last executing test programs: 30.848821732s ago: executing program 1 (id=120): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf308e382b", 0x3a}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0) 30.800328648s ago: executing program 1 (id=122): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r2, 0x400, 0x0) r3 = fcntl$dupfd(r0, 0x406, r1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="1500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000030000000000000000000000000000feff000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000840)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0xfffffffd, 0x9, 0x10, 0x2, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x12, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tail_call, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x7de6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x1, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x1, r2, r3, r4, r5, r6], &(0x7f0000000700)=[{0x0, 0x3, 0xf, 0x9}, {0x1, 0x4, 0x3, 0x4}, {0x4, 0x1, 0x2, 0x8}]}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'pimreg1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xffff}, {0x3}}}, 0xfffffffffffffe93}, 0x1, 0x0, 0x0, 0xa8c04ec16e00eab}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r10 = accept4(r9, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r11, 0x402c542c, &(0x7f00000000c0)={0x200, 0x100, 0x0, 0x8316, 0x6, "03f07f0900", 0x2, 0x1}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0xd6) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {0xffff, 0xa}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x8, 0xfffffffd, 0x1b, 0xa, 0xff, 0x6, 0xca14, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x8}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40800}, 0x24008054) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000000a0000000000d20900000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/19, @ANYRES32, @ANYRES32, @ANYBLOB="04000000000000000000004000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x8, "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", 0x1, 0xb, 0x9, 0x9, 0x8, 0x53, 0x1}}}, 0x128) 30.669758733s ago: executing program 1 (id=125): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x30, &(0x7f0000000180)={0x0, 0x5, 0x0, 0xfffffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x2, 0x1af, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r8, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r6, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) 30.56196425s ago: executing program 1 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 30.399552854s ago: executing program 1 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x2044040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x4c831, 0xffffffffffffffff, 0x1000000) 30.223212263s ago: executing program 1 (id=137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff42, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@local, r2}, 0x14) 30.193633314s ago: executing program 32 (id=137): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff42, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000100)={@local, r2}, 0x14) 3.226936648s ago: executing program 0 (id=577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000023c0)={0x79}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x4, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0xfffffffe, 0x0, 0x2000, 0xf407}, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x6, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r6 = socket(0x10, 0x803, 0x0) r7 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000080)}], 0x7}}], 0x1, 0x4008cd0) io_uring_enter(r7, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000540)=0x40d, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0x10000000, 0x4, 0x0, 0x0, @msi={0x5ba, 0x6, 0x8, 0x2}}]}) 3.040944658s ago: executing program 0 (id=580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="18000000010000", 0x7) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xe7, 0x0, &(0x7f0000000680)="6f47aa478b6e40d7a0d54238d5b7f49bbc47602404bf6280f3ab2533c0d8c2747e82b1fd11c2190e73aecaee84d536660efe4c30082b35a08ed2a36921d7786f497326dc21dc6bdc1dd75a0000000000"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000640)=0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002340)={0x44, 0x0, &(0x7f0000002240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002180)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/4096, 0x1000, 0x0, 0x3d}}, &(0x7f0000002200)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f00000022c0)="defdf05f8d90dfadfb5a0cf153b18047e80ef374f21c7922c157f71554a3ef52cc4110574292fd0c4ba77ef49cd6ffd314da7bc20ea957f8bd2d9e2d0c916f1d7f189ab86aee53f8f8f5455bc9dbe7c0027193a3fc054923d477bb6a869e2f2734087b9788e245839d2b3d"}) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7", 0x3d}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0", 0x21}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24", 0x10}], 0x3}}], 0x1, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='illinois', 0x8) sendto$inet(r1, &(0x7f0000000580)="17", 0x7fbc, 0x10008048, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000005c0)={{r3, &(0x7f0000000240)='%--.^\x00', 0x80000, &(0x7f00000002c0)={@align=0x81, {0x6, 0x5, 0x1, 0x80000000}}, 0x31, &(0x7f0000000380), &(0x7f00000003c0)=0xee}, {[0x9, 0xa, 0xffffffff, 0x401]}, 0x9d0, 0x47, &(0x7f0000000440)=""/71}) setsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000780)="d749f8f892e432ae0ba34723fbab51bef6ea5e9c5bfaa1fd4cc6810f05007df4fe08bee5e5a3d40c295e760d946c6f3a115de3288a36c847c3de6d181b6c3309265dc92f7570dc7725a10114a2edce407040f208674a491c0d81125a4f4a00016484d282b5ebe78f800a1341ec8d030a48270cb6dcc2f472a75aecd424edcb6d284539002a16f6a9724c", 0x8a) 2.152661988s ago: executing program 0 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x4000, {0x2, 0x2}}]}}, 0x0, 0x32}, 0x28) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, &(0x7f0000000300), 0x10000000000001ae) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x2c, 0x80002, 0xc1) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.017779658s ago: executing program 4 (id=598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf308e382b", 0x3a}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0/file0\x00', &(0x7f00000024c0)={0xee4db3de621c522c, 0x40}, 0x18) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000b00)={0x0, 0x42474752, 0x3, @stepwise={0x9, 0xff, 0x7, 0x1ff, 0x5, 0x9}}) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0x9f0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = openat(r1, &(0x7f0000002480)='./file0\x00', 0x20c100, 0x40) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000006c0)={{0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8}, {0xa, 0x4e23, 0x5, @remote, 0x5}, 0xffffffffffffffff, {[0x7, 0x6, 0x5, 0x5, 0x7ff, 0x23, 0x7f, 0xfffffffc]}}, 0x5c) unshare(0xe060400) unshare(0x2c060000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000740)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000340fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.110254212s ago: executing program 0 (id=600): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x145c, &(0x7f0000000780)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "1df78e", 0x1422, 0x2f, 0x1, @remote, @local, {[@fragment={0x19, 0x0, 0x1, 0x0, 0x0, 0x4, 0x64}, @fragment={0x1d, 0x0, 0x74, 0x1, 0x0, 0x6, 0x66}, @dstopts={0x4, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x8, [0x2]}}]}, @srh={0x3c, 