last executing test programs: 10.261809692s ago: executing program 2 (id=3825): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000021010000", @ANYRES16=r1, @ANYBLOB="2109000000000400000044000000080003001305b9f5c9263f35f6f9cab5d323f6e5b4880b731e02dab0f986e14ce055f51188887ddffde181417b23f1181135d1df039a35d3c7b2f6bb9282dc097583eeabcdc9a70008d45114860f4f05411e36c6a197bda35e", @ANYRES32=r2, @ANYBLOB="14002380080015001000000005000e0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, 0xffffffffffffffff, 0x26dbf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa40066a6535daf1bc35fb3af1e9197e31d26fa9d073c10184095fb00", 0x13}, 0x48, 0xffffffffffffffff) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r10, 0xc0040d07, &(0x7f0000000040)=0x121) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070605c17cc3e23d250487000100000a0500010007000007ee300ef5fa75e2407f7619829342df031cebd441f9338bd835cdb3566ae850daa631006a"], 0x1c}, 0x1, 0x0, 0x0, 0x20044084}, 0x48810) recvmsg(r11, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r8) 9.128894145s ago: executing program 2 (id=3835): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80740) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d934a818255f1a6e107ab8126a95bc5ca6c83e886edcd9359f2a410d80f9bd2b6ba2afc3f967acba5964fbb935ca84f3a3f35cc07e934efab35f9df9081334886dba02e009df814759e45b6c785ee790bad387110aafc96fe5b0c59b29037f9a4ccaa395d08a14faa853ea9f493848d6508371959fb1525fa4cb329530af8d199c98a8e8194319add13569ba220e15edf697b4b32c269b9ba0a6e74dbe4176181a50b76e4ae83371181595fb3a7d152c53f7b5886830afd6dad96884c1", 0xbd}, {&(0x7f0000000040)='\x00', 0x1}, {&(0x7f0000000240)="309100f4656babdce9739ee731d7b0d7aa9818", 0x13}], 0x3}}], 0x1, 0x4400c800) r7 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0x80984120, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0xfffffff8, 0x4) 7.434249619s ago: executing program 3 (id=3837): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e100", 0x11, 0x11, 0x1, @local, @mcast2, {[], {0x4060, 0xe22, 0x11, 0x0, @opaque="886a6307346ce50cf5"}}}}}}, 0x0) 7.423155057s ago: executing program 4 (id=3839): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xc) 7.338447149s ago: executing program 2 (id=3841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x1], &(0x7f00000002c0), &(0x7f0000000300)}) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000002c0)=0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r6, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xfe00) keyctl$revoke(0x3, r8) ioctl$TCSETS(r5, 0x40045431, 0x0) r9 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r9, 0x4, 0x102400) syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x60, 0x8001}]}}}}}, 0x0) 6.963122313s ago: executing program 3 (id=3843): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = socket$inet(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x1) bind$inet(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpeername$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) accept4(r0, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000600)=0x80, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6.274267566s ago: executing program 2 (id=3844): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x8802, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x64000000, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6.193061309s ago: executing program 4 (id=3845): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x18c6, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000180)=0x8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) close(r0) 5.294017284s ago: executing program 3 (id=3847): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x701, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x549401) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x8000, 0x6) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0), 0x0, 0x4001c00) socket$packet(0x11, 0x3, 0x300) r4 = openat$full(0xffffff9c, &(0x7f0000000440), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r4}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4a8a81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) 4.865524239s ago: executing program 1 (id=3851): socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x500) 4.818116621s ago: executing program 4 (id=3852): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) (async, rerun: 64) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f0000001440)=""/4104, 0x1008}], 0x2, 0x3, 0x8000000, 0x0) (rerun: 64) 4.781510487s ago: executing program 4 (id=3853): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = syz_open_procfs(0x0, &(0x7f0000003c00)='task\x00') fstat(r1, &(0x7f0000004240)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea906d2c8203173bb46f2d23ee787772e35c17223f0f1dfc8faab1a7e7d53b3f1839a3f9ec10e980f3c0e89e808b4641aacc", 0x84}, {&(0x7f0000000400)="6c43a715ebbd318addcd79db30", 0xd}], 0x2}}], 0x1, 0x24040015) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) syz_open_dev$dvb_demux(&(0x7f00000004c0), 0xffffffffffff0bfb, 0x600000) close(r6) close(r5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0xd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000080), &(0x7f0000000180)=r4}, 0x20) 4.751892917s ago: executing program 1 (id=3854): socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440), 0x0, 0x0) 4.611963426s ago: executing program 1 (id=3855): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 4.573861074s ago: executing program 1 (id=3856): ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$unix(0x1, 0x1, 0x0) inotify_init1(0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socket$inet(0x2, 0x80001, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 4.303404516s ago: executing program 3 (id=3857): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x5, 0x12) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x51, 0x0, [{0x0, 0x5, 0x7c9a785c452eff50, 0x0, @adapter={0x100000001, 0xe, 0x69fd, 0x870, 0xb2}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x85, &(0x7f0000000380)={r5, 0x84, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243d"}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xf}}, [0x6, 0x6, 0x7, 0x4, 0x100, 0x761b8a06, 0x3, 0x7, 0x101, 0x5c, 0x54f7, 0x6, 0x7fffffffffffffff, 0xfb]}, &(0x7f0000000180)=0x100) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) ptrace$peek(0x1, r6, &(0x7f0000000040)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r7, 0x0, 0x24004080) msgsnd(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) msgctl$IPC_RMID(0x0, 0x0) 3.696701645s ago: executing program 4 (id=3858): setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0x6, 0x1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_io_uring_setup(0x3b5e, &(0x7f0000000200)={0x0, 0xcb14, 0x2, 0x0, 0x4001bf}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 3.533015244s ago: executing program 2 (id=3859): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000300)={0x43, 0x9, 0x2, {0x7f, 0x7683969c, 0x3, 0xfff, 0x1ff, 0x1000, 0x2, 0x1173, 0x7}}, 0x43) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f000000000004000000240011"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) 3.462613797s ago: executing program 3 (id=3860): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x1d}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 3.461879009s ago: executing program 1 (id=3861): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x141000) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x800, 0x6, '\x00', &(0x7f0000000040)=0x2}) syz_usb_connect$uac3(0x3, 0x89, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000081e040500400001020301090277000301024000080b000101003000193a5fc8035c0d0c7a197168beddb9180904000000010130000a2401000a0008000000090401"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 1.74253069s ago: executing program 2 (id=3862): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "7e00000000000208", "5171bb74cd3660dab9e200", "000024e5", "000200"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bond0\x00', @remote}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)={0x10c, 0x6, 0x0, {0x4, 0x8000000000, 0xe3, 0x0, '/sys/\x06\xc0\xa4\x9eN\x00\x00\x00\x00\x00\x00\x00en\xdf\x00\x00\x00\x00\x80\x00\x01\x00\x00\x00\x00\x00\x8a\xde\xb5\x1a8\xc1T\xcc\xe9|8\x18\xf0\xb5\xb4X0\x92\n%EaFK\xea\xce\x86c9\xff6h\x8c$\xa2,\xc3\xa4\xc9\xf4\xc8\x1f\xa3\xc2wa\x8f\xc5G\xad\x15\x9b\xfd\xcc8G\xefP\xbd*\x98`\xeb]\xde\xd6\xd0W\xd3\x18\x93g\x18]\xe0\xfc\xd0\v{\xf6,\xd6\xa3\xb1\xfc\xbcG8u\x9bH\xb3;\x94\x891It\x0e\x9em\xad\x90\xd2\x92i)1LgS\x8f4z\xa4\xf7\x8f\x16\xeeCS;Kk\xdcE\xe0\x1f\x9b\xa4Y\x85\xd8\x80zS\f\xb7\xf2\xb2|\x88\x1b?\x8e\nu+\xe8\xbf\xdc>\xd5X\xe2\xfdR\xed\xc2\xc8_\xf0\x0f\x7f}\xc4\x91\xca?\x8a\x89x\xce\xd7u\x03\xe5\x88\x90\x9ck1!+|\x18\x82W[\x84\x05/\xccI\xff'}}, 0x10c) (async) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "7e00000000000208", "5171bb74cd3660dab9e200", "000024e5", "000200"}, 0x38) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) (async) dup(r0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bond0\x00', @remote}) (async) 1.657477952s ago: executing program 3 (id=3863): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x3}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES64], &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r5, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000bf674a15ccc736868fdde10acb000000000000000000"], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x30, 0x71, 0x2e, 0x2e, 0x2e, 0x30, 0x30, 0x0, 0x5f]}}, &(0x7f0000000380)=""/126, 0x3c, 0x7e, 0x1}, 0x28) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @ldst={0x0, 0x1, 0x2, 0xb, 0x4, 0x6, 0xfffffffffffffff0}]}, &(0x7f0000000140)='syzkaller\x00', 0xfffff9e2, 0x4, &(0x7f0000000180)=""/4, 0x41100, 0x11, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xe, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r6, r6, r6, r9], &(0x7f0000000580)=[{0x4, 0x4, 0xa, 0x1}, {0x3, 0x5, 0xf, 0xa}, {0x2, 0x5, 0xe, 0xa}, {0x3, 0x1, 0x4, 0x3}, {0x2, 0x5, 0x6, 0xa}, {0x2, 0x2, 0xb}, {0x3, 0x3, 0x5, 0x9}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000004d40), 0x0, 0x2000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000340)=0x1) write(r2, &(0x7f0000000480)="f48068", 0x3) 1.647271825s ago: executing program 0 (id=3864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r4 = timerfd_create(0x9, 0x80800) timerfd_settime(r4, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) io_uring_setup(0x89d, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r7}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r0, @ANYRES32=r6, @ANYRESOCT=r0], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="1800001704006e13070300000000000002eaffffe6854f8044f07bf61b99", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000005000000185400000600000000000000000000009dae0800fcffffff1842000001000000000000000000000018370000010000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x8, 0x2, 0x4}, 0x10, 0x1f311, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[0xffffffffffffffff, r5, r6, 0xffffffffffffffff, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x5, 0x5, 0x7, 0xa}, {0x0, 0x1, 0xa, 0x7}], 0x10, 0x28}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f000095b000/0x3000)=nil, &(0x7f00007ad000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="04000000040ce646b069bd3247000000fe0000008000ce00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.302361309s ago: executing program 0 (id=3865): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x54, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2}, {0x0, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @loopback}}}]}, @CTA_EXPECT_HELP_NAME={0x0, 0x6, 'Q.931\x00'}, @CTA_EXPECT_ID={0x0, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x0, 0x9, 0x1, 0x0, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x4048080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x2000050) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x2f, "99cb2fe4c6c1120542c2b67ad3b292a894f10fb1eb7378853b1c1747d41e54a6fad9ed921ddca2c66cac6929af6bc0"}, &(0x7f0000000340)=0x37) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000a00)={r5, 0xf, 0xf9, "0ea1689404702c882019a6d1fab87778fffc57b8bc380d93beaa47f501238fe49ffd102157a2887bfca2c34add45a651be8bb13948a578e6f3210f500536d524f707217bf1e2ad2f63f7ad9b3d78561712be619149dbd3999bf587089d863ea895ff8781436f78264217f980768e41b7754d0d5776bc229acd7edd697014f0f1d90d54ca70b5c5d24a029ad4a5a53db18a12eb97bd7efded8cd71c3e84011f08252c4953c516d2d65e7c9e38089162254cd20986e006fc286439ccb02821cbe1e71bdd6de274edf42a094099593f3f26dfd5f3684aad7d100159e0de3888f66fa4c2eb2e0395baa0bcc7623a2e3e4b7ec7126e1bd2f2d8625c"}, 0x101) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000040)=0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000400)={0x1000, r1}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0xffffffffffffffa8}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.302103545s ago: executing program 0 (id=3866): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.292412228s ago: executing program 0 (id=3867): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0xfffc, 0x1000}, 0xfffffffffffffdd9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3886dd2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)={0x20, r4, 0x119, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40000000) 1.025959249s ago: executing program 0 (id=3868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioprio_set$pid(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 769.79576ms ago: executing program 4 (id=3869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000080)={0x2, 0x1, 0xa1, 0x101, 0xe, 0x2}) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r4, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) r7 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000340)={0xa, @pix_mp={0x3, 0x8a, 0x31384142, 0x9, 0x6, [{0x4, 0x7c}, {0xef}, {0xfff, 0x8}, {0x2, 0x8}, {0x580, 0x1ff}, {0x5, 0xfffffffc}, {0x6, 0x81}, {0x800, 0x2afa8239}], 0x3, 0xe, 0x8, 0x1, 0x3}}) write$binfmt_register(r5, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2'}, 0x112) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1.090809ms ago: executing program 1 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) 0s ago: executing program 0 (id=3871): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4a0400, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0xd31d}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0x100, 0x6, 0xfffffffffffffffe, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x8, 0x3, 0x1, 0x4000000000200, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) listen(r0, 0x9) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1], 0x0, 0x0, 0x31, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, 0x0, 0x0, 0x0, 0x7fff}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) unshare(0x8000000) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): 4875][T16496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.754408][T16496] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 715.959839][T16509] netlink: 'syz.3.3024': attribute type 10 has an invalid length. [ 715.967699][T16509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3024'. [ 715.982290][T16509] bridge0: port 3(dummy0) entered blocking state [ 715.988924][T16509] bridge0: port 3(dummy0) entered disabled state [ 715.995707][T16509] dummy0: entered allmulticast mode [ 716.002335][T16509] dummy0: entered promiscuous mode [ 716.075326][T12326] bridge_slave_1: left allmulticast mode [ 716.103533][T12326] bridge_slave_1: left promiscuous mode [ 716.115883][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.153646][T12326] bridge_slave_0: left allmulticast mode [ 716.168837][T12326] bridge_slave_0: left promiscuous mode [ 716.177631][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.397799][T16503] syz.4.3023 (16503): drop_caches: 2 [ 716.955736][T12326] pimreg: left allmulticast mode [ 719.160889][T16548] IPVS: dh: