last executing test programs: 3.781298854s ago: executing program 3 (id=692): mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='na', 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x52, 0x0, &(0x7f0000001640)="8a9771d8dd76c2b572b8f567278a8071f405dcd68f6fb02da3dd0efa173ff2ee4c19f44395a526257cf4a03f796a0bc0c502b626f38e1141b063f9b17d6b724df4a799fa1095886855ebb2a988840049f939"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) linkat(r0, &(0x7f0000000100)='./tracefs/trace_options/../file0\x00', r3, &(0x7f0000000140)='./tracefs\x00', 0x1000) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 2.890240013s ago: executing program 3 (id=700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x4e23, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000000000000}, {0xb, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x5, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.889901607s ago: executing program 3 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc1}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) close(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000180)=0x17) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sigaltstack(&(0x7f0000000240)={&(0x7f0000001c00)=""/4095, 0x80000000, 0xfff}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) ioctl$FE_READ_SNR(r0, 0x80026f48, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.27863025s ago: executing program 3 (id=709): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) (async) 2.211852139s ago: executing program 3 (id=710): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x802}, 0xe) listen(r2, 0x1) r3 = inotify_init() r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r4}, &(0x7f0000001e40), &(0x7f0000001e80)=r5}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) r6 = eventfd2(0x74a8, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}, {&(0x7f0000000100)="798d85a867c1d009b2effaaa622cfba425e253398884c6a66d000b286590b61148fb1edfa754631e7fd29bb1ad21202364bbca8731b8e1601b88f8fb1323bb34bfa1b309056ab71eb9adf6f35d452ce1765c4de6689f04fc72a5892bd034ebc2e28b74ee947cfb258f75fecf6c46", 0x6e}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x802}, 0xe) (async) listen(r2, 0x1) (async) inotify_init() (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r4}, &(0x7f0000001e40), &(0x7f0000001e80)=r5}, 0x20) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) eventfd2(0x74a8, 0x0) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}, {&(0x7f0000000100)="798d85a867c1d009b2effaaa622cfba425e253398884c6a66d000b286590b61148fb1edfa754631e7fd29bb1ad21202364bbca8731b8e1601b88f8fb1323bb34bfa1b309056ab71eb9adf6f35d452ce1765c4de6689f04fc72a5892bd034ebc2e28b74ee947cfb258f75fecf6c46", 0x6e}], 0x2) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) 2.121738446s ago: executing program 3 (id=711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f08000103100b3d797dda9cb253ede8d06a432fac1e81be175e2c74d61a346d06d7cde9adea62b4f973ec0efc64fb72c3dafe092a81f9fc6dcd98c0e8013ac69765a4c4a48e641cdf954190a5f32346775e90aa8572db8140209476acc2784069260c352d0d7a54eabfa351812878a691ae4601000000cee491859a1857ba2d54ea6de5090c6a1ab1034f2de74a33a10a6e7459c82f87820545527fded64b567edb8a8ab5b6a78c257c21ab9589169d019cb76f789a31606263b9da99e65d0e17e686df3f58c83b06c45f2eb26f6cfa6ce40a9917354a3890ea0f0f8bbb845897a6e0659f4463284d0ba94671a907dfeb332c737efa86a75e4716991dc31969d8213ca4f0518741473361c42f93f34ab785008103843169c43f"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x20, 0x3, 0x2a8, 0x0, 0xa, 0x148, 0x138, 0x10, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xffffff00, 0xff000000, 'wlan0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x32, 0x0, 0x51}, 0x0, 0xd8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x0, 0x1, 0x0, 0x0, 0x4, 0x6], 0x4, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x6, 0x9, 0x4, 0x6], 0x2, 0x2}, {0x4, [0x4, 0x4, 0x5, 0x6, 0x4, 0x1], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x55, {0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x308) 1.892026354s ago: executing program 0 (id=713): mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x5, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x100000, 0x10000000000f48, 0x8, 0x25}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x827, 0x47) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x5, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x100000, 0x10000000000f48, 0x8, 0x25}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x827, 0x47) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) 1.799852262s ago: executing program 0 (id=714): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x6, @loopback={0x0, 0xac141414}, 0x80000}, 0x1c, 0x0}}], 0x1, 0x24004855) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) 1.752172932s ago: executing program 0 (id=716): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000040)={"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"}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440)={0x7, [0x6, 0x0, 0x2, 0x2, 0xfff8, 0xcc, 0x1]}, &(0x7f0000000480)=0x12) (async, rerun: 64) r2 = epoll_create(0x80000001) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0xfb, 0x23, 0x4, 0x40, "13a1c627b5cd725149c7a8863dac8a1b", "8c64daad787413bf61bbce3aa51e"}, 0x23, 0x1) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x70e}, {0x8, 0x15, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000081) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = dup2(r4, r0) (async) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x4, 0x50, r1, 0x83000000) (async) dup(0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x1) (async) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000700)=0x7, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r1) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x60000c5) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000900)={0x5, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000940)={'veth0_to_team\x00', 0x800}) (async) ioctl$SIOCX25SCUDMATCHLEN(r5, 0x89e7, &(0x7f0000000980)={0x10}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000009c0)='macvlan0\x00') (async, rerun: 64) r7 = openat2(r1, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x8400, 0x188, 0x8}, 0x18) (rerun: 64) read$FUSE(r7, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r7, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)=@getroute={0x14, 0x1a, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008050}, 0x800) (async) mount$fuse(0x0, &(0x7f0000002bc0)='./file0/../file0\x00', &(0x7f0000002c00), 0xe0046, &(0x7f0000002c40)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'IPVS\x00'}}, {@fsname={'fsname', 0x3d, 'devlink\x00'}}, {@context={'context', 0x3d, 'user_u'}}]}}) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x58, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x82) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000002e80)=@svm={0x2, 0x1, 0x1080, {0x8080000, 0x4000000000000}, {"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"}}) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) tkill(r10, 0x39) 1.750860463s ago: executing program 0 (id=718): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x6, 0xd, 0x0, 'queue0\x00', 0x9}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x800000000cb}, 0x2d, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='\x16\x00\x00\x00\x00\x00\x00\x00]\x198\x188\x8d\xbe\xbdMw\x1d\xcd\x16x') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x0, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x7, 0x1b3f, 0x3, 0x40000000000001a, 0x400, 0x7, 0xb, 0x100fdf}) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 1.670939601s ago: executing program 0 (id=720): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1f7) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x1) ioctl(r0, 0x0, &(0x7f0000000200)="b56cd090158b8b16a1590da7ed34bd61617025dc248710409d1b7b61920566f314a3f99fe6a6683bacde66c8d62188ce8ba1e7cb2fb7c63ac5570416305d87f6fe77c61b57f5718b5359fef692cd29e88cd5c22b6409615501ac2ba362788ad3fbb4ca93b38d98ef6abbc98e4ae6e25788b76c9056c8bec7bd244b0ae7caad0ce3818fb3de45c0577cc9c17fdd724afa55344c4e35ed194fe6cc7a44efc093976c0d5cb58f835ee8128c56e95fdd07bee5cfb73077151faa4dd8991ea54d0f6428eef64030a646302c7acff60462b7543fba987c7a7be731255fbd6475a3200f9d8a16c5e7") 1.670649208s ago: executing program 0 (id=721): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xdd7c, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) symlinkat(&(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00') r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000cc0)="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", 0x3c2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x28, 0x0, 0x0) 309.332768ms ago: executing program 1 (id=730): write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x10000, 0xf}) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4b3, &(0x7f0000000140)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x4}, {0x4}], @ipv6=@esp={0x7, 0x6, "f21e44", 0x471, 0x32, 0xff, @private1, @mcast2, {[], {0x4d6, 0x5, @cc={0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x3390661a, [@ipv6=@tcp={0x7, 0x6, "d7edd2", 0x181, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, {[@dstopts={0x33, 0x21, '\x00', [@ra, @generic={0x8, 0xa9, "21f9483533be5a8fba641291627590887e961de4627f4340ffc85ffeb84dab28c34444701f1c4ae16f84eee9d3db514acd6c4b28a56cbcfda659f76ebfae5305dab8ba9c99478c324bb0ffee0046b07fc0eb372613e0fa32169df2ee7fcdacdfac4b59cd2bd726ae8387b6cd20ef9acd1ced19bb36ca7c7b4abd34a6662521eb215c809b5f84a0fdc24700b8b67fe14cdb623de5cfbcec7fdee97dfc4caf3c028d287d3a8ed5e64627"}, @enc_lim={0x4, 0x1, 0xb}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0xf8}, @calipso={0x7, 0x50, {0x0, 0x12, 0x80, 0xff80, [0x850, 0xffffffffffffffff, 0xbba, 0x4, 0x4, 0x80000000000, 0x81, 0x1, 0xf]}}]}, @hopopts={0x4, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @mcast2}]}], {{0x4e24, 0x4e21, r2, r3, 0x0, 0x0, 0x6, 0xe3d20c3907e038a9, 0x2, 0x0, 0x5bb, {[@window={0x3, 0x3, 0x81}]}}, {"820be01d8562196aad67d277926738b462a3c3a1926baf9b05"}}}}, @ipv4=@icmp={{0x19, 0x4, 0x1, 0x0, 0xeb, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@rr={0x7, 0xf, 0xe3, [@private=0xa010102, @broadcast, @private=0xa010101]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x1, 0x12, "51ef99bc70bcb6dbbcf04000f7a84ba1"}, {0x0, 0xa, "444845138d852b19"}, {0x6, 0xd, "f776d1ba489c3e72741256"}, {0x6, 0xe, "597225db7ee57e8fed4cd5c2"}]}, @end, @noop]}}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x1, 0x7, {0x1e, 0x4, 0x0, 0xe, 0xeb1, 0x68, 0x0, 0x1, 0x1, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0x1, [{@private=0xa010102, 0x7fffffff}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @noop, @timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0x0, [{@rand_addr=0x64010101, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b74}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x2}, {@local, 0x7}, {@loopback, 0x8001}, {@multicast1, 0x9}, {@multicast1, 0xe2c9}]}, @generic={0x89, 0x5, "9771fd"}]}}, "da618e56acb5ee"}}, @runt="74721d6a849ecc9af14ce4cb8674170f3c5963f7f17c7ea29c6a1d35b9944b", @ipv6=@udp={0x6, 0x6, "d66501", 0x14d, 0x11, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@routing={0x62, 0x12, 0x1, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @remote]}], {0x4e21, 0x4e23, 0xb5, 0x0, @opaque="5c083aba29d7cc4255d99cf3305c94cb620d33b86f29bd1ec68cfd552a18da47295ac93eb50252b72f4ae2c343a8641bee63e1a3a65581189d8ac51a7c977d9b35300ef209e3be1c313a03aee9d7b6b26b3da4388a38206d8d409bbba2bd05cce05f39db1e4dbe1901b44a6c55974b23f5cb949f3d346e8de9f48bb1ad1803ab28358cd1592f5a3734f9eea9aa9676499a5c8e24855b5cd1ee4f3f907f0aa98d98affbf48c03daa5764b27abfa"}}}, @runt="69fdeb0dbf6e0a51f66ffa6d3924e689ca027f045546", @runt="be6a226f57cb321aabe494"]}, "d8dcb2afb9a9", 0x6}}}}}}}, &(0x7f0000000600)={0x0, 0x3, [0x615, 0x862, 0xd9d, 0xbad]}) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000640)) pipe2$9p(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RWRITE(r4, &(0x7f00000006c0)={0xb, 0x77, 0x2, 0x3265}, 0xb) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000700)={0x0, {0x9, 0x2}}) syz_extract_tcp_res$synack(&(0x7f0000000740), 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000780)={0x4, 0x5, {0x9, @struct={0x1, 0x1ff}, 0x0, 0xc031, 0x8, 0x7, 0x79c0a22e, 0xf5f, 0x2, @usage=0x1ff, 0x5, 0x2, [0x2, 0x3b7, 0x841f, 0x5, 0x8000000000000000, 0x2]}, {0xfffffffffffffffd, @usage=0xb, 0x0, 0x5, 0x10000000000000, 0x8, 0x0, 0xde, 0x1, @struct={0x3, 0x2}, 0x4, 0x10001, [0x400000000000, 0x7, 0xd0c, 0x9, 0x3, 0x7ff]}, {0x10, @usage=0x5, 0x0, 0x10, 0xc2b, 0xff, 0x5, 0x5337, 0xc0, @struct={0x8, 0x5}, 0x800, 0x6, [0x8, 0x7, 0xf, 0x9, 0x0, 0x51]}, {0x3, 0x7, 0xfffffffffffffff1}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000b80)={0x1, 0xe, @start={r5, 0x1, "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", "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"}, [0x7, 0x7f, 0x4, 0x2, 0x0, 0x7, 0xffffffffffffff81, 0x9, 0x2, 0x8, 0x2, 0x4, 0xcf6, 0x3, 0xb, 0xffffffffffffff32, 0x8, 0x80000001, 0x5, 0x8000, 0xbaa, 0x9, 0x3, 0x5, 0xdb, 0x100000000, 0x4f9, 0x7, 0x8000000000000000, 0x3, 0x5, 0xfffffffffffffffa, 0x5, 0x25d236b8, 0xffffffffffff0001, 0x7, 0x4, 0x6, 0x3, 0x2, 0x1e0984cf, 0x3524, 0x9, 0x65, 0x7f, 0x1, 0x7, 0x2, 0x5, 0x55, 0x6, 0x0, 0xace, 0x8, 0x0, 0x187, 0xc4, 0xc3, 0x5, 0x7, 0x7, 0x9, 0x2, 0x3386cedb]}) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000015c0)) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000001600)=0x8) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001780)={'tunl0\x00', &(0x7f0000001700)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x64b2, 0x473a95c4, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x68, 0x0, 0x1, 0x3f00c135f29e3543, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0xb1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x68, 0x0, 0x5, [0x5, 0x3]}, @generic={0x7, 0x6, "bb2042e4"}, @noop, @noop, @generic={0x83, 0xa, "427d475450670f18"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000001640), 0xc, &(0x7f0000002dc0)={&(0x7f00000017c0)={0x15d0, r6, 0x100, 0x1, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "d0fac01369abef05954eb634dfe0803213b605d206bfe10a716de7eb9978e7d3d03105959711e8bd74f10a04de2fb3a3716f249d252ecce9858c627f45fd447efdaa6f490f98f8f3491aa66b0e7114c57e128daa6e00651af29551b93779301e77a5276d2911e807c8422fa5de8815e8aabac7b6d0c3f71bce4d1ecc5703e60798daf552b8e3149a421a7e0600174f41fdef28f2f49185e2aaa030f2f21fe7481241c7b6e3a5e748eed674022738dbf095c30c1cb321"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcd, 0x4, "51d44f64aa2881504952584f7342bc44be4196f5f346465ca89e2833b61e1192f2bb9f2f5b82e1c048f5a901829887b043992cad02532ac76462e51800ecea39eeb27ef52d827c760a5935202d4b828ba38521ab5e4f67089bf10a3cdf3d0315698a25fe86b91bf457809be9528e21643bd87a976cb8586b748ef4affb0acbd86cd81ad1ab96885e1ebc37be66d7c835884da310318a62ad84f587a649de11d7d2bfde612e323a42afe2c94da3f763ae0699e9cee0ead49ccee1aa8129bacdae70a62bf56f3a4d6814"}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x98}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-\\},{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tasks\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%]$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@)%\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "9410ae0bd26cf044183cc569e41ee22672eae93942ba52229d3cf6f53c1d2235ed61cfd9e78af87341a9600a82f91de3c8d63bafa93ce75707a7"}]}, @ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1210, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "3165140dae882c3dd3b769aba28fef06c7794145cf5c772b78370cfaa205eff3347e02a8a8fd5308ec478b87d4eb0e43274b74f0bb618328e10fca96453d8be011a6baf011b297cc3fa75351fd4780262972b3d0b0368349ab9d9895e1c7f4a91d9ffc57a9af1bed33f8daa20e74fd48fe4cee2db961ec32cc008ad9abd5303c6283b683cdaec3573334c67f769b354c2b4a81bbbb35f33ff322ce3fb8171dc426451113ddf0afebdb8af28cbdec7762d0a0e39ebd16d0756f03b353014049b7df0eb59e13f3c6acc109fa3523b3ba863d57993960d3b70d93c2ca606b7892b49d0dd0c72c2df31a9aed2b56f57adef4cb06af99ca70c25e5fafc22eccb650f1a73b482fda22bca122057af7102067426bfeddd7655720836b62a2a48c3afa366a233e82d6a688692f8ae61bbee8c024a88d536e53beab30cdff3daa1f41ff66010ddd164df3bb4875fd14bb31e8e5347684ed40b9153daa58b351a12e57d147bad02783853320ed072aed8c51a03b25f05dcc787befdc972189c2987195a2a0547f8376e1c1a97381d2fc56dc23bf13fb2d16feb36cca286544ca8e74e75df744b001f4d3cc195bd824c4bfed6e82b1a994810e490286367323a02c96f57458a3b62a17d44c725d9364f1d660e5b0035bbb8aea0e8ea0c859ce045c4fc2385e6cb3c1c92634c8722dd5a74137ed280077805e14be6fab3b6feb553a6e4020c153a4db95d292262457b98d8e94a9488d7d1c3f01617734bbcaeb38e9985a9855f7867d8a1b8801a90b117bf99804e012cb142d358890709dadfb87ecb80a54bc51483be169dbe2ab49bee49cf26982c52a93454e9e9aca56a6f06ffebbf8b517998a929bc9e5531161c25ff4311d5e99c1fc15f7e0fd5f982513258f9141936fa4f2067475cff7c8dead11978480d9c9ecc96f3fd765e98b834b6941946804d0b9b51d27b04a390acfb996c8d5f50e8769f780b12b5715c4f870b9a586e118a051a5eb2abe64efba2e4ec6afa0943d73a492e3e478c07e3e5d1e3d9cac91211387123e5898d2e5d4fd204e7af8840e64a8ed6f7cff1973bb95fc155f5855b24f4688933c046d5a86c561771327e6a3f161374299aba30896280a0c8fcfde61289c32bb53f42824f5c4c5205c9c52e1d5ac90bfdd5ed296956cd672e7712bb87e209cdc5a627cab0b8bd9517c6696ff20c201e106512c39415b0cecb053425a290073c31f705a3ced5c21e7801f233b20167762f8f2ea69be730466eb2e2b54c9bcff7eec9d68678e230b2fe37852653cfcf861593321ffc5c81c5730d883e7dbd6cadfbd3292ad5f8998079b29799c7a54a6f6d73ceef591bd215ac420a73dc857917b06e54c451cefe6fc0b46c10708fe1d1d67199afb1143f1e63845423491f32708c5a6213400115a751ac06ba41d409d10f1c463fa4b18c8afc362557c5315aae2434819754bdf59bb03cedb075be3c797dd3f8ba3ceaa668e0e089c3e46a88c4e17e51d009cfb19e16c7480e1bce3271dcae294f07dc4c9216f1ed5b14d896e5ae5122645c36b1317a9d59a2b30fe7eb09aca0eb71bf6e114c0bd875853c49e96b499785090fae89b815a9cd0d84640742496a51606d8940a7fdbb77832a693017d80f39475cfeffdfff00f3e1fdeea34077d0e061489abf7e7eecc0eb78537d9cb3415cc4984acb94a995a48126f1b187e57fce9544ff897c393de913505e641c0bd90ff56541d