0x6, 0x4, 0x3, 0xac, 0x8, 0x100, [@remote, @private2, @private2]}, @dstopts={0x2c, 0x14, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x8, {0x0, 0x0, 0xfe}}, @ra={0x5, 0x2, 0x1ff}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x0, [0x4, 0x9, 0x8001, 0x80000001, 0x0, 0x8, 0x9, 0x101, 0x9]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x2de, [0x8, 0x9, 0x5]}}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @mcast1}]}, @srh={0xea, 0x8, 0x4, 0x4, 0x34, 0x30, 0xb, [@local, @local, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x2f, 0x0, '\x00', [@pad1]}, @routing={0x2f, 0x6, 0x2, 0x5, 0x0, [@mcast1, @loopback, @local]}, @dstopts={0xff, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x8, {0x1, 0x0, 0x82, 0x3c6}}, @jumbo={0xc2, 0x4, 0x7}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xbc, 0x1, [], "7b54129eacc3bdb5645010879c3c72388ececd05af8469021c45e4353af22645da59e21c04d868029737440adc58a3adc079fae66f08500b395154129be6e0a813b14ac32b1ccefd662a00be0ea98e8a4cca727352353c3ca502525cd82969f6dd114f49d3e7862d6b541874b113002c8480e5bbf25949c871ce88cdf713538170f9c79a02ebfc9a61610427fb66ba268cb0415489e525c2c19f2b6ec7fe4e34ed0ee5aa38357eae391680a99115354ed5760f91f38a203cce81897b"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x4, 0x5], "5a84f8c90da0c5b9476ecc1cd1a5a6d6cb7412c4045e3ee1043a019de213aa3c427126dc810d8d337ce961deafd3839d44d9cfd8efc59a1e56508b62871f459a62c4e256910eebfad863d2611c6d6bd4c11aadb009ce1a3bd5612478d4ab49"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8000], "928ae65f2918280e1f7776ce7f6332c9c3b3cfbc78469afb5df7cd6c6f2269783349b8f2fa94b656c0858989cb1c984a86cf51a47cdb4e2465b430c0ee56f2b7af5de2eb8d458ba8c7cf1bb4b60a8d983c6557b08c3355ef668f615b9e730357cd0a00fc7223c0754d3a63a8c1b9fd0edf3f75b8dfb5334bca504528e71a78070224095575d7b3f807b935f2e3a12b8f92dbad1517e56b9948e2510cc53c85e8b6c3fe827a0b1d6d84c516eb366e530181c3ebd6d99beb22fa9a92c1942e666436cd9aa22d18be91b1e4d9c3e1013186af8ef2b1bb5dff1fe6831737dad96e1136313fb5a7"}, {0x8, 0x88be, 0x3, {{0xb, 0x1, 0x4d, 0x1, 0x0, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0xce, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x2, {0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) 1.109098785s ago: executing program 4 (id=601): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xe00, &(0x7f0000000040)={@align=0x401, {0xcf, 0x401, 0x40, 0xd17f}}, 0x291b, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) flistxattr(r0, &(0x7f0000000140)=""/100, 0x64) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x8000}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0xe783, 0x5, 0x8}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0xfffffffb, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000300)={0x6, 0x0, 0x7}) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, 0x0, 0xb0a, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000500)={0xee, 0x9, 0x1, 0x7, 0x8, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x80) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000680)={0x1e, @multicast2, 0x4e21, 0x2, 'wlc\x00', 0x20, 0xfffffffd, 0x1f}, 0x2c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r6, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8000}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800c5}, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000900)=0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r8, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}]}, 0x24}}, 0x2000c048) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000ac0)={0x4, 0x913, &(0x7f0000000a00)="2cd21347666b9d0acf673a38741c", &(0x7f0000000a40)="eaa998cbf77f276e6bd96f0472eb5e1a58a44203f27dbc937ffe330ee9391f293bb09b17bef5fad95a93b192c204659d8e0bb9d5743322c8087e74230f6fb55e7b8f0cc7b8e0119a052521b974d022d1cdb1ebd6bd50492c933479124d529f892bd2afa37194aa635c500ee59a6936b8fad6f29cfa8ff7428fbf5f189482", 0xe, 0x7e}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000b00)={r0, 0x6, 0x2, "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"}) recvfrom$llc(r0, &(0x7f0000000c40)=""/212, 0xd4, 0x10020, &(0x7f0000000d40)={0x1a, 0x110, 0x4, 0xaa, 0x4, 0x2d}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r10, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008890) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000ec0)={r2, 0x2, 0x20}, 0xc) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0800, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000f40)={r2, 0x40, 0x4}, 0x8) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48009) ioctl$CDROMPAUSE(r12, 0x5301) 1.098962949s ago: executing program 0 (id=603): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x9) write$dsp(r0, &(0x7f0000000340)="e10a3252", 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) recvfrom(0xffffffffffffffff, 0x0, 0xfffffffffffffeaf, 0x40000002, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x404000, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x2, [{}, {}]}, 0x48) 1.03566321s ago: executing program 4 (id=605): syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x2c) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000200)) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000240)={0x80}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x0, 0x4}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="110a0500001003002400128009000100626f6e6400000000100002000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40044) 854.497167ms ago: executing program 4 (id=606): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000380)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004240), 0x2000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f0000004280)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 793.620637ms ago: executing program 4 (id=609): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="8d5e6443ce33c80a000000b40000000300"/27, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(0x3) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [], {0x10, 0x7}}, 0x2c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x77449c9fc1e2fed7}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="8d5e6443ce33c80a000000b40000000300"/27, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x24) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) close(0x3) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [], {0x10, 0x7}}, 0x2c, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000180)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x77449c9fc1e2fed7}, 0x94) (async) 616.121692ms ago: executing program 3 (id=612): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='ms_mode\x00', &(0x7f0000000400)='secure\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x1c, 0x39, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x8, 0x3d, 0x0, 0x1, [@nested={0x4, 0x123}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async, rerun: 32) nanosleep(&(0x7f0000000500)={0x1}, 0x0) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000000)) (async) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000009000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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"], 0x0, 0x0, 0x0}) (async) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x10001, 0x8}, {0x9, 0x80000000}], r4}, 0x18, 0x2) 552.617458ms ago: executing program 4 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r9, r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r10 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r11, 0xa, 