FWM 3 0x00000003 - no destination available [ 719.537757][T16327] IPVS: starting estimator thread 0... [ 720.277431][T16551] IPVS: using max 42 ests per chain, 100800 per kthread [ 720.791304][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3038'. [ 720.888070][T12326] bond10 (unregistering): (slave bridge1): Releasing backup interface [ 720.896298][T12326] bridge1 (unregistering): left promiscuous mode [ 720.902715][T12326] bridge1 (unregistering): left allmulticast mode [ 720.951173][T16557] block nbd1: shutting down sockets [ 721.007111][T12326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.019660][ T30] audit: type=1400 audit(1780040475.267:1334): avc: denied { mounton } for pid=16558 comm="syz.1.3039" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 721.024119][T16559] NILFS (loop1): device size too small [ 721.060588][T12326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.075696][T12326] bond0 (unregistering): (slave team0): Releasing backup interface [ 721.089178][T12326] bond0 (unregistering): Released all slaves [ 721.108360][T12326] bond1 (unregistering): Released all slaves [ 721.123905][T12326] bond2 (unregistering): Released all slaves [ 721.140050][T12326] bond3 (unregistering): Released all slaves [ 721.155643][T12326] bond4 (unregistering): Released all slaves [ 721.179279][T12326] bond5 (unregistering): Released all slaves [ 721.196946][T12326] bond6 (unregistering): Released all slaves [ 721.215457][T12326] bond7 (unregistering): Released all slaves [ 721.229867][T12326] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 721.242461][T12326] bond8 (unregistering): Released all slaves [ 721.261550][T12326] bond9 (unregistering): Released all slaves [ 721.280437][T12326] bond10 (unregistering): Released all slaves [ 721.295765][T12326] bond11 (unregistering): Released all slaves [ 721.309371][T16516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 721.330928][T16327] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 721.350521][T16527] macsec1: entered promiscuous mode [ 721.372317][T16527] bridge0: entered promiscuous mode [ 721.413522][T16547] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 721.561058][T16327] usb 2-1: device descriptor read/64, error -71 [ 721.674872][T12326] : left promiscuous mode [ 722.401897][T16327] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 722.572191][T16573] ceph: No mds server is up or the cluster is laggy [ 722.805025][T16327] usb 2-1: device descriptor read/64, error -71 [ 722.951097][T16327] usb usb2-port1: attempt power cycle [ 723.111616][T16589] 9p: Bad value for 'rfdno' [ 723.156373][T12326] tipc: Left network mode [ 723.320783][T16327] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 723.369669][T16327] usb 2-1: device descriptor read/8, error -71 [ 723.730765][T16327] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 723.760653][T16604] tmpfs: Unknown parameter '¬ÖûÑÎ' [ 723.767054][T16604] overlay: Unknown parameter 'fsuuid' [ 723.773796][T16604] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 723.774169][T16327] usb 2-1: device descriptor read/8, error -71 [ 723.783877][ T30] audit: type=1400 audit(1780040478.037:1335): avc: denied { relabelto } for pid=16603 comm="syz.4.3051" name="file1" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 723.784148][ T30] audit: type=1400 audit(1780040478.037:1336): avc: denied { associate } for pid=16603 comm="syz.4.3051" name="file1" dev="tmpfs" ino=288 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hostname_exec_t:s0" [ 723.798899][ T30] audit: type=1400 audit(1780040478.047:1337): avc: denied { rmdir } for pid=14861 comm="syz-executor" name="file1" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 723.950793][T16327] usb usb2-port1: unable to enumerate USB device [ 724.116482][T16615] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 724.142974][T16622] IPVS: set_ctl: invalid protocol: 94 172.20.20.13:17956 [ 724.223731][T16628] IPVS: dh: FWM 3 0x00000003 - no destination available [ 725.326924][T16629] ceph: No mds server is up or the cluster is laggy [ 725.678526][ T30] audit: type=1400 audit(1780040479.927:1338): avc: denied { ioctl } for pid=16637 comm="syz.4.3061" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x583f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 725.926353][T16655] xt_hashlimit: size too large, truncated to 1048576 [ 726.094356][T16666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 726.372548][T12326] hsr_slave_0: left promiscuous mode [ 726.379025][T12326] hsr_slave_1: left promiscuous mode [ 726.384964][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.393098][T12326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.459551][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.466971][T12326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.480933][T12326] veth0_to_batadv: left allmulticast mode [ 726.486710][T12326] veth0_to_batadv: left promiscuous mode [ 726.492428][T12326] veth1_macvtap: left promiscuous mode [ 726.497902][T12326] veth0_macvtap: left promiscuous mode [ 726.503444][T12326] veth1_vlan: left promiscuous mode [ 726.508716][T12326] veth0_vlan: left promiscuous mode [ 727.076877][ T804] libceph: connect (1)[c::]:6789 error -101 [ 727.083072][ T804] libceph: mon0 (1)[c::]:6789 connect error [ 727.160413][T12326] pim6reg (unregistering): left allmulticast mode [ 727.277338][T16674] ceph: No mds server is up or the cluster is laggy [ 727.451175][ T30] audit: type=1400 audit(1780040481.687:1339): avc: denied { append } for pid=16680 comm="syz.4.3073" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 727.717085][T16686] random: crng reseeded on system resumption [ 727.721531][ T30] audit: type=1400 audit(1780040481.957:1340): avc: denied { write } for pid=16680 comm="syz.4.3073" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 727.747403][T12326] team0 (unregistering): Port device team_slave_1 removed [ 727.750107][ T30] audit: type=1400 audit(1780040481.957:1341): avc: denied { open } for pid=16680 comm="syz.4.3073" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 727.806976][T12326] team0 (unregistering): Port device team_slave_0 removed [ 728.523080][T16704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 728.600928][T16709] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3083'. [ 729.453021][T12326] IPVS: stop unused estimator thread 0... [ 729.839001][T16741] fuse: fd is not a fuse device [ 730.230886][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 730.475671][ T24] IPVS: starting estimator thread 0... [ 730.491408][T16750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'. [ 730.640789][T16754] IPVS: using max 39 ests per chain, 93600 per kthread [ 730.665512][T16752] syzkaller0: entered promiscuous mode [ 730.671317][T16752] syzkaller0: entered allmulticast mode [ 732.140465][T16764] overlayfs: failed lookup in lower (newroot/34, name='file0', err=-40): overlapping layers [ 732.766563][T16761] overlayfs: failed lookup in lower (newroot/34, name='bus', err=-40): overlapping layers [ 732.780823][T16761] overlayfs: failed lookup in lower (newroot/34, name='bus', err=-40): overlapping layers [ 732.816557][T16774] tmpfs: Unknown parameter 'hugštòaysœz‚ .‹ÀŸøÀY¢õm07„#no ;MxV²Å8ÉG—0½E^îbs ω‹Ò{f3E' [ 732.969243][T16780] batadv_slave_1: entered promiscuous mode [ 733.146517][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 733.476095][T16789] gretap0: entered promiscuous mode [ 733.583124][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 733.730915][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 733.745900][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.770200][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 733.813714][T16779] batadv_slave_1: left promiscuous mode [ 734.489881][ T24] pvrusb2: ********** [ 734.494755][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 734.508747][ T24] pvrusb2: Important functionality might not be entirely working. [ 734.517934][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 734.532453][ T24] pvrusb2: ********** [ 734.571011][ T2357] pvrusb2: Invalid write control endpoint [ 734.578002][ T24] usb 2-1: USB disconnect, device number 16 [ 734.605225][T16806] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3109'. [ 734.628099][ T30] audit: type=1326 audit(1780040488.877:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 734.691539][ T30] audit: type=1326 audit(1780040488.877:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 734.733776][ T2357] pvrusb2: Invalid write control endpoint [ 734.745961][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 734.755264][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 734.762809][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 734.772787][ T2357] pvrusb2: Device being rendered inoperable [ 734.780541][ T2357] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 734.896582][T16808] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 734.906249][ T30] audit: type=1326 audit(1780040488.877:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.497044][ T2357] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 735.498285][ T30] audit: type=1326 audit(1780040488.877:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.545755][ T2357] pvrusb2: Attached sub-driver cx25840 [ 735.638778][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 735.648872][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 735.666757][ T30] audit: type=1326 audit(1780040488.877:1346): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.774178][ T30] audit: type=1326 audit(1780040488.877:1347): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.808983][ T30] audit: type=1326 audit(1780040488.877:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.837377][ T30] audit: type=1326 audit(1780040488.877:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.869769][T16825] atomic_op ffff888067392998 conn xmit_atomic 0000000000000000 [ 735.875692][T16827] netlink: 'syz.3.3117': attribute type 23 has an invalid length. [ 735.902273][ T30] audit: type=1326 audit(1780040488.877:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.4.3109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5a5719ce59 code=0x7ffc0000 [ 735.972391][ T30] audit: type=1326 audit(1780040490.227:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16831 comm="syz.2.3119" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7733b9ce59 code=0x7ffc0000 [ 736.193672][T16832] lo speed is unknown, defaulting to 1000 [ 736.204188][T16832] wg1 speed is unknown, defaulting to 1000 [ 738.287871][T16875] overlayfs: missing 'lowerdir' [ 738.612785][T13182] Bluetooth: hci5: command 0x0406 tx timeout [ 738.789274][T16889] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3131'. [ 738.811803][T16891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.833108][T16889] 0·: renamed from hsr0 (while UP) [ 738.840619][T16889] 0·: entered allmulticast mode [ 738.845533][T16889] hsr_slave_0: entered allmulticast mode [ 738.872267][T16889] hsr_slave_1: entered allmulticast mode [ 738.888397][T16889] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 738.941292][T16891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.326252][T16909] o2cb: This node has not been configured. [ 739.332843][T16909] o2cb: Cluster check failed. Fix errors before retrying. [ 739.340271][T16909] (syz.2.3136,16909,1):user_dlm_register:674 ERROR: status = -22 [ 739.348377][T16909] (syz.2.3136,16909,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 739.557339][T16891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.586444][T16913] openvswitch: netlink: Missing valid actions attribute. [ 739.612008][T16913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.256078][T16891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.500409][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.530718][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.634478][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.382386][T12327] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.859544][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 744.859588][ T30] audit: type=1400 audit(1780040499.107:1651): avc: denied { write } for pid=16945 comm="syz.0.3147" name="/" dev="ocfs2_dlmfs" ino=45382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 744.891090][T16946] o2cb: This node has not been configured. [ 744.896900][T16946] o2cb: Cluster check failed. Fix errors before retrying. [ 744.909570][T16946] (syz.0.3147,16946,1):user_dlm_register:674 ERROR: status = -22 [ 744.920159][T16946] (syz.0.3147,16946,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 744.973083][T16958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3150'. [ 745.011689][T16958] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3150'. [ 745.022519][T16958] netlink: 'syz.4.3150': attribute type 5 has an invalid length. [ 745.033627][T16958] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3150'. [ 745.079306][T16961] o2cb: This node has not been configured. [ 745.085447][T16961] o2cb: Cluster check failed. Fix errors before retrying. [ 745.092877][T16961] (syz.3.3152,16961,1):user_dlm_register:674 ERROR: status = -22 [ 745.101134][T16961] (syz.3.3152,16961,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 745.119679][ T30] audit: type=1400 audit(1780040499.327:1652): avc: denied { write } for pid=16959 comm="syz.3.3152" name="/" dev="ocfs2_dlmfs" ino=45464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 746.355524][T16974] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.363179][T16974] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.370741][ T29] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 746.445137][T16974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.459393][T16974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.957959][ T30] audit: type=1400 audit(1780040501.207:1653): avc: denied { ioctl } for pid=16950 comm="syz.4.3150" path="socket:[45466]" dev="sockfs" ino=45466 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 747.067199][T12330] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.076219][T12330] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.091431][T12330] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.102564][T12330] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.280324][ T29] usb 5-1: too many configurations: 165, using maximum allowed: 8 [ 748.295297][T17010] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 748.339334][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 748.373019][ T29] usb 5-1: can't read configurations, error -71 [ 750.016992][T17035] netlink: 'syz.0.3175': attribute type 1 has an invalid length. [ 751.285979][T17040] siw: device registration error -23 [ 751.403933][T17048] fuse: Bad value for 'fd' [ 751.493325][T17048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3176'. [ 751.887287][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.893843][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.920788][ T29] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 752.070812][ T29] usb 5-1: device descriptor read/64, error -71 [ 752.330865][ T29] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 752.501745][ T29] usb 5-1: device descriptor read/64, error -71 [ 752.621231][ T29] usb usb5-port1: attempt power cycle [ 752.712193][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3190'. [ 752.815834][T17094] overlay: ./file0 is not a directory [ 752.867245][T17097] fuse: fd is not a fuse device [ 752.990827][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 753.022847][ T29] usb 5-1: device descriptor read/8, error -71 [ 753.040804][T16327] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 753.090505][ T5618] Bluetooth: hci1: unexpected event for opcode 0x2a00 [ 753.214308][T16327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 753.231257][T16327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.266067][T16327] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 