168be27f41fec56d885b0444e46a3015758e4cd931abfb049292361163dabf54886ab91e0c215a6366e02b90adb84c7a9b0982c53b5dd35ec5c13cfd6dca05af9085b871dce64a965c0e9a5ede6dbc99fe42e5e67b5800cef155412f45d21c70162ea24610e3d88c71c6d7645c5ebb38b68efd969368ce227fb69cc868ed9e124419f42c3a593af9eb5aff85e2dabf817370ff87e972b892bbb50824947d7c6df43ca66179ba8a07374257a10f789b07776b60bbc46d0b0294694cbb9bdbcbf9f0a6d2bc8d25c3667160501688004b41d66f2ba88d5ebbba459783291991eedb285e7eededd1b8663d2bf76d562755715d0d8df4844985323b89d994ea45753779b6e6cfffa7ac67de33aa274e735bbb0845b73648fefd445926c46bd207755ff9eee1b1162da35d5dc5b436d62bf7178560eea0f9e2eb3a209873d8ef36505315c5831e409004c93602b0318f2bec5f73b12cf5393377c59d415adf7ace53b9a44404ecef79751d360af03c4089c303a95b71d7d8030be15117e80c646db9305277f9a1b3d306df134319961381b54dd5a66f71804f041d3c347474d1c2337b84414b06e2cd39506ffa40acf23ee30b7bfdd9e5a82146d91f1d60583e0b927c73ebeb4278a79428cc77fd3d385fa4ed690f7c830917931d4b838795daf41463ebac0a57d88cdd6c550fa53a441072039be5e5d640b2704f1bd6a447fe5110f1f2b7a95eccca8afa57d22eef9ac3da7fb6546e5e01a53baee55f273e9c1e6258bbf854f65526e9324bd734ca805cb36d47e7baf0699b657d2892db807f5ad8b0611fbb37b269fe04b978955c2d3f2fe716a9a414544577468af392b088e34802eb56306ef4ffa00021a1853f4aabe3c948f11e3598eb7e07b06c1c541700de4b6e627a7df8326671c17ca796c4b1e75539d53c34ff8632cba050408761193046d28e174b57cae5602bd79252e28e5b32bd6928c75ee29c2aa5b129867e0faff9391e43e9c981adb8a0f681bcb7f943490a71827eaa47c913df683f662ad772e8075e3cb6dd44107e784b0969709a7587d3eb33f3c9911f99215e343ab7c17e673f42475f90cbb9a7917278b4c09958875c53736dcbd7cc1f63a48dc9ca66bccb268911fc83c40bac0f3576b03fe86039c8e6a1e25411e12ecace004e5b6e37dbcbc5d4a8c12102a3a81f0032a8d5cb35bdef133f81379b3a8d920c80a1a276a99efc78a3bc01ac557a341ae023e39f5147a28c796cf243fa26e50d5847bf0bddb729a235623b48dccd65a3f2800e1763ac5c027460e46d860a345597cd1404fd1abcf37cc4045068ce5181cfb34d78a4f8ff84517ece9083a286b70d2035480076c1561741d400d23596ee6a0f41125855aaf51bedd462ffcf8902e62a702996c004123652b126dd57f9fe53e8e024488f76cfbc06e1614db3ecbfdb2ca415fac81ff115c102e28f93610a26799bccfa641827ef80d7a5d8c5f1cab6bf5316cb734795eb155f00989661e1c6296e5425daa20d1b1317e2573096cb51a4534b4ce5d23d7a6e327d373d7009445ecd71d3c1b19b155a32711d794c67fe83b8c6beed664edf090b31f20dbb81a7437c222dfe0d5b7949f7b091b5a173b7ff863c5a4a9c98e2a055248ed15baf8db5fa2d52c472190cd1c8b9716ea9e5224d58be79826893b5dd5ee826ffa09182d6fdfc1ba6bed148c13b4ada5c600109b3fb4f63fa286d78511fcfb22428c501b804ff90f195f6ef03bfdcb13f51ea056aee8d80bbcf28ee4e5346237c771fc69712c5626cfd3812bd847dc72d9780606c1927f7d6a7c12687eb428d25453ea16a88d7d264f1e650f85d2d8740bde7883628950618a802f1702d8f45cf46ae81b0039c203df5c53f33de73df00d6c70c9d9b575c831659ea5f24965aa339003ceb19da1f3719c6060c8ecb9e9572aac106dc35b11508102be013da0290f2012897dc40221161d419b7d62b95969a854c0dff4749b60f09de3e54a3bfc72c51b29f5fc00440eb7fedf38284ef5cd2aa0bfcedd5f817991adb2ed36b61916fdb8ef8198e7c6995a714ed789976b90b2032254ca69a171e628d496e91c40f774124ed534d970687a2da6b941af59732810cc1c4e2b7ba94ca592b4c9ba916e2446a1382513addbe4388d2bcda5158d10eeddb9c0fdf1f5f79fd170ded4b18af6733ade5be1ff65bf840f5176ee413dc525fd7b2894d94ba082725f930631e2e28f7ca4881eab10dc4efc5d22d5ecfd22dd8f2d99a5d254f2c17f159bccad8ff29afedc2e4e6d253d25fccc172494662152ce00114a33e282f8708ee1d5f009f98245cd2d699ca3df7900385ec9ff45ba9c07bada8b369a74de979b76ec2f67861aebb622521ebc32a1df620acd355937df606ebaba5d67e66ee1f70b9c25f661709d96ec096aab3af740d9ff1e4aef96e5f46bed87be3b775b1201f6ba6323bb264af477aa4a77398ab84f9004766822e40ab29ad97349f6943308f22ec5147bf3606ee16a62ad4a09b21e4bd0a53fc0592c2d2fbd4a2707320e7bbe2d9f1e954e4ead8b7b59ef0a83b3961e849ac19b91b2ffd49b84864d44960c4ca930dd8de0b64d7437ae38ba90ce701ab6fb4083393e558c93cbad9fb13430bf6a9d6ef99c4ebb73c065a5d62e99c6e20ea62595f96c914babb8d947a594b0e4e978e85047fb4b8d47894257928e536765d1de728ce4cf2d9ef42cc2e67be92cbbce5a3dc59c318cee5a92fe780c8ec976f98bd85ff4a12bea83845ae8a428c7b4f0d56cf6910e10be2be9d84737ceb0f4f340a271de60e1fd69ebadf8f88e7a281d7af21053b86e1eadcb7d02c874cb40241b787c063f69030b4b151d60028b8c874b835cea06b2eee83b38c5cc5b47f7fbefb53bb24dce72e4044afcf6f8c454f792e8afdab514f646a4985609980319ce5121c79319072cfd4007df1aacb26f7c0ee3ea66f7c944f40ea3f3fde7bba62c58ee5a0cf468efe0fade5d45883abc252f97247153792a6fafd61cecf1e5c4f7be4dc7560fa975c66d45b79f689ba3999ca8d0d7b8733b01685d56f71baf36173e1e5dc323d0568339d4d9e211699948c45dff317cddc8afc06bbf33aebf19b8f127bce335d75f335d546d8d984b7706fc26d72c22ef891fc0aa47a4bb4d5c2b22382b06a2484490bee248d61994a0fefcc2e83f0bca8e914964be215758796dd80709db3e33a4a912aa049e4f60eaa7aa366422289187cf4decf48f7acfc0e5bf1ae3cba4c10056de9a2accd7f76dfe6d6042c2ae57391e2efb9bd6e6071f448e78ed1bb84cc321bdffba680042763d79776cbc1ab351a426dac02eaab128d7aef2ee9d01c13c9eea92e6fcf01670ba985c5ec8ee6edb8d2b04906b9168dfebe578b351a110b34176e1e4989b2f84e38cfc9c74d17b0354c0e0f95dbdfd3665253e6bc0ac4407c15eacf36343b4e003a52ec4ab376b8e9f4dda9349fcd864e9dbfd9c44be10a9663f819ffff3095c78a28d766867064cf5197bee347fa6f19c9cf5837867ce985267664f088994b6448b7a337683f9c196f85160ac3d8f768f7179b7b75c9aceab542fd0a74e1326c39b9da33b582c9e47a78aa69367b66a768ffa2b055e13250c1a26811d472fb0a642b5bbe1dc52fcfa2f15c1e98dcceaaea0df4ea3a49bb124cc17f42a510e248a36aedca589d6ea9e9ec0c82f23406681b5e57dac252dce9cc9443ac2aa3738645b0bdcf54fe0b967d7b06f3234e812606fc41e9c876142efd827fb893fe65072d495437866976757e9dcfb7caba4edd605549fb58c0e68536caffba6002d7945491f955399f148066542aaeb1ef9d138f20f2bc914274c896d9b102b74b8fd8470f07effcdd870494c5c6e81d5b7f10ab679e38611dcdcaa3ad11b56c013309e357dcd4beba2dff0bfbe6d5aa7bfbbf462d93d5756ea8cfb6bc2437205d6d83add60bb3485254a8f0713638f6657dc17fb5880e912a76feb9c05083ededebd66ad67264df4d732e5b661cb3c5aa35ae2de7dbc6e2a20f3abdc77fbeb8e3ecbe771891e5a7e233cfa897a495b82c"}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'THAWED\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xce\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tasks\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+&$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2c9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tasks\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'THAWED\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tasks\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x949}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b70}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, ':{.-$/]]!#/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "adf8c9f898746a7f4c7698830acb8a767d903d4169d80ae9f30a0d297086ab369689e4d86ea3ef6cd4bd18561f4d86ad7e9d971589e20aaf0c0b5603ef0989bff6ee765e63a90e947ef21a4a7697331c577e7d67f38f91e89cd86e888f7e2c4cc09e76a72e1199b265eb0c8297cbb30dc8de958b95012148d055abf8a695b3ae4e723be40bf2a00534f9bae1c6dd5903fcbd5b48de987ef4ab199602b2d9e89a753123c802e15a57b6131ef3121244cfc387f791e4725a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x15d0}}, 0x4000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002e40), 0x20000, 0x0) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000002e80)) pipe2(&(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002f00)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r10, 0xc0106438, &(0x7f0000002f40)={0x40, r12}) io_uring_enter(r11, 0x371d, 0x7926, 0x84, &(0x7f0000002f80)={[0x9]}, 0x8) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) ioctl$NILFS_IOCTL_GET_CPINFO(r13, 0x80186e82, &(0x7f0000003040)={&(0x7f0000002fc0)=[{0x0, 0x0, 0x0, 0xfff, 0x3, 0xffffffffffffffff, 0x67, 0xc}, {0x2, 0x0, 0x58, 0x1, 0x5, 0x5ec, 0x3, 0xc45}], 0x2, 0x38, 0x0, 0x9}) io_uring_setup(0xb35, &(0x7f0000003080)={0x0, 0x39a9, 0xc01, 0x3, 0x239, 0x0, r10}) 307.037156ms ago: executing program 1 (id=732): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffc4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0x30}}, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd779b4c6d64185cc1fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f0a959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d54902008045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f4e355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8dad63938cb49f096ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99d05630181fbe081abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f810a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r5, 0x1, 0x46, &(0x7f0000000180)=0xe6e0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0xa}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffc4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0x30}}, 0x0) (async) dup(r0) (async) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd779b4c6d64185cc1fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f0a959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d54902008045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f4e355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8dad63938cb49f096ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99d05630181fbe081abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f810a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$sock_int(r5, 0x1, 0x46, &(0x7f0000000180)=0xe6e0, 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0xa}}, 0x20) (async) 196.092216ms ago: executing program 1 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000140)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x0, 0x1, '/dev/cuse\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c400}, 0x80) 195.760982ms ago: executing program 2 (id=734): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507060000", @ANYRES32=r1, @ANYBLOB='\f'], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x560d, &(0x7f0000000140)={0x5, 0x899, 0x1006}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r4, 0x8b32, &(0x7f0000000040)) 195.488919ms ago: executing program 1 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001540)=0x0) r4 = gettid() r5 = getpid() r6 = syz_clone(0x525c200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f0000001580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000001600)={0xfffffffa, 0x8, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7ff, 0x8c1b}) r9 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r9, &(0x7f0000000200), 0x0) close(r9) syz_clone3(&(0x7f0000001680)={0x1180c8000, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x33}, &(0x7f0000000480)=""/182, 0xb6, &(0x7f0000000540)=""/4096, &(0x7f0000001640)=[r3, r4, r5, r6, r7, 0x0, r8], 0x7, {r9}}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=udp,vers=3,mountport=2049,mountproto=udp,soft,timeo=1,retrans=1\x00') 195.140418ms ago: executing program 2 (id=736): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0406619, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r2, 0x407, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048044}, 0x18014) 81.910237ms ago: executing program 2 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) write(r0, &(0x7f0000000400)='base', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffffffb, @mcast2, 0x6}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)="c20fe97f4e13815343c4c0e65d0b6b3748ab8ecf3f478dd896955ab39b477ff3b01eca242cb8", 0x26}, {&(0x7f0000000300)="c137dfdf0b4b90c903c54ac5d1bc33cf0f105ab7", 0x14}, {&(0x7f0000000340)="a765eeaada0f67131bd1591bf08499399df7ba1d80c67ae75716397b0bf6445b0528d1c5fb0af6927a732c8a954c659d932e88925c5f2f02d93f5b2bad0df3826bcb630539cdbd426b1cb1f2e1bd6df5dcfd5dc67b7d71", 0x57}, {&(0x7f0000000440)="c0fda17f0e541cc1e5cafde59110558aa87f5a04cfbca2575cded998fd1208f08361e3d2e61af5d1a5e4d5afc5b5923bd5a09ebe625970b6cfb164eb6e056e4edc4a9a07a88826a0a1a4053ee0487fa2cb3944f1e6c6357ceaa6eca3728ca70b8915140fb83e9cd48d84b3a98f105866a0b40fd08e7ed9ada0e8223a2e5122ec3042b9b720c707d0a4b9ec1d2cf905fee4311da6abc4f2e2cdf4b0485bc558a91492f2fdcbf1c911dfe45f47cb5b893444b6e72edcce9cce0f35a1963d087dbc20ab3c4e9689dfaed7cb24df4e5e108cbd3815e72bbc090e1f13f6e8699756876b0b6bc06c3a82f24dd2fb9b72e4", 0xee}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000290000000800000004000000020000001400000000000000290000000b0000000000000200000000"], 0x30}, 0x24000000) getdents(r0, &(0x7f0000000180)=""/158, 0x9e) 80.239707ms ago: executing program 1 (id=738): syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='attr/current\x00') read$eventfd(r0, 0x0, 0x0) (async) read$eventfd(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000100)=0x9f85, 0x4) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x8, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x7, 0x5, 0x6, 0xc, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8001, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x94, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0xe], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x2a96, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x5, 0x0, 0xffe, 0xa2, 0xffffffd9, 0x4000a9, 0x5, 0x3, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x2, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x81, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x1000, 0x10000, 0xfffffffd, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) (async) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x2, @pix={0xffffffff, 0x0, 0x32314d56, 0x9, 0x10001, 0x2, 0x1, 0x0, 0x0, 0x7, 0x2, 0x3}}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000200)={@local, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet_nvme_of_msg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0xbc, 0x9, 0x12, "1012a2c2e0d99745e390509d287560250d00"}) (async) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000080)={0xf8, 0x5, 0xbc, 0x9, 0x12, "1012a2c2e0d99745e390509d287560250d00"}) 78.777573ms ago: executing program 2 (id=739): r0 = socket$netlink(0x10, 0x3, 0x0) mq_unlink(0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) 509.334µs ago: executing program 2 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) fcntl$notify(r2, 0x402, 0x43ca774b6d000826) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000014110000cd28f3341aebb01e8ae01c00128009000100626f6e64000000000c00028005000e0006000000d8cc690593730b9df60f62f5889b26f1832571cabf8853819aeccdacb910eb05c8d3b7"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 135.914µs ago: executing program 1 (id=741): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r0, 0x400000000000ffff) (async) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 64) r2 = fsopen(&(0x7f0000000000)='adfs\x00', 0x1) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe8800000000000000000000000000010000000000000000000000000000000000000000000000000000000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x40) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff0100000001760000040042801400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) 0s ago: executing program 2 (id=742): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x832, 0x40, 0x1, 0x3, 0x19}, &(0x7f0000000640)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES16=r4], 0x3c}}, 0x0) 0s ago: executing program 2 (id=743): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2b}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@userxattr}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0x2, 0x2, 0x4, 0x41, 0x1, 0xf0}}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) kernel console output (not intermixed with test programs): enied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.480342][ T44] audit: type=1400 audit(1790732471.266:163): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.490206][ T44] audit: type=1400 audit(1790732471.276:164): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[6531]" dev="sockfs" ino=6531 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.504131][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.504737][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.505982][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.506278][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.506873][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.507343][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.509195][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.517747][ T44] audit: type=1400 audit(1790732471.296:165): avc: denied { read } for pid=5730 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.517779][ T44] audit: type=1400 audit(1790732471.296:166): avc: denied { open } for pid=5730 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.517798][ T44] audit: type=1400 audit(1790732471.296:167): avc: denied { mounton } for pid=5730 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.520488][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.521467][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.521715][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.524202][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.524557][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.525449][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.525611][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.525771][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.526141][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.526340][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.528158][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.528768][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.531392][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 49.160119][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.160164][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.160313][ T5730] bridge_slave_0: entered allmulticast mode [ 49.161052][ T5730] bridge_slave_0: entered promiscuous mode [ 49.177275][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.177366][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.177595][ T5741] bridge_slave_0: entered allmulticast mode [ 49.178328][ T5741] bridge_slave_0: entered promiscuous mode [ 49.179930][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.180000][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.180081][ T5741] bridge_slave_1: entered allmulticast mode [ 49.181779][ T5741] bridge_slave_1: entered promiscuous mode [ 