last executing test programs: 4.992196167s ago: executing program 1 (id=290): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000006c0)=0x2000000) write$tun(r1, &(0x7f0000000700)={@void, @void, @llc={@snap={0x1, 0x1, ')', "981473", 0x809b}}}, 0x1d4c0) close_range(r0, 0xffffffffffffffff, 0x0) 4.931913685s ago: executing program 1 (id=293): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x9}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x100, 0xfffffffd, 0x2e7}) r2 = add_key$fscrypt_provisioning(&(0x7f0000002780), &(0x7f00000027c0)={'syz', 0x0}, &(0x7f0000002800)={0x48c5a051b74d3456, 0x0, @auto=[0x12, 0x26]}, 0xa, 0xfffffffffffffff8) keyctl$instantiate(0xc, r2, &(0x7f0000002840)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'bridge_slave_1\x00'}, 0x25, 0xfffffffffffffffc) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000380), 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) socket$kcm(0x10, 0x2, 0x4) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000002680)={0x0, 0xa00, &(0x7f00000026c0)=[{&(0x7f0000002700)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000002600), &(0x7f0000002640)=0x4) mount$bpf(0x20000000f0ff, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240), 0x0, 0x0) read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 4.058620505s ago: executing program 1 (id=305): setgroups(0x0, 0x0) (async) getgroups(0x1, &(0x7f0000000080)=[0xee00]) (async) getresgid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) setregid(r1, r0) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000300)={0x0, 0x3, 0xa, 0x8, 0xada, 0x1}) (async) setns(0xc9, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r3, 0x9df36cc7d1878f77, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4080) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 4.057857853s ago: executing program 1 (id=308): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x18}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000540)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000580)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) setresuid(0x0, 0xee00, 0xee01) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[], 0x3261e) 3.821387911s ago: executing program 1 (id=314): prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') (async) r0 = syz_io_uring_setup(0x6260, &(0x7f00000001c0)={0x0, 0x82bf, 0x20048, 0x1, 0xc8}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_enter(r0, 0x2f3d, 0x68e4, 0x22, &(0x7f0000000300)={[0xfffffffffffffffa]}, 0x8) mkdir(&(0x7f00000000c0)='dir0\x00', 0x2ba) mount(0x0, &(0x7f0000000100)='dir0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='dir0/tracing_on\x00', 0x1, 0x0) write(r1, 0x0, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000003340)={0x2020}, 0x2020) 3.482274653s ago: executing program 1 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="40000f000000012720dcfe20c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r3) r4 = socket(0x23, 0x803, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf0, 0x5, 0x0, 0x80000000, 0x6cb3, 0xd97, 0x26e, 0x4, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}}, 0x2) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'syzkaller0\x00'}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f0000000780)=@llc={0x1a, 0x30, 0x7, 0x26, 0x8, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4005) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r10, 0x5b14, 0x0) r11 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r11) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @broadcast}) 3.384952339s ago: executing program 32 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="40000f000000012720dcfe20c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r3) r4 = socket(0x23, 0x803, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf0, 0x5, 0x0, 0x80000000, 0x6cb3, 0xd97, 0x26e, 0x4, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}}, 0x2) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000700)={'syzkaller0\x00'}) r9 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000740)={&(0x7f0000000780)=@llc={0x1a, 0x30, 0x7, 0x26, 0x8, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4005) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r10, 0x5b14, 0x0) r11 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r11, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r11) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @broadcast}) 2.157343132s ago: executing program 2 (id=331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000400008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x4000010) 2.109825138s ago: executing program 2 (id=334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) 1.99246315s ago: executing program 2 (id=336): mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x25]}}]}) (async) r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000001580), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsmount(r0, 0x0, 0x81) (rerun: 32) getrlimit(0x2, &(0x7f0000000040)) (async, rerun: 64) getrlimit(0x1, &(0x7f0000000000)) (rerun: 64) 1.920029365s ago: executing program 2 (id=340): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = fsopen(&(0x7f0000000080)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000100)='v2to_da_alloc', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) sendmsg$inet(r1, &(0x7f0000000a40)={&(0x7f0000000a80)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r1) 1.91916313s ago: executing program 3 (id=342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000660008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x4000010) 1.832342572s ago: executing program 3 (id=343): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000040ffffffffffffffff0005000000040000000100000300000000fcfffffff8ffffffffffffff0000000000"], 0x0, 0x35, 0x0, 0x1}, 0x28) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$alg(r2, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) 1.832160622s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x17c, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8f7efbb4}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x7ff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xc8f}, {0x5}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x400c2}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, 0x3a, 0x301, 0x70ad2d, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) 1.832020622s ago: executing program 3 (id=345): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x5, r1, 0x0, &(0x7f0000000440)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000500)="af", 0x1, 0x8000000000000000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000540)={0x28, 0x4, r1, 0x0, &(0x7f0000000580)="ca", 0x1, 0xc97c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000005c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000600)='%', 0x1, 0x33e2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000640)={0x18, r1, 0x18c0, 0x280000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x195) semtimedop(r3, &(0x7f00000001c0)=[{0x0, 0xffbf, 0x2000}], 0x1, 0x0) semctl$GETNCNT(r3, 0x0, 0xe, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="1a0405", 0x3, 0x4000004, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r6, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b000000080002000000000008000200090000000700010069620000340002800800030064000000080004"], 0x2ac}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) setgroups(0x400000000000026f, &(0x7f0000000200)=[0x0, 0xee00]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001580)='/dev/comedi3\x00', 0x620341, 0x0) ioctl$COMEDI_LOCK(r9, 0x6405) close_range(r8, 0xffffffffffffffff, 0x0) 1.831603181s ago: executing program 2 (id=346): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000007, 0x2000002, 0x401c031, 0xffffffffffffffff, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file2\x00', 0x10b442, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x0) (async) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) read$dsp(r3, &(0x7f0000000240)=""/49, 0x31) r4 = socket$nl_route(0x10, 0x3, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0xa0201, 0x0) write$dsp(r5, &(0x7f00000002c0)="c7", 0x1) (async) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000300)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000500)={0x1f, 0xffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000540)={0xfffa, [0x0, 0xfffffffc], 0x4}, 0x10) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000005c0)=0xf) (async) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000600)=0x38, 0x4) (async) ioctl$TCFLSH(r7, 0x400455c8, 0x0) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x62, 0x0) (async) write(r1, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d125957bea501ecd1c624d76500b7235f5681eedcd01e00aaf4081fb11de05706ce421b3e6105b98772f2f1968d1f71d47f1b0f02339a92b34bd3034181133d475ee47920ae5afd4fc443e1cf6c4429e51efec2b61693898d7badb9183c94a9fb4b50338b8cbe06fc2aed763cecf1d0c01db98c8af7430a9a877790dc202b71094706f63f238612f31ee45342559d4eca701523a33859def251018114145b57006d1ec1bc3f44dbb9727f19baa4c1db5436efe2", 0xd7) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000e40)='4', 0x1}], 0x1) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r8) 872.003603ms ago: executing program 3 (id=351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a3000fff50008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x4000010) 871.732432ms ago: executing program 3 (id=352): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fedbdf250400000014000200fc000000000000000000000000000001140006006c6f000000000000000000000000000014000300ff010000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x90}], 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f00000003c0)="0006", 0x2, 0x0, &(0x7f0000000400)={0xc9, 0x0, r9, 0x1, 0x7, 0x6, @broadcast}, 0x14) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r11, 0x7434) write(r7, &(0x7f0000000080)="2e000300010000", 0x7) 421.129419ms ago: executing program 4 (id=361): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000006c0)=0x2000000) write$tun(r1, &(0x7f0000000700)={@void, @void, @llc={@snap={0x1, 0x1, ')', "981473", 0x809b}}}, 0x1d4c0) close_range(r0, 0xffffffffffffffff, 0x0) 419.063216ms ago: executing program 0 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000004740)={0x2, 0x0, @ioapic={0x40000, 0x11, 0x8010001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x8, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x6, 0x10, '\x00', 0xfb}, {0x0, 0x1, 0x81, '\x00', 0xa}, {0x0, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x2a, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x3, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x25, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc0}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x10, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 339.619988ms ago: executing program 4 (id=363): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) close_range(r0, r1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) (async) close_range(r0, r1, 0x0) (async) 222.279555ms ago: executing program 4 (id=364): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6ce4}}, './file0\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000180)={0x2, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000280)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNAPSHOT_FREE(r0, 0x3305) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x0, @empty, 0x1ae}]}, &(0x7f0000000380)=0x10) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000440)={0x5, 0x5, 0x1, 0x80000001, r4}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r1, 0x84, 0x83, &(0x7f00000004c0)={r6, 0x1}, 0x8) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r0, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x5) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r0, r0, 0x22, 0x4, r0, @void, @value=r0}, 0x20) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) getsockopt$bt_hci(r9, 0x0, 0x3, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x1000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000001840)={{@hyper, 0x6}, 0x2, 0x9, 0x18219321}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000001880)) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000018c0)={r2, 0x2}, &(0x7f0000001900)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001940)=@assoc_value={r10, 0x4}, 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000001980)={0x4, 0x9, 0x4, 0x1c0800}) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x301400, 0x0) ioctl$VIDIOC_QUERYCAP(r11, 0x80685600, &(0x7f0000001a00)) keyctl$revoke(0x3, r5) 220.469657ms ago: executing program 4 (id=365): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x4, &(0x7f0000953000/0x2000)=nil, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xf42, 0x4) sendto$packet(r0, &(0x7f0000000140)="3f031c000302140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000180)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) 152.461112ms ago: executing program 0 (id=366): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000580)=@unspec, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000004c0)=[{{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x0, 0x1}}], 0x10) open$dir(&(0x7f0000000500)='./proc\x00', 0x2200, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='27', 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r6, 0x3ba0, &(0x7f00000002c0)={0x48, 0x16, 0x0, 0x0, 0xec77}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000080)={&(0x7f00000000c0)=[r7, 0x0], 0x0, 0x94da, 0x2, 0x3}) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000000b010200000000000000000a000004070001002b2400008c0001004d41524b0056705b451ce58342eb0fd95d099c0fa5b97d3e43bfd8526c79f6afcedd38ef0d8271479ba2a1e0cd936979582431b1bf0a016012d528da61d1ac27fe8a2a3726623111f78794150136491bafc12ba78cf957553bb54170b5873b4fb3778fb7af379d0322494ffbdd0b25bda8af5d48695de4ec32a39096f1037d41a4bc13c13bf834140800034000000001"], 0xb0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 149.606179ms ago: executing program 4 (id=367): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x20000000) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f00000002c0)='.