753.298677][T16327] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.331335][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 753.348762][T16327] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 753.370259][ T29] usb 5-1: device descriptor read/8, error -71 [ 753.380157][T16327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.395823][T16327] usb 2-1: Product: syz [ 753.406920][T16327] usb 2-1: Manufacturer: syz [ 753.416224][T16327] usb 2-1: SerialNumber: syz [ 753.561266][ T29] usb usb5-port1: unable to enumerate USB device [ 753.896269][T16327] usb 2-1: USB disconnect, device number 17 [ 754.148865][T17114] udevd[17114]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.899253][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'. [ 755.640661][T17149] IPVS: dh: FWM 3 0x00000003 - no destination available [ 755.791318][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3209'. [ 756.849604][T17167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17167 comm=syz.2.3214 [ 756.907771][T17167] 9pnet_virtio: no channels available for device syz [ 757.519509][ T5618] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 757.530981][ T5618] Bluetooth: hci1: Injecting HCI hardware error event [ 757.547030][T13182] Bluetooth: hci1: hardware error 0x00 [ 757.573147][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 758.122911][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 758.158454][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.182116][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 758.201006][ T29] usb 2-1: can't read configurations, error -61 [ 758.407049][ T29] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 758.898194][T17181] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 758.962744][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 758.973792][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 758.989019][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 759.001977][ T29] usb 2-1: can't read configurations, error -61 [ 759.013401][ T29] usb usb2-port1: attempt power cycle [ 759.290685][T16327] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 759.315442][T17197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3225'. [ 759.375374][T17197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17197 comm=syz.0.3225 [ 759.407685][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 759.440848][ T29] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 759.451955][T16327] usb 5-1: Using ep0 maxpacket: 8 [ 759.459904][T16327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 759.470773][T16327] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 759.471655][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 759.483001][T16327] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 759.502659][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 759.514849][T17202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17202 comm=syz.0.3225 [ 759.516764][T16327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.538147][T16327] usb 5-1: Product: syz [ 759.540235][ T30] audit: type=1400 audit(1780040513.787:1654): avc: denied { mount } for pid=17196 comm="syz.0.3225" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 759.544598][T16327] usb 5-1: Manufacturer: syz [ 759.577250][T16327] usb 5-1: SerialNumber: syz [ 759.589181][ T29] usb 2-1: device descriptor read/all, error -71 [ 759.590353][T16327] usb 5-1: config 0 descriptor?? [ 759.852808][T13182] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 760.135607][T16327] usb 5-1: USB disconnect, device number 25 [ 760.404605][T16324] IPVS: starting estimator thread 0... [ 760.531601][T17227] IPVS: using max 46 ests per chain, 110400 per kthread [ 762.012097][T17250] lo speed is unknown, defaulting to 1000 [ 762.344058][T17250] wg1 speed is unknown, defaulting to 1000 [ 762.419822][T13182] Bluetooth: hci4: ACL packet too small [ 764.193428][ T30] audit: type=1400 audit(1780040518.307:1655): avc: denied { shutdown } for pid=17257 comm="syz.4.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 764.338619][T17283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.340294][T17283] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.343306][T17283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.597124][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'. [ 764.597158][T17289] netlink: 'syz.1.3253': attribute type 30 has an invalid length. [ 764.597192][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'. [ 765.473125][T17280] ceph: No mds server is up or the cluster is laggy [ 765.484122][T17283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.493152][T17283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.504181][T17283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 765.514945][T17283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.531710][T17283] veth1_macvtap: left promiscuous mode [ 765.538170][T17283] veth0_macvtap: left promiscuous mode [ 765.547245][T17283] veth0_macvtap: entered promiscuous mode [ 765.556458][T17283] veth1_macvtap: entered promiscuous mode [ 765.567945][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.576071][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.584156][T17283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 765.596071][T17283] veth0_to_team: entered promiscuous mode [ 765.602539][T17283] macsec1: left promiscuous mode [ 765.611206][ T29] libceph: connect (1)[c::]:6789 error -101 [ 765.613216][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.617287][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 765.624279][ T6967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.669367][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.676541][ T6967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.773279][T17292] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 765.798748][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.909497][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 766.022627][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.130231][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 766.241719][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.363678][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 766.497229][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.519692][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 766.627368][T17309] o2cb: This node has not been configured. [ 766.627435][ T30] audit: type=1400 audit(1780040520.877:1656): avc: denied { write } for pid=17305 comm="syz.1.3256" name="/" dev="ocfs2_dlmfs" ino=47145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.781265][T17309] o2cb: Cluster check failed. Fix errors before retrying. [ 766.815468][T17309] (syz.1.3256,17309,1):user_dlm_register:674 ERROR: status = -22 [ 766.836046][T17309] (syz.1.3256,17309,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 767.021155][T17314] kAFS: unparsable volume name [ 767.032270][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 767.071386][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 767.866026][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3259'. [ 769.617315][T17312] input: syz0 as /devices/virtual/input/input18 [ 772.058661][T17331] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.065981][T17331] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.133807][T17345] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 772.746859][T17365] netlink: 'syz.2.3271': attribute type 13 has an invalid length. [ 772.798277][ T30] audit: type=1400 audit(1780040527.047:1657): avc: denied { write } for pid=17339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.839301][T17365] gretap0: refused to change device tx_queue_len [ 772.912489][T17365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 772.942524][ T30] audit: type=1400 audit(1780040527.187:1658): avc: denied { write } for pid=17368 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.500366][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 774.785105][T17391] o2cb: This node has not been configured. [ 774.790913][T17391] o2cb: Cluster check failed. Fix errors before retrying. [ 774.802689][T17391] (syz.4.3270,17391,1):user_dlm_register:674 ERROR: status = -22 [ 774.810886][T17391] (syz.4.3270,17391,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 774.821388][ T30] audit: type=1400 audit(1780040529.037:1659): avc: denied { write } for pid=17387 comm="syz.4.3270" name="/" dev="ocfs2_dlmfs" ino=45895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 774.939683][T17402] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 776.443298][T16327] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 776.447404][T13182] Bluetooth: hci2: command 0x0406 tx timeout [ 776.456399][T16327] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 776.597436][T17412] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 776.753900][ T30] audit: type=1400 audit(1780040530.997:1660): avc: denied { write } for pid=17373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.174330][ T30] audit: type=1400 audit(1780040531.247:1661): avc: denied { write } for pid=17425 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.185631][T17438] trusted_key: encrypted_key: insufficient parameters specified [ 779.029841][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3289'. [ 779.178713][T17433] netlink: 'syz.3.3289': attribute type 9 has an invalid length. [ 779.294136][T17445] o2cb: This node has not been configured. [ 779.300195][T17445] o2cb: Cluster check failed. Fix errors before retrying. [ 779.308164][T17445] (syz.1.3282,17445,1):user_dlm_register:674 ERROR: status = -22 [ 779.317015][T17445] (syz.1.3282,17445,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 779.332474][ T30] audit: type=1400 audit(1780040533.547:1662): avc: denied { write } for pid=17444 comm="syz.1.3282" name="/" dev="ocfs2_dlmfs" ino=45928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.345188][T17449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3291'. [ 779.420278][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.576971][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.690815][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 779.800469][T16328] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 779.849100][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.006019][ T30] audit: type=1400 audit(1780040534.177:1663): avc: denied { write } for pid=17439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.102066][T17472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 780.368572][T16328] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 780.409969][T16328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.418713][ T30] audit: type=1400 audit(1780040534.667:1664): avc: denied { write } for pid=17480 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.446000][T16328] usb 2-1: Product: syz [ 780.471297][T16328] usb 2-1: Manufacturer: syz [ 780.475942][T16328] usb 2-1: SerialNumber: syz [ 780.484281][T16328] usb 2-1: config 0 descriptor?? [ 780.502818][T16325] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 780.722752][T16328] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 780.828284][T16325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.854441][T16325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.894651][T16325] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 780.918206][T16325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.125130][T16325] usb 5-1: config 0 descriptor?? [ 781.187807][T17497] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 781.241380][T13182] Bluetooth: hci5: command 0x0406 tx timeout [ 781.253853][T16327] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 781.277845][T16327] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 781.692757][T17475] xt_connbytes: Forcing CT accounting to be enabled [ 781.710880][T17475] set match dimension is over the limit! [ 781.823510][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3305'. [ 781.830791][ T30] audit: type=1400 audit(1780040536.077:1665): avc: denied { write } for pid=17487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.100051][ T30] audit: type=1400 audit(1780040536.347:1666): avc: denied { write } for pid=17522 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.333953][T16328] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 782.380431][T16328] usb 2-1: USB disconnect, device number 22 [ 782.921928][ T30] audit: type=1400 audit(1780040537.177:1667): avc: denied { write } for pid=17528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.078511][T17545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=160 sclass=netlink_route_socket pid=17545 comm=syz.2.3309 [ 783.137364][T17545] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3309'. [ 783.197834][T17545] 9p: Bad value for 'rfdno' [ 783.309937][ T30] audit: type=1400 audit(1780040537.547:1668): avc: denied { write } for pid=17550 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.347257][T17557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 783.510871][T13182] Bluetooth: hci0: command 0x0406 tx timeout [ 783.571314][T16327] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 783.594362][T16327] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 784.501524][T17572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.510269][T17572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.269285][T17588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3321'. [ 785.493602][T17588] bond8: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 786.526193][T17588] bond8 (unregistering): Released all slaves [ 787.020411][T16325] usbhid 5-1:0.0: can't add hid device: -32 [ 787.028832][T16325] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 787.271968][ T30] audit: type=1400 audit(1780040541.527:1669): avc: denied { write } for pid=17567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.320725][T13182] Bluetooth: hci4: command 0x0c1a tx timeout [ 787.328913][T16327] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 787.342205][T16327] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 787.533578][ T30] audit: type=1400 audit(1780040541.787:1670): avc: denied { write } for pid=17612 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.571269][T17618] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 787.767523][T17621] overlayfs: failed to clone upperpath [ 788.927293][T17626] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 789.504137][T17647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3335'. [ 789.848195][T17655] Device name cannot be null; rc = [-22] [ 790.244686][T17659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3338'. [ 790.529464][T17650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.919855][T17667] IPVS: rr: FWM 3 0x00000003 - no destination available [ 791.904117][T17650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.116982][T17674] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 792.279825][ T30] audit: type=1400 audit(1780040546.527:1671): avc: denied { write } for pid=17680 comm="syz.1.3344" name="/" dev="ocfs2_dlmfs" ino=47921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 792.344695][T17682] o2cb: This node has not been configured. [ 792.351869][T17682] o2cb: Cluster check failed. Fix errors before retrying. [ 792.359279][T17682] (syz.1.3344,17682,0):user_dlm_register:674 ERROR: status = -22 [ 792.373389][T17682] (syz.1.3344,17682,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 792.620201][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3345'. [ 792.666814][T17650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.832121][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3349'. [ 792.966826][T17650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.233505][ T3391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.253923][T17710] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 793.661584][T12327] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.689142][T12327] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.972649][ T3391] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.418868][T17741] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 794.767499][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'. [ 795.215870][ T30] audit: type=1400 audit(1780040549.457:1672): avc: denied { ioctl } for pid=17760 comm="syz.1.3370" path="socket:[49156]" dev="sockfs" ino=49156 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 795.781088][T17769] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=17769 comm=syz.3.3372 [ 795.874249][ T30] audit: type=1400 audit(1780040550.127:1673): avc: denied { listen } for pid=17773 comm="syz.0.