49.182818][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.182858][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.182914][ T5730] bridge_slave_1: entered allmulticast mode [ 49.184371][ T5730] bridge_slave_1: entered promiscuous mode [ 49.197029][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.197097][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.197157][ T5736] bridge_slave_0: entered allmulticast mode [ 49.197888][ T5736] bridge_slave_0: entered promiscuous mode [ 49.228774][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.229019][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.229292][ T5736] bridge_slave_1: entered allmulticast mode [ 49.230608][ T5736] bridge_slave_1: entered promiscuous mode [ 49.256050][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.258079][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.259881][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.271150][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.283713][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.291028][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.344654][ T5730] team0: Port device team_slave_0 added [ 49.346338][ T5741] team0: Port device team_slave_0 added [ 49.347861][ T5736] team0: Port device team_slave_0 added [ 49.350284][ T5730] team0: Port device team_slave_1 added [ 49.360241][ T5741] team0: Port device team_slave_1 added [ 49.360321][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.360414][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.360475][ T5731] bridge_slave_0: entered allmulticast mode [ 49.361256][ T5731] bridge_slave_0: entered promiscuous mode [ 49.363783][ T5736] team0: Port device team_slave_1 added [ 49.389046][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.389109][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.389176][ T5731] bridge_slave_1: entered allmulticast mode [ 49.389860][ T5731] bridge_slave_1: entered promiscuous mode [ 49.411823][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.411833][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.411845][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.423513][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.423600][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.423623][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.431972][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.431982][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.431994][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.434503][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.435616][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.435629][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.435651][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.443300][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.443314][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.443334][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.451518][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.451531][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.451545][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.460091][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.480993][ T5731] team0: Port device team_slave_0 added [ 49.512045][ T5731] team0: Port device team_slave_1 added [ 49.534470][ T5736] hsr_slave_0: entered promiscuous mode [ 49.535454][ T5736] hsr_slave_1: entered promiscuous mode [ 49.551738][ T5741] hsr_slave_0: entered promiscuous mode [ 49.552214][ T5741] hsr_slave_1: entered promiscuous mode [ 49.552497][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 49.552558][ T5741] Cannot create hsr debugfs directory [ 49.579938][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.579954][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.579975][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.583625][ T5730] hsr_slave_0: entered promiscuous mode [ 49.584207][ T5730] hsr_slave_1: entered promiscuous mode [ 49.584477][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 49.584487][ T5730] Cannot create hsr debugfs directory [ 49.600675][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.600689][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.600711][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.739274][ T5731] hsr_slave_0: entered promiscuous mode [ 49.740025][ T5731] hsr_slave_1: entered promiscuous mode [ 49.740688][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 49.740705][ T5731] Cannot create hsr debugfs directory [ 49.967176][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.972752][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.980359][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.984142][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.984659][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.989849][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.997714][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.000239][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.034619][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.037088][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.038702][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.041193][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.041552][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.043285][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.051402][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.055386][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.101316][ T5741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.105121][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.105493][ T5741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.108898][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.119244][ T5741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.121150][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.121679][ T5741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.123521][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.172463][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.183269][ T5731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.188376][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.188876][ T5731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.190615][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.191809][ T5731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.194129][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.194498][ T5731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.197342][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.235343][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.245527][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.245595][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.260161][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.260206][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.275056][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.305736][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.321155][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.321225][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.328820][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.332966][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.333047][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.371366][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.377930][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.387953][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.388000][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.396866][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.396966][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.411968][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.426350][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.426435][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.432954][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.433034][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.564519][ T5091] Bluetooth: hci3: command tx timeout [ 50.564639][ T5091] Bluetooth: hci2: command tx timeout [ 50.564693][ T5091] Bluetooth: hci1: command tx timeout [ 50.564809][ T67] Bluetooth: hci0: command tx timeout [ 50.686641][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.692589][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.694755][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.738049][ T5741] veth0_vlan: entered promiscuous mode [ 50.749713][ T5730] veth0_vlan: entered promiscuous mode [ 50.750260][ T5741] veth1_vlan: entered promiscuous mode [ 50.760122][ T5736] veth0_vlan: entered promiscuous mode [ 50.761411][ T5730] veth1_vlan: entered promiscuous mode [ 50.774419][ T5736] veth1_vlan: entered promiscuous mode [ 50.786347][ T5741] veth0_macvtap: entered promiscuous mode [ 50.796212][ T5741] veth1_macvtap: entered promiscuous mode [ 50.801957][ T5730] veth0_macvtap: entered promiscuous mode [ 50.815971][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.817664][ T5730] veth1_macvtap: entered promiscuous mode [ 50.829427][ T5736] veth0_macvtap: entered promiscuous mode [ 50.832360][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.837532][ T5736] veth1_macvtap: entered promiscuous mode [ 50.844891][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.866014][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.869486][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.882208][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.887402][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.943310][ T5731] veth0_vlan: entered promiscuous mode [ 50.966340][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.966360][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.968009][ T5731] veth1_vlan: entered promiscuous mode [ 51.012425][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.012446][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.040393][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.040410][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.059237][ T5731] veth0_macvtap: entered promiscuous mode [ 51.071493][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.071513][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.078731][ T5731] veth1_macvtap: entered promiscuous mode [ 51.101196][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.101215][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.108985][ T5741] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.141976][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.141996][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.149209][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.154676][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.156235][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.228857][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.228983][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229252][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229535][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229562][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229588][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229615][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229635][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229652][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229670][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229687][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229705][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229722][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.229739][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.266417][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.284610][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.284629][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.313523][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.314470][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.373353][ T5893] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.373369][ T5893] nbd: must specify at least one socket [ 51.446675][ T5907] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.473111][ T5910] IPv6: syztnl0: Disabled Multicast RS [ 51.521128][ T5919] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 51.586420][ T5924] IPv6: syztnl0: Disabled Multicast RS [ 52.644025][ T5737] Bluetooth: hci1: command tx timeout [ 52.644057][ T5737] Bluetooth: hci2: command tx timeout [ 52.644075][ T5737] Bluetooth: hci3: command tx timeout [ 52.644196][ T67] Bluetooth: hci0: command tx timeout [ 52.763515][ T5968] IPv6: syztnl0: Disabled Multicast RS [ 52.947710][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.947786][ T5984] netlink: 'syz.0.33': attribute type 18 has an invalid length. [ 52.947795][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.948838][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.948853][ T5985] netlink: 'syz.0.33': attribute type 18 has an invalid length. [ 52.948859][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.955833][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.955849][ T5985] netlink: 'syz.0.33': attribute type 18 has an invalid length. [ 52.955855][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.956064][ T5985] Zero length message leads to an empty skb [ 52.957104][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.957118][ T5984] netlink: 'syz.0.33': attribute type 18 has an invalid length. [ 52.957124][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 52.983721][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.983758][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.983786][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.983811][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.139791][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.140089][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.141800][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 53.144545][ T6011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.144872][ T6011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.149309][ T5880] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 53.253705][ T5879] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 53.373646][ T25] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 53.415421][ T5880] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 53.438382][ T5879] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 53.441888][ T5879] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 53.441907][ T5879] usb 8-1: can't read configurations, error -71 [ 53.523700][ T25] usb 6-1: device descriptor read/64, error -71 [ 53.777061][ T25] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 53.904861][ T6022] macvlan2: entered promiscuous mode [ 53.904875][ T6022] bridge0: entered promiscuous mode [ 53.916180][ T25] usb 6-1: device descriptor read/64, error -71 [ 53.925653][ T5811] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 54.000266][ T44] kauditd_printk_skb: 98 callbacks suppressed [ 54.000280][ T44] audit: type=1400 audit(1790732476.786:266): avc: denied { listen } for pid=6028 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.024672][ T44] audit: type=1400 audit(1790732476.806:267): avc: denied { write } for pid=6026 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.044058][ T25] usb usb6-port1: attempt power cycle [ 54.164148][ T6004] ceph: No mds server is up or the cluster is laggy [ 54.320997][ T44] audit: type=1400 audit(1790732477.106:268): avc: denied { create } for pid=6036 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.321086][ T44] audit: type=1400 audit(1790732477.106:269): avc: denied { create } for pid=6036 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.321572][ T44] audit: type=1400 audit(1790732477.106:270): avc: denied { setopt } for pid=6036 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.322559][ T44] audit: type=1400 audit(1790732477.106:271): avc: denied { bind } for pid=6036 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.323026][ T44] audit: type=1400 audit(1790732477.106:272): avc: denied { write } for pid=6036 comm="syz.3.45" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.323261][ T44] audit: type=1400 audit(1790732477.106:273): avc: denied { connect } for pid=6036 comm="syz.3.45" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.432856][ T44] audit: type=1400 audit(1790732477.216:274): avc: denied { getopt } for pid=6043 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.439777][ T44] audit: type=1400 audit(1790732477.226:275): avc: denied { ioctl } for pid=6043 comm="syz.3.46" path="socket:[11670]" dev="sockfs" ino=11670 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.452422][ T25] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 54.474314][ T25] usb 6-1: device descriptor read/8, error -71 [ 54.522745][ T6047] x_tables: duplicate underflow at hook 3 [ 54.713709][ T25] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 54.733912][ T5091] Bluetooth: hci3: command tx timeout [ 54.733943][ T5091] Bluetooth: hci2: command tx timeout [ 54.733965][ T5091] Bluetooth: hci1: command tx timeout [ 54.734092][ T67] Bluetooth: hci0: command tx timeout [ 54.735167][ T25] usb 6-1: device descriptor read/8, error -71 [ 54.842294][ T6056] tmpfs: Unknown parameter 'grpquota<' [ 54.854092][ T25] usb usb6-port1: unable to enumerate USB device [ 55.124295][ T5105] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.285001][ T5105] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 55.286628][ T5105] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.286653][ T5105] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.300274][ T5105] as10x_usb: device has been detected [ 55.300883][ T5105] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 55.309403][ T5105] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 55.331518][ T5105] as10x_usb: error during firmware upload part1 [ 55.331821][ T5105] Registered device Abilis Systems DVB-Titan [ 55.525570][ T6076] Bluetooth: MGMT ver 