0x12) syz_emit_ethernet(0x6c, &(0x7f0000000480)={@multicast, @remote, @val={@val={0x88a8, 0x3}, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0xb, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x8}, {0x2}, {0xffffd}, {0x2}, {0x81, 0x0, 0x1}], @llc={@snap={0x0, 0x1, "eb", 'EVS', 0x600, "22a9cdb84ae8b1f9ae7d963d118a8c60334f18c116ce0b2b43dbb79f719fbd4f7d66f03d238193aa584ff1ada20f64651da5"}}}}}}, &(0x7f0000000500)={0x1, 0x3, [0x1e2, 0x93f, 0x5db, 0x8d1]}) ppoll(&(0x7f0000000140)=[{r12, 0xc002}], 0x1, 0x0, 0x0, 0x0) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) r13 = dup2(r11, r12) fcntl$setown(r13, 0x8, r10) tkill(r10, 0x13) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r14 = socket(0x10, 0x3, 0x0) recvmmsg(r14, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC]) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 552.190318ms ago: executing program 3 (id=614): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) wait4(r1, 0x0, 0x40000000, 0x0) fcntl$setown(r0, 0x8, r1) 251.777381ms ago: executing program 2 (id=617): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0x8, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) acct(&(0x7f0000000040)='./file0/file0\x00') (async) readv(r0, &(0x7f0000005340)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1) 197.250951ms ago: executing program 2 (id=618): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x2, 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f002, 0x4}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc9}}}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008885}, 0x40) 196.937168ms ago: executing program 0 (id=619): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x9, 0x1, 0x7}, 0x1d}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) 122.311705ms ago: executing program 2 (id=620): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x100) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000200)={0x2f, &(0x7f0000000080)=[{0x4, '\x00', @st={0x4, [{0x2, @svalue=0x8}, {0x0, @uvalue=0x3}, {0x3, @svalue=0x9}, {0x2, @svalue=0x77f75780}]}}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)=@fuse={0xc, 0x81, {0x1, 0xa, 0x1}}, 0x406041) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="80fd0200004317122b018f42ab6f15b53098b9108154c550342729b594e158c886514949372d372d39e1dc961b814f3154213cdd3de6382dd1afff1dd9436485d8fb12e40f", 0x45}], 0x1, 0x0, 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') ioprio_set$pid(0x2, 0x0, 0x6000) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x10, 0x1, 0x307}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000000)) 113.93911ms ago: executing program 3 (id=621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001500010029bd7000fedbdf250a200800", @ANYRES32=0x0, @ANYBLOB="140002000104631fa65bca7f1d66b8ccb68a0782fc28b19b97d6466a8be274dab151aa8f07430000000000000000000114000100200100000005000000000000000000824a1e91b80e095998d429762bb69ba601f32b1ba0ec"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1dc41427cb05cdcc0a6bf308e382b", 0x3a}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe4", 0x5e}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000440)={r7, 0x625, 0x3, 0x1000}, &(0x7f0000000480)=0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r4) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x2c, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 51.372418ms ago: executing program 2 (id=622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) 51.057591ms ago: executing program 2 (id=623): r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x76) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r3, 0xffffffff}, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f00003cf000/0x4000)=nil, 0x4000, 0x300000e, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) statfs(&(0x7f0000000200)='.\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}]}, 0x98}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) 0s ago: executing program 2 (id=625): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48087' (ED25519) to the list of known hosts. [ 48.355790][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.355807][ T42] audit: type=1400 audit(1785337262.356:141): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.365859][ T42] audit: type=1400 audit(1785337262.366:142): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.368763][ T5725] cgroup: Unknown subsys name 'net' [ 48.378570][ T42] audit: type=1400 audit(1785337262.386:143): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.566112][ T5725] cgroup: Unknown subsys name 'cpuset' [ 48.572418][ T5725] cgroup: Unknown subsys name 'rlimit' [ 48.747621][ T42] audit: type=1400 audit(1785337262.746:144): avc: denied { setattr } for pid=5725 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.756485][ T42] audit: type=1400 audit(1785337262.746:145): avc: denied { create } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.764543][ T42] audit: type=1400 audit(1785337262.746:146): avc: denied { write } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.772619][ T42] audit: type=1400 audit(1785337262.746:147): avc: denied { read } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.780463][ T42] audit: type=1400 audit(1785337262.766:148): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.789867][ T42] audit: type=1400 audit(1785337262.766:149): avc: denied { mount } for pid=5725 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.797680][ T42] audit: type=1400 audit(1785337262.766:150): avc: denied { read } for pid=5450 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.809758][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.517652][ T5725] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.266865][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.270861][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.275459][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.275990][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.279582][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.282180][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.285891][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.287277][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.290528][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.292739][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.295068][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.297164][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.299775][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.300181][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.300428][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.308129][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.309987][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.310456][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.317796][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.330702][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.878946][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.881997][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.884572][ T5747] bridge_slave_0: entered allmulticast mode [ 53.887283][ T5747] bridge_slave_0: entered promiscuous mode [ 53.923075][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.925524][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.927809][ T5747] bridge_slave_1: entered allmulticast mode [ 53.930667][ T5747] bridge_slave_1: entered promiscuous mode [ 53.936888][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.939354][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.941900][ T5739] bridge_slave_0: entered allmulticast mode [ 53.944650][ T5739] bridge_slave_0: entered promiscuous mode [ 53.947982][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.950293][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.952769][ T5739] bridge_slave_1: entered allmulticast mode [ 53.955812][ T5739] bridge_slave_1: entered promiscuous mode [ 54.000020][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.004759][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.023283][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.044323][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.064018][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.067129][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.070144][ T5738] bridge_slave_0: entered allmulticast mode [ 54.073511][ T5738] bridge_slave_0: entered promiscuous mode [ 54.077612][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.080132][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.082707][ T5738] bridge_slave_1: entered allmulticast mode [ 54.085751][ T5738] bridge_slave_1: entered promiscuous mode [ 54.123238][ T5739] team0: Port device team_slave_0 added [ 54.126659][ T5747] team0: Port device team_slave_0 added [ 54.135069][ T5747] team0: Port device team_slave_1 added [ 54.155369][ T5739] team0: Port device team_slave_1 added [ 54.167868][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.173462][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.229633][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.233640][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.243255][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.257687][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.259968][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.268683][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.273433][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.275672][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.284688][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.296645][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.299476][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.307692][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.318084][ T5738] team0: Port device team_slave_0 added [ 54.326110][ T5738] team0: Port device team_slave_1 added [ 54.328534][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.331044][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.333479][ T5745] bridge_slave_0: entered allmulticast mode [ 54.336692][ T5745] bridge_slave_0: entered promiscuous mode [ 54.341822][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.344699][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.347559][ T5745] bridge_slave_1: entered allmulticast mode [ 54.351335][ T5745] bridge_slave_1: entered promiscuous mode [ 54.397686][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.400102][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.408782][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.413369][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.415603][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.423555][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.434985][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.452544][ T5739] hsr_slave_0: entered promiscuous mode [ 54.454935][ T5739] hsr_slave_1: entered promiscuous mode [ 54.458457][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.465740][ T5747] hsr_slave_0: entered promiscuous mode [ 54.468386][ T5747] hsr_slave_1: entered promiscuous mode [ 54.470594][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 54.472629][ T5747] Cannot create hsr debugfs directory [ 54.502219][ T5738] hsr_slave_0: entered promiscuous mode [ 54.504620][ T5738] hsr_slave_1: entered promiscuous mode [ 54.507207][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 54.509150][ T5738] Cannot create hsr debugfs directory [ 54.543657][ T5745] team0: Port device team_slave_0 added [ 54.569466][ T5745] team0: Port device team_slave_1 added [ 54.616794][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.619034][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.627185][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.634517][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.637430][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.647852][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.788135][ T5745] hsr_slave_0: entered promiscuous mode [ 54.791102][ T5745] hsr_slave_1: entered promiscuous mode [ 54.794116][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 54.796496][ T5745] Cannot create hsr debugfs directory [ 54.948483][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.957913][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.972950][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.978844][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.982536][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.989252][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.994115][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.000089][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.063772][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.070342][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.073957][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.078039][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.082207][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.088134][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.092927][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.098400][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.167478][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.173859][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.176627][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.181109][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.185327][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.191491][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.200709][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.207201][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.287031][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.291892][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.295566][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.301504][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.312105][ T5098] Bluetooth: hci0: command tx timeout [ 55.314417][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.320643][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.325587][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.331009][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.340149][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.390060][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.393377][ T5098] Bluetooth: hci3: command tx timeout [ 55.393389][ T5741] Bluetooth: hci2: command tx timeout [ 55.400897][ T5098] Bluetooth: hci1: command tx timeout [ 