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 795.926355][T17778] netlink: 'syz.0.3374': attribute type 2 has an invalid length. [ 795.944609][ T30] audit: type=1400 audit(1780040550.127:1674): avc: denied { accept } for pid=17773 comm="syz.0.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 796.009621][T17778] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3374'. [ 796.115178][ T30] audit: type=1400 audit(1780040550.367:1675): avc: denied { map } for pid=17785 comm="syz.4.3378" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 798.166807][T17812] overlayfs: failed to clone lowerpath [ 798.201872][T17808] overlayfs: failed to clone lowerpath [ 799.081986][T17823] overlay: ./file0 is not a directory [ 799.171905][T17828] binder: 17826:17828 unknown command 1074553621 [ 799.185474][T17828] binder: 17826:17828 ioctl c0306201 2000000001c0 returned -22 [ 799.246324][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3379'. [ 799.276468][T17817] openvswitch: netlink: Key 11 has unexpected len 4 expected 2 [ 799.512159][T17830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.892091][ T30] audit: type=1400 audit(1780040554.147:1676): avc: denied { accept } for pid=17837 comm="syz.2.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 800.388110][ T30] audit: type=1400 audit(1780040554.637:1677): avc: denied { map } for pid=17842 comm="syz.4.3392" path="socket:[49283]" dev="sockfs" ino=49283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 800.635201][T17875] overlayfs: empty lowerdir [ 802.188875][T17900] 9p: Bad value for 'rfdno' [ 804.233723][T17922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3407'. [ 804.568979][ T30] audit: type=1400 audit(1780040558.817:1678): avc: denied { getopt } for pid=17913 comm="syz.4.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 804.838828][T17935] bridge_slave_0 (unregistering): left allmulticast mode [ 804.846622][T17935] bridge_slave_0 (unregistering): left promiscuous mode [ 804.853997][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.897883][T17933] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 805.903868][T17955] syzkaller0: entered promiscuous mode [ 805.910134][T17955] syzkaller0: entered allmulticast mode [ 806.354045][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 806.366227][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 806.377379][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 806.390519][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 806.411218][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.472700][T13182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 806.493666][T13182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 806.510833][T13182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 806.521732][T13182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 806.531317][T13182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 808.619863][ T5618] Bluetooth: hci3: command tx timeout [ 808.867514][T17998] o2cb: This node has not been configured. [ 808.873593][T17998] o2cb: Cluster check failed. Fix errors before retrying. [ 808.881049][T17998] (syz.0.3423,17998,1):user_dlm_register:674 ERROR: status = -22 [ 808.889124][T17998] (syz.0.3423,17998,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 808.922328][ T30] audit: type=1400 audit(1780040563.117:1679): avc: denied { write } for pid=17997 comm="syz.0.3423" name="/" dev="ocfs2_dlmfs" ino=48613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 809.807520][T18006] ipt_REJECT: TCP_RESET invalid for non-tcp [ 810.250481][T18018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3429'. [ 810.653896][T16324] libceph: connect (1)[c::]:6789 error -101 [ 810.659986][T16324] libceph: mon0 (1)[c::]:6789 connect error [ 810.761019][ T5618] Bluetooth: hci3: command tx timeout [ 810.922844][T16327] libceph: connect (1)[c::]:6789 error -101 [ 810.929102][T16327] libceph: mon0 (1)[c::]:6789 connect error [ 810.952810][T18020] ceph: No mds server is up or the cluster is laggy [ 812.850764][ T5618] Bluetooth: hci3: command tx timeout [ 813.086830][ T30] audit: type=1400 audit(1780040567.327:1680): avc: denied { read write } for pid=18031 comm="syz.1.3431" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 813.372925][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.385060][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.446166][ T30] audit: type=1400 audit(1780040567.327:1681): avc: denied { open } for pid=18031 comm="syz.1.3431" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 813.507095][ T30] audit: type=1400 audit(1780040567.327:1682): avc: denied { ioctl } for pid=18031 comm="syz.1.3431" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 813.590321][ T30] audit: type=1400 audit(1780040567.687:1683): avc: denied { create } for pid=18035 comm="syz.4.3432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 813.748653][T18043] o2cb: This node has not been configured. [ 813.754841][T18043] o2cb: Cluster check failed. Fix errors before retrying. [ 813.762316][T18043] (syz.0.3433,18043,1):user_dlm_register:674 ERROR: status = -22 [ 813.770329][T18043] (syz.0.3433,18043,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 813.805650][ T30] audit: type=1400 audit(1780040567.997:1684): avc: denied { write } for pid=18042 comm="syz.0.3433" name="/" dev="ocfs2_dlmfs" ino=48723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 814.074749][T18051] netlink: 'syz.2.3435': attribute type 2 has an invalid length. [ 814.921288][ T5618] Bluetooth: hci3: command tx timeout [ 815.159419][T18062] fuse: Bad value for 'fd' [ 815.407362][T18045] lo speed is unknown, defaulting to 1000 [ 815.655669][T18045] wg1 speed is unknown, defaulting to 1000 [ 815.904279][ T30] audit: type=1400 audit(1780040570.157:1685): avc: denied { create } for pid=18082 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 815.929989][ T30] audit: type=1400 audit(1780040570.177:1686): avc: denied { connect } for pid=18082 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 816.423336][T18087] o2cb: This node has not been configured. [ 816.429461][T18087] o2cb: Cluster check failed. Fix errors before retrying. [ 816.437360][T18087] (syz.2.3446,18087,1):user_dlm_register:674 ERROR: status = -22 [ 816.445782][T18087] (syz.2.3446,18087,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 816.458168][ T30] audit: type=1400 audit(1780040570.677:1687): avc: denied { write } for pid=18086 comm="syz.2.3446" name="/" dev="ocfs2_dlmfs" ino=48810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 816.536086][T17980] lo speed is unknown, defaulting to 1000 [ 816.552864][T17980] wg1 speed is unknown, defaulting to 1000 [ 817.029718][ T30] audit: type=1800 audit(1780040571.277:1688): pid=18095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3449" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 817.273409][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3450'. [ 817.598368][T17980] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.615198][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3451'. [ 817.624731][T17980] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.642995][T17980] bridge_slave_0: entered allmulticast mode [ 817.658647][T17980] bridge_slave_0: entered promiscuous mode [ 817.679171][T17980] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.699179][T17980] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.718388][T17980] bridge_slave_1: entered allmulticast mode [ 817.739502][T17980] bridge_slave_1: entered promiscuous mode [ 817.813157][T17980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.845499][T17980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.957103][T17980] team0: Port device team_slave_0 added [ 817.983845][T17980] team0: Port device team_slave_1 added [ 818.011504][T17980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.026389][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.031559][ T30] audit: type=1400 audit(1780040572.277:1689): avc: denied { accept } for pid=18118 comm="syz.1.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 818.325785][T17980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.360808][T17980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.368561][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.394598][T17980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.113861][T17980] hsr_slave_0: entered promiscuous mode [ 819.120270][T17980] hsr_slave_1: entered promiscuous mode [ 819.257917][T17980] debugfs: 'hsr0' already exists in 'hsr' [ 819.287844][T17980] Cannot create hsr debugfs directory [ 819.508202][ T29] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 819.754401][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 819.777366][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.813942][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 819.834155][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.134506][T17980] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.144648][T17980] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.345981][ T29] usb 2-1: usb_control_msg returned -32 [ 820.412864][ T29] usbtmc 2-1:16.0: can't read capabilities [ 820.564765][T17980] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.587591][T17980] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.615796][T18151] misc userio: Begin command sent, but we're already running [ 820.743193][T17980] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.753561][T17980] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.883886][T17980] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.894113][T17980] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.004688][T18157] o2cb: This node has not been configured. [ 821.084070][ T30] audit: type=1400 audit(1780040575.257:1690): avc: denied { write } for pid=18155 comm="syz.4.3464" name="/" dev="ocfs2_dlmfs" ino=49774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 821.085663][T18157] o2cb: Cluster check failed. Fix errors before retrying. [ 821.115686][T18157] (syz.4.3464,18157,0):user_dlm_register:674 ERROR: status = -22 [ 821.123603][T18157] (syz.4.3464,18157,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 821.986832][T17980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 822.000161][T17980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.008159][T17980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.017546][T17980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.025629][T17980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.035912][T17980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.057769][T17980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.067695][T17980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.146232][T18172] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3466'. [ 822.501582][ T30] audit: type=1400 audit(1780040576.507:1691): avc: denied { append } for pid=18170 comm="syz.4.3469" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 822.547097][ T5821] usb 2-1: USB disconnect, device number 23 [ 822.745909][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3471'. [ 822.772519][T17980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.807425][T17980] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.846237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.853439][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.902208][ T3391] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.909974][ T3391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.958776][ T30] audit: type=1400 audit(1780040577.207:1692): avc: denied { setattr } for pid=18189 comm="syz.0.3474" name="NETLINK" dev="sockfs" ino=50282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 823.174436][ T30] audit: type=1400 audit(1780040577.427:1693): avc: denied { write } for pid=18197 comm="syz.1.3476" name="/" dev="ocfs2_dlmfs" ino=49874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 823.180541][T18200] o2cb: This node has not been configured. [ 823.204140][T18200] o2cb: Cluster check failed. Fix errors before retrying. [ 823.212243][T18200] (syz.1.3476,18200,0):user_dlm_register:674 ERROR: status = -22 [ 823.220074][T18200] (syz.1.3476,18200,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 823.864510][T18190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.876338][T18190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.314612][T18190] gretap1: left promiscuous mode [ 824.328683][ T30] audit: type=1400 audit(1780040578.577:1694): avc: denied { mount } for pid=18215 comm="syz.1.3482" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 824.393998][T12330] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.404156][T12330] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.611756][T18208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.744343][T12330] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.761149][T12330] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.160128][T18208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.251398][T18234] o2cb: This node has not been configured. [ 825.257217][T18234] o2cb: Cluster check failed. Fix errors before retrying. [ 825.264312][T18234] (syz.0.3486,18234,1):user_dlm_register:674 ERROR: status = -22 [ 825.276863][T18234] (syz.0.3486,18234,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 825.296584][ T30] audit: type=1400 audit(1780040579.507:1695): avc: denied { write } for pid=18233 comm="syz.0.3486" name="/" dev="ocfs2_dlmfs" ino=50422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 825.389755][T18236] bridge_slave_0: left allmulticast mode [ 825.396232][T18236] bridge_slave_0: left promiscuous mode [ 825.405670][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.415832][T18236] bridge_slave_1: left allmulticast mode [ 825.421509][T18236] bridge_slave_1: left promiscuous mode [ 825.427275][T18236] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.445993][T18236] bond0: (slave bond_slave_0): Releasing backup interface [ 825.466534][T18236] bond0: (slave bond_slave_1): Releasing backup interface [ 825.487192][T18236] team0: Port device team_slave_0 removed [ 825.500145][T18236] team0: Port device team_slave_1 removed [ 825.515838][T18236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.523286][T18236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.531487][T18236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.538880][T18236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.554603][T18236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 825.656689][T18208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.672364][T18249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18249 comm=syz.1.3492 [ 825.981159][T18256] ufs: You didn't specify the type of your ufs filesystem [ 825.981159][T18256] [ 825.981159][T18256] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 825.981159][T18256] [ 825.981159][T18256] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 826.016394][T18256] ufs: ufstype=old is supported read-only [ 826.031267][T18256] ufs: ufs_fill_super(): bad magic number [ 826.184853][T18208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.371468][ T29] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 