1.23 [ 55.532999][ T6076] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 55.573315][ T6080] overlayfs: failed to resolve './bus': -2 [ 55.648735][ T6084] syz.0.58 uses obsolete (PF_INET,SOCK_PACKET) [ 55.899268][ T50] usb 7-1: USB disconnect, device number 2 [ 55.931072][ T50] Unregistered device Abilis Systems DVB-Titan [ 55.932751][ T50] as10x_usb: device has been disconnected [ 56.038409][ T6137] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 56.096440][ T6141] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 1, id = 0 [ 56.136581][ T6148] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 56.216333][ T6162] 9pnet_virtio: no channels available for device 127.0.0.1 [ 56.373150][ T6175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6175 comm=syz.1.72 [ 56.417017][ T6183] __nla_validate_parse: 43 callbacks suppressed [ 56.417030][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 56.642517][ T6194] kvm [6193]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 56.643398][ T6194] kvm [6193]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 56.688911][ T37] IPVS: starting estimator thread 0... [ 56.783845][ T6202] netlink: 72 bytes leftover after parsing attributes in process `syz.2.79'. [ 56.783894][ T6197] IPVS: using max 44 ests per chain, 105600 per kthread [ 56.803696][ T5737] Bluetooth: hci1: command tx timeout [ 56.803719][ T5737] Bluetooth: hci2: command tx timeout [ 56.803884][ T67] Bluetooth: hci0: command tx timeout [ 57.661377][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 57.661955][ T6125] IPVS: starting estimator thread 0... [ 57.664456][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.665953][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.708139][ T6243] hugetlbfs: syz.0.91 (6243): Using mlock ulimits for SHM_HUGETLB is obsolete [ 57.753650][ T6237] IPVS: using max 44 ests per chain, 105600 per kthread [ 58.022625][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 58.022625][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'. [ 58.030863][ T6301] netlink: 'syz.0.105': attribute type 7 has an invalid length. [ 58.030875][ T6301] netlink: 'syz.0.105': attribute type 8 has an invalid length. [ 58.061619][ T6303] hfs: unable to load iocharset "io#harset" [ 58.229414][ T6339] Could not find key with description: [syz] [ 58.229432][ T6339] process_request_key_err: No key [ 58.229437][ T6339] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 58.229443][ T6339] One or more global auth toks could not properly register; rc = [-2] [ 58.229464][ T6339] Error validating options; rc = [-2] [ 58.246405][ T6346] ip_tables: iptables: counters copy to user failed while replacing table [ 58.246433][ T6341] ip_tables: iptables: counters copy to user failed while replacing table [ 58.313710][ T5122] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.443634][ T5122] usb 8-1: device descriptor read/64, error -71 [ 58.534038][ T6366] zram0: detected capacity change from 0 to 8 [ 58.537171][ T6366] zram: Cannot change disksize for initialized device [ 58.662384][ T6373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.666496][ T6373] FAULT_INJECTION: forcing a failure. [ 58.666496][ T6373] name failslab, interval 1, probability 0, space 0, times 1 [ 58.666514][ T6373] CPU: 3 UID: 0 PID: 6373 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 58.666526][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.666532][ T6373] Call Trace: [ 58.666536][ T6373] [ 58.666540][ T6373] dump_stack_lvl+0x100/0x190 [ 58.666571][ T6373] should_fail_ex.cold+0x5/0xa [ 58.666587][ T6373] should_failslab+0xc2/0x120 [ 58.666605][ T6373] __kmalloc_noprof+0xfc/0x840 [ 58.666618][ T6373] ? __memcg_list_lru_alloc+0x418/0x680 [ 58.666638][ T6373] __memcg_list_lru_alloc+0x418/0x680 [ 58.666654][ T6373] ? xa_load+0x149/0x2c0 [ 58.666673][ T6373] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 58.666703][ T6373] ? rcu_read_unlock+0x17/0x60 [ 58.666716][ T6373] memcg_list_lru_alloc+0xd3/0x100 [ 58.666729][ T6373] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 58.666745][ T6373] ? kasan_save_track+0x14/0x30 [ 58.666762][ T6373] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 58.666775][ T6373] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 58.666791][ T6373] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 58.666804][ T6373] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 58.666818][ T6373] alloc_inode+0x68/0x250 [ 58.666829][ T6373] new_inode+0x22/0x1c0 [ 58.666842][ T6373] hugetlbfs_get_inode+0x39a/0x700 [ 58.666857][ T6373] hugetlb_file_setup+0x15b/0x5b0 [ 58.666873][ T6373] ksys_mmap_pgoff+0x242/0x610 [ 58.666889][ T6373] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 58.666903][ T6373] ? xfd_validate_state+0x129/0x190 [ 58.666917][ T6373] __x64_sys_mmap+0x125/0x190 [ 58.666931][ T6373] do_syscall_64+0x123/0x790 [ 58.666943][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.666958][ T6373] RIP: 0033:0x7fc22db9e159 [ 58.666971][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.666985][ T6373] RSP: 002b:00007fc22eafe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 58.667003][ T6373] RAX: ffffffffffffffda RBX: 00007fc22de25fa0 RCX: 00007fc22db9e159 [ 58.667013][ T6373] RDX: 0000000003000001 RSI: 000000000095c000 RDI: 0000200000000000 [ 58.667024][ T6373] RBP: 00007fc22dc3506b R08: ffffffffffffffff R09: 0000000000000000 [ 58.667036][ T6373] R10: 8c4b815a5465c2b1 R11: 0000000000000246 R12: 0000000000000000 [ 58.667046][ T6373] R13: 00007fc22de26038 R14: 00007fc22de25fa0 R15: 00007fff2cc49ae8 [ 58.667080][ T6373] [ 58.713625][ T5122] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.853823][ T5122] usb 8-1: device descriptor read/64, error -71 [ 58.883815][ T67] Bluetooth: hci0: command tx timeout [ 58.964793][ T5122] usb usb8-port1: attempt power cycle [ 59.162663][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 59.200131][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.200813][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.241828][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.245848][ T6377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.314133][ T5122] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 59.335614][ T5122] usb 8-1: device descriptor read/8, error -71 [ 59.353657][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.353696][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.353725][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.353755][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.395132][ T44] kauditd_printk_skb: 114 callbacks suppressed [ 59.395283][ T44] audit: type=1400 audit(1790732482.186:390): avc: denied { create } for pid=6389 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.503015][ T44] audit: type=1400 audit(1790732482.286:391): avc: denied { unmount } for pid=5731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.541964][ T44] audit: type=1400 audit(1790732482.326:392): avc: denied { create } for pid=6394 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.546457][ T6400] team0: No ports can be present during mode change [ 59.573753][ T5122] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 59.587278][ T44] audit: type=1400 audit(1790732482.376:393): avc: denied { write } for pid=6394 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.596579][ T5122] usb 8-1: device descriptor read/8, error -71 [ 59.711891][ T44] audit: type=1400 audit(1790732482.496:394): avc: denied { ioctl } for pid=6415 comm="syz.0.136" path="socket:[12092]" dev="sockfs" ino=12092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.712155][ T44] audit: type=1400 audit(1790732482.496:395): avc: denied { bind } for pid=6415 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.712716][ T44] audit: type=1400 audit(1790732482.496:396): avc: denied { create } for pid=6415 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.713122][ T44] audit: type=1400 audit(1790732482.496:397): avc: denied { connect } for pid=6415 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.713459][ T44] audit: type=1400 audit(1790732482.496:398): avc: denied { setopt } for pid=6415 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.714004][ T5122] usb usb8-port1: unable to enumerate USB device [ 59.757632][ T44] audit: type=1400 audit(1790732482.546:399): avc: denied { mounton } for pid=6418 comm="syz.0.137" path="/47/config" dev="tmpfs" ino=280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.803744][ T6422] binder: 6421:6422 ioctl c0306201 200000000640 returned -22 [ 59.809872][ T6424] overlayfs: failed to clone lowerpath [ 59.856364][ T6424] netlink: 45 bytes leftover after parsing attributes in process `syz.0.140'. [ 59.950227][ T6442] 9pnet_fd: p9_fd_create_unix (6442): problem connecting socket: ./cgroup: -2 [ 59.981890][ T6452] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 60.364869][ T6467] scsi_nl_rcv_msg: discarding partial skb [ 60.796718][ T6480] fuse: fd is not a fuse device [ 60.897128][ T38] IPVS: starting estimator thread 0... [ 61.003624][ T6492] IPVS: using max 44 ests per chain, 105600 per kthread [ 61.021673][ T6500] netlink: 'syz.0.164': attribute type 9 has an invalid length. [ 61.208449][ T6516] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 61.234962][ T6525] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 61.236054][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.237262][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.237577][ T38] IPVS: starting estimator thread 0... [ 61.238118][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.172'. [ 61.238921][ T6524] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 61.242460][ T6529] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 61.268590][ T6532] ======================================================= [ 61.268590][ T6532] WARNING: The mand mount option has been deprecated and [ 61.268590][ T6532] and is ignored by this kernel. Remove the mand [ 61.268590][ T6532] option from the mount to silence this warning. [ 61.268590][ T6532] ======================================================= [ 61.325144][ T6526] IPVS: using max 44 ests per chain, 105600 per kthread [ 61.665817][ T5105] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 61.677881][ T6552] trusted_key: encrypted_key: master key parameter 'Ïðy”VŽ5' is invalid [ 61.746519][ T6558] bond1 (unregistering): Released all slaves [ 61.813689][ T5105] usb 8-1: Using ep0 maxpacket: 32 [ 61.814439][ T5105] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 61.822820][ T5105] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 61.823084][ T5105] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 61.823120][ T5105] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 61.823138][ T5105] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 61.823181][ T5105] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 61.823203][ T5105] usb 8-1: config 0 interface 0 has no altsetting 0 [ 61.826037][ T5105] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 61.826057][ T5105] usb 8-1: Product: syz [ 61.826069][ T5105] usb 8-1: Manufacturer: syz [ 61.826080][ T5105] usb 8-1: SerialNumber: syz [ 61.834021][ T5105] usb 8-1: config 0 descriptor?? [ 61.834774][ T6539] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.836654][ T5105] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 61.841194][ T5105] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 62.044680][ T5122] usb 8-1: USB disconnect, device number 8 [ 62.044751][ C1] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 62.053326][ T5122] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 62.156637][ T6590] xt_NETMAP: bad MAP_IPS. [ 62.159900][ T6590] nfs4: Unknown parameter '27.0.0.1' [ 62.160150][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 62.252655][ T6601] bridge0: entered allmulticast mode [ 62.253951][ T6601] bridge_slave_1: left allmulticast mode [ 62.253969][ T6601] bridge_slave_1: left promiscuous mode [ 62.254576][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.262344][ T6601] bridge_slave_0: left allmulticast mode [ 62.262364][ T6601] bridge_slave_0: left promiscuous mode [ 62.263047][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.349959][ T6612] geneve2: entered promiscuous mode [ 62.599776][ T6628] netlink: 'syz.3.205': attribute type 39 has an invalid length. [ 62.618459][ T6633] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 62.775654][ T6647] process 'syz.0.210' launched '/dev/fd/4' with NULL argv: empty string added [ 62.785785][ T6649] overlay: Unknown parameter '0 10928 2 ffff8880363418c0 0 [ 62.785785][ T6649] 34: 00000000000000000000000000000000:2EA6 00000000000000000000000000000000:0000 07 00000000:00000000 00:00000000 00000' [ 62.972357][ T6673] xt_IDLETIMER: timeout value is zero [ 62.980046][ T6673] wg0: entered promiscuous mode [ 62.984926][ T6673] team0: Device wg0 is of different type [ 63.010797][ T6670] Set syz1 is full, maxelem 256 reached [ 63.198612][ T6702] xt_CONNSECMARK: invalid mode: 0 [ 63.413916][ T5105] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 63.463009][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 63.564742][ T5105] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 63.568935][ T5105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.568958][ T5105] usb 8-1: Product: syz [ 63.568970][ T5105] usb 8-1: Manufacturer: syz [ 63.568982][ T5105] usb 8-1: SerialNumber: syz [ 63.620828][ T5122] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 64.066420][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 64.117438][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.117942][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.363792][ T852] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.394243][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.394595][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.435403][ T44] kauditd_printk_skb: 94 callbacks suppressed [ 64.435476][ T44] audit: type=1400 audit(1790732487.226:494): avc: denied { write } for pid=6746 comm="syz.1.239" name="001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.438461][ T44] audit: type=1400 audit(1790732487.226:495): avc: denied { map } for pid=6746 comm="syz.1.239" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.493726][ T852] usb 7-1: device descriptor read/64, error -71 [ 64.643582][ T5122] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 64.644248][ T5122] ath9k_htc: Failed to initialize the device [ 64.664843][ T5122] usb 8-1: ath9k_htc: USB layer deinitialized [ 64.672370][ T10] usb 8-1: USB disconnect, device number 9 [ 64.733694][ T852] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.873690][ T852] usb 7-1: device descriptor read/64, error -71 [ 64.993947][ T852] usb usb7-port1: attempt power cycle [ 65.343696][ T852] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.367648][ T852] usb 7-1: device descriptor read/8, error -71 [ 65.493991][ T44] audit: type=1400 audit(1790732488.286:496): avc: denied { getopt } for pid=6769 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.615665][ T852] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.634855][ T852] usb 7-1: device descriptor read/8, error -71 [ 65.649661][ T6783] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.662506][ T44] audit: type=1400 audit(1790732488.446:497): avc: denied { node_bind } for pid=6785 comm="syz.0.249" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 65.744431][ T852] usb usb7-port1: unable to enumerate USB device [ 65.757440][ T6793] block device autoloading is deprecated and will be removed. [ 65.759802][ T44] audit: type=1400 audit(1790732488.546:498): avc: denied { read } for pid=6792 comm="syz.1.252" name="trace_pipe" dev="tracefs" ino=5660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 65.802289][ T6796] 9p: Bad value for 'wfdno' [ 66.120174][ T44] audit: type=1400 audit(1790732488.906:499): avc: denied { create } for pid=6821 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.120622][ T44] audit: type=1400 audit(1790732488.906:500): avc: denied { write } for pid=6821 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 66.176915][ T6826] tipc: Trying to set illegal importance in message [ 66.177302][ T44] audit: type=1400 audit(1790732488.966:501): avc: denied { accept } for pid=6824 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.190109][ T44] audit: type=1400 audit(1790732488.976:502): avc: denied { unlink } for pid=5736 comm="syz-executor" name="file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.297444][ T44] audit: type=1400 audit(1790732489.086:503): avc: denied { write } for pid=6836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.468513][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 66.471388][ T6859] xfrm1: entered promiscuous mode [ 66.471399][ T6859] xfrm1: entered allmulticast mode [ 66.510961][ T6863] overlayfs: failed to clone upperpath [ 66.517248][ T6865] overlayfs: failed to clone upperpath [ 66.555273][ T6873] syz_tun: entered allmulticast mode [ 66.609073][ T6884] macvlan0: entered promiscuous mode [ 66.636149][ T6887] ip_tables: iptables: counters copy to user failed while replacing table [ 66.714549][ T6895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15889 sclass=netlink_route_socket pid=6895 comm=syz.0.279 [ 66.886976][ T6910] netlink: 'syz.0.284': attribute type 12 has an invalid length. [ 67.203796][ T6940] netlink: 6060 bytes leftover after parsing attributes in process `syz.2.292'. [ 67.257029][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 67.257043][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 67.275277][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.275315][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.275341][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.275367][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.293347][ T6948] mmap: syz.1.296 (6948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.298790][ T6951] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 67.302554][ T6953] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 67.414829][ T6966] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 67.416352][ T6966] bridge0: port 3(team0) entered blocking state [ 67.416469][ T6966] bridge0: port 3(team0) entered disabled state [ 67.416624][ T6966] team0: entered allmulticast mode [ 67.416637][ T6966] team_slave_0: entered allmulticast mode [ 67.416652][ T6966] team_slave_1: entered allmulticast mode [ 67.420066][ T6966] team0: entered promiscuous mode [ 67.420080][ T6966] team_slave_0: entered promiscuous mode [ 67.420218][ T6966] team_slave_1: entered promiscuous mode [ 67.420833][ T6966] bridge0: port 3(team0) entered blocking state [ 67.420908][ T6966] bridge0: port 3(team0) entered forwarding state [ 67.425667][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 67.434813][ T6966] team_slave_0 (unregistering): left promiscuous mode [ 67.434834][ T6966] team_slave_0 (unregistering): left allmulticast mode [ 67.435876][ T6966] team0: Port device team_slave_0 removed [ 67.553642][ T5122] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 67.697860][ T6977] netlink: 44 bytes leftover after parsing attributes in process `syz.0.305'. [ 67.701399][ T6978] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.728391][ T5122] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 67.729171][ T5122] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 67.729183][ T5122] usb 7-1: config 1 has no interface number 0 [ 67.729201][ T5122] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 67.732267][ T5122] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.732280][ T5122] usb 7-1: Product: syz [ 67.732287][ T5122] usb 7-1: Manufacturer: syz [ 67.732294][ T5122] usb 7-1: SerialNumber: syz [ 67.735794][ T6944] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.738847][ T5122] usb 7-1: Error in usbnet_get_endpoints (-22) [ 67.793633][ T5105] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 67.967188][ T5105] usb 8-1: unable to get BOS descriptor or descriptor too short [ 67.967233][ T5105] usb 8-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 67.968807][ T5105] usb 8-1: config 8 has an invalid interface number: 198 but max is 0 [ 67.968828][ T5105] usb 8-1: config 8 has no interface number 0 [ 67.968861][ T5105] usb 8-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 67.973346][ T5105] usb 8-1: string descriptor 0 read error: -22 [ 67.973459][ T5105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.979914][ T6971] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 68.015557][ T5105] usb 7-1: USB disconnect, device number 7 [ 68.190582][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.190897][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.393263][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.396690][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.543362][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 68.599015][ T5105] usb 8-1: USB disconnect, device number 10 [ 69.250426][ T67] Bluetooth: hci3: ISO packet too small [ 69.409357][ T7034] macsec1: entered allmulticast mode [ 69.409382][ T7034] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 69.409512][ T7034] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 69.410562][ T7034] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 69.459959][ T67] Bluetooth: Frame is too long (len 10, expected len 8) [ 69.588403][ T44] kauditd_printk_skb: 27 callbacks suppressed [ 69.588417][ T44] audit: type=1400 audit(1790732492.376:531): avc: denied { write } for pid=7037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.635813][ T44] audit: type=1400 audit(1790732492.426:532): avc: denied { write } for pid=7040 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.930503][ T7052] fuse: fd is not a fuse device [ 69.935385][ T44] audit: type=1400 audit(1790732492.726:533): avc: denied { write } for pid=7050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.998059][ T44] audit: type=1400 audit(1790732492.786:534): avc: denied { write } for pid=7054 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.084294][ T44] audit: type=1400 audit(1790732492.876:535): avc: denied { append } for pid=7059 comm="syz.3.327" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.089236][ T44] audit: type=1807 audit(1790732492.876:536): UNKNOWN=mea%ure res=0 [ 70.089403][ T44] audit: type=1802 audit(1790732492.876:537): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.327" res=0 errno=0 [ 70.095195][ T7060] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 70.095558][ T7059] ima: policy update failed [ 70.096032][ T44] audit: type=1802 audit(1790732492.886:538): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.327" res=0 errno=0 [ 70.106294][ T44] audit: type=1400 audit(1790732492.896:539): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 70.256204][ T44] audit: type=1804 audit(1790732493.046:540): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.328" name="/newroot/56/file0" dev="fuse" ino=1 res=1 errno=0 [ 70.306560][ T7071] CacheFiles: No cache directory specified [ 70.306947][ T7071] Invalid/unusable pipe [ 70.372297][ T7076] ISOFS: Unable to identify CD-ROM format. [ 70.430431][ T7078] ip_tables: iptables: counters copy to user failed while replacing table [ 70.451509][ T7078] xt_CT: No such helper "syz1" [ 70.645361][ T7100] random: crng reseeded on system resumption [ 70.723243][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 70.768688][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 71.099611][ T7136] team0: left allmulticast mode [ 71.099625][ T7136] team_slave_1: left allmulticast mode [ 71.101964][ T7136] team0: left promiscuous mode [ 71.101976][ T7136] team_slave_1: left promiscuous mode [ 71.102488][ T7136] bridge0: port 3(team0) entered disabled state [ 71.106229][ T7136] bridge_slave_1: left allmulticast mode [ 71.106243][ T7136] bridge_slave_1: left promiscuous mode [ 71.106344][ T7136] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.109885][ T7136] bridge_slave_0: left allmulticast mode [ 71.109897][ T7136] bridge_slave_0: left promiscuous mode [ 71.109994][ T7136] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.127309][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.127344][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.200093][ T7140] netlink: 'syz.3.353': attribute type 4 has an invalid length. [ 71.200108][ T7140] netlink: 17 bytes leftover after parsing attributes in process `syz.3.353'. [ 71.375846][ T7154] binder: binder_mmap: 7152 200000000000-200000200000 bad vm_flags failed -1 [ 71.634455][ T7169] xfrm1: entered allmulticast mode [ 71.647433][ T7171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.784813][ T7188] program syz.1.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.791888][ T7191] program syz.1.365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.836065][ T7194] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 71.862785][ T7194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.872569][ T7194] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 71.873520][ T7194] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 71.874167][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.366'. [ 71.874250][ T7194] dummy0: entered promiscuous mode [ 71.878688][ T7194] bond1: (slave dummy0): Releasing backup interface [ 72.039912][ T7216] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 72.088916][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.179068][ T7232] cgroup: subsys name conflicts with all [ 72.323781][ T5105] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 72.485700][ T5105] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 72.491091][ T5105] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 72.491136][ T5105] usb 8-1: config 1 has no interface number 0 [ 72.491169][ T5105] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 72.491188][ T5105] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 72.491207][ T5105] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 72.494304][ T5105] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.494325][ T5105] usb 8-1: Product: syz [ 72.494336][ T5105] usb 8-1: Manufacturer: syz [ 72.494347][ T5105] usb 8-1: SerialNumber: syz [ 72.501544][ T7225] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.501632][ T7225] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.510642][ T5105] usb 8-1: Error in usbnet_get_endpoints (-22) [ 72.615479][ T7249] ip_tables: iptables: counters copy to user failed while replacing table [ 72.706708][ T5105] usb 8-1: USB disconnect, device number 11 [ 72.757836][ T7257] FAULT_INJECTION: forcing a failure. [ 72.757836][ T7257] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.757867][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.1.384 Not tainted syzkaller #0 PREEMPT(full) [ 72.757888][ T7257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.757896][ T7257] Call Trace: [ 72.757902][ T7257] [ 72.757907][ T7257] dump_stack_lvl+0x100/0x190 [ 72.757950][ T7257] should_fail_ex.cold+0x5/0xa [ 72.757975][ T7257] _copy_from_iter+0x43a/0x1690 [ 72.758003][ T7257] ? __pfx__copy_from_iter+0x10/0x10 [ 72.758021][ T7257] ? lock_acquire+0x1d1/0x380 [ 72.758037][ T7257] ? is_bpf_text_address+0x25/0x1a0 [ 72.758059][ T7257] ? find_held_lock+0x2b/0x80 [ 72.758079][ T7257] ? is_bpf_text_address+0x8a/0x1a0 [ 72.758098][ T7257] ? is_bpf_text_address+0x8a/0x1a0 [ 72.758119][ T7257] tun_get_user+0x265/0x3cc0 [ 72.758155][ T7257] ? __lock_acquire+0x5c0/0x1f40 [ 72.758172][ T7257] ? __pfx_tun_get_user+0x10/0x10 [ 72.758209][ T7257] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 72.758238][ T7257] ? find_held_lock+0x2b/0x80 [ 72.758258][ T7257] ? tun_get+0x191/0x370 [ 72.758274][ T7257] ? tun_get+0x191/0x370 [ 72.758296][ T7257] tun_chr_write_iter+0xdc/0x200 [ 72.758317][ T7257] do_iter_readv_writev+0x6f7/0x930 [ 72.758339][ T7257] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 72.758353][ T7257] ? avc_policy_seqno+0x9/0x20 [ 72.758374][ T7257] ? selinux_file_permission+0x8f/0x6d0 [ 72.758395][ T7257] ? bpf_lsm_file_permission+0x9/0x10 [ 72.758415][ T7257] ? security_file_permission+0x76/0x210 [ 72.758436][ T7257] ? rw_verify_area+0xce/0x6d0 [ 72.758452][ T7257] vfs_writev+0x360/0xdd0 [ 72.758468][ T7257] ? __lock_acquire+0x5c0/0x1f40 [ 72.758487][ T7257] ? __pfx_vfs_writev+0x10/0x10 [ 72.758507][ T7257] ? lock_acquire+0x1d1/0x380 [ 72.758522][ T7257] ? __fget_files+0x34/0x3d0 [ 72.758549][ T7257] ? __fget_files+0x21f/0x3d0 [ 72.758574][ T7257] ? do_writev+0x13e/0x340 [ 72.758588][ T7257] do_writev+0x13e/0x340 [ 72.758604][ T7257] ? __pfx_do_writev+0x10/0x10 [ 72.758626][ T7257] do_syscall_64+0x123/0x790 [ 72.758656][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.758676][ T7257] RIP: 0033:0x7fc22db9e159 [ 72.758688][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.758700][ T7257] RSP: 002b:00007fc22eafe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 72.758714][ T7257] RAX: ffffffffffffffda RBX: 00007fc22de25fa0 RCX: 00007fc22db9e159 [ 72.758724][ T7257] RDX: 0000000000000002 RSI: 0000200000002000 RDI: 0000000000000003 [ 72.758732][ T7257] RBP: 00007fc22eafe090 R08: 0000000000000000 R09: 0000000000000000 [ 72.758740][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.758748][ T7257] R13: 00007fc22de26038 R14: 00007fc22de25fa0 R15: 00007fff2cc49ae8 [ 72.758767][ T7257] [ 72.865017][ T7265] __nla_validate_parse: 3 callbacks suppressed [ 72.865029][ T7265] netlink: 165 bytes leftover after parsing attributes in process `syz.1.386'. [ 72.907202][ T7265] CIFS: Attempting to mount //127.0.0.1/share [ 72.961381][ T7269] CIFS: VFS: Invalid response size 0 for command 0 [ 72.961557][ T7269] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 72.962532][ T7265] CIFS: VFS: cifs_mount failed w/return code = -5 [ 73.424798][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 73.647461][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 73.768857][ T7324] kAFS: unable to lookup cell 'syz0' [ 73.805569][ T7329] netlink: 72 bytes leftover after parsing attributes in process `syz.1.404'. [ 73.810753][ T7329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.404'. [ 74.094801][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 74.095787][ T7365] hsr_slave_0: left promiscuous mode [ 74.098842][ T7365] hsr_slave_1: left promiscuous mode [ 74.130695][ T7368] netlink: 'syz.2.416': attribute type 4 has an invalid length. [ 74.131662][ T7368] netlink: 'syz.2.416': attribute type 4 has an invalid length. [ 74.156698][ T7370] netlink: Conntrack attr has 8 unknown bytes [ 74.156715][ T7370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.215334][ T7381] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 74.247595][ T7381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 74.278123][ T7387] bond1: option xmit_hash_policy: invalid value (6) [ 74.279532][ T7387] bond1 (unregistering): Released all slaves [ 74.321915][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 74.322024][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 74.322032][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 74.365304][ T7393] netlink: 'syz.0.421': attribute type 5 has an invalid length. [ 74.425902][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7405 comm=syz.0.423 [ 74.426083][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 74.464299][ T7413] program syz.1.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.607171][ T44] kauditd_printk_skb: 46 callbacks suppressed [ 74.607190][ T44] audit: type=1400 audit(1790732497.396:587): avc: denied { write } for pid=7427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.635203][ T44] audit: type=1400 audit(1790732497.426:588): avc: denied { ioctl } for pid=7418 comm="syz.1.427" path="socket:[18259]" dev="sockfs" ino=18259 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.674584][ T44] audit: type=1400 audit(1790732497.466:589): avc: denied { write } for pid=7440 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.682162][ T7443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65526 sclass=netlink_route_socket pid=7443 comm=syz.3.430 [ 74.720779][ T44] audit: type=1400 audit(1790732497.506:590): avc: denied { bind } for pid=7445 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.720807][ T44] audit: type=1400 audit(1790732497.506:591): avc: denied { listen } for pid=7445 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.720826][ T44] audit: type=1400 audit(1790732497.506:592): avc: denied { accept } for pid=7445 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.758576][ T44] audit: type=1400 audit(1790732497.546:593): avc: denied { write } for pid=7447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.818286][ T44] audit: type=1400 audit(1790732497.606:594): avc: denied { write } for pid=7455 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.878697][ T44] audit: type=1400 audit(1790732497.666:595): avc: denied { write } for pid=7461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.923029][ T44] audit: type=1400 audit(1790732497.706:596): avc: denied { write } for pid=7467 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.964179][ T7474] fuse: fd is not a fuse device [ 74.964312][ T7475] fuse: fd is not a fuse device [ 75.284696][ T7491] process '/newroot/163/file0' started with executable stack [ 75.309825][ T5445] veth1_vlan: left promiscuous mode [ 75.477415][ T7515] comedi comedi3: pcl816: I/O port conflict (0x300,16) [ 75.549193][ T7375] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.549210][ T7375] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 75.570322][ T7375] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.570337][ T7375] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 75.584610][ T7375] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.584642][ T7375] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 75.595308][ T7375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.595322][ T7375] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 75.678356][ T7534] lo: entered promiscuous mode [ 75.711302][ T7534] tunl0: entered promiscuous mode [ 75.712327][ T7534] gre0: entered promiscuous mode [ 75.718722][ T7534] gretap0: entered promiscuous mode [ 75.720417][ T7534] erspan0: entered promiscuous mode [ 75.721838][ T7534] ip_vti0: entered promiscuous mode [ 75.722640][ T7534] ip6_vti0: entered promiscuous mode [ 75.722730][ T7534] sit0: entered promiscuous mode [ 75.725773][ T7534] ip6tnl0: entered promiscuous mode [ 75.727346][ T7534] ip6gre0: entered promiscuous mode [ 75.730732][ T7534] syz_tun: entered promiscuous mode [ 75.731800][ T7537] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.736880][ T7534] ip6gretap0: entered promiscuous mode [ 75.738535][ T7534] vcan0: entered promiscuous mode [ 75.740447][ T7534] bond0: entered promiscuous mode [ 75.740457][ T7534] bond_slave_0: entered promiscuous mode [ 75.740546][ T7534] bond_slave_1: entered promiscuous mode [ 75.741858][ T7534] team0: entered promiscuous mode [ 75.741868][ T7534] team_slave_1: entered promiscuous mode [ 75.743218][ T7534] dummy0: entered promiscuous mode [ 75.748005][ T7534] nlmon0: entered promiscuous mode [ 75.749450][ T7534] batadv0: entered promiscuous mode [ 75.751525][ T7534] vxcan0: entered promiscuous mode [ 75.752635][ T7534] vxcan1: entered promiscuous mode [ 75.753388][ T7534] veth0: entered promiscuous mode [ 75.755879][ T7534] veth1: entered promiscuous mode [ 75.761916][ T7534] wg0: entered promiscuous mode [ 75.765694][ T7534] wg2: entered promiscuous mode [ 75.766544][ T7534] veth0_to_bridge: entered promiscuous mode [ 75.768217][ T7534] bridge_slave_0: entered promiscuous mode [ 75.769049][ T7534] veth1_to_bridge: entered promiscuous mode [ 75.770306][ T7534] bridge_slave_1: entered promiscuous mode [ 75.771216][ T7534] veth0_to_bond: entered promiscuous mode [ 75.779759][ T7534] veth1_to_bond: entered promiscuous mode [ 75.781856][ T7534] veth1_to_team: entered promiscuous mode [ 75.784070][ T7534] veth0_to_batadv: entered