55.407437][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.410241][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.421845][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.438189][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.440568][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.468766][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.487436][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.493366][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.496342][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.511251][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.514455][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.537958][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.563029][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.565507][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.585604][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.588592][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.609999][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.644865][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.656881][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.660136][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.674438][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.676766][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.864041][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.872878][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.918358][ T5738] veth0_vlan: entered promiscuous mode [ 55.929759][ T5738] veth1_vlan: entered promiscuous mode [ 55.933662][ T5739] veth0_vlan: entered promiscuous mode [ 55.943135][ T5739] veth1_vlan: entered promiscuous mode [ 55.963125][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.983190][ T5738] veth0_macvtap: entered promiscuous mode [ 55.991670][ T5738] veth1_macvtap: entered promiscuous mode [ 55.999029][ T5739] veth0_macvtap: entered promiscuous mode [ 56.013474][ T5739] veth1_macvtap: entered promiscuous mode [ 56.028658][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.039684][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.056577][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.060264][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.070663][ T5747] veth0_vlan: entered promiscuous mode [ 56.079686][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.096177][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.101550][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.111289][ T5747] veth1_vlan: entered promiscuous mode [ 56.117080][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.120569][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.131475][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.135666][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.151933][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.155571][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.243359][ T5745] veth0_vlan: entered promiscuous mode [ 56.254295][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.257941][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.268144][ T5747] veth0_macvtap: entered promiscuous mode [ 56.282091][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.285366][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.290413][ T5745] veth1_vlan: entered promiscuous mode [ 56.296915][ T5747] veth1_macvtap: entered promiscuous mode [ 56.321004][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.324202][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.353475][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.356323][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 56.356338][ T42] audit: type=1400 audit(1785337270.356:168): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.356624][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.359149][ T42] audit: type=1400 audit(1785337270.356:169): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.lQ7RKy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.359336][ T42] audit: type=1400 audit(1785337270.356:170): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.368640][ T42] audit: type=1400 audit(1785337270.356:171): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.lQ7RKy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 56.369562][ T42] audit: type=1400 audit(1785337270.376:172): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/syzkaller.lQ7RKy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 56.378759][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.382519][ T42] audit: type=1400 audit(1785337270.386:173): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.406261][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.411278][ T42] audit: type=1400 audit(1785337270.386:174): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 56.422068][ T5745] veth0_macvtap: entered promiscuous mode [ 56.422454][ T42] audit: type=1400 audit(1785337270.386:175): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="gadgetfs" ino=7793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 56.439588][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.442119][ T42] audit: type=1400 audit(1785337270.386:176): avc: denied { mount } for pid=5739 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.449016][ T5745] veth1_macvtap: entered promiscuous mode [ 56.452987][ T42] audit: type=1400 audit(1785337270.386:177): avc: denied { mounton } for pid=5739 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 56.454536][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.463445][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.471286][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.482573][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.496983][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.519278][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.554019][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.567377][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.573407][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.574325][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.579752][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.603579][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.632036][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.637075][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.719400][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.731568][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.788137][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.792552][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.221560][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16'. [ 57.225770][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'. [ 57.229292][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 57.233357][ T5944] netlink: 'syz.1.16': attribute type 7 has an invalid length. [ 57.294565][ T5949] loop8: detected capacity change from 0 to 7 [ 57.299429][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.303094][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.306570][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.310122][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.313540][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.316625][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.321280][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.324934][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.328346][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.331725][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.334854][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.338185][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.341514][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.344675][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.347255][ T5949] ldm_validate_partition_table(): Disk read failed. [ 57.350501][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.352587][ T5950] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 57.353846][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.354042][ T5951] Bluetooth: MGMT ver 1.23 [ 57.361485][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.365411][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.367685][ T5948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 57.370324][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 57.375480][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 57.378745][ T5949] Dev loop8: unable to read RDB block 0 [ 57.383134][ T5949] loop8: unable to read partition table [ 57.385667][ T5949] loop8: partition table beyond EOD, truncated [ 57.388306][ T5949] loop_reread_partitions: partition scan of loop8 (úů塙‰üŤľCęjĚ–ă˘P=Ă˝?