826.463849][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.523560][T17980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.541836][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.571898][ T3391] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.604606][ T3391] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.652459][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 826.685531][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 826.695070][T17980] veth0_vlan: entered promiscuous mode [ 826.722954][T17980] veth1_vlan: entered promiscuous mode [ 826.743141][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.772894][ T29] usb 2-1: Product: syz [ 826.787305][ T29] usb 2-1: Manufacturer: syz [ 826.807994][ T29] usb 2-1: SerialNumber: syz [ 826.831685][T17980] veth0_macvtap: entered promiscuous mode [ 826.890487][T17980] veth1_macvtap: entered promiscuous mode [ 826.925458][T17980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.953323][T17980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.990097][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.020212][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.094522][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.164251][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.279556][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.287396][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.493536][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.513135][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.664368][T18270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.771565][T18273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3419'. [ 828.665268][ T29] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 828.711892][T18286] netlink: 'syz.4.3503': attribute type 12 has an invalid length. [ 828.734061][T18286] syzkaller1: entered promiscuous mode [ 828.739555][T18286] syzkaller1: entered allmulticast mode [ 828.767265][ T29] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 828.958461][ T29] usb 2-1: USB disconnect, device number 24 [ 829.099727][ T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 829.250747][ T24] usb 4-1: device descriptor read/64, error -71 [ 829.726985][T18023] udevd[18023]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.040718][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 830.173210][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 830.200830][ T29] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 830.210267][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 830.221629][ T24] usb 4-1: device descriptor read/64, error -71 [ 830.236056][T18305] ceph: No mds server is up or the cluster is laggy [ 830.356598][ T24] usb usb4-port1: attempt power cycle [ 830.390915][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 830.401296][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 830.460806][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 830.479220][ T29] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 830.505587][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.567598][ T29] usb 2-1: config 0 descriptor?? [ 830.753796][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 830.785401][ T24] usb 4-1: device descriptor read/8, error -71 [ 831.105048][ T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 831.124035][ T29] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 831.288976][ T29] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 831.308610][ T24] usb 4-1: device descriptor read/8, error -71 [ 832.046669][T18342] binder: 18292:18342 ioctl c0285840 0 returned -22 [ 832.456080][ T24] usb usb4-port1: unable to enumerate USB device [ 833.007640][T18348] IPVS: rr: FWM 3 0x00000003 - no destination available [ 833.688789][ T29] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 833.701116][ T29] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -71 [ 833.715883][ T29] usb 2-1: USB disconnect, device number 25 [ 833.787518][T18347] netlink: 'syz.2.3522': attribute type 10 has an invalid length. [ 835.049676][T18378] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3531'. [ 835.296563][T18375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.309236][T18375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 835.344052][T18378] 0·: renamed from hsr0 (while UP) [ 835.373435][T18378] 0·: entered allmulticast mode [ 835.384404][T18378] hsr_slave_0: entered allmulticast mode [ 835.401364][T18378] hsr_slave_1: entered allmulticast mode [ 835.408577][T18378] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 835.640476][T18389] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3535'. [ 836.001755][ T30] audit: type=1400 audit(1780040590.257:1696): avc: denied { create } for pid=18384 comm="syz.2.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 836.045036][ T30] audit: type=1400 audit(1780040590.297:1697): avc: denied { write } for pid=18384 comm="syz.2.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 836.235626][T18393] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.3535'. [ 836.358876][T18399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3538'. [ 841.284147][T18375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.307982][T18375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 841.336840][T18399] lo speed is unknown, defaulting to 1000 [ 841.345260][T18399] wg1 speed is unknown, defaulting to 1000 [ 841.512495][T18375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.522800][T18375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 841.804902][T18375] bond0: (slave netdevsim0): Releasing backup interface [ 841.904827][T18375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.923714][T18375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 842.380697][ T3391] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 842.401742][T18429] 9p: p9: multiple sources not supported [ 842.404087][ T3391] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 842.548051][T18433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3544'. [ 842.662619][ T3391] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 842.683120][ T3391] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 842.743628][ T3391] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 842.772049][ T3391] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 842.881607][ T3391] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 842.901501][ T3391] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 843.247920][T18450] CUSE: info not properly terminated [ 843.480876][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 843.575292][T18459] siw: device registration error -23 [ 843.612293][T18459] fuse: fd is not a fuse device [ 843.721544][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 843.852996][ T30] audit: type=1400 audit(1780040598.097:1698): avc: denied { ioctl } for pid=18460 comm="syz.0.3552" path="socket:[51934]" dev="sockfs" ino=51934 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 843.970922][ T30] audit: type=1400 audit(1780040598.217:1699): avc: denied { write } for pid=18441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.006712][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.027079][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.029203][T18470] netlink: 'syz.4.3548': attribute type 1 has an invalid length. [ 844.038547][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.066387][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 844.077106][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.091549][ T24] usb 4-1: config 0 descriptor?? [ 844.138645][T18470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 844.251063][T18475] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 844.288780][ T30] audit: type=1400 audit(1780040598.537:1700): avc: denied { write } for pid=18472 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.028652][ T30] audit: type=1400 audit(1780040599.277:1701): avc: denied { write } for pid=18478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.210025][T18506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.391731][ T30] audit: type=1400 audit(1780040599.547:1702): avc: denied { write } for pid=18505 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.634141][T18516] 9p: Bad value for 'rfdno' [ 845.832626][ T30] audit: type=1400 audit(1780040600.087:1703): avc: denied { bind } for pid=18524 comm="syz.4.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 846.126163][T18510] ceph: No mds server is up or the cluster is laggy [ 848.625553][ T30] audit: type=1400 audit(1780040602.877:1704): avc: denied { write } for pid=18520 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.938135][T18544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18544 comm=syz.0.3566 [ 849.322970][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 849.344818][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 849.357637][ T30] audit: type=1400 audit(1780040603.607:1705): avc: denied { write } for pid=18548 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.297653][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 850.343246][T18555] syz_tun: entered allmulticast mode [ 850.354266][ T30] audit: type=1400 audit(1780040604.597:1706): avc: denied { write } for pid=18557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.543753][ T30] audit: type=1400 audit(1780040604.797:1707): avc: denied { write } for pid=18591 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.617494][T18554] syz_tun: left allmulticast mode [ 851.263386][T18611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18611 comm=syz.2.3579 [ 851.536571][T18624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.596353][T18624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.701365][T18615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.804247][T18615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.925130][ T30] audit: type=1400 audit(1780040606.177:1708): avc: denied { write } for pid=18601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.989635][T18623] netlink: 'syz.0.3581': attribute type 39 has an invalid length. [ 852.285680][ T30] audit: type=1400 audit(1780040606.537:1709): avc: denied { write } for pid=18639 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.964098][T18650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 852.996721][ T5801] usb 4-1: USB disconnect, device number 21 [ 853.243181][ T30] audit: type=1400 audit(1780040607.497:1710): avc: denied { append } for pid=18654 comm="syz.4.3590" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 854.172100][T18302] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 854.194144][ T30] audit: type=1400 audit(1780040608.447:1711): avc: denied { write } for pid=18671 comm="syz.3.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 854.232238][ T30] audit: type=1400 audit(1780040608.447:1712): avc: denied { ioctl } for pid=18671 comm="syz.3.3598" path="socket:[52294]" dev="sockfs" ino=52294 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 854.258589][ T30] audit: type=1400 audit(1780040608.447:1713): avc: denied { listen } for pid=18671 comm="syz.3.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 854.279258][ T30] audit: type=1400 audit(1780040608.457:1714): avc: denied { accept } for pid=18671 comm="syz.3.3598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 854.359665][T18302] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 854.380890][T18302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.400751][T18302] usb 2-1: Product: syz [ 854.405400][T18302] usb 2-1: Manufacturer: syz [ 854.421246][T18302] usb 2-1: SerialNumber: syz [ 854.718881][T18302] rtl8150 2-1:1.0: couldn't reset the device [ 854.732186][T18302] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 854.767207][T18302] usb 2-1: USB disconnect, device number 26 [ 855.660757][T15551] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 856.050999][T15551] usb 2-1: Using ep0 maxpacket: 32 [ 856.070011][T15551] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 856.097407][T15551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.108248][T15551] usb 2-1: Product: syz [ 856.116269][T15551] usb 2-1: Manufacturer: syz [ 856.122347][T15551] usb 2-1: SerialNumber: syz [ 856.131642][T15551] usb 2-1: config 0 descriptor?? [ 856.475525][T15551] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 027 [ 856.732647][T18717] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.769502][T18719] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3609'. [ 856.779729][T18719] 0·: renamed from hsr0 (while UP) [ 856.814677][T18719] 0·: entered allmulticast mode [ 856.820031][T18719] hsr_slave_0: entered allmulticast mode [ 856.826427][T18719] hsr_slave_1: entered allmulticast mode [ 856.832907][T18719] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 856.931524][T18717] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.006203][T18717] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.107565][T18690] i2c i2c-1: failure reading status [ 857.133964][T18717] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.265806][T15551] usb 2-1: USB disconnect, device number 27 [ 857.301768][T18730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3612'. [ 857.301969][T16327] libceph: connect (1)[c::]:6789 error -101 [ 857.321012][T18730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.327397][T16327] libceph: mon0 (1)[c::]:6789 connect error [ 857.343290][T18730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.438473][T12330] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.493507][T12327] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.555548][T12327] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.591656][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 857.601565][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 857.618268][T12327] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.993136][T18742] netlink: 'syz.2.3615': attribute type 4 has an invalid length. [ 858.035841][T18727] ceph: No mds server is up or the cluster is laggy [ 858.117747][T18743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3615'. [ 858.144951][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 858.209308][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 858.696175][T18749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3617'. [ 858.863261][T18757] overlayfs: missing 'workdir' [ 858.942380][T18749] bond0: (slave bond_slave_0): Releasing backup interface [ 859.477307][T18749] bond_slave_0: entered promiscuous mode [ 859.483933][T18749] bond_slave_0: entered allmulticast mode [ 859.699442][T18775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3627'. [ 859.926182][T18775] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 859.935343][T18775] netlink: 'syz.4.3627': attribute type 4 has an invalid length. [ 859.943794][T18775] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3627'. [ 860.101308][ T5801] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 860.311284][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 860.387247][ T5801] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 860.476042][ T5801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.587240][ T5801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 860.649439][ T5801] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 860.722658][ T5801] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 860.776980][ T5801] usb 2-1: Product: syz [ 860.812774][ T5801] usb 2-1: Manufacturer: syz [ 860.846486][ T5801] usb 2-1: SerialNumber: syz [ 860.899689][ T5801] usb 2-1: config 0 descriptor?? [ 860.941616][ T30] audit: type=1400 audit(1780040615.187:1715): avc: denied { write } for pid=18788 comm="syz.3.3631" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 860.972322][ T5801] ldusb 2-1:0.0: Interrupt in endpoint not found [ 861.392145][ T5705] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 861.419450][ T30] audit: type=1400 audit(1780040615.667:1716): avc: denied { write } for pid=18781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.557929][ T5801] usb 2-1: USB disconnect, device number 28 [ 861.608129][T18807] fuse: fd is not a fuse device [ 861.660950][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 861.668071][T18811] xt_hashlimit: size too large, truncated to 1048576 [ 861.802841][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.815226][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.826135][ T5705] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 861.849898][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.862717][T18302] libceph: connect (1)[c::]:6789 error -101 [ 861.870451][T18814] input: syz1 as /devices/virtual/input/input20 [ 861.897421][T18302] libceph: mon0 (1)[c::]:6789 connect error [ 861.926262][ T30] audit: type=1400 audit(1780040616.177:1717): avc: denied { write } for pid=18805 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.957802][ T5705] usb 4-1: config 0 descriptor?? [ 862.181435][T18302] libceph: connect (1)[c::]:6789 error -101 [ 862.249723][T18302] libceph: mon0 (1)[c::]:6789 connect error [ 862.472158][T18809] ceph: No mds server is up or the cluster is laggy [ 863.062777][ T5705] apple 0003:05AC:024B.0009: unknown global tag 0xe [ 863.070443][ T5705] apple 0003:05AC:024B.0009: item 0 1 1 14 parsing failed [ 863.182492][ T5705] apple 0003:05AC:024B.0009: parse failed [ 863.197876][ T5705] apple 0003:05AC:024B.0009: probe with driver apple failed with error -22 [ 863.528016][ T5801] usb 4-1: USB disconnect, device number 22 [ 863.899899][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 864.156937][ T30] audit: type=1400 audit(1780040618.407:1718): avc: denied { write } for pid=18831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.431925][ T30] audit: type=1400 audit(1780040618.687:1719): avc: denied { write } for pid=18859 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.184053][ T29] libceph: connect (1)[c::]:6789 error -101 [ 866.184220][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 866.245250][T18896] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.309247][T18897] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3652'. [ 866.344980][T18896] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.398144][T18897] 1·: renamed from c0· (while UP) [ 866.424082][T18897] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 866.443385][T18302] libceph: connect (1)[c::]:6789 error -101 [ 866.449469][T18302] libceph: mon0 (1)[c::]:6789 connect error [ 866.465103][T18896] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.666148][T18896] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.888100][T18891] ceph: No mds server is up or the cluster is laggy [ 866.984514][ T5705] libceph: connect (1)[c::]:6789 error -101 [ 866.990602][ T5705] libceph: mon0 (1)[c::]:6789 connect error [ 867.235162][ T1033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.262317][ T1033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.280736][ T1033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.448488][ T30] audit: type=1400 audit(1780040621.697:1720): avc: denied { append } for pid=18913 comm="syz.4.3658" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 867.491686][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.721205][T18302] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 869.957155][T18302] usb 4-1: device descriptor read/64, error -71 [ 871.107278][T18302] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 871.892619][T18984] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3678'. [ 871.920441][T18987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.965250][T18987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.013112][T18987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.049556][T18987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.098897][T18987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.102815][T13182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 872.123173][T13182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 872.134562][T13182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 872.145899][T13182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 872.170412][T13182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 872.200301][T18987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.263691][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3679'. [ 872.492075][T18983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.525893][T18984] 0·: renamed from hsr0 (while UP) [ 872.569354][T18984] 0·: entered allmulticast mode [ 872.575409][T18984] hsr_slave_0: entered allmulticast mode [ 872.581068][T18984] hsr_slave_1: entered allmulticast mode [ 872.640992][T18984] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 872.794261][T18983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.185359][T18983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.738458][T18983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.821475][T18989] lo speed is unknown, defaulting to 1000 [ 873.828555][T18989] wg1 speed is unknown, defaulting to 1000 [ 873.965894][T19015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.974669][T19015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.154993][T19020] netlink: 'syz.4.3684': attribute type 28 has an invalid length. [ 874.208596][T19020] netlink: 'syz.4.3684': attribute type 29 has an invalid length. [ 874.225633][ T5618] Bluetooth: hci1: command tx timeout [ 874.312272][T19020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3684'. [ 874.764054][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.770622][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.961436][ T6967] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.052360][T12327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.122264][ T3358] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.156896][T19035] fuse: fd is not a fuse device [ 875.195297][ T3358] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.616767][T18989] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.643990][T18989] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.651207][T18989] bridge_slave_0: entered allmulticast mode [ 875.657999][T18989] bridge_slave_0: entered promiscuous mode [ 875.668829][T18989] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.682351][T18989] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.695589][T18989] bridge_slave_1: entered allmulticast mode [ 875.711138][T18989] bridge_slave_1: entered promiscuous mode [ 875.805651][T18989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.848356][T18989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.995940][T18989] team0: Port device team_slave_0 added [ 876.082675][T18989] team0: Port device team_slave_1 added [ 876.174116][T18989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.190681][T18989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.281196][ T5618] Bluetooth: hci1: command tx timeout [ 876.302069][T18989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.329942][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 876.337711][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 876.345491][T18989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.375370][T18989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.491129][T18989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.505595][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 876.512077][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 876.601519][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 876.618148][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 876.667511][T18989] hsr_slave_0: entered promiscuous mode [ 876.690144][T18989] hsr_slave_1: entered promiscuous mode [ 876.771658][ T5801] libceph: connect (1)[c::]:6789 error -101 [ 876.784168][ T5801] libceph: mon0 (1)[c::]:6789 connect error [ 877.141131][T16327] libceph: connect (1)[c::]:6789 error -101 [ 877.215043][T16327] libceph: mon0 (1)[c::]:6789 connect error [ 877.232224][T19062] ceph: No mds server is up or the cluster is laggy [ 877.232903][T19059] ceph: No mds server is up or the cluster is laggy [ 877.565607][T15551] libceph: connect (1)[c::]:6789 error -101 [ 877.613786][T15551] libceph: mon0 (1)[c::]:6789 connect error [ 877.762295][T19086] fuse: fd is not a fuse device [ 878.060039][T19091] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3699'. [ 878.125237][ T30] audit: type=1400 audit(1780040632.367:1721): avc: denied { write } for pid=19075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.202223][ T30] audit: type=1400 audit(1780040632.457:1722): avc: denied { write } for pid=19097 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.410243][T19091] 0·: renamed from hsr0 [ 878.423904][T19091] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.450844][ T5618] Bluetooth: hci1: command tx timeout [ 878.470489][T19091] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.480808][T19091] 0·: entered allmulticast mode [ 878.485673][T19091] hsr_slave_0: entered allmulticast mode [ 878.491322][T19091] hsr_slave_1: entered allmulticast mode [ 878.498246][T19091] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 878.576109][T18989] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.604214][T19101] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 878.652915][T19101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.661826][T19101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.865427][T18989] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.095496][T18989] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.205543][T18989] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.520890][ T5618] Bluetooth: hci1: command tx timeout [ 880.588517][T12326] bridge_slave_1: left allmulticast mode [ 880.595035][T12326] bridge_slave_1: left promiscuous mode [ 880.602837][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.582770][T12326] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 881.726251][T12326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.782365][T12326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.837287][T12326] bond0 (unregistering): (slave team0): Releasing backup interface [ 881.876212][T12326] bond0 (unregistering): Released all slaves [ 881.918667][T12326] bond1 (unregistering): Released all slaves [ 881.998339][T12326] bond2 (unregistering): Released all slaves [ 882.087330][T12326] bond3 (unregistering): Released all slaves [ 882.184668][T12326] bond4 (unregistering): Released all slaves [ 882.320626][T12326] bond5 (unregistering): Released all slaves [ 882.412608][T12326] bond6 (unregistering): Released all slaves [ 882.490304][T12326] bond7 (unregistering): Released all slaves [ 882.889356][T12326] : left promiscuous mode [ 882.976223][T19133] o2cb: This node has not been configured. [ 882.982351][T19133] o2cb: Cluster check failed. Fix errors before retrying. [ 882.989735][T19133] (syz.0.3708,19133,1):user_dlm_register:674 ERROR: status = -22 [ 882.997881][T19133] (syz.0.3708,19133,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 883.016008][ T30] audit: type=1400 audit(1780040637.227:1723): avc: denied { write } for pid=19132 comm="syz.0.3708" name="/" dev="ocfs2_dlmfs" ino=55389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 883.243659][T18989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 884.021396][T18989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.024278][T19140] xt_connbytes: Forcing CT accounting to be enabled [ 884.053494][T18989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 884.079733][T19140] openvswitch: netlink: Message has 8 unknown bytes. [ 884.108109][T19140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.123201][T19140] fuse: fd is not a fuse device [ 884.174022][T18989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 884.260346][T19143] IPVS: dh: FWM 3 0x00000003 - no destination available [ 884.275069][T18989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 884.384676][T18989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.926934][T19148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.935514][T19148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.970178][T18989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.079726][T19148] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 885.086731][T19148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 885.104110][T18989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.265098][T19148] vhci_hcd vhci_hcd.0: Device attached [ 885.367292][T19146] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 885.390834][ T30] audit: type=1400 audit(1780040639.587:1724): avc: denied { create } for pid=19165 comm="syz.0.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 885.411588][ T30] audit: type=1400 audit(1780040639.617:1725): avc: denied { bind } for pid=19165 comm="syz.0.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 885.470159][T18989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.481201][T19157] vhci_hcd: connection closed [ 885.492567][T12327] vhci_hcd vhci_hcd.4: stop threads [ 885.495787][T18989] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.530179][T12327] vhci_hcd vhci_hcd.4: release socket [ 885.532511][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.542669][ T6967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.557375][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.572937][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.584777][T12327] vhci_hcd vhci_hcd.4: disconnect device [ 885.652348][T15551] usb 42-1: enqueue for inactive port 0 [ 885.704446][T19172] tmpfs: Bad value for 'mpol' [ 886.268797][ T30] audit: type=1400 audit(1780040640.417:1726): avc: denied { mounton } for pid=19171 comm="syz.1.3716" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.279484][T15551] usb usb42-port1: attempt power cycle [ 886.319859][T19175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.327384][T19175] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.336248][T19175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.383619][T19175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.392410][T19175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.413996][T19175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 886.424794][T19175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 886.438533][T19175] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 886.480150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.487315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.523587][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.530804][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.706114][T19184] o2cb: This node has not been configured. [ 886.712446][T19184] o2cb: Cluster check failed. Fix errors before retrying. [ 886.719830][T19184] (syz.0.3719,19184,1):user_dlm_register:674 ERROR: status = -22 [ 886.727915][T19184] (syz.0.3719,19184,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 886.745379][ T30] audit: type=1400 audit(1780040640.957:1727): avc: denied { write } for pid=19183 comm="syz.0.3719" name="/" dev="ocfs2_dlmfs" ino=55625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.930274][ T30] audit: type=1400 audit(1780040641.177:1728): avc: denied { create } for pid=19185 comm="syz.1.