\x00', 0x10000, 0x2) flock(r1, 0x2) r2 = syz_open_dev$admmidi(&(0x7f0000000640), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000680)={0x0, 0x7ff, 0x41}) close(0x3) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000006c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x5}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000780)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1e3) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20940, 0x0) execveat(r1, &(0x7f0000000840)='./file1\x00', &(0x7f00000008c0)={[&(0x7f0000000880)='/dev/admmidi#\x00']}, &(0x7f0000000a40)={[&(0x7f0000000900)='/dev/kvm\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='\'\x00', &(0x7f00000009c0)='/dev/admmidi#\x00', &(0x7f0000000a00)='&:#&$&\x00']}, 0x100) r4 = socket(0xa, 0x5, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1ce4370004060108ab23915332362242eb5f13000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$DM_TABLE_LOAD(r8, 0xc138fd09, &(0x7f0000000ac0)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x1000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@thin_pool={0x0, 0x0, 0x0, 0x78, 'thin-pool\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '128', 0x20, 0x1b, ' 1 ignore_discard'}}]}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r6, 0x2, 0x5}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r6, 0x3c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xc, @loopback, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000280)=0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 149.196523ms ago: executing program 0 (id=368): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='comm\x00') write$binfmt_script(r0, 0x0, 0x0) ioctl$HOT_REMOVE_DISK(r0, 0x922, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000005c0)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\x00\x00\"0\xc5\xe1\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xef\x04;s\xe1\xc4\xcf\xaa\xa0\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbc*A\xdcq\xb7\xc1\xba&\xd1\xff\xffs\xf1\xc3G,](\x1dA\x8a\x97\xb1\xdb\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x5) fallocate(r5, 0x0, 0x400000000000000, 0x7) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000004540)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000680)={0x0, @aes128}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x288, 0x158, 0x320, 0x0, 0x158, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "8de4"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc0}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x288}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000640)) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000004c00)='dctcp', 0x5) connect$inet(r7, &(0x7f0000004c40)={0x2, 0x4e21, @local}, 0x10) shutdown(r7, 0x1) 82.048525ms ago: executing program 4 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000980)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)='l', 0x1}], 0x1}], 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x1, 0x1, 0x2243fce7, 0x519, 0x9, 0x9, 0xe0b1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f00000007c0), 0x56) sendmsg$kcm(r10, &(0x7f0000000800)={&(0x7f0000000880)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0xfffffffffffffe01, 0x2c, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000093009e800002860006000200000108009ed042"], 0x2a) r13 = syz_open_dev$dri(&(0x7f0000000180), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}) 81.666951ms ago: executing program 0 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000130008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x4000010) 2.116492ms ago: executing program 0 (id=371): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='./dev/sda1\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ext4\x00', 0x8410, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x519001, 0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000006c0)=0x2000000) write$tun(r1, &(0x7f0000000700)={@void, @void, @llc={@snap={0x1, 0x1, ')', "981473", 0x809b}}}, 0x1d4c0) close_range(r0, 0xffffffffffffffff, 0x0) 1.179837ms ago: executing program 3 (id=372): r0 = io_uring_setup(0x1077, &(0x7f0000001040)={0x0, 0xafd4, 0x1, 0x5, 0x2d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x1) r1 = io_uring_setup(0x7624, &(0x7f0000001100)={0x0, 0x653f, 0x100, 0x2, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000001180)=[r0], 0x1) syz_open_dev$dri(&(0x7f00000003c0), 0x1f, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) request_key(0x0, 0x0, &(0x7f0000000380)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r2 = socket$vsock_seqpacket(0x28, 0x5, 0x0) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="422798f66367915f909991ba4f0f4d85c888eeabd136eaf1fa291cff9b63ff83cbe91bf4d7d92b9a9db0b87aeb5be6fbe8dc7048a43d3134fd437f288797930c6db6f67661151cddf165317b2cadadde5bae58c52fc312313f158d6e7aa5a159e8bf01e8bc3e0f1e480dc052dd14e557fb89bad4cf0513855ac36b12fd7dbc40c3285a347390c6ef900f31c9bcdca8b8e011062fe0d2e377db5461b8ebd0584069ab551fe0bff1d1542539b29cea2ff459d3928fc883bc040c7f85a31c8180ee0556bba7834fd270533052ac77d9f5555ef0b99bea8383942cd45ea4b8aed2394ea1fb7a26d49252aed24e6f06a11069c406", 0xf2}, {&(0x7f0000000240)="66c623a46e3e9097e2e7c7223ab6ce75cc289967ca6830fd4c857cb993daaefda936f2cf3e3930cfef7acf2bcc5da4e63a44", 0x32}, {&(0x7f0000000280)="1f89a964b8a12165076726805840f784521eef053b267cdec53bfec0cc2eb1f8e6bfeb969e49ebe14372fe8ebbe123dd44d0b131b4ea1e8eb8", 0x39}, {&(0x7f00000002c0)="19d92f1e30a7815149cc9c1cd8bfa12bb7141ba75b5c0d91147e00f3360a4fc26f76af8863b260ee272655798a5cacc87100929448220c329cb70bc2d5f440c0736d2102374a95290f43a27ea4238800d264fbf7682c71bce50e8dfb767bb075e18f48d13fd1d093c212d9a59c720472b06a6bad259fdd7c7d399b8574a57fe020355c4b06e9768caf2d6da3ced33b40398a10024a6e", 0x96}, {&(0x7f0000000400)="a177604afd3b92f19fd79cb61c265a4fa0c9951d2d343b27def2aa5cd9bb1d95a2ae5a34faf42d1393b8c90f6d55ced1b9a063143cfd7582513d6d3b6c8c55fe75bb1f7e97a2269c80decf", 0x4b}], 0x5, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5d}}], 0x60}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)="b49893dfffb77c730c3989af178813024b1ecb0a80d514b5b710b099cdc554c5d42146b8f48cfc5b703cda4881f66cb92fb1eb4af3fb94dc4cefeb71c9a56365c31074d0ba11f866648705b853f2b282af70b2ef3783f702a3676062981e1a71bc4a45405714e19847d04681c4fa3c53b4e33c4e8dd3863a34d9", 0x7a}, {&(0x7f0000000600)="6141799c77e27c86355d4ba2b454776357fc89be04f1bacecc19d9c2c3ae932d128daf4ab4e75979e7a5750aef1380f797fe1f5c40d29da74854f7853ca07d07ac7a0e4456d4b2b073f49367f61f7e77c23f68176ec81c2807205b9cdd3a118fc731238cdd420e9dbec37c4493b1fe684941ef1c6036d028167523571a03238fd28fc63723b0467dbb41754b32d5500f82bd8ab3e567835acee248d0b120c4f3b7de4d22d4c730c222f77abd1e3731f20dbcd917f3114cf31a09db21ac3a9a14b0a8659fef9d81e83de6", 0xca}, {&(0x7f0000000700)="ee792daac840a994c1a584a52f861edcb49bd12d22d1b256f20338031f13db63088c19ad39c2cd1957d655d515d4ce522009f03aaac5b667432b75b32900c59186d874caf4d5c2bf8314183d40202197f515ead079fec1089a1ac9126e987de64bae65910e85177626a43f8775a0ec86a0886287dfcf5f2e106660b922fa93f740132d71172834e434502fea0f7a070d75ff9fad1f8b6e00e554cc5574c3296f197b4a19d8336efa2734593f3524c641ce43f00821dda53986901fc8e00a", 0xbe}, {&(0x7f00000007c0)="3e4a6dc43a2211dfcddb1f6a9ba945270263a33a879a213b3555146e455c0dae964745f54c888e611c2f38dd16f855c15dcd72ec8c780533609fdcbc5569771373c3107f9b1799e7dc09caad6a4d", 0x4e}, {&(0x7f0000000840)="6779247dd83d74c05c00183cc0a88ccb23e5306def7e6172d84db9d6248cfcd5516e720ee314d14b6352318510a99ba1005df3da77a2b137260a8f76efb003507dd730b8e6368f3e2611a3a4a7264f49089d52296e73f8d19dc01412ffde48e4cd8003cacf5db77db82020bd70330764839fda94b29c7c9d3ae7f457d4a3", 0x7e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)="1660ba858d36b22e5b85d8579b36dd8f5fbab420e52e3786d803468dd8c922e85554a01cfeb44014dac1c6daef287e1d77d62dd873bf6547e10355ebc57c0990f6c39041d0b2d292c8c49ec5a30b52f5623e633d756f0b23971f3e5d78688229ca9cfedbf2b422aaaa532aa70f6109edaed55b761500146f6c9ba34553d6b7bfc7df64974b3ff89d2217a6002504d86240c1cf8f3f49e9ede06d8083013252", 0x9f}, {&(0x7f0000000a00)="2495cfc776f55cbdefe30e488a01f560c5666d2d52324b43b051a8c293c914239a740d80ae34dd2a30fa4618d94da7dc14e35597c2815cc121772a6e0480607630d5bcd4f075086a62910642d0e426330c53cdf5ef0f903cf79f2d6491fbf6c8f25163e7b9e85b7b6fd66944ad73232b79f8c6ad5849247070a9d199f7e5297a84c68f7eac1ed28769d89b5de0980ffa9328919fa0c6b462244ebabf87ac2edd37e7fb6e525d88f431c702edb0ed", 0xae}, {&(0x7f0000000ac0)="7b504abadf08c8634be42f7a53dab70bb8b239987a3c136a5736acd77d50fff63d11177b6379ed4432c9ec0642733ef4235720419abeabe5110a8df8c89e95bb8401e7e83ec4257b4a3bac9ffa9d7616e3fd85a6f69c76b4c5794dbbe1a3d4de5c73e6bfcbb6b98b61cf9bc08f345500a122c396ca45be07c0d143da2cb0f02d642177ce75cc5c92aa1fc3f017c1683915fb92586b0e28e507a7985e82e1d34f7e8e93f97d72debcd0041426e4b572975e84530698ab323c559307db34ad2deefde0dad66aebabf84706222ae30361518a9b6b557e996d780dfbfa086bddfb1844dba27d8a67b754e9db662d3e508cb2b3484e", 0xf3}, {&(0x7f0000000bc0)="19e5c3294e722329cc181edb5242f55893699fb2b68dc64e7fcd80b202791565e11ffe82c1beda0e8ed8f0e7eac0717e83a0422158952cd1f01bf5f1512b552540c8335a470a7e19a11767e3bc67239d1496aa8d131eef8c2fd68b36d379b10263ea1e568ea1013900b38b5209a83e16dad42d2efb76857ea2afd0109590691fe0619bc2d9886e6590cc15a237320365e8045b968802a10b158879a31a14f18c735db7aff82631d891f8785ee47f39d88fabe73afada163105681e450589553b61c1cb188e151c457ad9058cd7", 0xcd}, {&(0x7f0000000cc0)="5b83e51726d1f05847a1fc7d8f0eb4941ca63f5fe06fd2c01745a7225eedb240bae4a27cff7b68e10ed0d519cb1885f4c9485b2cac4a54725ce080a9375ea010c5b91327bb4a68eb1b1d7c05953a9e70c76ad3e45f2ab0f1c777942e0a4b9d85d58af0977aa7e8559254676e930993f8e75b3ca002f1a4266418ad949218dfb8498e82f3e2f4395c508812d63619f017cedb99983e01e3377fab26d5f0b3817965afcf4dd0e17cb944b966c4eb83e55180320ada0578c78475dfc1e78bf8095764132a88c91bfcad59b42336e3d1f1ae4af90fe88f51a136c7998a60", 0xdc}, {&(0x7f0000000dc0)="1707bd99644ef2c4a7ee74f6fd05db1cb08d542535f5dc7eea0f62db0505d13f0fc7c39166d91e4a71451cfcc823a1cb10e31b5528f15381e185acc3734c04da1027c7c50250f7313bf92d41397acafcda26c28c3adb825d3c318c5f6912488b63b19a4c705291ffc709bb64d4afd009d24d1a4c1a03eff796da19fe56dc002649690f70f60f432d12435213ff8389e40afee385eb9fe585e46dd6300aec1d704a4dd037a3cd404131d91861fba466e5f99d0cb8d165061e06746e6465192b7183816e8d5025044f6205ff5d294e061962996331910cabef0b", 0xd9}], 0x6, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0xb4f8}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x30}}], 0x3, 0x4890) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) io_uring_setup(0x1077, &(0x7f0000001040)={0x0, 0xafd4, 0x1, 0x5, 0x2d2}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000010c0)=[{0x0}], 0x1) (async) io_uring_setup(0x7624, &(0x7f0000001100)={0x0, 0x653f, 0x100, 0x2, 0x28e, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000001180)=[r0], 0x1) (async) syz_open_dev$dri(&(0x7f00000003c0), 0x1f, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='omfs\x00', 0x208000, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) request_key(0x0, 0x0, &(0x7f0000000380)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) ptrace(0x10, 0x1) (async) socket$vsock_seqpacket(0x28, 0x5, 0x0) (async) sendmmsg$sock(r2, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="422798f66367915f909991ba4f0f4d85c888eeabd136eaf1fa291cff9b63ff83cbe91bf4d7d92b9a9db0b87aeb5be6fbe8dc7048a43d3134fd437f288797930c6db6f67661151cddf165317b2cadadde5bae58c52fc312313f158d6e7aa5a159e8bf01e8bc3e0f1e480dc052dd14e557fb89bad4cf0513855ac36b12fd7dbc40c3285a347390c6ef900f31c9bcdca8b8e011062fe0d2e377db5461b8ebd0584069ab551fe0bff1d1542539b29cea2ff459d3928fc883bc040c7f85a31c8180ee0556bba7834fd270533052ac77d9f5555ef0b99bea8383942cd45ea4b8aed2394ea1fb7a26d49252aed24e6f06a11069c406", 0xf2}, {&(0x7f0000000240)="66c623a46e3e9097e2e7c7223ab6ce75cc289967ca6830fd4c857cb993daaefda936f2cf3e3930cfef7acf2bcc5da4e63a44", 0x32}, {&(0x7f0000000280)="1f89a964b8a12165076726805840f784521eef053b267cdec53bfec0cc2eb1f8e6bfeb969e49ebe14372fe8ebbe123dd44d0b131b4ea1e8eb8", 0x39}, {&(0x7f00000002c0)="19d92f1e30a7815149cc9c1cd8bfa12bb7141ba75b5c0d91147e00f3360a4fc26f76af8863b260ee272655798a5cacc87100929448220c329cb70bc2d5f440c0736d2102374a95290f43a27ea4238800d264fbf7682c71bce50e8dfb767bb075e18f48d13fd1d093c212d9a59c720472b06a6bad259fdd7c7d399b8574a57fe020355c4b06e9768caf2d6da3ced33b40398a10024a6e", 0x96}, {&(0x7f0000000400)="a177604afd3b92f19fd79cb61c265a4fa0c9951d2d343b27def2aa5cd9bb1d95a2ae5a34faf42d1393b8c90f6d55ced1b9a063143cfd7582513d6d3b6c8c55fe75bb1f7e97a2269c80decf", 0x4b}], 0x5, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5d}}], 0x60}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)="b49893dfffb77c730c3989af178813024b1ecb0a80d514b5b710b099cdc554c5d42146b8f48cfc5b703cda4881f66cb92fb1eb4af3fb94dc4cefeb71c9a56365c31074d0ba11f866648705b853f2b282af70b2ef3783f702a3676062981e1a71bc4a45405714e19847d04681c4fa3c53b4e33c4e8dd3863a34d9", 0x7a}, {&(0x7f0000000600)="6141799c77e27c86355d4ba2b454776357fc89be04f1bacecc19d9c2c3ae932d128daf4ab4e75979e7a5750aef1380f797fe1f5c40d29da74854f7853ca07d07ac7a0e4456d4b2b073f49367f61f7e77c23f68176ec81c2807205b9cdd3a118fc731238cdd420e9dbec37c4493b1fe684941ef1c6036d028167523571a03238fd28fc63723b0467dbb41754b32d5500f82bd8ab3e567835acee248d0b120c4f3b7de4d22d4c730c222f77abd1e3731f20dbcd917f3114cf31a09db21ac3a9a14b0a8659fef9d81e83de6", 0xca}, {&(0x7f0000000700)="ee792daac840a994c1a584a52f861edcb49bd12d22d1b256f20338031f13db63088c19ad39c2cd1957d655d515d4ce522009f03aaac5b667432b75b32900c59186d874caf4d5c2bf8314183d40202197f515ead079fec1089a1ac9126e987de64bae65910e85177626a43f8775a0ec86a0886287dfcf5f2e106660b922fa93f740132d71172834e434502fea0f7a070d75ff9fad1f8b6e00e554cc5574c3296f197b4a19d8336efa2734593f3524c641ce43f00821dda53986901fc8e00a", 0xbe}, {&(0x7f00000007c0)="3e4a6dc43a2211dfcddb1f6a9ba945270263a33a879a213b3555146e455c0dae964745f54c888e611c2f38dd16f855c15dcd72ec8c780533609fdcbc5569771373c3107f9b1799e7dc09caad6a4d", 0x4e}, {&(0x7f0000000840)="6779247dd83d74c05c00183cc0a88ccb23e5306def7e6172d84db9d6248cfcd5516e720ee314d14b6352318510a99ba1005df3da77a2b137260a8f76efb003507dd730b8e6368f3e2611a3a4a7264f49089d52296e73f8d19dc01412ffde48e4cd8003cacf5db77db82020bd70330764839fda94b29c7c9d3ae7f457d4a3", 0x7e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)="1660ba858d36b22e5b85d8579b36dd8f5fbab420e52e3786d803468dd8c922e85554a01cfeb44014dac1c6daef287e1d77d62dd873bf6547e10355ebc57c0990f6c39041d0b2d292c8c49ec5a30b52f5623e633d756f0b23971f3e5d78688229ca9cfedbf2b422aaaa532aa70f6109edaed55b761500146f6c9ba34553d6b7bfc7df64974b3ff89d2217a6002504d86240c1cf8f3f49e9ede06d8083013252", 0x9f}, {&(0x7f0000000a00)="2495cfc776f55cbdefe30e488a01f560c5666d2d52324b43b051a8c293c914239a740d80ae34dd2a30fa4618d94da7dc14e35597c2815cc121772a6e0480607630d5bcd4f075086a62910642d0e426330c53cdf5ef0f903cf79f2d6491fbf6c8f25163e7b9e85b7b6fd66944ad73232b79f8c6ad5849247070a9d199f7e5297a84c68f7eac1ed28769d89b5de0980ffa9328919fa0c6b462244ebabf87ac2edd37e7fb6e525d88f431c702edb0ed", 0xae}, {&(0x7f0000000ac0)="7b504abadf08c8634be42f7a53dab70bb8b239987a3c136a5736acd77d50fff63d11177b6379ed4432c9ec0642733ef4235720419abeabe5110a8df8c89e95bb8401e7e83ec4257b4a3bac9ffa9d7616e3fd85a6f69c76b4c5794dbbe1a3d4de5c73e6bfcbb6b98b61cf9bc08f345500a122c396ca45be07c0d143da2cb0f02d642177ce75cc5c92aa1fc3f017c1683915fb92586b0e28e507a7985e82e1d34f7e8e93f97d72debcd0041426e4b572975e84530698ab323c559307db34ad2deefde0dad66aebabf84706222ae30361518a9b6b557e996d780dfbfa086bddfb1844dba27d8a67b754e9db662d3e508cb2b3484e", 0xf3}, {&(0x7f0000000bc0)="19e5c3294e722329cc181edb5242f55893699fb2b68dc64e7fcd80b202791565e11ffe82c1beda0e8ed8f0e7eac0717e83a0422158952cd1f01bf5f1512b552540c8335a470a7e19a11767e3bc67239d1496aa8d131eef8c2fd68b36d379b10263ea1e568ea1013900b38b5209a83e16dad42d2efb76857ea2afd0109590691fe0619bc2d9886e6590cc15a237320365e8045b968802a10b158879a31a14f18c735db7aff82631d891f8785ee47f39d88fabe73afada163105681e450589553b61c1cb188e151c457ad9058cd7", 0xcd}, {&(0x7f0000000cc0)="5b83e51726d1f05847a1fc7d8f0eb4941ca63f5fe06fd2c01745a7225eedb240bae4a27cff7b68e10ed0d519cb1885f4c9485b2cac4a54725ce080a9375ea010c5b91327bb4a68eb1b1d7c05953a9e70c76ad3e45f2ab0f1c777942e0a4b9d85d58af0977aa7e8559254676e930993f8e75b3ca002f1a4266418ad949218dfb8498e82f3e2f4395c508812d63619f017cedb99983e01e3377fab26d5f0b3817965afcf4dd0e17cb944b966c4eb83e55180320ada0578c78475dfc1e78bf8095764132a88c91bfcad59b42336e3d1f1ae4af90fe88f51a136c7998a60", 