ă}X‹şĐ śëÜ%ő«`ÉćÖ€ů…{í©Öȵ4FLQkÝŠ) failed (rc=-5) [ 57.394236][ T5098] Bluetooth: hci0: command tx timeout [ 57.454025][ T5951] block nbd0: server does not support multiple connections per device. [ 57.459446][ T5951] block nbd0: shutting down sockets [ 57.471170][ T5098] Bluetooth: hci1: command tx timeout [ 57.471296][ T5741] Bluetooth: hci3: command tx timeout [ 57.482020][ T5741] Bluetooth: hci2: command tx timeout [ 57.538495][ T5962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5962 comm=syz.1.22 [ 57.791392][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.888018][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 57.940910][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 57.948028][ T5891] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 57.951162][ T5891] usb 5-1: config 0 has no interface number 0 [ 57.956037][ T5891] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 57.960368][ T5891] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 57.966296][ T5891] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.969799][ T5891] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 57.978154][ T5891] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 57.978870][ T5982] e1000e 0000:00:02.0 eth1: removed PHC [ 57.981814][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.992931][ T5891] usb 5-1: config 0 descriptor?? [ 58.005596][ T5891] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 58.104352][ T5982] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 58.243786][ T6005] kAFS: unable to lookup cell 'syz1' [ 58.276917][ T5987] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 58.294302][ T5987] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 58.297328][ T5987] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 58.300200][ T5987] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 58.303477][ T5987] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 58.307271][ T5987] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 58.309946][ T5987] pci 0000:00:02.0: enabling Extended Tags [ 58.342532][ T5987] pci 0000:00:02.0: Adding to iommu group 2 [ 58.376944][ T5987] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 58.379517][ T5987] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 58.386851][ T5987] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 58.391169][ T5987] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 58.395641][ T5987] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 58.439640][ T5987] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 58.529537][ T5987] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 58.592923][ T6037] Bluetooth: MGMT ver 1.23 [ 58.657642][ T5987] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 58.675819][ T5987] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 58.685584][ T5987] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 58.705229][ T6046] ucma_write: process 46 (syz.3.42) changed security contexts after opening file descriptor, this is not allowed. [ 58.740245][ T6051] mmap: syz.1.44 (6051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.837394][ T6069] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 58.849771][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 58.863341][ T6069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.867001][ T6069] team0: Port device netdevsim1 added [ 59.064009][ T6099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.56'. [ 59.070410][ T6100] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 59.122477][ T6102] netlink: 'syz.1.54': attribute type 21 has an invalid length. [ 59.125203][ T6102] netlink: 128 bytes leftover after parsing attributes in process `syz.1.54'. [ 59.128114][ T6102] netlink: 'syz.1.54': attribute type 4 has an invalid length. [ 59.130633][ T6102] netlink: 'syz.1.54': attribute type 5 has an invalid length. [ 59.136965][ T6102] netlink: 3 bytes leftover after parsing attributes in process `syz.1.54'. [ 59.380285][ T6144] erspan1: entered promiscuous mode [ 59.388964][ T6143] syzkaller0: entered promiscuous mode [ 59.396325][ T6143] syzkaller0: entered allmulticast mode [ 59.405046][ T6143] tipc: Started in network mode [ 59.407826][ T6143] tipc: Node identity fa13c6b72d9a, cluster identity 4711 [ 59.412484][ T6143] tipc: Enabled bearer , priority 0 [ 59.418186][ T6141] tipc: Resetting bearer [ 59.432755][ T6141] tipc: Disabling bearer [ 59.471337][ T5741] Bluetooth: hci0: command tx timeout [ 59.488232][ T6158] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure [ 59.492916][ T6158] ======================================================= [ 59.492916][ T6158] WARNING: The mand mount option has been deprecated and [ 59.492916][ T6158] and is ignored by this kernel. Remove the mand [ 59.492916][ T6158] option from the mount to silence this warning. [ 59.492916][ T6158] ======================================================= [ 59.511433][ T6158] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 59.551163][ T5741] Bluetooth: hci1: command tx timeout [ 59.551183][ T5098] Bluetooth: hci2: command tx timeout [ 59.551373][ T5743] Bluetooth: hci3: command tx timeout [ 59.637298][ T5450] 8021q: adding VLAN 0 to HW filter on device eth1 [ 59.675830][ T6172] netlink: 'syz.3.77': attribute type 64 has an invalid length. [ 59.694004][ T6166] syzkaller1: entered promiscuous mode [ 59.701346][ T6166] syzkaller1: entered allmulticast mode [ 59.881637][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.927905][ T6180] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 59.931006][ T6180] PKCS7: Only support pkcs7_signedData type [ 60.063887][ T34] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 60.066993][ T34] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 60.070334][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 60.073423][ T34] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.077287][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 60.080981][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 60.086064][ T34] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 60.089293][ T34] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 60.092044][ T34] usb 6-1: Product: syz [ 60.093514][ T34] usb 6-1: Manufacturer: syz [ 60.099552][ T6165] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 60.104457][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 60.106133][ T34] cdc_wdm 6-1:1.0: skipping garbage [ 60.109638][ T34] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 60.112496][ T34] cdc_wdm 6-1:1.0: Unknown control protocol [ 60.118946][ T9] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 60.132144][ T5891] e1000 0000:00:06.0 eth0: Reset adapter [ 60.271479][ T5891] e1000 0000:00:06.0 eth0: Reset adapter [ 60.360908][ T6206] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'. [ 60.368947][ T6206] loop5: detected capacity change from 0 to 7 [ 60.373552][ T6206] Dev loop5: unable to read RDB block 7 [ 60.375545][ T6206] loop5: AHDI p2 [ 60.376856][ T6206] loop5: partition table partially beyond EOD, truncated [ 60.569817][ T6184] usb 6-1: USB disconnect, device number 2 [ 60.582417][ T34] usb 5-1: USB disconnect, device number 2 [ 60.584230][ T6231] devtmpfs: Cannot change global quota limit on remount [ 60.595574][ T6214] trusted_key: encrypted_key: insufficient parameters specified [ 60.620359][ T34] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 61.297492][ T6213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.301677][ T6213] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.308118][ T6213] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.315590][ T6213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.318020][ T6213] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.322628][ T6213] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.325515][ T6213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.327438][ T6213] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.330134][ T6213] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.333315][ T6213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.335319][ T6213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.338376][ T6213] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 62.432167][ T5891] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 62.671035][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.391115][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.391192][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.394768][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.751214][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.471850][ T5098] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.472710][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.476644][ T5098] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.830942][ T5098] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.552740][ T5098] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.553796][ T5743] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.555604][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.664220][ T42] kauditd_printk_skb: 458 callbacks suppressed [ 68.664238][ T42] audit: type=1400 audit(1785337282.666:636): avc: denied { write } for pid=6245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.709411][ T42] audit: type=1400 audit(1785337282.706:637): avc: denied { write } for pid=6248 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.394137][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.396390][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.582624][ T42] audit: type=1400 audit(1785337285.586:638): avc: denied { write } for pid=6251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.643652][ T42] audit: type=1400 audit(1785337285.646:639): avc: denied { write } for pid=6254 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.239558][ T42] audit: type=1400 audit(1785337286.236:640): avc: denied { write } for pid=6257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.291965][ T42] audit: type=1400 audit(1785337286.296:641): avc: denied { write } for pid=6260 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.973211][ T6266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.89'. [ 73.976407][ T42] audit: type=1400 audit(1785337287.976:642): avc: denied { connect } for pid=6265 comm="syz.0.87" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.017825][ T42] audit: type=1400 audit(1785337288.016:643): avc: denied { write } for pid=6264 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.025882][ T42] audit: type=1400 audit(1785337288.016:644): avc: denied { getopt } for pid=6264 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.048804][ T42] audit: type=1400 audit(1785337288.046:645): avc: denied { create } for pid=6278 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.057769][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 74.058698][ T42] audit: type=1400 audit(1785337288.046:646): avc: denied { write } for pid=6278 comm="syz.0.91" path="socket:[11694]" dev="sockfs" ino=11694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.110979][ T6290] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 74.114751][ T6290] netlink: 'syz.2.95': attribute type 13 has an invalid length. [ 74.118276][ T42] audit: type=1400 audit(1785337288.116:647): avc: denied { read write } for pid=6291 comm="syz.1.96" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.126609][ T42] audit: type=1400 audit(1785337288.116:648): avc: denied { open } for pid=6291 comm="syz.1.96" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.135093][ T42] audit: type=1400 audit(1785337288.116:649): avc: denied { ioctl } for pid=6291 comm="syz.1.96" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.155247][ T42] audit: type=1326 audit(1785337288.156:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.97" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b6f9de99 code=0x7ffc0000 [ 74.162611][ T42] audit: type=1326 audit(1785337288.156:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6295 comm="syz.2.97" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b6f9de99 code=0x7ffc0000 [ 74.166233][ T6297] CUSE: unknown device info "" [ 74.171602][ T6297] CUSE: unknown device info "" [ 74.173767][ T6297] CUSE: unknown device info "" [ 74.175810][ T6297] CUSE: unknown device info "" [ 74.177818][ T6297] CUSE: DEVNAME unspecified [ 74.223900][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.99'. [ 74.248276][ T6302] netlink: 1 bytes leftover after parsing attributes in process `syz.1.99'. [ 74.324704][ T6312] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 (while UP) [ 74.448837][ T6324] netlink: 'syz.3.104': attribute type 2 has an invalid length. [ 74.453100][ T6324] netlink: 151 bytes leftover after parsing attributes in process `syz.3.104'. [ 74.494887][ T6326] netlink: 84 bytes leftover after parsing attributes in process `syz.3.107'. [ 74.569629][ T6331] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 74.611437][ T5826] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 74.669464][ T6338] loop5: detected capacity change from 0 to 2640 [ 74.677511][ T6277] buffer_io_error: 10 callbacks suppressed [ 74.677526][ T6277] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.686068][ T6277] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.691067][ T6277] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.694854][ T6277] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.698524][ T6277] Buffer I/O error on dev loop5, logical block 0, async page read [ 74.729190][ T6338] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 74.732086][ T6338] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 74.735245][ T6338] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 74.738325][ T6338] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 74.741863][ T6338] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 74.773138][ T5826] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.777245][ T5826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 74.783028][ T5826] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 74.786513][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.789342][ T5826] usb 7-1: Product: syz [ 74.791214][ T5826] usb 7-1: Manufacturer: syz [ 74.793011][ T5826] usb 7-1: SerialNumber: syz [ 74.798925][ T5826] usb 7-1: config 0 descriptor?? [ 74.802795][ T6314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 74.860943][ T5826] rc_core: IR keymap rc-streamzap not found [ 74.863527][ T5826] Registered IR keymap rc-empty [ 74.868617][ T5826] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 74.875327][ T5826] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 74.922778][ T6348] warning: `syz.3.