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 887.113239][T15551] usb usb42-port1: unable to enumerate USB device [ 887.464357][T19202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.497882][ T5705] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 887.806245][T19192] lo speed is unknown, defaulting to 1000 [ 887.814359][T19192] wg1 speed is unknown, defaulting to 1000 [ 888.493253][T19202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.532776][ T5705] usb 4-1: config 3 has an invalid interface number: 110 but max is 0 [ 888.542841][ T5705] usb 4-1: config 3 has no interface number 0 [ 888.558616][T12326] hsr_slave_0: left promiscuous mode [ 888.567508][ T5705] usb 4-1: config 3 interface 110 has no altsetting 0 [ 888.576940][T12326] hsr_slave_1: left promiscuous mode [ 888.583115][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.591261][T12326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.599888][T12326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.601970][ T5705] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=dd.83 [ 888.608258][T12326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.633585][T12326] veth1_macvtap: left promiscuous mode [ 888.639242][T12326] veth0_macvtap: left promiscuous mode [ 888.653465][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.684629][ T5705] usb 4-1: Product: syz [ 888.698411][ T5705] usb 4-1: Manufacturer: syz [ 888.724336][ T5705] usb 4-1: SerialNumber: syz [ 889.625915][ T5705] zaurus 4-1:3.110: bad CDC descriptors [ 889.875900][ T5705] usb 4-1: USB disconnect, device number 25 [ 891.011716][T12326] team0 (unregistering): Port device team_slave_1 removed [ 891.029054][T12326] team0 (unregistering): Port device team_slave_0 removed [ 891.478748][T18989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.522383][T18989] veth0_vlan: entered promiscuous mode [ 891.533433][T18989] veth1_vlan: entered promiscuous mode [ 891.557298][T18989] veth0_macvtap: entered promiscuous mode [ 891.567192][T18989] veth1_macvtap: entered promiscuous mode [ 891.584592][T18989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.595538][T18989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.707529][ T1033] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.734927][ T1033] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.746658][ T1033] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.886628][ T1033] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.134640][T12330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.181686][T12330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.351858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.379176][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.451058][T15551] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 892.653140][T15551] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 892.701517][ T804] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 892.717886][T15551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.897693][T15551] usb 4-1: config 0 descriptor?? [ 892.907665][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 892.980340][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.153763][ T804] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 893.236425][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.268384][ T804] usb 2-1: config 0 descriptor?? [ 893.283362][T15551] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 893.435930][T12326] IPVS: stop unused estimator thread 0... [ 893.572149][T15551] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 893.600919][T15551] [drm] Initialized udl on minor 2 [ 893.644520][T19256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.669849][T15551] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 893.679367][T19256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.695308][T15551] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 893.708656][T16327] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 893.742422][T19257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3734'. [ 893.787468][T15551] usb 4-1: USB disconnect, device number 26 [ 893.807535][T16327] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 893.828526][T16327] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 893.961216][ T804] usbhid 2-1:0.0: can't add hid device: -71 [ 893.971177][ T804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 893.986283][ T804] usb 2-1: USB disconnect, device number 29 [ 894.093881][T19264] pim6reg: entered allmulticast mode [ 895.275777][T19282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3741'. [ 897.150751][T15551] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 897.427359][T15551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.427387][T15551] usb 3-1: config 0 has no interfaces? [ 897.431886][T15551] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 897.431916][T15551] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 897.431937][T15551] usb 3-1: Product: syz [ 897.431952][T15551] usb 3-1: Manufacturer: syz [ 897.437182][T15551] usb 3-1: config 0 descriptor?? [ 897.556502][T19324] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3753'. [ 897.556618][T19324] 1·: renamed from c0· (while UP) [ 897.562596][T19324] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 897.740802][T19329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15890 sclass=netlink_route_socket pid=19329 comm=syz.4.3755 [ 898.038300][T18302] usb 3-1: USB disconnect, device number 25 [ 899.032383][T19340] fuse: Bad value for 'group_id' [ 899.100724][T19340] fuse: Bad value for 'group_id' [ 901.284543][T19389] netlink: 'syz.2.3767': attribute type 4 has an invalid length. [ 901.364702][T19389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3767'. [ 902.149337][ T30] audit: type=1400 audit(1780040656.387:1729): avc: denied { write } for pid=19355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.455992][ T30] audit: type=1400 audit(1780040656.707:1730): avc: denied { write } for pid=19403 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 902.520538][T19410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.545036][T19410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.917870][ T30] audit: type=1400 audit(1780040657.167:1731): avc: denied { write } for pid=19420 comm="syz.1.3777" name="/" dev="ocfs2_dlmfs" ino=56561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 902.925256][T19423] o2cb: This node has not been configured. [ 902.947659][T19423] o2cb: Cluster check failed. Fix errors before retrying. [ 902.955010][T19423] (syz.1.3777,19423,0):user_dlm_register:674 ERROR: status = -22 [ 902.963018][T19423] (syz.1.3777,19423,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 903.330889][T19431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3779'. [ 903.951138][ T5821] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 904.090707][ T5821] usb 4-1: device descriptor read/64, error -71 [ 904.330714][ T5821] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 904.338523][ T804] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 904.870680][ T5821] usb 4-1: device descriptor read/64, error -71 [ 904.950925][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 904.962712][ T804] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 904.975197][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.983547][ T5821] usb usb4-port1: attempt power cycle [ 905.483606][ T5821] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 905.583900][ T5821] usb 4-1: device descriptor read/8, error -71 [ 905.870735][ T5821] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 905.949605][ T804] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 906.091904][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.094497][T19462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.107232][ T804] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 906.856395][ T804] usb 3-1: media controller created [ 906.879147][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.951873][T19462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.998408][ T5821] usb 4-1: device descriptor read/8, error -71 [ 907.182328][ T5821] usb usb4-port1: unable to enumerate USB device [ 907.482363][ T804] az6027: usb out operation failed. (-71) [ 907.503364][ T804] az6027: usb out operation failed. (-71) [ 907.515935][ T804] stb0899_attach: Driver disabled by Kconfig [ 907.524656][ T804] az6027: no front-end attached [ 907.524656][ T804] [ 907.533668][ T804] az6027: usb out operation failed. (-71) [ 907.540086][ T804] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 907.622054][ T5821] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 907.791569][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 907.800156][ T804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 907.809636][ T5821] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 907.821971][ T804] dvb-usb: schedule remote query interval to 400 msecs. [ 907.832028][ T804] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 907.877092][ T804] usb 3-1: USB disconnect, device number 26 [ 908.278829][ T5821] usb 4-1: config 0 has no interface number 0 [ 908.295023][ T5821] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 908.306349][ T5821] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 908.318498][ T5821] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 908.329557][ T5821] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 908.343083][ T5821] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 908.352228][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.395673][ T5821] usb 4-1: config 0 descriptor?? [ 908.439282][ T5821] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 908.548061][ T804] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 908.592361][T19487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=19487 comm=syz.1.3795 [ 908.645939][T19469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.667958][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 908.673558][T19469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.680119][T19490] Invalid option length (1048308) for dns_resolver key [ 908.772585][ T5821] usb 4-1: USB disconnect, device number 31 [ 908.809092][ T5821] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 909.080819][ T804] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 909.137631][T19494] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3797'. [ 909.146736][T19494] 0·: renamed from hsr0 (while UP) [ 909.483485][ T30] audit: type=1400 audit(1780040663.727:1732): avc: denied { read } for pid=19496 comm="syz.3.3798" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 909.642873][T19499] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3799'. [ 909.643654][T19494] 0·: entered allmulticast mode [ 909.687817][T19494] hsr_slave_0: entered allmulticast mode [ 909.693712][T19494] hsr_slave_1: entered allmulticast mode [ 909.699626][T19494] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 909.741621][ T804] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 909.757845][ T804] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 909.769139][ T804] usb 3-1: config 150 has no interface number 0 [ 909.776575][ T804] usb 3-1: config 150 interface 204 has no altsetting 0 [ 909.784646][ T804] usb 3-1: config 150 interface 1 has no altsetting 0 [ 909.795910][ T804] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 909.809209][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.818926][ T804] usb 3-1: Product: syz [ 909.823959][ T804] usb 3-1: Manufacturer: syz [ 909.824036][ T30] audit: type=1400 audit(1780040664.067:1733): avc: denied { map_create } for pid=19498 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 909.829014][ T804] usb 3-1: SerialNumber: syz [ 909.875179][ T30] audit: type=1400 audit(1780040664.077:1734): avc: denied { map_read map_write } for pid=19498 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 909.925691][ T30] audit: type=1400 audit(1780040664.107:1735): avc: denied { setopt } for pid=19498 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 909.972860][ T30] audit: type=1400 audit(1780040664.127:1736): avc: denied { watch_mount } for pid=19503 comm="syz.0.3801" path="/238" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 910.025915][ T30] audit: type=1400 audit(1780040664.257:1737): avc: denied { prog_load } for pid=19507 comm="syz.0.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 910.215024][T19497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 910.222049][T19497] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 910.238623][ T804] xr_serial 3-1:150.204: skipping garbage [ 910.250833][ T804] xr_serial 3-1:150.204: xr_serial converter detected [ 910.262172][T19497] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 910.588919][T19497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 910.595787][T19497] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 910.606949][T19497] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 910.704865][ T804] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 910.734194][ T804] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 910.837728][ T30] audit: type=1400 audit(1780040665.087:1738): avc: denied { bind } for pid=19513 comm="syz.3.3804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 910.941518][ T804] usb 3-1: USB disconnect, device number 27 [ 910.963798][ T804] xr_serial 3-1:150.204: device disconnected [ 911.820777][T13182] Bluetooth: hci3: command 0x0c1a tx timeout [ 911.860411][ T30] audit: type=1400 audit(1780040666.097:1739): avc: denied { shutdown } for pid=19504 comm="syz.1.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 912.028948][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3800'. [ 912.112905][ T30] audit: type=1400 audit(1780040666.347:1740): avc: denied { append } for pid=19532 comm="syz.2.3812" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 912.296039][ T30] audit: type=1400 audit(1780040666.477:1741): avc: denied { bpf } for pid=19531 comm="syz.4.3810" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 912.433839][T19547] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3811'. [ 912.457278][T19547] 0·: renamed from c1· (while UP) [ 912.537787][ T5801] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 912.680738][T13182] Bluetooth: hci1: command 0x0c1a tx timeout [ 912.708615][ T5801] usb 4-1: Using ep0 maxpacket: 32 [ 912.735246][ T5801] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 912.746538][ T5801] usb 4-1: config 0 interface 0 has no altsetting 0 [ 912.753806][ T5801] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 912.776307][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.799932][ T5801] usb 4-1: config 0 descriptor?? [ 912.820998][ T5821] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 912.982911][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 912.991477][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 913.004319][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 913.062411][ T5821] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 913.071631][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.081400][ T5821] usb 2-1: Product: syz [ 913.086401][ T5821] usb 2-1: Manufacturer: syz [ 913.091776][ T5821] usb 2-1: SerialNumber: syz [ 913.108431][ T5821] usb 2-1: config 0 descriptor?? [ 913.129407][ T5821] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 913.138945][ T5821] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 913.268901][T19547] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 913.660445][ T5801] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 913.830980][T16327] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 913.879773][ T5801] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -61 [ 913.890070][T13182] Bluetooth: hci3: command 0x0c1a tx timeout [ 913.986146][ T5821] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 913.996505][T16327] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 914.014279][ T5821] em28xx 2-1:0.0: Config register raw data: 0x41 [ 914.024533][T16327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.055337][T16327] usb 3-1: Product: syz [ 914.068933][T16327] usb 3-1: Manufacturer: syz [ 914.086968][T16327] usb 3-1: SerialNumber: syz [ 914.126251][T16327] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 914.461018][ T5821] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 914.760679][T13182] Bluetooth: hci1: command 0x0c1a tx timeout [ 914.780826][T19565] netlink: 'syz.0.3819': attribute type 1 has an invalid length. [ 914.789313][T19565] netlink: 760 bytes leftover after parsing attributes in process `syz.0.3819'. [ 915.341059][T16331] usb 4-1: USB disconnect, device number 32 [ 915.494813][T16327] usb 3-1: USB disconnect, device number 28 [ 915.628748][T19574] netlink: 'syz.4.3821': attribute type 5 has an invalid length. [ 915.956368][ T5821] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 915.972956][T13182] Bluetooth: hci3: command 0x0c1a tx timeout [ 915.979189][ T5821] ath9k_htc: Failed to initialize the device [ 915.997149][T16327] usb 3-1: ath9k_htc: USB layer deinitialized [ 916.069887][ T804] usb 2-1: USB disconnect, device number 30 [ 916.076465][ T804] em28xx 2-1:0.0: Disconnecting em28xx [ 916.094293][ T804] em28xx 2-1:0.0: Freeing device [ 916.212724][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 916.212742][ T30] audit: type=1400 audit(1780040670.467:1744): avc: denied { write } for pid=19583 comm="syz.1.3823" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 916.246467][T19584] binder: 19583:19584 ioctl c0285840 200000000140 returned -22 [ 916.260729][ T30] audit: type=1400 audit(1780040670.507:1745): avc: denied { call } for pid=19583 comm="syz.1.