 bytes dropped [ 135.109711][ T9671] ldusb 11-1:0.55: Write buffer overflow, 2147479472 bytes dropped [ 135.112641][ T9671] ldusb 11-1:0.55: Write buffer overflow, 2147479472 bytes dropped [ 135.122273][ T29] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 135.424985][ T9666] dummy_hcd dummy_hcd.0: stopped [ 135.427243][ T9666] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 135.603190][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 135.603202][ T42] audit: type=1400 audit(1787382955.009:1127): avc: denied { write } for pid=9683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.736105][ T42] audit: type=1400 audit(1787382955.149:1128): avc: denied { write } for pid=9690 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.817313][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 135.820808][ C1] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 135.823314][ C1] CPU: 1 UID: 0 PID: 5835 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.826439][ C1] Tainted: [L]=SOFTLOCKUP [ 135.827694][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.830586][ C1] Workqueue: mld mld_dad_work [ 135.832004][ C1] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 135.833525][ C1] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 fb b2 33 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 135.839052][ C1] RSP: 0018:ffffc900006a0d50 EFLAGS: 00010206 [ 135.840916][ C1] RAX: dffffc0000000000 RBX: ffff88802ea48610 RCX: 0000000000000101 [ 135.843288][ C1] RDX: 000000000000000c RSI: ffffffff87d74ed5 RDI: 0000000000000060 [ 135.845673][ C1] RBP: ffff88802c23c0e0 R08: 0000000000000005 R09: 0000000000000005 [ 135.847977][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88802c23cc00 [ 135.850316][ C1] R13: ffff88802ea48600 R14: ffff88802c23c0d8 R15: 0000000000000000 [ 135.852600][ C1] FS: 0000000000000000(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 135.855236][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.857222][ C1] CR2: 0000000000000050 CR3: 00000000393bb000 CR4: 0000000000352ef0 [ 135.859591][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 135.861963][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 135.864325][ C1] Call Trace: [ 135.865333][ C1] [ 135.866206][ C1] usb_ep_queue+0xfa/0x3c0 [ 135.867549][ C1] eth_start_xmit+0x684/0x1390 [ 135.869021][ C1] ? __pfx_ncm_tx_timeout+0x10/0x10 [ 135.870614][ C1] ncm_tx_timeout+0x7f/0xb0 [ 135.872018][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 135.873619][ C1] hrtimer_run_softirq+0x1ca/0x360 [ 135.875143][ C1] handle_softirqs+0x1e6/0x9d0 [ 135.876599][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 135.878192][ C1] ? irqtime_account_delta+0x9a/0x110 [ 135.879852][ C1] ? __dev_queue_xmit+0xa12/0x4970 [ 135.881439][ C1] do_softirq+0xaf/0xf0 [ 135.882750][ C1] [ 135.883672][ C1] [ 135.884601][ C1] __local_bh_enable_ip+0xff/0x120 [ 135.886143][ C1] ? __dev_queue_xmit+0xa12/0x4970 [ 135.887675][ C1] __dev_queue_xmit+0xa27/0x4970 [ 135.889193][ C1] ? ip6mr_fib_lookup+0x133/0x1a0 [ 135.890747][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 135.892373][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 135.893888][ C1] ? __lock_acquire+0x4c5/0x1ec0 [ 135.895403][ C1] ? find_held_lock+0x2b/0x80 [ 135.896868][ C1] ip6_finish_output2+0x102d/0x1d50 [ 135.898448][ C1] __ip6_finish_output+0x357/0xdf0 [ 135.900012][ C1] ip6_output+0x2aa/0xa60 [ 135.901334][ C1] ? __pfx_ip6_output+0x10/0x10 [ 135.902840][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 135.904488][ C1] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 135.906072][ C1] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 135.907658][ C1] ? __pfx_ip6_output+0x10/0x10 [ 135.909150][ C1] NF_HOOK.constprop.0+0x115/0x5a0 [ 135.910716][ C1] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 135.912341][ C1] ? __pfx_dst_output+0x10/0x10 [ 135.913796][ C1] mld_sendpack+0x8f7/0xec0 [ 135.914064][ T5819] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 135.915198][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 135.915215][ C1] mld_send_initial_cr+0x219/0x320 [ 135.915228][ C1] mld_dad_work+0x32/0x1f0 [ 135.915239][ C1] process_one_work+0xac7/0x1b10 [ 135.923681][ C1] ? __pfx_process_one_work+0x10/0x10 [ 135.925352][ C1] ? __pfx_mld_dad_work+0x10/0x10 [ 135.926908][ C1] worker_thread+0x5ef/0xe50 [ 135.928346][ C1] ? __pfx_worker_thread+0x10/0x10 [ 135.929923][ C1] ? kthread+0x13a/0x450 [ 135.931235][ C1] ? __pfx_worker_thread+0x10/0x10 [ 135.932853][ C1] kthread+0x373/0x450 [ 135.934095][ C1] ? __pfx_kthread+0x10/0x10 [ 135.935436][ C1] ret_from_fork+0x730/0xd60 [ 135.936833][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 135.938402][ C1] ? __switch_to+0x800/0x10f0 [ 135.939859][ C1] ? __pfx_kthread+0x10/0x10 [ 135.941297][ C1] ret_from_fork_asm+0x1a/0x30 [ 135.942795][ C1] [ 135.943610][ T42] audit: type=1400 audit(1787382955.339:1129): avc: denied { read } for pid=5119 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 135.943758][ C1] Modules linked in: [ 135.944100][ C1] ---[ end trace 0000000000000000 ]--- [ 135.953352][ C1] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 135.954993][ C1] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 fb b2 33 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 135.960605][ C1] RSP: 0018:ffffc900006a0d50 EFLAGS: 00010206 [ 135.962390][ C1] RAX: dffffc0000000000 RBX: ffff88802ea48610 RCX: 0000000000000101 [ 135.964494][ T42] audit: type=1400 audit(1787382955.339:1130): avc: denied { search } for pid=5119 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.964784][ C1] RDX: 000000000000000c RSI: ffffffff87d74ed5 RDI: 0000000000000060 [ 135.973672][ C1] RBP: ffff88802c23c0e0 R08: 0000000000000005 R09: 0000000000000005 [ 135.976027][ C1] R10: 0000000000000003 R11: 0000000000000001 R12: ffff88802c23cc00 [ 135.978374][ C1] R13: ffff88802ea48600 R14: ffff88802c23c0d8 R15: 0000000000000000 [ 135.980689][ C1] FS: 0000000000000000(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 135.983302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.985256][ C1] CR2: 0000000000000050 CR3: 00000000393bb000 CR4: 0000000000352ef0 [ 135.987716][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000460 [ 135.990028][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 135.992376][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 135.995044][ C1] Kernel Offset: disabled [ 135.996342][ C1] Rebooting in 86400 seconds..