promiscuous mode [ 75.785402][ T7534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.786065][ T7534] batadv_slave_0: entered promiscuous mode [ 75.787285][ T7534] veth1_to_batadv: entered promiscuous mode [ 75.788474][ T7534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.788497][ T7534] batadv_slave_1: entered promiscuous mode [ 75.789943][ T7534] xfrm0: entered promiscuous mode [ 75.790849][ T7534] veth0_to_hsr: entered promiscuous mode [ 75.792729][ T7534] veth1_to_hsr: entered promiscuous mode [ 75.796028][ T7534] hsr0: entered promiscuous mode [ 75.797149][ T7534] veth1_virt_wifi: entered promiscuous mode [ 75.798364][ T7534] veth0_virt_wifi: entered promiscuous mode [ 75.801485][ T7534] virt_wifi0: entered promiscuous mode [ 75.805254][ T7534] vlan0: entered promiscuous mode [ 75.807542][ T7534] vlan1: entered promiscuous mode [ 75.813444][ T7534] macvlan1: entered promiscuous mode [ 75.814888][ T7534] ipvlan0: entered promiscuous mode [ 75.815019][ T7534] ipvlan1: entered promiscuous mode [ 75.822790][ T7534] macvtap0: entered promiscuous mode [ 75.827859][ T7534] macsec0: entered promiscuous mode [ 75.830973][ T7534] geneve0: entered promiscuous mode [ 75.832253][ T7534] geneve1: entered promiscuous mode [ 75.839886][ T7534] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 75.841555][ T7534] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 75.842778][ T7534] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 75.846053][ T7534] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 75.846131][ T7534] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 75.846209][ T7534] bridge1: entered promiscuous mode [ 75.846269][ T7534] bridge2: entered promiscuous mode [ 75.846980][ T7534] vxlan0: entered promiscuous mode [ 75.847881][ T7534] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 75.847895][ T7534] macsec1: entered promiscuous mode [ 75.913668][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.913689][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.913727][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.913745][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.913771][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.913784][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.913801][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.913814][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.984941][ T7547] nvme nvme0: rdma_resolve_addr failed (-19). [ 76.122717][ T7575] kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 76.128051][ T7575] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 76.140674][ T7575] kvm: requested 51961 ns i8254 timer period limited to 200000 ns [ 76.142040][ T7575] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 76.146599][ T7575] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 76.148064][ T7575] kvm: requested 70400 ns i8254 timer period limited to 200000 ns [ 76.150392][ T7575] kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 76.151950][ T7575] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 76.153150][ T7575] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 76.155225][ T7575] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 76.188973][ T7586] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 76.198005][ T7586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.217762][ T7586] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 76.222119][ T7586] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 76.248877][ T30] cfg80211: failed to load regulatory.db [ 76.303678][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 76.343030][ T7598] ntfs3(loop3): try to read out of volume at offset 0x0 [ 76.346472][ T7602] ntfs3(loop3): try to read out of volume at offset 0x0 [ 76.410420][ T7610] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 76.413698][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 76.814724][ T7652] veth1_vlan: left promiscuous mode [ 76.814740][ T7652] veth1_vlan: entered promiscuous mode [ 76.814747][ T7652] veth1_vlan: entered allmulticast mode [ 77.131485][ T7677] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 77.131696][ T7677] SELinux: failed to load policy [ 77.164659][ T7681] batadv_slave_0: entered allmulticast mode [ 77.220040][ T7681] program syz.1.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.199900][ T7719] gadgetfs: bound to dummy_udc driver [ 78.224050][ T7721] autofs: Unknown parameter '&d' [ 78.264768][ T7727] futex_wake_op: syz.1.500 tries to shift op by 144; fix this program [ 78.265129][ T7727] futex_wake_op: syz.1.500 tries to shift op by 144; fix this program [ 78.443732][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.443957][ C2] gadgetfs: connected [ 78.444252][ T25] gadgetfs: disconnected [ 78.552616][ T7735] vlan2: entered promiscuous mode [ 78.552756][ T7735] vlan2: entered allmulticast mode [ 78.552768][ T7735] hsr0: entered allmulticast mode [ 78.552778][ T7735] hsr_slave_0: entered allmulticast mode [ 78.552791][ T7735] hsr_slave_1: entered allmulticast mode [ 78.563486][ T7735] __nla_validate_parse: 12 callbacks suppressed [ 78.563497][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 78.613929][ C2] gadgetfs: connected [ 78.615962][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 78.616273][ T25] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 78.616297][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.619334][ C2] gadgetfs: configuration #1 [ 78.927132][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 78.973680][ T50] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 79.045908][ T7718] gadgetfs: suspended from state 3 [ 79.045973][ T7718] gadgetfs: disconnected [ 79.049027][ T5811] usb 5-1: USB disconnect, device number 2 [ 79.123842][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 79.124590][ T50] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 79.125086][ T50] usb 8-1: config 0 has no interfaces? [ 79.127481][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.127501][ T50] usb 8-1: Product: syz [ 79.127513][ T50] usb 8-1: Manufacturer: syz [ 79.127525][ T50] usb 8-1: SerialNumber: syz [ 79.128142][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 79.134007][ T50] usb 8-1: config 0 descriptor?? [ 79.190725][ T7770] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 79.416742][ T25] usb 8-1: USB disconnect, device number 12 [ 79.685556][ T7800] netlink: 72 bytes leftover after parsing attributes in process `syz.1.525'. [ 79.687716][ T44] kauditd_printk_skb: 43 callbacks suppressed [ 79.687728][ T44] audit: type=1326 audit(1790732502.476:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.1.525" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc22db9e159 code=0x0 [ 79.737355][ T44] audit: type=1326 audit(1790732502.526:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7799 comm="syz.1.525" exe="/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fc22db9e159 code=0x0 [ 79.900315][ T44] audit: type=1400 audit(1790732502.686:642): avc: denied { open } for pid=7804 comm="syz.2.526" path="/dev/ttyq9" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 79.967271][ T44] audit: type=1400 audit(1790732502.756:643): avc: denied { write } for pid=7811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.015739][ T44] audit: type=1400 audit(1790732502.806:644): avc: denied { write } for pid=7815 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.124513][ T44] audit: type=1400 audit(1790732502.916:645): avc: denied { write } for pid=7822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.173959][ T44] audit: type=1400 audit(1790732502.966:646): avc: denied { write } for pid=7827 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.440583][ T44] audit: type=1400 audit(1790732503.226:647): avc: denied { read } for pid=7840 comm="syz.2.530" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 80.440721][ T44] audit: type=1400 audit(1790732503.226:648): avc: denied { open } for pid=7840 comm="syz.2.530" path="/97/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 80.498977][ T7856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7856 comm=syz.2.531 [ 80.576646][ T44] audit: type=1400 audit(1790732503.366:649): avc: denied { accept } for pid=7863 comm="syz.2.533" lport=38121 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.577234][ T7864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.533'. [ 80.577911][ T7864] Invalid ELF header type: 0 != 1 [ 80.585466][ T7864] o2cb: This node has not been configured. [ 80.585473][ T7864] o2cb: Cluster check failed. Fix errors before retrying. [ 80.585484][ T7864] (syz.2.533,7864,1):user_dlm_register:674 ERROR: status = -22 [ 80.585497][ T7864] (syz.2.533,7864,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 80.743324][ T7869] netlink: 'syz.2.536': attribute type 49 has an invalid length. [ 80.749978][ T7869] bond0: (slave bond_slave_0): Releasing backup interface [ 80.792926][ T7869] bond_slave_0: entered promiscuous mode [ 80.792946][ T7869] bond_slave_0: entered allmulticast mode [ 80.815103][ T7875] xt_nfacct: accounting object `' does not exist [ 80.829448][ T7877] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.866979][ T7883] tipc: Started in network mode [ 80.866997][ T7883] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 80.868627][ T7883] tipc: New replicast peer: fe80:0000:005b:65e8:fb00:0000:0000:00bb [ 80.868966][ T7883] tipc: Enabled bearer , priority 10 [ 80.870161][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 80.873040][ T7883] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 80.878329][ T7883] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 81.010091][ T7892] : renamed from bond0 [ 81.016791][ T7892] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.540'. [ 81.121531][ T7921] kvm: pic: single mode not supported [ 81.130008][ T7921] kvm: pic: single mode not supported [ 81.140253][ T7921] kvm: pic: level sensitive irq not supported [ 81.250806][ T7932] : (slave bond_slave_1): Releasing backup interface [ 81.257137][ T7932] team0: Port device team_slave_0 removed [ 81.260300][ T7932] team0: Port device team_slave_1 removed [ 81.260575][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.264778][ T7932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.268846][ T7932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.281227][ T7932] team0: Mode changed to "loadbalance" [ 81.284917][ T7932] jffs2: notice: (7932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 81.600435][ T7946] (syz.3.551,7946,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 81.600891][ T7946] (syz.3.551,7946,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 81.817469][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.555'. [ 81.818218][ T7962] netlink: 75 bytes leftover after parsing attributes in process `syz.2.555'. [ 81.822296][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 81.865579][ T25] tipc: Node number set to 1 [ 81.921113][ T7964] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 81.922132][ T7964] VFS: Can't find a romfs filesystem on dev nullb0. [ 81.922132][ T7964] [ 82.157744][ T7977] overlay: filesystem on ./bus not supported as upperdir [ 82.220731][ T7979] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 82.259779][ T7982] pim6reg: entered allmulticast mode [ 82.266934][ T7982] 0ªî{X¹¦: renamed from gretap0 [ 82.268879][ T7982] 0ªî{X¹¦: left promiscuous mode [ 82.268899][ T7982] 0ªî{X¹¦: entered allmulticast mode [ 82.270789][ T7982] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 82.270907][ T7984] netlink: 'syz.2.561': attribute type 14 has an invalid length. [ 82.271922][ T7982] capability: warning: `syz.3.560' uses 32-bit capabilities (legacy support in use) [ 82.272463][ T7982] team0: entered allmulticast mode [ 82.272479][ T7982] team_slave_1: entered allmulticast mode [ 82.272557][ T7984] block nbd0: Unsupported socket: should be TCP or UNIX. [ 82.278261][ T7981] team0: left allmulticast mode [ 82.278279][ T7981] team_slave_1: left allmulticast mode [ 82.322806][ T7987] dlm: non-version read from control device 124 [ 82.322870][ T7991] dlm: non-version read from control device 77 [ 82.973658][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.997540][ T8009] overlay: ./file0 is not a directory [ 83.133784][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 83.134405][ T50] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 83.135614][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.135633][ T50] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.135665][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 83.135686][ T50] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 83.135717][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.158768][ T50] hub 6-1:1.0: bad descriptor, ignoring hub [ 83.158790][ T50] hub 6-1:1.0: probe with driver hub failed with error -5 [ 83.159213][ T50] cdc_wdm 6-1:1.0: skipping garbage [ 83.159225][ T50] cdc_wdm 6-1:1.0: skipping garbage [ 83.189897][ T50] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 83.189914][ T50] cdc_wdm 6-1:1.0: Unknown control protocol [ 83.501853][ T8034] kvm: emulating exchange as write [ 83.505829][ T8034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.566807][ T8047] __nla_validate_parse: 8 callbacks suppressed [ 83.566820][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 83.569653][ T8048] netlink: 104 bytes leftover after parsing attributes in process `syz.0.580'. [ 83.602972][ T8051] bond1: (slave dummy0): Removing an active aggregator [ 83.606829][ T8051] bond1: (slave dummy0): Releasing backup interface [ 83.715833][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.715849][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.716600][ T8066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.716612][ T8066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.750693][ T8071] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.779016][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 83.852621][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 83.905916][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 83.955479][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.004408][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.021912][ T8096] netlink: 27 bytes leftover after parsing attributes in process `syz.0.595'. [ 84.059482][ T8004] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 84.074976][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.123874][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.197298][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.228048][ T8004] usb 6-1: device firmware changed [ 84.230443][ T25] usb 6-1: USB disconnect, device number 6 [ 84.230778][ T8004] cdc_wdm 6-1:1.0: Error autopm - -16 [ 84.272569][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.308079][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'. [ 84.340950][ T8075] xt_hashlimit: size too large, truncated to 1048576 [ 84.373706][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.523693][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 84.524159][ T25] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.524911][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.524923][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.524941][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.524961][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.531021][ T25] hub 6-1:1.0: bad descriptor, ignoring hub [ 84.531034][ T25] hub 6-1:1.0: probe with driver hub failed with error -5 [ 84.531279][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 84.531287][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 84.531296][ T25] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 84.693651][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 84.853634][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 84.856816][ T50] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 84.857787][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.857810][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 84.859652][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.859672][ T50] usb 7-1: Product: syz [ 84.859686][ T50] usb 7-1: Manufacturer: syz [ 84.859699][ T50] usb 7-1: SerialNumber: syz [ 84.862203][ T50] usb 7-1: config 0 descriptor?? [ 84.913914][ T25] usb 6-1: USB disconnect, device number 7 [ 85.072894][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 85.076869][ T50] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 85.079986][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 85.079995][ T44] audit: type=1400 audit(1790732507.866:680): avc: denied { read } for pid=5128 comm="acpid" name="mouse2" dev="devtmpfs" ino=2886 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.080319][ T44] audit: type=1400 audit(1790732507.866:681): avc: denied { open } for pid=5128 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2886 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.080978][ T44] audit: type=1400 audit(1790732507.866:682): avc: denied { ioctl } for pid=5128 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2886 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.083143][ T50] imon:send_packet: packet tx failed (-71) [ 85.105942][ T50] imon 7-1:0.0: panel buttons/knobs setup failed [ 85.153605][ T50] rc_core: IR keymap rc-imon-pad not found [ 85.153617][ T50] Registered IR keymap rc-empty [ 85.153656][ T50] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 85.153665][ T50] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 85.154792][ T50] imon:send_packet: packet tx failed (-71) [ 85.173652][ T50] imon 7-1:0.0: remote input dev register failed [ 85.173725][ T50] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 85.192817][ T50] imon 7-1:0.0: unable to initialize intf0, err 0 [ 85.192830][ T50] imon:imon_probe: failed to initialize context! [ 85.192837][ T50] imon 7-1:0.0: unable to register, err -19 [ 85.194722][ T50] usb 7-1: USB disconnect, device number 8 [ 85.238841][ T8146] ./dev/sda1: Can't open blockdev [ 85.292892][ T44] audit: type=1400 audit(1790732508.076:683): avc: denied { mount } for pid=8147 comm="syz.3.608" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.565382][ T50] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 85.714374][ T50] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 85.715381][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 85.715406][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 85.715426][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.717367][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.717386][ T50] usb 7-1: Product: syz [ 85.717397][ T50] usb 7-1: Manufacturer: syz [ 85.717409][ T50] usb 7-1: SerialNumber: syz [ 85.719822][ T50] usb 7-1: config 0 descriptor?? [ 85.723375][ T8128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.929747][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 85.932460][ T50] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input10 [ 85.984725][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 85.990244][ T8151] syz.1.609 (8151): drop_caches: 2 [ 86.148992][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 86.149733][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.152868][ T25] usb 8-1: config 0 has no interfaces? [ 86.152893][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.167564][ T25] usb 8-1: config 0 descriptor?? [ 86.193632][ T50] rc_core: IR keymap rc-imon-pad not found [ 86.193647][ T50] Registered IR keymap rc-empty [ 86.193702][ T50] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 86.193716][ T50] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 86.324977][ T8203] ip_tables: iptables: counters copy to user failed while replacing table [ 86.345326][ T50] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 86.349046][ T50] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 86.352894][ T50] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:9> initialized [ 86.377521][ T8163] FAULT_INJECTION: forcing a failure. [ 86.377521][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 86.377543][ T8163] CPU: 3 UID: 0 PID: 8163 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT(full) [ 86.377558][ T8163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.377564][ T8163] Call Trace: [ 86.377569][ T8163] [ 86.377574][ T8163] dump_stack_lvl+0x100/0x190 [ 86.377605][ T8163] should_fail_ex.cold+0x5/0xa [ 86.377623][ T8163] should_failslab+0xc2/0x120 [ 86.377642][ T8163] kmem_cache_alloc_noprof+0x92/0x6a0 [ 86.377657][ T8163] ? __kernfs_new_node+0xd2/0xa10 [ 86.377671][ T8163] __kernfs_new_node+0xd2/0xa10 [ 86.377681][ T8163] ? module_add_driver+0x1e2/0x420 [ 86.377693][ T8163] ? kasan_save_stack+0x3f/0x50 [ 86.377706][ T8163] ? kasan_save_stack+0x30/0x50 [ 86.377724][ T8163] ? __pfx___kernfs_new_node+0x10/0x10 [ 86.377736][ T8163] ? lock_acquire+0x1d1/0x380 [ 86.377748][ T8163] ? kernfs_root+0x23/0x2a0 [ 86.377764][ T8163] ? find_held_lock+0x2b/0x80 [ 86.377781][ T8163] ? kernfs_root+0xee/0x2a0 [ 86.377797][ T8163] ? kernfs_root+0xee/0x2a0 [ 86.377817][ T8163] kernfs_new_node+0x117/0x150 [ 86.377831][ T8163] __kernfs_create_file+0x53/0x350 [ 86.377847][ T8163] sysfs_add_file_mode_ns+0x207/0x3c0 [ 86.377865][ T8163] sysfs_create_file_ns+0x145/0x1e0 [ 86.377881][ T8163] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 86.377896][ T8163] ? module_add_driver+0x1e2/0x420 [ 86.377906][ T8163] ? sysfs_do_create_link_sd+0xbb/0x140 [ 86.377926][ T8163] driver_create_file+0x4a/0x70 [ 86.377942][ T8163] bus_add_driver+0x373/0x5b0 [ 86.377956][ T8163] driver_register+0x1e2/0x360 [ 86.377971][ T8163] ? rcu_is_watching+0x13/0xc0 [ 86.377988][ T8163] usb_gadget_register_driver_owner+0x132/0x210 [ 86.378007][ T8163] raw_ioctl+0x1a85/0x2b80 [ 86.378022][ T8163] ? __pfx_raw_ioctl+0x10/0x10 [ 86.378034][ T8163] ? selinux_file_ioctl+0x13b/0x290 [ 86.378048][ T8163] ? selinux_file_ioctl+0xb6/0x290 [ 86.378062][ T8163] ? __pfx_raw_ioctl+0x10/0x10 [ 86.378075][ T8163] __x64_sys_ioctl+0x18e/0x210 [ 86.378090][ T8163] do_syscall_64+0x123/0x790 [ 86.378107][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.378119][ T8163] RIP: 0033:0x7efc33f9ddeb [ 86.378128][ T8163] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 86.378138][ T8163] RSP: 002b:00007efc34f2cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.378151][ T8163] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007efc33f9ddeb [ 86.378160][ T8163] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 86.378167][ T8163] RBP: 00007efc34f2dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 86.378175][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.378182][ T8163] R13: 0000200000000100 R14: 0000000000000005 R15: 0000000000000868 [ 86.378196][ T8163] [ 86.378202][ T8163] bus_add_driver: uevent attr (raw-gadget.2) failed [ 86.378325][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.378498][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.386706][ T50] usb 8-1: USB disconnect, device number 13 [ 86.449332][ T44] audit: type=1400 audit(1790732509.236:684): avc: denied { module_request } for pid=8205 comm="syz.1.625" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.463700][ T44] audit: type=1400 audit(1790732509.246:685): avc: denied { write } for pid=8207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.509606][ T44] audit: type=1400 audit(1790732509.296:686): avc: denied { write } for pid=8211 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.521022][ T44] audit: type=1400 audit(1790732509.306:687): avc: denied { mount } for pid=8212 comm="syz.1.626" name="/" dev="ramfs" ino=21147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.535177][ T44] audit: type=1400 audit(1790732509.326:688): avc: denied { mounton } for pid=8212 comm="syz.1.626" path="/bus" dev="ramfs" ino=21149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 86.535274][ T8213] binder: Unknown parameter 'fd' [ 86.536318][ T44] audit: type=1400 audit(1790732509.326:689): avc: denied { ioctl } for pid=8212 comm="syz.1.626" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 86.788201][ T8229] cgroup: none used incorrectly [ 86.816682][ T8231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.922854][ T8238] netlink: Unknown nat attribute (0) [ 86.922871][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.012221][ T8243] xt_l2tp: v2 doesn't support IP mode [ 87.033665][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.086180][ T8234] imon:send_packet: packet tx failed (-71) [ 87.087066][ T852] usb 7-1: USB disconnect, device number 9 [ 87.105817][ T8234] imon:lcd_write: send packet failed! [ 87.173719][ T25] usb 6-1: device descriptor read/64, error -71 [ 87.336981][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 87.338367][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 87.351935][ T8258] netlink: 92 bytes leftover after parsing attributes in process `syz.3.637'. [ 87.413700][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd syzkaller syzkaller login: [ 87.485151][ T8268] netlink: 'syz.0.639': attribute type 2 has an invalid length. [ 87.490804][ T8268] : entered promiscuous mode [ 87.553703][ T25] usb 6-1: device descriptor read/64, error -71 [ 87.663951][ T25] usb usb6-port1: attempt power cycle [ 87.682880][ T8271] ntfs3: Unknown parameter 'dcsc' [ 87.973715][ T35] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 88.013710][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.034034][ T25] usb 6-1: device descriptor read/8, error -71 [ 88.124879][ T35] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 88.126192][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.126211][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 88.126249][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.128910][ T35] usb 7-1: config 0 descriptor?? [ 88.133454][ T35] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 88.134498][ T35] dvb-usb: bulk message failed: -22 (3/0) [ 88.146041][ T35] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 88.147482][ T35] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 88.147524][ T35] usb 7-1: media controller created [ 88.149334][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.155102][ T35] dvb-usb: bulk message failed: -22 (6/0) [ 88.155202][ T35] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 88.162575][ T35] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input12 [ 88.166506][ T35] dvb-usb: schedule remote query interval to 150 msecs. [ 88.166525][ T35] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 88.210517][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 88.211179][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'. [ 88.303968][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 88.325443][ T35] dvb-usb: bulk message failed: -22 (1/0) [ 88.325468][ T35] dvb-usb: error while querying for an remote control event. [ 88.333984][ T35] usb 7-1: USB disconnect, device number 10 [ 88.341660][ T25] usb 6-1: device descriptor read/8, error -71 [ 88.374173][ T35] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 88.444109][ T25] usb usb6-port1: unable to enumerate USB device [ 88.493624][ T30] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 88.643634][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 88.644298][ T30] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 88.645090][ T30] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 88.645111][ T30] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 88.645130][ T30] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.645143][ T30] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 88.646645][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.646656][ T30] usb 8-1: Product: syz [ 88.646664][ T30] usb 8-1: Manufacturer: syz [ 88.646671][ T30] usb 8-1: SerialNumber: syz [ 88.652343][ C1] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 88.659669][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input13 [ 88.863612][ T30] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 88.863624][ T30] (id 0x00) [ 88.903621][ T30] rc_core: IR keymap rc-imon-pad not found [ 88.903633][ T30] Registered IR keymap rc-empty [ 88.903674][ T30] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 88.903683][ T30] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 89.001804][ T8290] overlayfs: failed to resolve './file2': -2 [ 89.065407][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 89.067644][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input14 [ 89.074597][ T30] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:14> initialized [ 89.307338][ T8299] cdrom: dropping to single frame dma [ 89.553747][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 89.690068][ T8320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.655'. [ 89.714306][ T30] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 89.715095][ T30] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 89.715109][ T30] usb 7-1: config 1 has no interface number 0 [ 89.717175][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.717193][ T30] usb 7-1: Product: syz [ 89.717205][ T30] usb 7-1: Manufacturer: syz [ 89.717215][ T30] usb 7-1: SerialNumber: syz [ 89.732611][ T30] usb 7-1: 3:1 : does not exist [ 89.732630][ T30] usb 7-1: 3:2 : does not exist [ 89.765533][ T8327] lo: entered allmulticast mode [ 89.765820][ T8327] tunl0: entered allmulticast mode [ 89.766026][ T8327] gre0: entered allmulticast mode [ 89.766220][ T8327] gretap0: entered allmulticast mode [ 89.766410][ T8327] erspan0: entered allmulticast mode [ 89.766596][ T8327] ip_vti0: entered allmulticast mode [ 89.766794][ T8327] ip6_vti0: entered allmulticast mode [ 89.766946][ T8327] sit0: entered allmulticast mode [ 89.767146][ T8327] ip6tnl0: entered allmulticast mode [ 89.767299][ T8327] ip6gre0: entered allmulticast mode [ 89.767533][ T8327] syz_tun: entered allmulticast mode [ 89.767783][ T8327] ip6gretap0: entered allmulticast mode [ 89.767955][ T8327] bridge0: entered allmulticast mode [ 89.768433][ T8327] vcan0: entered allmulticast mode [ 89.770039][ T8327] bond0: entered allmulticast mode [ 89.770050][ T8327] bond_slave_0: entered allmulticast mode [ 89.770059][ T8327] bond_slave_1: entered allmulticast mode [ 89.770413][ T8327] team0: entered allmulticast mode [ 89.770421][ T8327] team_slave_0: entered allmulticast mode [ 89.770429][ T8327] team_slave_1: entered allmulticast mode [ 89.770776][ T8327] nlmon0: entered allmulticast mode [ 89.770978][ T8327] vxcan0: entered allmulticast mode [ 89.771181][ T8327] vxcan1: entered allmulticast mode [ 89.771376][ T8327] veth0: entered allmulticast mode [ 89.771565][ T8327] veth1: entered allmulticast mode [ 89.771770][ T8327] wg0: entered allmulticast mode [ 89.771834][ T8327] wg1: entered allmulticast mode [ 89.772439][ T8327] wg2: entered allmulticast mode [ 89.772649][ T8327] veth0_to_bridge: entered allmulticast mode [ 89.773175][ T8327] veth1_to_bridge: entered allmulticast mode [ 89.773720][ T8327] veth0_to_bond: entered allmulticast mode [ 89.774181][ T8327] veth1_to_bond: entered allmulticast mode [ 89.774589][ T8327] veth0_to_team: entered allmulticast mode [ 89.775106][ T8327] veth1_to_team: entered allmulticast mode [ 89.775366][ T8327] veth0_to_batadv: entered allmulticast mode [ 89.775569][ T8327] batadv_slave_0: entered allmulticast mode [ 89.775766][ T8327] veth1_to_batadv: entered allmulticast mode [ 89.775952][ T8327] batadv_slave_1: entered allmulticast mode [ 89.776134][ T8327] veth0_to_hsr: entered allmulticast mode [ 89.776343][ T8327] hsr_slave_0: entered allmulticast mode [ 89.776522][ T8327] veth1_to_hsr: entered allmulticast mode [ 89.776919][ T8327] hsr_slave_1: entered allmulticast mode [ 89.777100][ T8327] veth1_virt_wifi: entered allmulticast mode [ 89.777291][ T8327] veth0_virt_wifi: entered allmulticast mode [ 89.777474][ T8327] virt_wifi0: entered allmulticast mode [ 89.777536][ T8327] veth0_vlan: entered allmulticast mode [ 89.777828][ T8327] vlan0: entered allmulticast mode [ 89.778050][ T8327] vlan1: entered allmulticast mode [ 89.778259][ T8327] macvlan0: entered allmulticast mode [ 89.778266][ T8327] veth1_vlan: entered allmulticast mode [ 89.778511][ T8327] macvlan1: entered allmulticast mode [ 89.778716][ T8327] ipvlan0: entered allmulticast mode [ 89.778811][ T8327] ipvlan1: entered allmulticast mode [ 89.778883][ T8327] veth1_macvtap: entered allmulticast mode [ 89.779171][ T8327] veth0_macvtap: entered allmulticast mode [ 89.779369][ T8327] macvtap0: entered allmulticast mode [ 89.779574][ T8327] macsec0: entered allmulticast mode [ 89.779751][ T8327] geneve0: entered allmulticast mode [ 89.779994][ T8327] geneve1: entered allmulticast mode [ 89.780199][ T8327] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 89.780480][ T8327] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 89.780722][ T8327] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 89.780952][ T8327] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 89.781175][ T8327] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 89.781238][ T8327] syztnl0: entered allmulticast mode [ 89.781295][ T8327] vti0: entered allmulticast mode [ 89.781360][ T8327] vxlan0: entered allmulticast mode [ 89.781560][ T8327] macvlan2: entered allmulticast mode [ 89.781876][ T8327] syz_tun.4: entered allmulticast mode [ 89.781942][ T8327] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode [ 89.782005][ T8327] vlan2: entered allmulticast mode [ 89.782150][ T8327] mac80211_hwsim hwsim11 wlan3: entered allmulticast mode [ 89.782214][ T8327] bridge1: entered allmulticast mode [ 89.782281][ T8327] bond1: entered allmulticast mode [ 89.782289][ T8327] veth3: entered allmulticast mode [ 89.782532][ T8327] veth2: entered allmulticast mode [ 89.782777][ T8327] ip6tnl1: entered allmulticast mode [ 89.782830][ T8327] : entered allmulticast mode [ 89.782909][ T8327] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 89.814303][ T8333] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.925225][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 90.078323][ T8353] IPVS: ip_vs_add_dest(): server weight less than zero [ 90.156879][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 90.156893][ T44] audit: type=1326 audit(1790732512.946:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.0.662" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2d179e159 code=0x0 [ 90.182436][ T8335] raw_sendmsg: syz.1.659 forgot to set AF_INET. Fix it! [ 90.363906][ T8371] imon:send_packet: packet tx failed (-71) [ 90.365066][ T50] usb 8-1: USB disconnect, device number 14 [ 90.383793][ T8371] imon:vfd_write: send packet #3 failed [ 90.670595][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 90.769646][ T8385] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 91.163666][ T44] audit: type=1400 audit(1790732513.946:713): avc: denied { ioctl } for pid=8395 comm="syz.1.670" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23432 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.165233][ T44] audit: type=1400 audit(1790732513.956:714): avc: denied { connect } for pid=8395 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.184372][ T44] audit: type=1400 audit(1790732513.976:715): avc: denied { append } for pid=8397 comm="syz.3.671" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.194488][ T44] audit: type=1400 audit(1790732513.986:716): avc: denied { mount } for pid=8397 comm="syz.3.671" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 91.271979][ T44] audit: type=1400 audit(1790732514.056:717): avc: denied { block_suspend } for pid=8395 comm="syz.1.670" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.309162][ T44] audit: type=1400 audit(1790732514.096:718): avc: denied { bind } for pid=8407 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.310359][ T8408] netlink: 64 bytes leftover after parsing attributes in process `syz.3.674'. [ 91.362171][ T8411] hub 8-0:1.0: USB hub found [ 91.362402][ T8411] hub 8-0:1.0: 1 port detected [ 91.385519][ T8411] ip6erspan0: entered allmulticast mode [ 