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 916.961080][T13182] Bluetooth: hci1: command 0x0c1a tx timeout [ 917.365145][T19614] IPVS: rr: FWM 3 0x00000003 - no destination available [ 918.788588][ T30] audit: type=1400 audit(1780040673.037:1746): avc: denied { getopt } for pid=19624 comm="syz.0.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 919.753952][ T30] audit: type=1400 audit(1780040673.987:1747): avc: denied { read } for pid=19636 comm="syz.2.3841" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 920.355640][T19645] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 920.362187][T19645] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 920.396490][T19645] vhci_hcd vhci_hcd.0: Device attached [ 920.422775][ T30] audit: type=1400 audit(1780040673.987:1748): avc: denied { open } for pid=19636 comm="syz.2.3841" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 920.448489][ T30] audit: type=1400 audit(1780040673.987:1749): avc: denied { ioctl } for pid=19636 comm="syz.2.3841" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 920.519272][T19634] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 920.566911][T19646] vhci_hcd: connection closed [ 920.568314][ T13] vhci_hcd vhci_hcd.1: stop threads [ 920.584224][ T13] vhci_hcd vhci_hcd.1: release socket [ 920.594080][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 920.950743][ T5705] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 921.488016][ T5705] usb 3-1: config 0 has no interfaces? [ 921.537461][ T5705] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 921.564862][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.603324][ T5705] usb 3-1: config 0 descriptor?? [ 921.947548][ T30] audit: type=1400 audit(1780040676.197:1750): avc: denied { read write } for pid=19652 comm="syz.2.3844" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 922.003985][ T30] audit: type=1400 audit(1780040676.197:1751): avc: denied { open } for pid=19652 comm="syz.2.3844" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 922.035905][T15551] usb 3-1: USB disconnect, device number 29 [ 922.037286][T19682] bond2: option xmit_hash_policy: invalid value (6) [ 922.066460][T19682] bond2 (unregistering): Released all slaves [ 922.102047][T19688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3853'. [ 922.203220][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 922.212729][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3853'. [ 923.114975][T19699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.139340][T19699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.142078][ T30] audit: type=1400 audit(1780040679.397:1752): avc: denied { wake_alarm } for pid=19715 comm="syz.0.3864" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 925.180989][T16327] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 925.304588][T15551] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 925.360678][ T5821] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 925.390728][T16327] usb 2-1: Using ep0 maxpacket: 8 [ 925.404262][T16327] usb 2-1: unable to get BOS descriptor or descriptor too short [ 925.415038][T16327] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.431219][T16327] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 925.450718][T15551] usb 3-1: device descriptor read/64, error -71 [ 925.457038][T16327] usb 2-1: config 1 has no interface number 0 [ 925.466213][T16327] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 925.475831][T16327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.490912][ T5821] usb 4-1: device descriptor read/64, error -71 [ 925.497208][T16327] usb 2-1: Product: syz [ 925.501685][T16327] usb 2-1: Manufacturer: syz [ 925.506297][T16327] usb 2-1: SerialNumber: syz [ 925.700651][T15551] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 925.750751][ T5821] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 925.831037][T15551] usb 3-1: device descriptor read/64, error -71 [ 926.093537][T18302] libceph: connect (1)[c::]:6789 error -101 [ 926.173748][T15551] usb usb3-port1: attempt power cycle [ 926.179235][ T5821] usb 4-1: device descriptor read/64, error -71 [ 926.190376][T18302] libceph: mon0 (1)[c::]:6789 connect error [ 926.242415][T16327] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 926.264934][T16327] usb 2-1: USB disconnect, device number 31 [ 926.296039][T18580] udevd[18580]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.300955][ T5821] usb usb4-port1: attempt power cycle [ 926.461034][T18302] libceph: connect (1)[c::]:6789 error -101 [ 926.467948][T18302] libceph: mon0 (1)[c::]:6789 connect error [ 926.486802][T19731] ceph: No mds server is up or the cluster is laggy [ 926.542527][T15551] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 926.591908][T15551] usb 3-1: device descriptor read/8, error -71 [ 926.680872][ T5821] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1031.729270][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1031.736244][ C0] rcu: 1-...!: (0 ticks this GP) idle=a4a4/1/0x4000000000000000 softirq=99879/99879 fqs=2 [ 1031.747308][ C0] rcu: (detected by 0, t=10502 jiffies, g=99037, q=323 ncpus=2) [ 1031.755037][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1031.755071][ C1] NMI backtrace for cpu 1 [ 1031.755086][ C1] CPU: 1 UID: 0 PID: 19736 Comm: syz.0.3871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.755111][ C1] Tainted: [L]=SOFTLOCKUP [ 1031.755116][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1031.755124][ C1] RIP: 0010:lock_release+0x191/0x310 [ 1031.755146][ C1] Code: 83 99 ee 8d e8 c0 c8 a4 09 b8 ff ff ff ff 65 0f c1 05 1b 65 25 12 83 f8 01 0f 85 28 01 00 00 9c 58 f6 c4 02 0f 85 13 01 00 00 <41> f7 c6 00 02 00 00 0f 85 c0 00 00 00 48 8b 44 24 10 65 48 2b 05 [ 1031.755159][ C1] RSP: 0018:ffffc90000a08d80 EFLAGS: 00000046 [ 1031.755172][ C1] RAX: 0000000000000046 RBX: ffff888069d372c0 RCX: ffffc90000a08d8c [ 1031.755181][ C1] RDX: 0000000000000000 RSI: ffffffff8dee9983 RDI: ffffffff8c1c4480 [ 1031.755191][ C1] RBP: ffffffff899a5ea2 R08: 0000000000000001 R09: 0000000000000000 [ 1031.755200][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803e7a0000 [ 1031.755209][ C1] R13: 18b3fb673a514ca4 R14: 0000000000000006 R15: 0000000000000001 [ 1031.755218][ C1] FS: 00007fed006f36c0(0000) GS:ffff888124486000(0000) knlGS:0000000000000000 [ 1031.755233][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1031.755242][ C1] CR2: 00007f1de624f156 CR3: 00000000357dc000 CR4: 00000000003526f0 [ 1031.755258][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1031.755266][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1031.755275][ C1] Call Trace: [ 1031.755281][ C1] [ 1031.755289][ C1] _raw_spin_unlock+0x16/0x50 [ 1031.755312][ C1] advance_sched+0x6a2/0xd20 [ 1031.755335][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1031.755352][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1031.755371][ C1] __hrtimer_run_queues+0x470/0xa00 [ 1031.755395][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1031.755421][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1031.755441][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1031.755458][ C1] [ 1031.755463][ C1] [ 1031.755468][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1031.755484][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1031.755501][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 5e 58 f6 48 89 df e8 fe ad 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 79 48 f6 65 8b 05 3e 7d 7d 08 85 c0 74 16 5b [ 1031.755514][ C1] RSP: 0018:ffffc900055a7b28 EFLAGS: 00000246 [ 1031.755525][ C1] RAX: 0000000000000006 RBX: ffffffff9b195118 RCX: 0000000000000000 [ 1031.755534][ C1] RDX: 0000000000000000 RSI: ffffffff8df0eee6 RDI: ffffffff8c1c4480 [ 1031.755543][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 1031.755556][ C1] R10: 0000000000000001 R11: 0000000800000000 R12: ffffffff9b194e80 [ 1031.755565][ C1] R13: 0000000000000000 R14: ffffc900055a7c80 R15: ffffffff9b19505c [ 1031.755580][ C1] __do_adjtimex+0x892/0xe70 [ 1031.755598][ C1] ? __pfx___do_adjtimex+0x10/0x10 [ 1031.755619][ C1] do_adjtimex+0xa0/0x370 [ 1031.755636][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 1031.755659][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1031.755679][ C1] __do_sys_clock_adjtime+0x177/0x290 [ 1031.755698][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1031.755716][ C1] ? __pfx_do_futex+0x10/0x10 [ 1031.755753][ C1] ? rcu_is_watching+0x12/0xc0 [ 1031.755774][ C1] do_syscall_64+0x115/0x870 [ 1031.755791][ C1] ? clear_bhb_loop+0x40/0x90 [ 1031.755806][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.755820][ C1] RIP: 0033:0x7fecff79ce59 [ 1031.755832][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.755845][ C1] RSP: 002b:00007fed006f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1031.755857][ C1] RAX: ffffffffffffffda RBX: 00007fecffa15fa0 RCX: 00007fecff79ce59 [ 1031.755866][ C1] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 1031.755875][ C1] RBP: 00007fecff832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1031.755883][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1031.755891][ C1] R13: 00007fecffa16038 R14: 00007fecffa15fa0 R15: 00007ffedfcf7248 [ 1031.755905][ C1] [ 1031.756066][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g99037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1032.178147][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1032.188115][ C0] rcu: RCU grace-period kthread stack dump: [ 1032.193986][ C0] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1032.207465][ C0] Call Trace: [ 1032.210732][ C0] [ 1032.213715][ C0] __schedule+0x1295/0x67a0 [ 1032.218233][ C0] ? __pfx___schedule+0x10/0x10 [ 1032.223077][ C0] ? find_held_lock+0x2b/0x80 [ 1032.227751][ C0] ? schedule+0x2bf/0x390 [ 1032.232078][ C0] schedule+0xdd/0x390 [ 1032.236146][ C0] schedule_timeout+0x127/0x280 [ 1032.240985][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1032.246347][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1032.251626][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1032.257430][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1032.262886][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1032.267644][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1032.272929][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1032.278381][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1032.283313][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1032.288501][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1032.294304][ C0] rcu_gp_kthread+0x179/0x230 [ 1032.298973][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1032.304161][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1032.309960][ C0] ? __kthread_parkme+0x18c/0x230 [ 1032.314990][ C0] ? kthread+0x13a/0x450 [ 1032.319229][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1032.324414][ C0] kthread+0x370/0x450 [ 1032.328482][ C0] ? __pfx_kthread+0x10/0x10 [ 1032.333065][ C0] ret_from_fork+0x72b/0xd50 [ 1032.337651][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.342757][ C0] ? __switch_to+0x800/0x1100 [ 1032.347428][ C0] ? __pfx_kthread+0x10/0x10 [ 1032.352014][ C0] ret_from_fork_asm+0x1a/0x30 [ 1032.356787][ C0] [ 1032.359792][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1032.366114][ C0] CPU: 0 UID: 0 PID: 14861 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.377222][ C0] Tainted: [L]=SOFTLOCKUP [ 1032.381531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1032.391570][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1032.398236][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 39 84 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1032.417834][ C0] RSP: 0018:ffffc900069ff618 EFLAGS: 00000293 [ 1032.423895][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fc1d0d [ 1032.431851][ C0] RDX: ffff88803345ca80 RSI: ffffffff81fc1ce7 RDI: ffff88803345ca80 [ 1032.439810][ C0] RBP: ffff8880b8540f80 R08: 0000000000000005 R09: 0000000000000000 [ 1032.447769][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1032.455725][ C0] R13: ffffed10170a81f1 R14: 0000000000000001 R15: ffff8880b843c600 [ 1032.463681][ C0] FS: 000055557a431500(0000) GS:ffff888124386000(0000) knlGS:0000000000000000 [ 1032.472600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.479172][ C0] CR2: 0000200000003000 CR3: 00000000ab240000 CR4: 00000000003526f0 [ 1032.487140][ C0] Call Trace: [ 1032.490403][ C0] [ 1032.493325][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1032.498522][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1032.504853][ C0] ? ldt_dup_context+0x1a4/0x300 [ 1032.509783][ C0] ? ldt_dup_context+0x1a4/0x300 [ 1032.514717][ C0] ? rcu_is_watching+0x12/0xc0 [ 1032.519474][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1032.524667][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1032.529770][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 1032.534877][ C0] ? dup_mmap+0x12ec/0x21b0 [ 1032.539371][ C0] ? dup_mmap+0x12ec/0x21b0 [ 1032.543872][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1032.549409][ C0] ? up_write+0x28c/0x4f0 [ 1032.553736][ C0] dup_mmap+0x1307/0x21b0 [ 1032.558067][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1032.562742][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1032.568543][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1032.573473][ C0] ? find_held_lock+0x2b/0x80 [ 1032.578156][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1032.584060][ C0] copy_process+0x6c78/0x7ed0 [ 1032.588752][ C0] ? __pfx_copy_process+0x10/0x10 [ 1032.593787][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1032.598817][ C0] kernel_clone+0x176/0x9e0 [ 1032.603332][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1032.608351][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1032.613285][ C0] ? find_held_lock+0x2b/0x80 [ 1032.617948][ C0] ? __might_fault+0xc5/0x140 [ 1032.622622][ C0] __do_sys_clone+0xd9/0x120 [ 1032.627207][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1032.632416][ C0] ? rcu_is_watching+0x12/0xc0 [ 1032.637176][ C0] do_syscall_64+0x115/0x870 [ 1032.641759][ C0] ? clear_bhb_loop+0x40/0x90 [ 1032.646428][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.652308][ C0] RIP: 0033:0x7f5a571c58d2 [ 1032.656711][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1032.676315][ C0] RSP: 002b:00007ffc4b9532c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1032.684716][ C0] RAX: ffffffffffffffda RBX: 00007ffc4b9532c0 RCX: 00007f5a571c58d2 [ 1032.692680][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1032.700639][ C0] RBP: 00007ffc4b95344c R08: 0000000000000000 R09: 0000000000000001 [ 1032.708598][ C0] R10: 000055557a4317d0 R11: 0000000000000246 R12: 0000000000000001 [ 1032.716555][ C0] R13: 00000000000927c0 R14: 00000000000e1ea1 R15: 00007ffc4b9534a0 [ 1032.724523][ C0]