0xdc}, {&(0x7f0000000dc0)="1707bd99644ef2c4a7ee74f6fd05db1cb08d542535f5dc7eea0f62db0505d13f0fc7c39166d91e4a71451cfcc823a1cb10e31b5528f15381e185acc3734c04da1027c7c50250f7313bf92d41397acafcda26c28c3adb825d3c318c5f6912488b63b19a4c705291ffc709bb64d4afd009d24d1a4c1a03eff796da19fe56dc002649690f70f60f432d12435213ff8389e40afee385eb9fe585e46dd6300aec1d704a4dd037a3cd404131d91861fba466e5f99d0cb8d165061e06746e6465192b7183816e8d5025044f6205ff5d294e061962996331910cabef0b", 0xd9}], 0x6, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0xb4f8}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x30}}], 0x3, 0x4890) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) 0s ago: executing program 0 (id=373): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys/module/phram/parameters/phram\x00', &(0x7f00000000c0)='proc\x00', 0x1000000, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/kernel/panic_on_warn\x00', 0x42000, 0x0) write(r1, &(0x7f0000000480)='0\n\x00', 0x2) setresuid(0x0, 0x0, 0xffffffffffffffff) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r2) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x4e23}, 0x90) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2840, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r6, 0x4048aecb, &(0x7f00000002c0)=@arm64_ccsidr={0x6020000000110008, 0x0}) bind$rxrpc(r3, &(0x7f0000000640)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) bind$rxrpc(r0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="3b0356fc4e204b3ab5934c22db8e5ad699f49e20554b9db128d7e175aaf6b49388c5d4fa58cd2b4ea6f69df4efaaad1c397d8cf1cb0d5bacdbe580f6db796522269f0b98924d96f9e65bc3a2a6", 0x4d, 0x4000, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @local, 0xffff}, 0x1c) r7 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x2, {&(0x7f0000000180)}, 0x400000}) kernel console output (not intermixed with test programs): [ 28.693212][ T42] audit: type=1400 audit(1793682371.478:115): avc: denied { siginh } for pid=5683 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.796050][ T42] audit: type=1400 audit(1793682373.588:116): avc: denied { write } for pid=5688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.858180][ T42] audit: type=1400 audit(1793682373.648:117): avc: denied { write } for pid=5691 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:55537' (ED25519) to the list of known hosts. [ 31.042297][ T42] audit: type=1400 audit(1793682373.828:118): avc: denied { name_bind } for pid=5696 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.085735][ T42] audit: type=1400 audit(1793682373.868:119): avc: denied { execute } for pid=5697 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.086973][ T42] audit: type=1400 audit(1793682373.878:120): avc: denied { execute_no_trans } for pid=5697 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.240144][ T42] audit: type=1400 audit(1793682374.028:121): avc: denied { write } for pid=5698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.289521][ T42] audit: type=1400 audit(1793682374.078:122): avc: denied { write } for pid=5701 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.560087][ T42] audit: type=1400 audit(1793682374.348:123): avc: denied { write } for pid=5704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.627358][ T42] audit: type=1400 audit(1793682374.418:124): avc: denied { write } for pid=5707 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.745973][ T42] audit: type=1400 audit(1793682374.538:125): avc: denied { write } for pid=5710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.987911][ T5697] cgroup: Unknown subsys name 'net' [ 34.117501][ T5697] cgroup: Unknown subsys name 'cpuset' [ 34.122768][ T5697] cgroup: Unknown subsys name 'rlimit' [ 34.339267][ T5764] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.181957][ T5697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.587773][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 39.587803][ T42] audit: type=1400 audit(1793682382.378:154): avc: denied { execmem } for pid=5772 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.781841][ T42] audit: type=1400 audit(1793682382.568:155): avc: denied { create } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.782237][ T42] audit: type=1400 audit(1793682382.568:156): avc: denied { read write } for pid=5776 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.782407][ T42] audit: type=1400 audit(1793682382.568:157): avc: denied { read write } for pid=5775 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.782856][ T42] audit: type=1400 audit(1793682382.568:158): avc: denied { open } for pid=5776 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 39.788720][ T42] audit: type=1400 audit(1793682382.578:159): avc: denied { ioctl } for pid=5775 comm="syz-executor" path="socket:[2929]" dev="sockfs" ino=2929 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.811383][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.819750][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.821939][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.822344][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.822602][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.823326][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.823666][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.824055][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.824240][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.825611][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.825804][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.826306][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.827153][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.827425][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.829564][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.832633][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.833206][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.835055][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.835814][ T42] audit: type=1400 audit(1793682382.628:160): avc: denied { read } for pid=5784 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.835988][ T42] audit: type=1400 audit(1793682382.628:161): avc: denied { open } for pid=5784 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.836995][ T42] audit: type=1400 audit(1793682382.628:162): avc: denied { mounton } for pid=5784 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 39.840627][ T42] audit: type=1400 audit(1793682382.628:163): avc: denied { module_request } for pid=5784 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.845219][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.850451][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.036817][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.037499][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 40.037517][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.038221][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.042839][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 40.064585][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 40.131812][ T5775] infiniband rxe0: set active [ 40.133132][ T5775] infiniband rxe0: added rxe_eth0 [ 40.145539][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.146183][ T5775] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 40.146204][ T5775] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 40.146226][ T5775] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 40.161804][ T5775] RDS/IB: rxe0: added [ 40.161922][ T5775] smc: adding ib device rxe0 with port count 1 [ 40.161956][ T5775] smc: ib device rxe0 port 1 has no pnetid [ 40.168045][ T34] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.174785][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.285157][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.393133][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.425888][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.426717][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.427007][ T5784] bridge_slave_0: entered allmulticast mode [ 40.428499][ T5784] bridge_slave_0: entered promiscuous mode [ 40.432335][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.432411][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.432544][ T5784] bridge_slave_1: entered allmulticast mode [ 40.434420][ T5784] bridge_slave_1: entered promiscuous mode [ 40.464501][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.464613][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.464699][ T5785] bridge_slave_0: entered allmulticast mode [ 40.465881][ T5785] bridge_slave_0: entered promiscuous mode [ 40.468623][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.468724][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.468964][ T5785] bridge_slave_1: entered allmulticast mode [ 40.470257][ T5785] bridge_slave_1: entered promiscuous mode [ 40.509376][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.509509][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.509587][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.509687][ T5776] bridge_slave_0: entered allmulticast mode [ 40.511102][ T5776] bridge_slave_0: entered promiscuous mode [ 40.513483][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.513557][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.514456][ T5776] bridge_slave_1: entered allmulticast mode [ 40.515818][ T5776] bridge_slave_1: entered promiscuous mode [ 40.531166][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.551855][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.553386][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.559284][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.565066][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.572051][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.574399][ T5784] team0: Port device team_slave_0 added [ 40.585777][ T5784] team0: Port device team_slave_1 added [ 40.586694][ T5776] team0: Port device team_slave_0 added [ 40.599022][ T5776] team0: Port device team_slave_1 added [ 40.635967][ T5785] team0: Port device team_slave_0 added [ 40.636970][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.636980][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.636995][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.637889][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.637898][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.637911][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.638497][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.638506][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.638519][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.639558][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.639566][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.639580][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.640642][ T5785] team0: Port device team_slave_1 added [ 40.697790][ T5784] hsr_slave_0: entered promiscuous mode [ 40.698276][ T5784] hsr_slave_1: entered promiscuous mode [ 40.699408][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.699417][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.699431][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.723308][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.723325][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.723346][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.728261][ T5776] hsr_slave_0: entered promiscuous mode [ 40.728744][ T5776] hsr_slave_1: entered promiscuous mode [ 40.729056][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 40.729066][ T5776] Cannot create hsr debugfs directory [ 40.853717][ T5785] hsr_slave_0: entered promiscuous mode [ 40.854256][ T5785] hsr_slave_1: entered promiscuous mode [ 40.854567][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 40.854577][ T5785] Cannot create hsr debugfs directory [ 41.014007][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.018413][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.042718][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.045889][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.055047][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.057062][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.057477][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.059856][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.112667][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.115161][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.115584][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.123438][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.124679][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.128429][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.150370][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.150425][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.150488][ T5775] bridge_slave_0: entered allmulticast mode [ 41.151172][ T5775] bridge_slave_0: entered promiscuous mode [ 41.152647][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.156828][ T5776] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.164463][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.164534][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.164595][ T5775] bridge_slave_1: entered allmulticast mode [ 41.165301][ T5775] bridge_slave_1: entered promiscuous mode [ 41.172094][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.172144][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.172372][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.172417][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.187442][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.197896][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.231403][ T5775] team0: Port device team_slave_0 added [ 41.231834][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.231884][ T5776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.232042][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.232086][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.234715][ T5775] team0: Port device team_slave_1 added [ 41.256326][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.256336][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.256351][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.257245][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.257253][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.257267][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.257891][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.259896][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.265362][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.267644][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.268031][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.276916][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.297051][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.301245][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.304869][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.306572][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.315140][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.315677][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.325511][ T5775] hsr_slave_0: entered promiscuous mode [ 41.325967][ T5775] hsr_slave_1: entered promiscuous mode [ 41.326262][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 41.326272][ T5775] Cannot create hsr debugfs directory [ 41.398209][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.400736][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.440223][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.449382][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.455764][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.455834][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.457993][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.458061][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.471052][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.471099][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.472971][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.473013][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.494943][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.531036][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.532744][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.533422][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.537269][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.537983][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.540721][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.547048][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.550247][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.552224][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.568151][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.568227][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.579942][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.580017][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.658218][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.673385][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.683681][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.683756][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.685285][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.685355][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.813252][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.814954][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.853477][ T5776] veth0_vlan: entered promiscuous mode [ 41.867094][ T5784] veth0_vlan: entered promiscuous mode [ 41.868450][ T5776] veth1_vlan: entered promiscuous mode [ 41.873453][ T5784] veth1_vlan: entered promiscuous mode [ 41.887426][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.907560][ T5776] veth0_macvtap: entered promiscuous mode [ 41.909811][ T5776] veth1_macvtap: entered promiscuous mode [ 41.914944][ T5778] Bluetooth: hci3: command tx timeout [ 41.915094][ T5778] Bluetooth: hci1: command tx timeout [ 41.925330][ T5787] Bluetooth: hci2: command tx timeout [ 41.925536][ T5787] Bluetooth: hci0: command tx timeout [ 41.929913][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.932854][ T5784] veth0_macvtap: entered promiscuous mode [ 41.935636][ T5785] veth0_vlan: entered promiscuous mode [ 41.937030][ T5784] veth1_macvtap: entered promiscuous mode [ 41.939307][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.948297][ T5785] veth1_vlan: entered promiscuous mode [ 41.951747][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.965393][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.975230][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.002918][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.015706][ T5785] veth0_macvtap: entered promiscuous mode [ 42.017457][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.017468][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.030496][ T5785] veth1_macvtap: entered promiscuous mode [ 42.031373][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.031384][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.059468][ T5775] veth0_vlan: entered promiscuous mode [ 42.063578][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.070584][ T5775] veth1_vlan: entered promiscuous mode [ 42.076356][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.090874][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.090886][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.110749][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.110763][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.125427][ T5775] veth0_macvtap: entered promiscuous mode [ 42.131057][ T5775] veth1_macvtap: entered promiscuous mode [ 42.131295][ T5776] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.153075][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.166316][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.166841][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.166923][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.166956][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.166983][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.167009][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.184711][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.184721][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.213767][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.213781][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.215032][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.216554][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.231361][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.231375][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.234255][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.234419][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.250947][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.250961][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.274866][ T5936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 42.286550][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.286750][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.286900][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.287064][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.287084][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.287102][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.622824][ T5958] netlink: 'syz.0.8': attribute type 2 has an invalid length. [ 42.622860][ T5958] netlink: 'syz.0.8': attribute type 2 has an invalid length. [ 42.687239][ T5966] syzkaller0: entered promiscuous mode [ 42.687254][ T5966] syzkaller0: entered allmulticast mode [ 42.689661][ T5967] 0: reclassify loop, rule prio 0, protocol 800 [ 42.693764][ T5972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11'. [ 42.941051][ T6000] jffs2: notice: (6000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 42.947349][ T6000] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 42.954207][ T6000] romfs: unable to set blocksize [ 42.954207][ T6000] [ 42.961624][ T6003] gfs2: error -5 reading superblock [ 43.053965][ T5872] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 43.205397][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 43.206488][ T5872] usb 8-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 43.207859][ T5872] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.207877][ T5872] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.207897][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.210409][ T5872] usb 8-1: config 0 descriptor?? [ 43.844520][ T6012] capability: warning: `syz.0.23' uses deprecated v2 capabilities in a way that may be insecure [ 43.848776][ T6012] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 43.874601][ T6012] Zero length message leads to an empty skb [ 43.888185][ T6019] netlink: 156 bytes leftover after parsing attributes in process `syz.1.24'. [ 43.920021][ T6023] xt_hashlimit: size too large, truncated to 1048576 [ 43.991824][ T6033] overlayfs: invalid origin (0000) [ 43.993928][ T5778] Bluetooth: hci2: command tx timeout [ 43.993953][ T5778] Bluetooth: hci1: command tx timeout [ 43.993965][ T5778] Bluetooth: hci3: command tx timeout [ 44.028431][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 44.031162][ T6037] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 44.131810][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 44.264014][ T5887] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.414519][ T5887] usb 5-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 44.415776][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.415799][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.415811][ T5887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 44.415823][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 44.417757][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.417770][ T5887] usb 5-1: Product: syz [ 44.417778][ T5887] usb 5-1: Manufacturer: syz [ 44.417785][ T5887] usb 5-1: SerialNumber: syz [ 44.421338][ T5887] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 44.421519][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 87 [ 44.421549][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 44.424493][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 44.424595][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 44.424627][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 44.424668][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 85 [ 44.424700][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 5 [ 44.427113][ T5887] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 44.429135][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 44.429169][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 44.429200][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 44.429230][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 44.429260][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 86 [ 44.429291][ T5887] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 44.430542][ T5887] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 44.473944][ T5778] Bluetooth: hci0: command tx timeout [ 44.626526][ T42] kauditd_printk_skb: 124 callbacks suppressed [ 44.626539][ T42] audit: type=1400 audit(1793682387.418:288): avc: denied { mount } for pid=6039 comm="syz.0.30" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 44.733675][ T10] usb 5-1: USB disconnect, device number 2 [ 44.738612][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 44.740323][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 44.740631][ T10] keyspan 5-1:1.0: device disconnected [ 45.183945][ T42] audit: type=1400 audit(1793682387.968:289): avc: denied { write } for pid=6052 comm="syz.1.34" name="001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.185469][ T42] audit: type=1400 audit(1793682387.978:290): avc: denied { map } for pid=6052 comm="syz.1.34" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.188531][ T6053] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 45.235515][ T6053] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.249850][ T42] audit: type=1400 audit(1793682388.038:291): avc: denied { unmount } for pid=5776 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.302561][ T42] audit: type=1400 audit(1793682388.088:292): avc: denied { name_bind } for pid=6056 comm="syz.0.36" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 45.303081][ T6057] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 45.316069][ T6053] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.350122][ T6053] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.415207][ T6053] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.467502][ T42] audit: type=1400 audit(1793682388.258:293): avc: denied { write } for pid=6058 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.468178][ T42] audit: type=1400 audit(1793682388.258:294): avc: denied { connect } for pid=6058 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.471320][ T42] audit: type=1400 audit(1793682388.258:295): avc: denied { name_connect } for pid=6058 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 45.518874][ T42] audit: type=1400 audit(1793682388.308:296): avc: denied { name_connect } for pid=6058 comm="syz.0.37" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 45.569588][ T42] audit: type=1400 audit(1793682388.358:297): avc: denied { listen } for pid=6058 comm="syz.0.37" lport=54723 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.576234][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 45.576249][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 45.813938][ T1355] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 45.831814][ T5872] usbhid 8-1:0.0: can't add hid device: -71 [ 45.831869][ T5872] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 45.835585][ T5872] usb 8-1: USB disconnect, device number 2 [ 45.845729][ T6073] capability: warning: `syz.1.41' uses 32-bit capabilities (legacy support in use) [ 45.881009][ T6079] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 45.881502][ T6079] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 45.978961][ T1355] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.979001][ T1355] usb 5-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 45.979996][ T1355] usb 5-1: config 142 has an invalid interface number: 251 but max is 0 [ 45.980016][ T1355] usb 5-1: config 142 descriptor has 1 excess byte, ignoring [ 45.980031][ T1355] usb 5-1: config 142 has no interface number 0 [ 45.980060][ T1355] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 45.980080][ T1355] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 45.980099][ T1355] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 45.980116][ T1355] usb 5-1: config 142 interface 251 has no altsetting 0 [ 45.982648][ T1355] usb 5-1: string descriptor 0 read error: -22 [ 45.982742][ T1355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.985630][ T6059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 45.985766][ T6059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 45.987458][ T1355] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected [ 45.990539][ T1355] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 46.047715][ T6090] ======================================================= [ 46.047715][ T6090] WARNING: The mand mount option has been deprecated and [ 46.047715][ T6090] and is ignored by this kernel. Remove the mand [ 46.047715][ T6090] option from the mount to silence this warning. [ 46.047715][ T6090] ======================================================= [ 46.074198][ T5789] Bluetooth: hci2: command tx timeout [ 46.074251][ T5138] Bluetooth: hci1: command tx timeout [ 46.074285][ T5778] Bluetooth: hci3: command tx timeout [ 46.164037][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 46.164094][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 46.257931][ T6094] ima: policy update failed [ 46.396447][ T6101] vlan2: entered allmulticast mode [ 46.396469][ T6101] bond0: entered allmulticast mode [ 46.396482][ T6101] bond_slave_0: entered allmulticast mode [ 46.396496][ T6101] bond_slave_1: entered allmulticast mode [ 46.448727][ T6103] FAULT_INJECTION: forcing a failure. [ 46.448727][ T6103] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.448775][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.2.52 Not tainted syzkaller #0 PREEMPT(full) [ 46.448797][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.448808][ T6103] Call