91.481323][ T8417] lo: left promiscuous mode [ 91.481420][ T8417] tunl0: left promiscuous mode [ 91.481502][ T8417] gre0: left promiscuous mode [ 91.481795][ T8417] 0ªî{X¹¦: left allmulticast mode [ 91.483135][ T8417] erspan0: left promiscuous mode [ 91.483208][ T8417] ip_vti0: left promiscuous mode [ 91.483277][ T8417] ip6_vti0: left promiscuous mode [ 91.483331][ T8417] sit0: left promiscuous mode [ 91.483396][ T8417] ip6tnl0: left promiscuous mode [ 91.483453][ T8417] ip6gre0: left promiscuous mode [ 91.483507][ T8417] syz_tun: left promiscuous mode [ 91.483670][ T8417] ip6gretap0: left promiscuous mode [ 91.483742][ T8417] vcan0: left promiscuous mode [ 91.483807][ T8417] bond0: left promiscuous mode [ 91.484013][ T8417] team0: left promiscuous mode [ 91.484143][ T8417] dummy0: left promiscuous mode [ 91.484218][ T8417] nlmon0: left promiscuous mode [ 91.484285][ T8417] batadv0: left promiscuous mode [ 91.484349][ T8417] vxcan0: left promiscuous mode [ 91.484413][ T8417] vxcan1: left promiscuous mode [ 91.484475][ T8417] veth0: left promiscuous mode [ 91.484551][ T8417] veth1: left promiscuous mode [ 91.484614][ T8417] wg0: left promiscuous mode [ 91.484677][ T8417] wg2: left promiscuous mode [ 91.484740][ T8417] veth0_to_bridge: left promiscuous mode [ 91.484810][ T8417] bridge_slave_0: left promiscuous mode [ 91.484873][ T8417] veth1_to_bridge: left promiscuous mode [ 91.485055][ T8417] bridge_slave_1: left promiscuous mode [ 91.485139][ T8417] veth0_to_bond: left promiscuous mode [ 91.485230][ T8417] bond_slave_0: left promiscuous mode [ 91.485326][ T8417] veth1_to_bond: left promiscuous mode [ 91.485393][ T8417] bond_slave_1: left promiscuous mode [ 91.485456][ T8417] veth1_to_team: left promiscuous mode [ 91.485520][ T8417] team_slave_1: left promiscuous mode [ 91.485587][ T8417] veth0_to_batadv: left promiscuous mode [ 91.485650][ T8417] batadv_slave_0: left promiscuous mode [ 91.485717][ T8417] veth1_to_batadv: left promiscuous mode [ 91.485790][ T8417] batadv_slave_1: left promiscuous mode [ 91.485852][ T8417] xfrm0: left promiscuous mode [ 91.485914][ T8417] veth0_to_hsr: left promiscuous mode [ 91.485981][ T8417] hsr_slave_0: left promiscuous mode [ 91.486045][ T8417] veth1_to_hsr: left promiscuous mode [ 91.486107][ T8417] hsr_slave_1: left promiscuous mode [ 91.486166][ T8417] veth1_virt_wifi: left promiscuous mode [ 91.486238][ T8417] veth0_virt_wifi: left promiscuous mode [ 91.486301][ T8417] virt_wifi0: left promiscuous mode [ 91.486472][ T8417] vlan0: left promiscuous mode [ 91.486612][ T8417] vlan1: left promiscuous mode [ 91.486735][ T8417] macvlan0: left promiscuous mode [ 91.486812][ T8417] macvlan1: left promiscuous mode [ 91.486875][ T8417] ipvlan0: left promiscuous mode [ 91.486940][ T8417] ipvlan1: left promiscuous mode [ 91.487148][ T8417] macvtap0: left promiscuous mode [ 91.487220][ T8417] macsec0: left promiscuous mode [ 91.487673][ T8417] geneve0: left promiscuous mode [ 91.487754][ T8417] geneve1: left promiscuous mode [ 91.487878][ T8417] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 91.487936][ T8417] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 91.487991][ T8417] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 91.488047][ T8417] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 91.488116][ T8417] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 91.488187][ T8417] bridge1: left promiscuous mode [ 91.488249][ T8417] bridge2: left promiscuous mode [ 91.488303][ T8417] vxlan0: left promiscuous mode [ 91.488356][ T8417] macsec1: left promiscuous mode [ 91.488364][ T8417] macsec1: left allmulticast mode [ 91.490111][ T8417] ip6erspan0: left allmulticast mode [ 91.493144][ T8417] usb usb9: usbfs: process 8417 (syz.3.677) did not claim interface 0 before use [ 91.651766][ T44] audit: type=1400 audit(1790732514.436:719): avc: denied { write } for pid=8418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.707377][ T44] audit: type=1400 audit(1790732514.496:720): avc: denied { write } for pid=8421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.030459][ T44] audit: type=1400 audit(1790732514.816:721): avc: denied { mmap_zero } for pid=8424 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 92.134663][ T8435] ip_tables: iptables: counters copy to user failed while replacing table [ 92.146169][ T8435] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.146266][ T8435] bridge0: port 2(bridge_slave_1) entered listening state [ 92.147033][ T8435] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.147114][ T8435] bridge0: port 1(bridge_slave_0) entered listening state [ 92.164801][ T8435] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 92.270073][ T852] usb 7-1: USB disconnect, device number 11 [ 92.355693][ T8446] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 92.543468][ T8455] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8455 comm=syz.3.689 [ 92.544482][ T8456] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8456 comm=syz.3.689 [ 92.826861][ T8477] binder: 8473:8477 ioctl c0306201 0 returned -14 [ 92.885392][ T8480] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.886320][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.693'. [ 94.197212][ T8529] syz.2.707 (8529): drop_caches: 2 [ 94.256948][ T8532] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 94.257182][ T8532] qnx6: wrong signature (magic) in superblock #1. [ 94.257190][ T8532] qnx6: unable to read the first superblock [ 94.265961][ T8532] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 94.266047][ T8532] qnx6: wrong signature (magic) in superblock #1. [ 94.266052][ T8532] qnx6: unable to read the first superblock [ 94.723753][ T30] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 94.812259][ T8574] tmpfs: Unknown parameter '' [ 94.869320][ T8576] input: syz0 as /devices/virtual/input/input15 [ 94.893785][ T30] usb 8-1: Using ep0 maxpacket: 32 [ 94.895110][ T30] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 94.895894][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 94.895910][ T30] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 94.898214][ T30] usb 8-1: string descriptor 0 read error: -22 [ 94.898272][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.914613][ T8552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 94.927849][ T30] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.927876][ T30] usb 8-1: MIDIStreaming interface descriptor not found [ 95.155413][ T8584] ceph: No mds server is up or the cluster is laggy [ 95.423757][ T8576] syz.1.719 (8576): drop_caches: 2 [ 95.431353][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 95.431371][ T44] audit: type=1400 audit(1791781094.216:744): avc: denied { write } for pid=8598 comm="syz.2.724" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 95.432207][ T44] audit: type=1400 audit(1791781094.216:745): avc: denied { ioctl } for pid=8598 comm="syz.2.724" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d1a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 95.484602][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.484685][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.484755][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.484829][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.484901][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485032][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485111][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485184][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485256][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485329][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485398][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485467][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485539][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485607][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485675][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485743][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485813][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485886][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.485957][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.486026][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.486095][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.486173][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.486242][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.486314][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafcbd0 returned -22 [ 95.486385][ T8602] binder: 8601:8602 ioctl 4020ae46 7fc22eafc8d0 returned -22 [ 96.163089][ T44] audit: type=1400 audit(1791781094.913:746): avc: denied { write } for pid=8614 comm="syz.1.729" name="configs" dev="configfs" ino=22596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.163760][ T44] audit: type=1400 audit(1791781094.913:747): avc: denied { write } for pid=8614 comm="syz.1.729" name="strings" dev="configfs" ino=24496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.164296][ T44] audit: type=1400 audit(1791781094.923:748): avc: denied { write } for pid=8614 comm="syz.1.729" name="functions" dev="configfs" ino=22595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.281172][ T44] audit: type=1400 audit(1791781095.039:749): avc: denied { create } for pid=8620 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.281626][ T44] audit: type=1400 audit(1791781095.039:750): avc: denied { setopt } for pid=8620 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.325122][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.733'. [ 96.437720][ T44] audit: type=1400 audit(1791781095.185:751): avc: denied { read write } for pid=8637 comm="syz.2.737" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 96.437916][ T44] audit: type=1400 audit(1791781095.185:752): avc: denied { open } for pid=8637 comm="syz.2.737" path="/154/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 96.521588][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 96.521751][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'. [ 96.521760][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.740'. [ 96.585823][ T44] audit: type=1400 audit(1791781095.330:753): avc: denied { write } for pid=8656 comm="syz.2.743" name="functions" dev=" ** replaying previous printk message ** [ 96.585823][ T44] audit: type=1400 audit(1791781095.330:753): avc: denied { write } for pid=8656 comm="syz.2.743" name="functions" dev="configfs" ino=22595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.591994][ T8657] [ 96.600854][ T8657] ====================================================== [ 96.603030][ T8657] WARNING: possible circular locking dependency detected [ 96.605211][ T8657] syzkaller #0 Not tainted [ 96.606755][ T8657] ------------------------------------------------------ [ 96.608958][ T8657] syz.2.743/8657 is trying to acquire lock: [ 96.610787][ T8657] ffffffff903fe9a8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.614179][ T8657] [ 96.614179][ T8657] but task is already holding lock: [ 96.616489][ T8657] ffff888045514b70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 96.619475][ T8657] [ 96.619475][ T8657] which lock already depends on the new lock. [ 96.619475][ T8657] [ 96.622628][ T8657] [ 96.622628][ T8657] the existing dependency chain (in reverse order) is: [ 96.625427][ T8657] [ 96.625427][ T8657] -> #4 (&p->frag_sem){++++}-{4:4}: [ 96.627819][ T8657] lock_acquire+0x1d1/0x380 [ 96.629385][ T8657] down_write_killable+0x93/0x240 [ 96.631813][ T8657] configfs_rmdir+0x3fa/0x950 [ 96.633430][ T8657] vfs_rmdir+0x328/0x8a0 [ 96.634927][ T8657] filename_rmdir+0x31a/0x5c0 [ 96.636607][ T8657] __x64_sys_rmdir+0x46/0x70 [ 96.638200][ T8657] do_syscall_64+0x123/0x790 [ 96.639798][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.641778][ T8657] [ 96.641778][ T8657] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 96.644467][ T8657] lock_acquire+0x1d1/0x380 [ 96.646202][ T8657] down_write+0x8b/0x1f0 [ 96.647752][ T8657] configfs_depend_item_unlocked+0xf3/0x6a0 [ 96.649741][ T8657] usbg_make_tpg+0x251/0x610 [ 96.651350][ T8657] target_fabric_make_tpg+0xab/0x8c0 [ 96.653168][ T8657] configfs_mkdir+0x525/0xd40 [ 96.654796][ T8657] vfs_mkdir+0x364/0x850 [ 96.656356][ T8657] filename_mkdirat+0x48b/0x5e0 [ 96.658024][ T8657] __x64_sys_mkdirat+0x89/0xc0 [ 96.659681][ T8657] do_syscall_64+0x123/0x790 [ 96.661270][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.663254][ T8657] [ 96.663254][ T8657] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 96.665718][ T8657] lock_acquire+0x1d1/0x380 [ 96.667310][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 96.668900][ T8657] tcm_alloc_inst+0x5f/0x1e0 [ 96.670499][ T8657] try_get_usb_function_instance+0x136/0x1f0 [ 96.672521][ T8657] usb_get_function_instance+0x16/0x70 [ 96.674377][ T8657] function_make+0x18c/0x3f0 [ 96.676028][ T8657] configfs_mkdir+0x525/0xd40 [ 96.677648][ T8657] vfs_mkdir+0x364/0x850 [ 96.679149][ T8657] filename_mkdirat+0x48b/0x5e0 [ 96.680819][ T8657] __x64_sys_mkdirat+0x89/0xc0 [ 96.682458][ T8657] do_syscall_64+0x123/0x790 [ 96.684082][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.686119][ T8657] [ 96.686119][ T8657] -> #1 (func_lock){+.+.}-{4:4}: [ 96.688328][ T8657] lock_acquire+0x1d1/0x380 [ 96.689904][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 96.691499][ T8657] try_get_usb_function_instance+0x26/0x1f0 [ 96.693493][ T8657] usb_get_function_instance+0x16/0x70 [ 96.695424][ T8657] function_make+0x18c/0x3f0 [ 96.697024][ T8657] configfs_mkdir+0x525/0xd40 [ 96.698646][ T8657] vfs_mkdir+0x364/0x850 [ 96.700256][ T8657] filename_mkdirat+0x48b/0x5e0 [ 96.701943][ T8657] __x64_sys_mkdirat+0x89/0xc0 [ 96.703631][ T8657] do_syscall_64+0x123/0x790 [ 96.705288][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.707311][ T8657] [ 96.707311][ T8657] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 96.709839][ T8657] check_prev_add+0xeb/0xe60 [ 96.711441][ T8657] __lock_acquire+0x1528/0x1f40 [ 96.713105][ T8657] lock_acquire+0x1d1/0x380 [ 96.714674][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 96.716332][ T8657] uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.718342][ T8657] configfs_write_iter+0x302/0x4e0 [ 96.720089][ T8657] vfs_write+0x6af/0x1050 [ 96.721611][ T8657] ksys_write+0x12a/0x250 [ 96.723138][ T8657] do_syscall_64+0x123/0x790 [ 96.724737][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.726816][ T8657] [ 96.726816][ T8657] other info that might help us debug this: [ 96.726816][ T8657] [ 96.729971][ T8657] Chain exists of: [ 96.729971][ T8657] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 96.729971][ T8657] [ 96.734281][ T8657] Possible unsafe locking scenario: [ 96.734281][ T8657] [ 96.736708][ T8657] CPU0 CPU1 [ 96.738441][ T8657] ---- ---- [ 96.740130][ T8657] rlock(&p->frag_sem); [ 96.741476][ T8657] lock(&sb->s_type->i_mutex_key#26); [ 96.743945][ T8657] lock(&p->frag_sem); [ 96.746048][ T8657] lock(gadget_subsys.su_mutex); [ 96.747638][ T8657] [ 96.747638][ T8657] *** DEADLOCK *** [ 96.747638][ T8657] [ 96.750135][ T8657] locks held by syz.2.743/8657: 4, last CPU#3: [ 96.752052][ T8657] #0: ffff88802768d270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 96.754846][ T8657] #1: ffff88802404a460 (sb_writers#15){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 96.757662][ T8657] #2: ffff888033a5fe80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 96.760742][ T8657] #3: ffff888045514b70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 96.763726][ T8657] [ 96.763726][ T8657] stack backtrace: [ 96.765584][ T8657] CPU: 3 UID: 0 PID: 8657 Comm: syz.2.743 Not tainted syzkaller #0 PREEMPT(full) [ 96.768411][ T8657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.771490][ T8657] Call Trace: [ 96.772546][ T8657] [ 96.773483][ T8657] dump_stack_lvl+0x100/0x190 [ 96.774973][ T8657] print_circular_bug.cold+0x178/0x1be [ 96.776716][ T8657] check_noncircular+0x146/0x160 [ 96.778276][ T8657] check_prev_add+0xeb/0xe60 [ 96.779745][ T8657] ? stack_trace_save+0x8e/0xc0 [ 96.781315][ T8657] __lock_acquire+0x1528/0x1f40 [ 96.782852][ T8657] lock_acquire+0x1d1/0x380 [ 96.784287][ T8657] ? uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.786234][ T8657] ? __pfx___might_resched+0x10/0x10 [ 96.787885][ T8657] __mutex_lock+0x1a4/0x1bd0 [ 96.789329][ T8657] ? uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.791238][ T8657] ? uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.793329][ T8657] ? __might_fault+0xc5/0x140 [ 96.795250][ T8657] ? __pfx___mutex_lock+0x10/0x10 [ 96.796819][ T8657] ? lock_acquire+0x1d1/0x380 [ 96.798287][ T8657] ? configfs_write_iter+0x218/0x4e0 [ 96.800084][ T8657] ? __pfx___might_resched+0x10/0x10 [ 96.801858][ T8657] ? down_read+0x13b/0x4c0 [ 96.803293][ T8657] ? uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.805229][ T8657] uvcg_format_bma_controls_store+0x51/0x2e0 [ 96.807149][ T8657] configfs_write_iter+0x302/0x4e0 [ 96.808767][ T8657] vfs_write+0x6af/0x1050 [ 96.810127][ T8657] ? __pfx_configfs_write_iter+0x10/0x10 [ 96.811874][ T8657] ? __pfx_vfs_write+0x10/0x10 [ 96.813372][ T8657] ? find_held_lock+0x2b/0x80 [ 96.814858][ T8657] ksys_write+0x12a/0x250 [ 96.816274][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 96.817803][ T8657] do_syscall_64+0x123/0x790 [ 96.819262][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.821101][ T8657] RIP: 0033:0x7f269319e159 [ 96.822498][ T8657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.828470][ T8657] RSP: 002b:00007f2694053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.831061][ T8657] RAX: ffffffffffffffda RBX: 00007f2693425fa0 RCX: 00007f269319e159 [ 96.833495][ T8657] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 96.835967][ T8657] RBP: 00007f269323506b R08: 0000000000000000 R09: 0000000000000000 [ 96.839174][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.841657][ T8657] R13: 00007f2693426038 R14: 00007f2693425fa0 R15: 00007ffea8c91ad8 [ 96.844134][ T8657] [ 97.475978][ T6024] usb 8-1: USB disconnect, device number 15