Trace: [ 46.448815][ T6103] [ 46.448822][ T6103] dump_stack_lvl+0x100/0x190 [ 46.448873][ T6103] should_fail_ex.cold+0x5/0xa [ 46.448913][ T6103] should_fail_alloc_page+0xeb/0x140 [ 46.448948][ T6103] prepare_alloc_pages+0x1f0/0x5b0 [ 46.448974][ T6103] __alloc_frozen_pages_noprof+0x1b1/0x3280 [ 46.449002][ T6103] ? __pfx_get_page_from_freelist+0x10/0x10 [ 46.449050][ T6103] ? rcu_is_watching+0x13/0xc0 [ 46.449084][ T6103] ? trace_mm_page_alloc+0x164/0x1c0 [ 46.449105][ T6103] ? __alloc_frozen_pages_noprof+0x306/0x3280 [ 46.449132][ T6103] ? is_bpf_text_address+0x8a/0x1a0 [ 46.449153][ T6103] ? lock_release+0x24d/0x310 [ 46.449176][ T6103] ? bpf_ksym_find+0x128/0x1c0 [ 46.449201][ T6103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 46.449225][ T6103] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 46.449252][ T6103] ? is_bpf_text_address+0x94/0x1a0 [ 46.449274][ T6103] ? kernel_text_address+0x8d/0x100 [ 46.449294][ T6103] ? mark_held_locks+0x40/0x70 [ 46.449324][ T6103] ? __kernel_text_address+0xd/0x30 [ 46.449345][ T6103] ? unwind_get_return_address+0x59/0xa0 [ 46.449367][ T6103] ? arch_stack_walk+0xa6/0xf0 [ 46.449396][ T6103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 46.449430][ T6103] ? stack_trace_save+0x8e/0xc0 [ 46.449453][ T6103] ? __pfx_stack_trace_save+0x10/0x10 [ 46.449489][ T6103] alloc_pages_bulk_noprof+0x5f0/0x1480 [ 46.449522][ T6103] ? policy_nodemask+0xed/0x5e0 [ 46.449546][ T6103] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 46.449588][ T6103] __kasan_populate_vmalloc+0xf0/0x210 [ 46.449623][ T6103] alloc_vmap_area+0x963/0x2bc0 [ 46.449660][ T6103] ? kasan_save_track+0x14/0x30 [ 46.449677][ T6103] ? __kasan_kmalloc+0xaa/0xb0 [ 46.449694][ T6103] ? __pfx_alloc_vmap_area+0x10/0x10 [ 46.449723][ T6103] ? __get_vm_area_node+0x124/0x350 [ 46.449743][ T6103] __get_vm_area_node+0x1ed/0x350 [ 46.449766][ T6103] __vmalloc_node_range_noprof+0x2ad/0x1440 [ 46.449787][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.449829][ T6103] ? lock_acquire+0x1d1/0x380 [ 46.449851][ T6103] ? do_alloc_pages+0x39/0x1e0 [ 46.449876][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.449909][ T6103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.449929][ T6103] ? do_alloc_pages+0xb3/0x1e0 [ 46.449948][ T6103] ? do_alloc_pages+0xb3/0x1e0 [ 46.449974][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.450000][ T6103] __vmalloc_node_noprof+0xad/0xf0 [ 46.450019][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.450045][ T6103] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 46.450068][ T6103] __snd_dma_alloc_pages+0xd2/0x150 [ 46.450095][ T6103] snd_dma_alloc_dir_pages+0x151/0x240 [ 46.450125][ T6103] do_alloc_pages+0xe5/0x1e0 [ 46.450149][ T6103] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 46.450176][ T6103] snd_pcm_hw_params+0x13b1/0x1730 [ 46.450200][ T6103] ? do_raw_spin_lock+0x128/0x260 [ 46.450219][ T6103] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 46.450245][ T6103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.450288][ T6103] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.450314][ T6103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 46.450348][ T6103] snd_pcm_kernel_ioctl+0x104/0x270 [ 46.450375][ T6103] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 46.450408][ T6103] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 46.450427][ T6103] ? __pfx___mutex_lock+0x10/0x10 [ 46.450465][ T6103] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 46.450486][ T6103] snd_pcm_oss_sync+0x1de/0x840 [ 46.450511][ T6103] snd_pcm_oss_release+0x238/0x300 [ 46.450530][ T6103] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 46.450551][ T6103] __fput+0x3fb/0xb50 [ 46.450581][ T6103] fput_close_sync+0x118/0x250 [ 46.450607][ T6103] ? __pfx_fput_close_sync+0x10/0x10 [ 46.450639][ T6103] filp_close_sync+0x75/0xa0 [ 46.450665][ T6103] __range_close+0x4a6/0x8b0 [ 46.450700][ T6103] __x64_sys_close_range+0x1f8/0x430 [ 46.450726][ T6103] ? __pfx___x64_sys_close_range+0x10/0x10 [ 46.450760][ T6103] do_syscall_64+0x123/0x790 [ 46.450781][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.450801][ T6103] RIP: 0033:0x7f095479fb19 [ 46.450818][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.450834][ T6103] RSP: 002b:00007f09529f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 46.450856][ T6103] RAX: ffffffffffffffda RBX: 00007f0954a25fa0 RCX: 00007f095479fb19 [ 46.450868][ T6103] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 46.450880][ T6103] RBP: 00007f0954837b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.450891][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.450902][ T6103] R13: 00007f0954a26038 R14: 00007f0954a25fa0 R15: 00007ffe3092d978 [ 46.450928][ T6103] [ 46.452028][ T6103] syz.2.52: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 46.452091][ T6103] CPU: 1 UID: 0 PID: 6103 Comm: syz.2.52 Not tainted syzkaller #0 PREEMPT(full) [ 46.452110][ T6103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.452119][ T6103] Call Trace: [ 46.452125][ T6103] [ 46.452132][ T6103] dump_stack_lvl+0x100/0x190 [ 46.452164][ T6103] warn_alloc.cold+0x9e/0xb2 [ 46.452186][ T6103] ? __pfx_warn_alloc+0x10/0x10 [ 46.452212][ T6103] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.452235][ T6103] ? __get_vm_area_node+0x2f0/0x350 [ 46.452261][ T6103] ? __get_vm_area_node+0x22b/0x350 [ 46.452285][ T6103] __vmalloc_node_range_noprof+0xdc6/0x1440 [ 46.452315][ T6103] ? lock_acquire+0x1d1/0x380 [ 46.452342][ T6103] ? do_alloc_pages+0x39/0x1e0 [ 46.452370][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.452405][ T6103] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 46.452425][ T6103] ? do_alloc_pages+0xb3/0x1e0 [ 46.452445][ T6103] ? do_alloc_pages+0xb3/0x1e0 [ 46.452473][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.452498][ T6103] __vmalloc_node_noprof+0xad/0xf0 [ 46.452534][ T6103] ? __snd_dma_alloc_pages+0xd2/0x150 [ 46.452562][ T6103] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 46.452586][ T6103] __snd_dma_alloc_pages+0xd2/0x150 [ 46.452614][ T6103] snd_dma_alloc_dir_pages+0x151/0x240 [ 46.452643][ T6103] do_alloc_pages+0xe5/0x1e0 [ 46.452668][ T6103] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 46.452695][ T6103] snd_pcm_hw_params+0x13b1/0x1730 [ 46.452720][ T6103] ? do_raw_spin_lock+0x128/0x260 [ 46.452738][ T6103] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 46.452766][ T6103] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 46.452794][ T6103] ? lockdep_hardirqs_on+0x7d/0x110 [ 46.452811][ T6103] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 46.452843][ T6103] snd_pcm_kernel_ioctl+0x104/0x270 [ 46.452867][ T6103] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 46.452899][ T6103] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 46.452919][ T6103] ? __pfx___mutex_lock+0x10/0x10 [ 46.452957][ T6103] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 46.452979][ T6103] snd_pcm_oss_sync+0x1de/0x840 [ 46.453003][ T6103] snd_pcm_oss_release+0x238/0x300 [ 46.453022][ T6103] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 46.453042][ T6103] __fput+0x3fb/0xb50 [ 46.453072][ T6103] fput_close_sync+0x118/0x250 [ 46.453097][ T6103] ? __pfx_fput_close_sync+0x10/0x10 [ 46.453130][ T6103] filp_close_sync+0x75/0xa0 [ 46.453156][ T6103] __range_close+0x4a6/0x8b0 [ 46.453189][ T6103] __x64_sys_close_range+0x1f8/0x430 [ 46.453216][ T6103] ? __pfx___x64_sys_close_range+0x10/0x10 [ 46.453249][ T6103] do_syscall_64+0x123/0x790 [ 46.453271][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.453291][ T6103] RIP: 0033:0x7f095479fb19 [ 46.453323][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.453341][ T6103] RSP: 002b:00007f09529f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 46.453359][ T6103] RAX: ffffffffffffffda RBX: 00007f0954a25fa0 RCX: 00007f095479fb19 [ 46.453372][ T6103] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 46.453383][ T6103] RBP: 00007f0954837b70 R08: 0000000000000000 R09: 0000000000000000 [ 46.453395][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.453426][ T6103] R13: 00007f0954a26038 R14: 00007f0954a25fa0 R15: 00007ffe3092d978 [ 46.453458][ T6103] [ 46.454082][ T6103] Mem-Info: [ 46.454093][ T6103] active_anon:27674 inactive_anon:0 isolated_anon:0 [ 46.454093][ T6103] active_file:0 inactive_file:61262 isolated_file:0 [ 46.454093][ T6103] unevictable:1000 dirty:1884 writeback:0 [ 46.454093][ T6103] slab_reclaimable:12330 slab_unreclaimable:67951 [ 46.454093][ T6103] mapped:27422 shmem:20824 pagetables:1243 [ 46.454093][ T6103] sec_pagetables:296 bounce:0 [ 46.454093][ T6103] kernel_misc_reclaimable:0 [ 46.454093][ T6103] free:426362 free_pcp:16532 free_cma:0 [ 46.454142][ T6103] Node 0 active_anon:110696kB inactive_anon:0kB active_file:0kB inactive_file:244844kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:109688kB dirty:7496kB writeback:0kB shmem:81296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:4764kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.454190][ T6103] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 46.454237][ T6103] Node 0 DMA free:15360kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.454288][ T6103] lowmem_reserve[]: 0 1201 1201 1201 1201 [ 46.454330][ T6103] Node 0 DMA32 free:46880kB boost:0kB min:27068kB low:33832kB high:40596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:110696kB inactive_anon:0kB active_file:0kB inactive_file:244844kB unevictable:2000kB writepending:7496kB zspages:0kB present:2080628kB managed:1230740kB mlocked:0kB bounce:0kB free_pcp:62752kB local_pcp:14592kB free_cma:0kB [ 46.454387][ T6103] lowmem_reserve[]: 0 0 0 0 0 [ 46.454417][ T6103] Node 1 Normal free:1643208kB boost:0kB min:40168kB low:50208kB high:60248kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:40kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:3364kB local_pcp:0kB free_cma:0kB [ 46.454468][ T6103] lowmem_reserve[]: 0 0 0 0 0 [ 46.454497][ T6103] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.454619][ T6103] Node 0 DMA32: 2*4kB (UE) 1*8kB (E) 1*16kB (M) 3*32kB (UME) 1*64kB (U) 2*128kB (ME) 3*256kB (UME) 3*512kB (UE) 1*1024kB (U) 1*2048kB (U) 10*4096kB (M) = 46784kB [ 46.454760][ T6103] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 1*16kB (M) 3*32kB (M) 3*64kB (UM) 3*128kB (M) 0*256kB 4*512kB (UM) 2*1024kB (U) 2*2048kB (UM) 399*4096kB (UM) = 1643200kB [ 46.454896][ T6103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.454911][ T6103] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.454924][ T6103] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 46.454938][ T6103] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 46.454952][ T6103] 82082 total pagecache pages [ 46.454958][ T6103] 0 pages in swap cache [ 46.454964][ T6103] Free swap = 124996kB [ 46.454970][ T6103] Total swap = 124996kB [ 46.454977][ T6103] 1048443 pages RAM [ 46.454983][ T6103] 0 pages HighMem/MovableOnly [ 46.454989][ T6103] 291448 pages reserved [ 46.454995][ T6103] 0 pages cma reserved [ 46.460557][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 46.460572][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 46.504475][ T6110] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.55'. [ 46.504584][ T6110] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.55'. [ 46.554709][ T5787] Bluetooth: hci0: command tx timeout [ 46.705396][ T6059] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 46.705415][ T6059] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 46.705961][ C2] usb 5-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 46.972246][ T6124] overlayfs: missing 'lowerdir' [ 46.975607][ T63] usb 5-1: USB disconnect, device number 3 [ 46.979565][ T63] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 46.979883][ T63] cypress_m8 5-1:142.251: device disconnected [ 47.055950][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6134 comm=syz.2.63 [ 47.293881][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 47.454394][ T24] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 47.455303][ T24] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 47.455320][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 47.457048][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 47.457060][ T24] usb 8-1: Product: syz [ 47.457068][ T24] usb 8-1: Manufacturer: syz [ 47.457075][ T24] usb 8-1: SerialNumber: syz [ 47.459321][ T24] usb 8-1: config 0 descriptor?? [ 47.464462][ T24] usb 8-1: selecting invalid altsetting 0 [ 47.721454][ C2] usb 8-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 47.721476][ T5872] usb 8-1: USB disconnect, device number 3 [ 47.721557][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 47.729229][ T6131] usb 8-1: cannot submit urb 0, error -19: no device [ 47.753028][ T6150] Bluetooth: MGMT ver 1.23 [ 47.765721][ T6150] ptrace attach of "/syz-executor exec"[6151] was attempted by "/syz-executor exec"[6150] [ 47.788859][ T6153] futex_wake_op: syz.0.67 tries to shift op by 144; fix this program [ 47.870793][ T6157] __nla_validate_parse: 48 callbacks suppressed [ 47.870807][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'. [ 47.978142][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'. [ 47.992530][ T6164] bond0: (slave bond_slave_0): Releasing backup interface [ 48.067463][ T6164] bond_slave_0: entered promiscuous mode [ 48.067478][ T6164] bond_slave_0: entered allmulticast mode [ 48.155636][ T5787] Bluetooth: hci3: command tx timeout [ 48.155659][ T5787] Bluetooth: hci1: command tx timeout [ 48.278561][ T6201] Illegal XDP return value 4294967274 on prog (id 39) dev N/A, expect packet loss! [ 48.327313][ T6208] evm: overlay not supported [ 48.328344][ T5787] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 48.478857][ T6225] Cannot find del_set index 0 as target [ 48.744449][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 48.810662][ T6252] team0 (unregistering): Port device team_slave_0 removed [ 48.813727][ T6252] team0 (unregistering): Port device team_slave_1 removed [ 48.916434][ T6267] usb usb9: check_ctrlrecip: process 6267 (syz.1.98) requesting ep 01 but needs 81 [ 48.916453][ T6267] usb usb9: usbfs: process 6267 (syz.1.98) did not claim interface 0 before use [ 49.101743][ T6295] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 49.166802][ T6301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'. [ 49.169607][ T6301] comedi comedi3: comedi_config --init_data is deprecated [ 49.235568][ T6313] 9p: Bad value for 'rfdno' [ 49.305241][ T6332] device-mapper: table: 248:0: clone: Error opening source device (-ENOENT) [ 49.305271][ T6332] device-mapper: ioctl: error adding target to table [ 49.373280][ T6343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'. [ 49.377640][ T6343] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 49.377739][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6343 comm=syz.0.121 [ 49.377759][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6343 comm=syz.0.121 [ 49.377773][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=6343 comm=syz.0.121 [ 49.574134][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.633878][ T5879] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 49.743876][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 49.744349][ T9] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 49.745142][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 49.745166][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 49.745178][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 49.745190][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 49.745202][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.745222][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.794018][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 49.794513][ T5879] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 49.795512][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.795528][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 49.795547][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.798895][ T5879] usb 5-1: config 0 descriptor?? [ 49.952353][ T9] usb 6-1: usb_control_msg returned -32 [ 49.952381][ T9] usbtmc 6-1:16.0: can't read capabilities [ 50.007323][ T6359] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 50.032028][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 50.032041][ T42] audit: type=1400 audit(1793682392.818:387): avc: denied { write } for pid=6363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.074099][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 50.090227][ T42] audit: type=1400 audit(1793682392.878:388): avc: denied { write } for pid=6370 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.170280][ T42] audit: type=1400 audit(1793682392.958:389): avc: denied { write } for pid=6373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.204631][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.204877][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.220315][ T42] audit: type=1400 audit(1793682393.008:390): avc: denied { write } for pid=6376 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.223868][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 50.229959][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 50.229983][ T10] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 50.237136][ T10] usb 8-1: string descriptor 0 read error: -22 [ 50.237196][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.242042][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 50.242069][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 50.242326][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 50.247593][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 50.250853][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 50.250880][ T10] usb 8-1: media controller created [ 50.251151][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 50.251212][ T10] dw2102: i2c transfer failed. [ 50.251230][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 50.251237][ T10] dw2102: i2c transfer failed. [ 50.251243][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 50.251249][ T10] dw2102: i2c transfer failed. [ 50.251255][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 50.251261][ T10] dw2102: i2c transfer failed. [ 50.251267][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 50.251273][ T10] dw2102: i2c transfer failed. [ 50.251278][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 50.251284][ T10] dw2102: i2c transfer failed. [ 50.251288][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 50.268986][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 50.269887][ T42] audit: type=1400 audit(1793682393.058:391): avc: denied { read } for pid=5785 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.269916][ T42] audit: type=1400 audit(1793682393.058:392): avc: denied { open } for pid=5785 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.269988][ T42] audit: type=1400 audit(1793682393.058:393): avc: denied { ioctl } for pid=5785 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.288693][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 50.288707][ T10] dw2102: command 0x0e transfer failed. [ 50.288711][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 50.288769][ T10] dw2102: command 0x0e transfer failed. [ 50.296585][ T42] audit: type=1400 audit(1793682393.088:394): avc: denied { write } for pid=6381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.340986][ T42] audit: type=1400 audit(1793682393.128:395): avc: denied { write } for pid=6386 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.358869][ T42] audit: type=1400 audit(1793682393.148:396): avc: denied { name_connect } for pid=6388 comm="syz.2.125" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 50.449503][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 50.463905][ T6356] FAULT_INJECTION: forcing a failure. [ 50.463905][ T6356] name failslab, interval 1, probability 0, space 0, times 1 [ 50.463939][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT(full) [ 50.463953][ T6356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.463960][ T6356] Call Trace: [ 50.463967][ T6356] [ 50.463973][ T6356] dump_stack_lvl+0x100/0x190 [ 50.464036][ T6356] should_fail_ex.cold+0x5/0xa [ 50.464062][ T6356] should_failslab+0xc2/0x120 [ 50.464092][ T6356] kmem_cache_alloc_noprof+0x92/0x6a0 [ 50.464111][ T6356] ? __asan_memcpy+0x3c/0x60 [ 50.464128][ T6356] ? __kernfs_new_node+0xd2/0xa10 [ 50.464169][ T6356] __kernfs_new_node+0xd2/0xa10 [ 50.464188][ T6356] ? __pfx_string+0x10/0x10 [ 50.464241][ T6356] ? __pfx___kernfs_new_node+0x10/0x10 [ 50.464261][ T6356] ? lock_acquire+0x1d1/0x380 [ 50.464277][ T6356] ? kernfs_root+0x23/0x2a0 [ 50.464293][ T6356] ? find_held_lock+0x2b/0x80 [ 50.464305][ T6356] ? kernfs_root+0xee/0x2a0 [ 50.464321][ T6356] ? kernfs_root+0xee/0x2a0 [ 50.464341][ T6356] kernfs_create_dir_ns+0xa4/0x2b0 [ 50.464354][ T6356] sysfs_create_dir_ns+0x13a/0x2b0 [ 50.464371][ T6356] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 50.464387][ T6356] ? find_held_lock+0x2b/0x80 [ 50.464399][ T6356] ? kobject_add_internal+0x25f/0x930 [ 50.464415][ T6356] ? kobject_add_internal+0x25f/0x930 [ 50.464432][ T6356] ? do_raw_spin_unlock+0x145/0x1e0 [ 50.464444][ T6356] kobject_add_internal+0x2c8/0x930 [ 50.464462][ T6356] kobject_init_and_add+0x121/0x180 [ 50.464485][ T6356] ? __pfx_kobject_init_and_add+0x10/0x10 [ 50.464504][ T6356] ? __kasan_kmalloc+0xaa/0xb0 [ 50.464516][ T6356] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 50.464532][ T6356] ? rpc_sysfs_xprt_setup+0xe1/0x300 [ 50.464581][ T6356] rpc_sysfs_xprt_setup+0x187/0x300 [ 50.464602][ T6356] xprt_switch_alloc+0x2ce/0x3c0 [ 50.464618][ T6356] rpc_create_xprt+0x2dc/0x440 [ 50.464648][ T6356] rpc_create+0x4a0/0x840 [ 50.464664][ T6356] ? __pfx_rpc_create+0x10/0x10 [ 50.464696][ T6356] ? net_generic+0xea/0x2a0 [ 50.464715][ T6356] ? net_generic+0xea/0x2a0 [ 50.464730][ T6356] nfs_create_rpc_client+0x6a9/0x920 [ 50.464743][ T6356] ? __pfx_nfs_create_rpc_client+0x10/0x10 [ 50.464764][ T6356] ? lockdep_init_map_type+0x5c/0x250 [ 50.464783][ T6356] ? lockdep_init_map_type+0x5c/0x250 [ 50.464803][ T6356] nfs4_alloc_client+0x9a1/0xe30 [ 50.464821][ T6356] ? __pfx_nfs4_alloc_client+0x10/0x10 [ 50.464841][ T6356] ? lock_acquire+0x1d1/0x380 [ 50.464857][ T6356] ? net_generic+0x25/0x2a0 [ 50.464870][ T6356] ? nfs_get_client+0x849/0x1230 [ 50.464882][ T6356] ? nfs_get_client+0x849/0x1230 [ 50.464897][ T6356] nfs_get_client+0x87b/0x1230 [ 50.464909][ T6356] ? rcu_is_watching+0x13/0xc0 [ 50.464926][ T6356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.464947][ T6356] nfs4_set_client+0x3f6/0x640 [ 50.464961][ T6356] nfs4_init_server.isra.0+0x5be/0xf80 [ 50.464974][ T6356] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 50.464995][ T6356] ? __pfx_nfs4_init_server.isra.0+0x10/0x10 [ 50.465019][ T6356] ? __rpc_init_priority_wait_queue+0x38a/0x500 [ 50.465042][ T6356] nfs4_create_server+0x185/0x2b0 [ 50.465058][ T6356] nfs4_try_get_tree+0x93/0x140 [ 50.465072][ T6356] nfs_get_tree+0xa61/0x1440 [ 50.465090][ T6356] vfs_get_tree+0x92/0x320 [ 50.465107][ T6356] path_mount+0x7d0/0x2850 [ 50.465127][ T6356] ? __pfx_path_mount+0x10/0x10 [ 50.465143][ T6356] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.465156][ T6356] ? putname+0xb1/0x110 [ 50.465169][ T6356] ? kmem_cache_free+0x127/0x6c0 [ 50.465189][ T6356] ? __x64_sys_mount+0x293/0x310 [ 50.465206][ T6356] __x64_sys_mount+0x293/0x310 [ 50.465223][ T6356] ? __pfx___x64_sys_mount+0x10/0x10 [ 50.465244][ T6356] do_syscall_64+0x123/0x790 [ 50.465258][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.465270][ T6356] RIP: 0033:0x7fde5ed9fb19 [ 50.465281][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.465291][ T6356] RSP: 002b:00007fde5fc04028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.465304][ T6356] RAX: ffffffffffffffda RBX: 00007fde5f025fa0 RCX: 00007fde5ed9fb19 [ 50.465311][ T6356] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 00002000000008c0 [ 50.465319][ T6356] RBP: 00007fde5ee37b70 R08: 0000200000000980 R09: 0000000000000000 [ 50.465326][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.465334][ T6356] R13: 00007fde5f026038 R14: 00007fde5f025fa0 R15: 00007ffd3f679258 [ 50.465349][ T6356] [ 50.465366][ T6356] kobject: kobject_add_internal failed for xprt-0-tcp (error: -12 parent: switch-0) [ 50.594831][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 50.594844][ T10] dw2102: command 0x0e transfer failed. [ 50.594848][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 50.594855][ T10] dw2102: command 0x0e transfer failed. [ 50.594859][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 50.594865][ T10] dw2102: command 0x51 transfer failed. [ 50.619525][ T10] DVB: Unable to find symbol ds3000_attach() [ 50.619572][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 50.664459][ T10] rc_core: IR keymap rc-su3000 not found [ 50.664471][ T10] Registered IR keymap rc-empty [ 50.670664][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 50.673774][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input5 [ 50.682545][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 50.682564][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 50.682575][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 50.768407][ T6411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.835110][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 50.835125][ T10] dw2102: i2c transfer failed. [ 50.851063][ T6411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.914014][ T6411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.975954][ T6411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.993908][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 50.993922][ T10] dw2102: i2c transfer failed. [ 51.153932][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 51.153947][ T10] dw2102: i2c transfer failed. [ 51.194448][ T6418] /dev/sr0: Can't open blockdev [ 51.314858][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 51.314873][ T10] dw2102: i2c transfer failed. [ 51.473863][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 51.473879][ T10] dw2102: i2c transfer failed. [ 51.633881][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 51.633952][ T10] dw2102: i2c transfer failed. [ 51.793868][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 51.793934][ T10] dw2102: i2c transfer failed. [ 51.953871][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 51.953887][ T10] dw2102: i2c transfer failed. [ 52.114329][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 52.114354][ T10] dw2102: i2c transfer failed. [ 52.273957][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 52.273970][ T10] dw2102: i2c transfer failed. [ 52.340375][ T1355] usb 6-1: USB disconnect, device number 2 [ 52.412629][ T6443] fuse: Bad value for 'rootmode' [ 52.412989][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 52.413039][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 52.414384][ T5879] usb 5-1: USB disconnect, device number 4 [ 52.434170][ T5202] dvb-usb: bulk message failed: -22 (1/0) [ 52.434184][ T5202] dw2102: i2c transfer failed. [ 52.591328][ T6463] xt_connbytes: Forcing CT accounting to be enabled [ 52.598782][ T5879] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.603929][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 52.603942][ T5879] dw2102: i2c transfer failed. [ 52.743040][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.149'. [ 52.763962][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 52.763981][ T5879] dw2102: i2c transfer failed. [ 52.883961][ T1049] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.933876][ T5879] dvb-usb: bulk message failed: -22 (1/0) [ 52.933891][ T5879] dw2102: i2c transfer failed. [ 52.938755][ T5879] usb 8-1: USB disconnect, device number 4 [ 52.967436][ T5879] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 53.053989][ T1049] usb 5-1: Using ep0 maxpacket: 8 [ 53.118592][ T1049] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.118634][ T1049] usb 5-1: New USB device found: idVendor=2100, idProduct=9e58, bcdDevice=66.20 [ 53.119524][ T1049] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 53.119551][ T1049] usb 5-1: can't read configurations, error -71 [ 53.386482][ T5831] bond0: (slave bond_slave_1): interface is now down [ 53.414795][ T5831] bond0: (slave bond_slave_1): interface is now down [ 53.419219][ T5831] bond0: now running without any active interface! [ 53.502066][ T6499] xt_hl: Unknown TTL match mode: 255 [ 53.505351][ T6501] warning: `syz.3.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.554121][ T6501] device-mapper: table: 248:1: striped: Target length not divisible by number of stripes (-EINVAL) [ 53.554145][ T6501] device-mapper: ioctl: error adding target to table [ 53.650157][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 53.711650][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 53.711664][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 53.837190][ T6533] netlink: 'syz.2.162': attribute type 21 has an invalid length. [ 53.837228][ T6533] netlink: 'syz.2.162': attribute type 6 has an invalid length. [ 53.837236][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.162'. [ 53.869968][ T6528] CacheFiles: Failed to register: -95 [ 54.398322][ T6563] process 'syz.3.176' launched './file1' with NULL argv: empty string added [ 54.630730][ T6571] bridge0: port 3(syz_tun) entered blocking state [ 54.630883][ T6571] bridge0: port 3(syz_tun) entered disabled state [ 54.630996][ T6571] syz_tun: entered allmulticast mode [ 54.632394][ T6571] syz_tun: entered promiscuous mode [ 54.632966][ T6571] bridge0: port 3(syz_tun) entered blocking state [ 54.633087][ T6571] bridge0: port 3(syz_tun) entered listening state [ 54.652728][ T6576] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 54.655164][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 54.670815][ T6571] bridge0: port 3 config from 02:00:00:00:00:01 (message_age 8l > max_age 1l) [ 54.703541][ T6576] bond1: option mode: invalid value (8) [ 54.707269][ T6576] bond1 (unregistering): Released all slaves [ 54.844950][ T6595] ip6erspan0: entered allmulticast mode [ 54.849282][ T6595] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 54.851775][ T6595] iommufd_mock iommufd_mock1: Adding to iommu group 11 [ 54.932807][ T6603] ip6t_srh: unknown srh match flags 45F8 [ 55.006310][ T6615] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 55.017051][ T6615] bond1: entered promiscuous mode [ 55.017309][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.073260][ T6619] Bluetooth: MGMT ver 1.23 [ 55.076388][ T6619] Bluetooth: hci0: unsupported parameter 5135 [ 55.076401][ T6619] Bluetooth: hci0: unsupported parameter 8192 [ 55.076408][ T6619] Bluetooth: hci0: unsupported parameter 5135 [ 55.076416][ T6619] Bluetooth: hci0: unsupported parameter 8192 [ 55.171348][ T6623] device-mapper: table: 248:0: adding target device ram1 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=512 [ 55.171387][ T6623] device-mapper: table: 248:0: adding target device ram1 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=512 [ 55.213379][ T6623] bond0: Error: Cannot enslave bond to itself. [ 55.241971][ T6623] trusted_key: encrypted_key: master key parameter 'uxer:syz' is invalid [ 55.314867][ T6637] can0: slcan on ttyS3. [ 55.387365][ T6637] can0 (unregistered): slcan off ttyS3. [ 55.437750][ T42] kauditd_printk_skb: 687 callbacks suppressed [ 55.437764][ T42] audit: type=1400 audit(55.341:1084): avc: denied { load_policy } for pid=6634 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.438105][ T6635] SELinux: policydb version 0 does not match my version range 15-35 [ 55.438236][ T6635] SELinux: failed to load policy [ 55.462423][ T6635] kvm [6634]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 55.463114][ T6635] kvm [6634]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 55.541155][ T42] audit: type=1400 audit(55.441:1085): avc: denied { create } for pid=6649 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.543603][ T42] audit: type=1400 audit(55.441:1086): avc: denied { validate_trans } for pid=6649 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.549592][ T42] audit: type=1400 audit(55.451:1087): avc: denied { bind } for pid=6649 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.549619][ T42] audit: type=1400 audit(55.451:1088): avc: denied { listen } for pid=6649 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.615432][ T42] audit: type=1400 audit(55.521:1089): avc: denied { connect } for pid=6664 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 55.644922][ T42] audit: type=1400 audit(55.551:1090): avc: denied { write } for pid=6663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.689937][ T42] audit: type=1400 audit(55.591:1091): avc: denied { write } for pid=6674 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.720704][ T42] audit: type=1400 audit(55.621:1092): avc: denied { read } for pid=6679 comm="syz.3.210" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.722903][ T6680] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 55.739193][ T42] audit: type=1400 audit(55.641:1093): avc: denied { read } for pid=6681 comm="syz.0.211" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 55.786487][ T6678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.880020][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880078][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880123][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880167][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880212][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880255][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880298][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880307][ T6711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6711 comm=syz.1.216 [ 55.880341][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880384][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880429][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880472][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880516][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880560][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880603][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880646][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880692][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880737][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880780][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880830][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880874][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880952][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.880998][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881043][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881087][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881130][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881180][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881223][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881266][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881310][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881355][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881398][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881442][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.881486][ T5778] Bluetooth: hci0: Malformed Event: 0x02 [ 55.999606][ T6735] Can't find a SQUASHFS superblock on nullb0 [ 56.035576][ T6740] input: syz0 as /devices/virtual/input/input6 [ 56.177481][ T6746] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.182387][ T6746] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 56.447357][ T6765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. syzkaller syzkaller login: [ 56.563894][ T1049] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.715007][ T1049] usb 7-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 56.716301][ T1049] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 56.716327][ T1049] usb 7-1: config 0 interface 0 has no altsetting 0 [ 56.718535][ T1049] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 56.718556][ T1049] usb 7-1: Product: syz [ 56.718568][ T1049] usb 7-1: Manufacturer: syz [ 56.718580][ T1049] usb 7-1: SerialNumber: syz [ 56.721285][ T1049] usb 7-1: config 0 descriptor?? [ 56.725611][ T6758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.728865][ T1049] usb 7-1: selecting invalid altsetting 0 [ 56.928719][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.928914][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.929102][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.929329][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.929617][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.929929][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.930216][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.930524][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.930835][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.931140][ T6758] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 56.937699][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 56.986606][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'. [ 56.990349][ T5879] usb 7-1: USB disconnect, device number 2 [ 57.049369][ T6804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 57.134567][ T6811] netlink: 112 bytes leftover after parsing attributes in process `syz.1.243'. [ 57.177418][ T6808] ªªªªª): renamed from hsr0 (while UP) [ 57.276087][ T6822] veth1_macvtap: left promiscuous mode [ 57.276106][ T6822] macsec0: entered promiscuous mode [ 57.276113][ T6822] macsec0: entered allmulticast mode [ 57.283652][ T6823] veth1_macvtap: entered promiscuous mode [ 57.283669][ T6823] veth1_macvtap: entered allmulticast mode [ 57.284170][ T6823] macsec0: left promiscuous mode [ 57.284298][ T6823] macsec0: left allmulticast mode [ 57.284307][ T6823] veth1_macvtap: left allmulticast mode [ 57.388931][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.517881][ T6854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 57.524555][ T6854] bond0: entered allmulticast mode [ 57.524570][ T6854] bond_slave_0: entered allmulticast mode [ 57.524580][ T6854] bond_slave_1: entered allmulticast mode [ 57.799042][ T6897] netlink: 'syz.0.264': attribute type 5 has an invalid length. [ 57.947053][ T6862] cgroup: fork rejected by pids controller in /syz2 [ 57.966849][ T6921] bridge0: port 3(syz_tun) entered blocking state [ 57.966927][ T6921] bridge0: port 3(syz_tun) entered disabled state [ 57.967049][ T6921] syz_tun: entered allmulticast mode [ 57.967781][ T6921] syz_tun: entered promiscuous mode [ 57.968036][ T6921] bridge0: port 3(syz_tun) entered blocking state [ 57.968086][ T6921] bridge0: port 3(syz_tun) entered forwarding state [ 58.105775][ T6935] xt_hashlimit: size too large, truncated to 1048576 [ 58.357343][ T6955] NFSD: Failed to start, no listeners configured. [ 58.562360][ T6970] syz.1.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.648684][ T6975] netlink: 'syz.2.281': attribute type 8 has an invalid length. [ 58.658207][ T6975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=6975 comm=syz.2.281 [ 58.684067][ T1355] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 58.782282][ T6981] fuse: fd is not a fuse device [ 58.833108][ T6983] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 58.882916][ T1355] usb 8-1: unable to get BOS descriptor or descriptor too short [ 58.882963][ T1355] usb 8-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 58.882990][ T1355] usb 8-1: no configurations [ 58.882999][ T1355] usb 8-1: can't read configurations, error -22 [ 59.913645][ T7017] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 59.960182][ T7020] __nla_validate_parse: 2 callbacks suppressed [ 59.960196][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 59.960206][ T7020] nbd: illegal input index -130258386 [ 59.961565][ T7020] tipc: Started in network mode [ 59.961581][ T7020] tipc: Node identity ac141439, cluster identity 4711 [ 59.962851][ T7020] tipc: Enabled bearer , priority 10 [ 60.280433][ T7043] overlayfs: missing 'workdir' [ 60.384037][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.391940][ T7053] netlink: 292 bytes leftover after parsing attributes in process `syz.2.303'. [ 60.394903][ T7054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.301'. [ 60.444649][ T42] kauditd_printk_skb: 210 callbacks suppressed [ 60.444662][ T42] audit: type=1400 audit(60.351:1304): avc: denied { read append } for pid=7055 comm="syz.2.304" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 60.444812][ T42] audit: type=1400 audit(60.351:1305): avc: denied { open } for pid=7055 comm="syz.2.304" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 60.446549][ T42] audit: type=1400 audit(60.351:1306): avc: denied { write } for pid=7055 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.478602][ T42] audit: type=1400 audit(60.381:1307): avc: denied { bind } for pid=7062 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.501936][ T42] audit: type=1400 audit(60.401:1308): avc: denied { mount } for pid=7066 comm="syz.1.308" name="/" dev="9p" ino=71827725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.519117][ T42] audit: type=1400 audit(60.421:1309): avc: denied { create } for pid=7069 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 60.520488][ T42] audit: type=1400 audit(60.421:1310): avc: denied { mount } for pid=7069 comm="syz.3.309" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 60.535577][ T5879] usb 5-1: New USB device found: idVendor=1110, idProduct=900f, bcdDevice=1.00 [ 60.536717][ T5879] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 60.536747][ T5879] usb 5-1: config 1 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 60.536776][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.552203][ T42] audit: type=1400 audit(60.451:1311): avc: denied { unmount } for pid=5784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 60.566275][ T42] audit: type=1400 audit(60.471:1312): avc: denied { write } for pid=7064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.601992][ T42] audit: type=1400 audit(60.501:1313): avc: denied { write } for pid=7079 comm="syz.1.308" name="/" dev="9p" ino=71827725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.684474][ T5879] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 60.746581][ T1049] hid-generic 0003:0001:0001.0002: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 60.781311][ T7089] fido_id[7089]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.796183][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.887579][ T13] bridge_slave_1: left allmulticast mode [ 60.887602][ T13] bridge_slave_1: left promiscuous mode [ 60.888283][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.898775][ T13] bridge_slave_0: left allmulticast mode [ 60.898792][ T13] bridge_slave_0: left promiscuous mode [ 60.898929][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.964281][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 61.011206][ T7072] MTD: Couldn't look up './cgroup': -15 [ 61.024918][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.026983][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 61.027009][ T34] usb 7-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 61.027027][ T34] usb 7-1: no configurations [ 61.027034][ T34] usb 7-1: can't read configurations, error -22 [ 61.027108][ T13] bond0 (unregistering): Released all slaves [ 61.103196][ T5887] tipc: Node number set to 2886997049 [ 61.300623][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.302426][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.303037][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.304047][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.304605][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.530295][ T7100] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.575846][ T13] hsr_slave_0: left promiscuous mode [ 61.579958][ T13] hsr_slave_1: left promiscuous mode [ 61.580770][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.580801][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.581936][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.581951][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.607169][ T13] veth1_macvtap: left promiscuous mode [ 61.607200][ T13] veth0_macvtap: left promiscuous mode [ 61.607298][ T13] veth1_vlan: left promiscuous mode [ 61.607337][ T13] veth0_vlan: left promiscuous mode [ 61.703948][ T7118] netlink: 64 bytes leftover after parsing attributes in process `syz.2.319'. [ 61.965952][ T13] team0 (unregistering): Port device team_slave_1 removed [ 61.978678][ T13] team0 (unregistering): Port device team_slave_0 removed [ 62.042763][ T5879] usb 5-1: selecting invalid altsetting 8 [ 62.042788][ T5879] usb 5-1: [UEAGLE-ATM] setting alternate 8 failed for 2 interface, using bulk mode [ 62.042819][ T5879] usb 5-1: [UEAGLE-ATM] urb submission failed with error -19 [ 62.042857][ T5879] ueagle-atm 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 62.070626][ T5879] usb 5-1: USB disconnect, device number 7 [ 62.133734][ T7120] syzkaller1: entered promiscuous mode [ 62.133750][ T7120] syzkaller1: entered allmulticast mode [ 62.180649][ T7142] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 62.216212][ T7142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.242652][ T7142] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 62.253132][ T7142] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 62.253154][ T7142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.326'. [ 62.253396][ T7142] dummy0: entered promiscuous mode [ 62.263416][ T7142] bond1: (slave dummy0): Releasing backup interface [ 62.320276][ T7156] block2mtd: error: cannot open device /Výv/zram0 [ 62.479573][ T7180] vcan1: entered allmulticast mode [ 62.501010][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.501094][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.501150][ T7100] bridge_slave_0: entered allmulticast mode [ 62.501836][ T7100] bridge_slave_0: entered promiscuous mode [ 62.503488][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.503559][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.503731][ T7100] bridge_slave_1: entered allmulticast mode [ 62.507417][ T7100] bridge_slave_1: entered promiscuous mode [ 62.532325][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.534121][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.548304][ T7100] team0: Port device team_slave_0 added [ 62.549599][ T7100] team0: Port device team_slave_1 added [ 62.565439][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.565454][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.565475][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.566876][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.566888][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.566908][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.616284][ T7100] hsr_slave_0: entered promiscuous mode [ 62.617098][ T7100] hsr_slave_1: entered promiscuous mode [ 62.651402][ T7211] netlink: 104 bytes leftover after parsing attributes in process `syz.0.341'. [ 62.654533][ T7210] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 62.741867][ T7100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.749026][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.749763][ T7100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.758735][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.759326][ T7100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.763094][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.763759][ T7100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.770137][ T7100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.783473][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.783521][ T7100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.783626][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.783696][ T7100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.805760][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.812313][ T7234] netlink: 536 bytes leftover after parsing attributes in process `syz.3.345'. [ 62.812540][ T7234] netlink: 32 bytes leftover after parsing attributes in process `syz.3.345'. [ 62.838854][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.848032][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.849859][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.858577][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.862131][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.862177][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.865493][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.865568][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.122907][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.271015][ T7100] veth0_vlan: entered promiscuous mode [ 63.275008][ T7100] veth1_vlan: entered promiscuous mode [ 63.292109][ T7100] veth0_macvtap: entered promiscuous mode [ 63.297056][ T7100] veth1_macvtap: entered promiscuous mode [ 63.304725][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.309829][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.353384][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.353400][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.354006][ T5138] Bluetooth: hci0: command tx timeout [ 63.374514][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.374535][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.394078][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.394120][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.394149][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.394178][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.641872][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 63.702741][ T7289] ip_tables: iptables: counters copy to user failed while replacing table [ 63.709372][ T7289] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 63.752283][ T7299] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 63.935333][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.935413][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.936872][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.936895][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.259141][ T7339] Bluetooth: MGMT ver 1.23 [ 64.359523][ T7345] FAULT_INJECTION: forcing a failure. [ 64.359523][ T7345] name failslab, interval 1, probability 0, space 0, times 0 [ 64.359569][ T7345] CPU: 2 UID: 0 PID: 7345 Comm: syz.0.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.359596][ T7345] Tainted: [L]=SOFTLOCKUP [ 64.359603][ T7345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.359616][ T7345] Call Trace: [ 64.359629][ T7345] [ 64.359638][ T7345] dump_stack_lvl+0x100/0x190 [ 64.359763][ T7345] should_fail_ex.cold+0x5/0xa [ 64.359809][ T7345] should_failslab+0xc2/0x120 [ 64.359870][ T7345] __kmalloc_noprof+0xfc/0x840 [ 64.359901][ T7345] ? dma_buf_export+0x389/0xc60 [ 64.359981][ T7345] dma_buf_export+0x389/0xc60 [ 64.360006][ T7345] iommufd_test+0x1759/0x65f0 [ 64.360060][ T7345] ? find_held_lock+0x2b/0x80 [ 64.360089][ T7345] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 64.360118][ T7345] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 64.360148][ T7345] ? __pfx_iommufd_test+0x10/0x10 [ 64.360183][ T7345] ? irqentry_exit+0x202/0xab0 [ 64.360267][ T7345] ? __pfx_iommufd_test+0x10/0x10 [ 64.360297][ T7345] ? iommufd_fops_ioctl+0x31b/0x520 [ 64.360321][ T7345] iommufd_fops_ioctl+0x358/0x520 [ 64.360341][ T7345] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 64.360358][ T7345] ? __fget_files+0x34/0x3d0 [ 64.360394][ T7345] ? selinux_file_ioctl+0x1e0/0x290 [ 64.360462][ T7345] ? selinux_file_ioctl+0x1e7/0x290 [ 64.360494][ T7345] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 64.360516][ T7345] __x64_sys_ioctl+0x18e/0x210 [ 64.360553][ T7345] do_syscall_64+0x123/0x790 [ 64.360579][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.360599][ T7345] RIP: 0033:0x7f3ba9b9fb19 [ 64.360615][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.360634][ T7345] RSP: 002b:00007f3baab21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.360655][ T7345] RAX: ffffffffffffffda RBX: 00007f3ba9e25fa0 RCX: 00007f3ba9b9fb19 [ 64.360669][ T7345] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000007 [ 64.360681][ T7345] RBP: 00007f3ba9c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 64.360693][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.360705][ T7345] R13: 00007f3ba9e26038 R14: 00007f3ba9e25fa0 R15: 00007ffd99320fa8 [ 64.360734][ T7345] [ 64.417266][ T7349] ip_tables: iptables: counters copy to user failed while replacing table [ 64.575237][ T7358] ioremap: invalid physical address 8000000000000000 [ 64.575328][ T7358] ------------[ cut here ]------------ [ 64.575336][ T7358] 1 [ 64.575341][ T7358] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#2: syz.0.373/7358 [ 64.580969][ T7359] ptrace attach of "/syz-executor exec"[5784] was attempted by " @   Ò ÿÿ ÿÿÿÿ    $ @   \x0c   , @ ( €    Ž ÿÿ     $ @   \x0c   , @ ( "[7359] [ 64.586755][ T7363] ptrace attach of "/syz-executor exec"[5784] was attempted by ""[7363] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.606200][ T7358] Modules linked in: [ 64.608391][ T7358] CPU: 2 UID: 0 PID: 7358 Comm: syz.0.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.613048][ T7358] Tainted: [L]=SOFTLOCKUP [ 64.615021][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.618888][ T7358] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 64.621410][ T7358] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db 24 9b 00 e8 f0 f1 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb 24 9b 00 e8 d3 f1 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 64.629730][ T7358] RSP: 0018:ffffc9000478f8d8 EFLAGS: 00010282 [ 64.632056][ T7358] RAX: 0000000000000032 RBX: 1ffff920008f1f1f RCX: 0000000000000000 [ 64.638404][ T7358] RDX: 0000000000000032 RSI: ffffffff81ebf219 RDI: fffff520008f1f0c [ 64.641436][ T7358] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 64.644879][ T7358] R10: ffffc9000478f69f R11: 0000000000000001 R12: 8000000000000fff [ 64.648229][ T7358] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 64.651255][ T7358] FS: 00007f3baab216c0(0000) GS:ffff8880d467d000(0000) knlGS:0000000000000000 [ 64.655030][ T7358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.657678][ T7358] CR2: 000000110c2f9268 CR3: 0000000034f26000 CR4: 0000000000352ef0 [ 64.660871][ T7358] Call Trace: [ 64.662247][ T7358] [ 64.663464][ T7358] ? register_device+0x1bb/0x6a0 [ 64.665557][ T7358] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 64.667998][ T7358] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.670145][ T7358] ? register_device+0x164/0x6a0 [ 64.672081][ T7358] register_device+0x1bb/0x6a0 [ 64.674039][ T7358] phram_setup+0x3b1/0x4c0 [ 64.675886][ T7358] ? __pfx_phram_setup+0x10/0x10 [ 64.677845][ T7358] ? trace_contention_end+0x126/0x160 [ 64.679930][ T7358] ? param_attr_store+0xec/0x300 [ 64.681854][ T7358] ? __pfx___mutex_lock+0x10/0x10 [ 64.684072][ T7358] phram_param_call+0xa6/0xd0 [ 64.686027][ T7358] param_attr_store+0x199/0x300 [ 64.688072][ T7358] ? __pfx_param_attr_store+0x10/0x10 [ 64.690197][ T7358] module_attr_store+0x58/0x80 [ 64.693012][ T7358] ? __pfx_module_attr_store+0x10/0x10 [ 64.695410][ T7358] sysfs_kf_write+0xf2/0x150 [ 64.697413][ T7358] kernfs_fop_write_iter+0x3e0/0x5f0 [ 64.699596][ T7358] ? __pfx_sysfs_kf_write+0x10/0x10 [ 64.701767][ T7358] vfs_write+0x6af/0x1050 [ 64.703565][ T7358] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 64.706308][ T7358] ? __pfx_vfs_write+0x10/0x10 [ 64.708180][ T7358] ? find_held_lock+0x2b/0x80 [ 64.710192][ T7358] ksys_write+0x12a/0x250 [ 64.711898][ T7358] ? __pfx_ksys_write+0x10/0x10 [ 64.714150][ T7358] do_syscall_64+0x123/0x790 [ 64.715137][ T5787] Bluetooth: hci1: command 0x2016 tx timeout [ 64.717900][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.719860][ T7358] RIP: 0033:0x7f3ba9b9fb19 [ 64.721448][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.728621][ T7358] RSP: 002b:00007f3baab21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.731697][ T7358] RAX: ffffffffffffffda RBX: 00007f3ba9e25fa0 RCX: 00007f3ba9b9fb19 [ 64.734722][ T7358] RDX: 000000000000001e RSI: 0000200000000600 RDI: 0000000000000007 [ 64.737922][ T7358] RBP: 00007f3ba9c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 64.741221][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.744567][ T7358] R13: 00007f3ba9e26038 R14: 00007f3ba9e25fa0 R15: 00007ffd99320fa8 [ 64.747872][ T7358] [ 64.749283][ T7358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.752159][ T7358] CPU: 2 UID: 0 PID: 7358 Comm: syz.0.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 64.756474][ T7358] Tainted: [L]=SOFTLOCKUP [ 64.758250][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.762248][ T7358] Call Trace: [ 64.763634][ T7358] [ 64.764867][ T7358] dump_stack_lvl+0x100/0x190 [ 64.766794][ T7358] vpanic+0x2dc/0x6f8 [ 64.768428][ T7358] panic+0xd1/0xe0 [ 64.769976][ T7358] ? __pfx_panic+0x10/0x10 [ 64.771826][ T7358] check_panic_on_warn.cold+0x19/0x34 [ 64.773984][ T7358] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 64.776362][ T7358] __warn.cold+0x191/0x321 [ 64.778230][ T7358] __report_bug+0x30f/0x440 [ 64.780135][ T7358] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 64.782553][ T7358] ? __pfx___report_bug+0x10/0x10 [ 64.784612][ T7358] ? irq_work_queue+0xd1/0x100 [ 64.786540][ T7358] ? __wake_up_klogd+0x7a/0xb0 [ 64.788513][ T7358] ? vprintk_emit+0x1c9/0x6b0 [ 64.790430][ T7358] ? __pfx_vprintk_emit+0x10/0x10 [ 64.792448][ T7358] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 64.794866][ T7358] report_bug+0xb3/0x220 [ 64.796614][ T7358] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 64.799062][ T7358] handle_bug+0x16a/0x2a0 [ 64.800820][ T7358] exc_invalid_op+0x17/0x50 [ 64.802655][ T7358] asm_exc_invalid_op+0x1a/0x20 [ 64.804627][ T7358] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 64.807206][ T7358] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db 24 9b 00 e8 f0 f1 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb 24 9b 00 e8 d3 f1 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 64.814713][ T7358] RSP: 0018:ffffc9000478f8d8 EFLAGS: 00010282 [ 64.817170][ T7358] RAX: 0000000000000032 RBX: 1ffff920008f1f1f RCX: 0000000000000000 [ 64.820351][ T7358] RDX: 0000000000000032 RSI: ffffffff81ebf219 RDI: fffff520008f1f0c [ 64.823491][ T7358] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 64.826650][ T7358] R10: ffffc9000478f69f R11: 0000000000000001 R12: 8000000000000fff [ 64.829817][ T7358] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 64.832982][ T7358] ? vprintk_emit+0x1c9/0x6b0 [ 64.834930][ T7358] ? __ioremap_caller.isra.0.cold+0x58/0xa4 [ 64.837341][ T7358] ? register_device+0x1bb/0x6a0 [ 64.839395][ T7358] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 64.841835][ T7358] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 64.844089][ T7358] ? register_device+0x164/0x6a0 [ 64.846125][ T7358] register_device+0x1bb/0x6a0 [ 64.848097][ T7358] phram_setup+0x3b1/0x4c0 [ 64.849864][ T7358] ? __pfx_phram_setup+0x10/0x10 [ 64.851863][ T7358] ? trace_contention_end+0x126/0x160 [ 64.854064][ T7358] ? param_attr_store+0xec/0x300 [ 64.856131][ T7358] ? __pfx___mutex_lock+0x10/0x10 [ 64.858233][ T7358] phram_param_call+0xa6/0xd0 [ 64.860073][ T7358] param_attr_store+0x199/0x300 [ 64.862004][ T7358] ? __pfx_param_attr_store+0x10/0x10 [ 64.864231][ T7358] module_attr_store+0x58/0x80 [ 64.866183][ T7358] ? __pfx_module_attr_store+0x10/0x10 [ 64.868427][ T7358] sysfs_kf_write+0xf2/0x150 [ 64.870280][ T7358] kernfs_fop_write_iter+0x3e0/0x5f0 [ 64.872425][ T7358] ? __pfx_sysfs_kf_write+0x10/0x10 [ 64.874545][ T7358] vfs_write+0x6af/0x1050 [ 64.876315][ T7358] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 64.878710][ T7358] ? __pfx_vfs_write+0x10/0x10 [ 64.880678][ T7358] ? find_held_lock+0x2b/0x80 [ 64.882620][ T7358] ksys_write+0x12a/0x250 [ 64.884461][ T7358] ? __pfx_ksys_write+0x10/0x10 [ 64.886427][ T7358] do_syscall_64+0x123/0x790 [ 64.888313][ T7358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.890664][ T7358] RIP: 0033:0x7f3ba9b9fb19 [ 64.892491][ T7358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.900073][ T7358] RSP: 002b:00007f3baab21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.903359][ T7358] RAX: ffffffffffffffda RBX: 00007f3ba9e25fa0 RCX: 00007f3ba9b9fb19 [ 64.906519][ T7358] RDX: 000000000000001e RSI: 0000200000000600 RDI: 0000000000000007 [ 64.909582][ T7358] RBP: 00007f3ba9c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 64.912692][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.915835][ T7358] R13: 00007f3ba9e26038 R14: 00007f3ba9e25fa0 R15: 00007ffd99320fa8 [ 64.919041][ T7358] [ 64.921083][ T7358] Kernel Offset: disabled [ 64.922757][ T7358] Rebooting in 86400 seconds..