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.976840][ T6350] IPVS: length: 120 != 24 [ 74.985539][ T6350] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.164489][ T6360] Zero length message leads to an empty skb [ 75.420945][ T5891] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.517267][ T9] usb 7-1: USB disconnect, device number 2 [ 75.561953][ T5891] usb 8-1: device descriptor read/64, error -71 syzkaller syzkaller login: [ 75.615464][ T6401] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.130'. [ 75.801603][ T5891] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 75.860212][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.924715][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.940910][ T5891] usb 8-1: device descriptor read/64, error -71 [ 75.971566][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.012712][ T12] team0: Port device netdevsim1 removed [ 76.016369][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.026882][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.034975][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.038686][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.043791][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.048504][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.061774][ T5891] usb usb8-port1: attempt power cycle [ 76.083618][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.142960][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 76.146082][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 76.148766][ T34] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 76.157409][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.160362][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.217189][ T6436] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.140'. [ 76.262157][ T6439] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.265586][ T6439] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 76.269086][ T6439] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.272992][ T6439] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 76.327271][ T12] bridge_slave_1: left allmulticast mode [ 76.329275][ T12] bridge_slave_1: left promiscuous mode [ 76.334370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.340559][ T12] bridge_slave_0: left allmulticast mode [ 76.343284][ T12] bridge_slave_0: left promiscuous mode [ 76.345913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.369815][ T6409] process 'syz.0.134' launched '/dev/fd/8' with NULL argv: empty string added [ 76.420808][ T5891] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.441569][ T5891] usb 8-1: device descriptor read/8, error -71 [ 76.459104][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.465166][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.468955][ T12] bond0 (unregistering): Released all slaves [ 76.554916][ T12] tipc: Left network mode [ 76.701179][ T5891] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 76.714786][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.721663][ T5891] usb 8-1: device descriptor read/8, error -71 [ 76.788531][ T12] hsr_slave_0: left promiscuous mode [ 76.791740][ T12] hsr_slave_1: left promiscuous mode [ 76.794732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.797865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.802067][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.805166][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.816540][ T12] veth1_macvtap: left promiscuous mode [ 76.818984][ T12] veth0_macvtap: left promiscuous mode [ 76.823191][ T12] veth1_vlan: left promiscuous mode [ 76.825468][ T12] veth0_vlan: left promiscuous mode [ 76.833978][ T5891] usb usb8-port1: unable to enumerate USB device [ 76.983692][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.994314][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.070438][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.074993][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.078218][ T6426] bridge_slave_0: entered allmulticast mode [ 77.082075][ T6426] bridge_slave_0: entered promiscuous mode [ 77.086637][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.089109][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.091643][ T6426] bridge_slave_1: entered allmulticast mode [ 77.094592][ T6426] bridge_slave_1: entered promiscuous mode [ 77.120192][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.129008][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.154192][ T6426] team0: Port device team_slave_0 added [ 77.157530][ T6426] team0: Port device team_slave_1 added [ 77.172073][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.174295][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.183787][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.188153][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.190350][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.199282][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.222504][ T6426] hsr_slave_0: entered promiscuous mode [ 77.224876][ T6426] hsr_slave_1: entered promiscuous mode [ 77.227021][ T6426] debugfs: 'hsr0' already exists in 'hsr' [ 77.228873][ T6426] Cannot create hsr debugfs directory [ 77.247993][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.378618][ T6426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.385322][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.389285][ T6426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.395382][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.398385][ T6426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.402750][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.405525][ T6426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.410388][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.454870][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.470617][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.477788][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.480877][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.489605][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.492420][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.500603][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 77.548580][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'. [ 77.616521][ T6496] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.148'. [ 77.670209][ T6504] erspan0: entered promiscuous mode [ 77.675861][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5 [ 77.783269][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.938699][ T6426] veth0_vlan: entered promiscuous mode [ 77.946031][ T6426] veth1_vlan: entered promiscuous mode [ 77.965895][ T6426] veth0_macvtap: entered promiscuous mode [ 77.970437][ T6426] veth1_macvtap: entered promiscuous mode [ 77.986286][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.995491][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.003514][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007215][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011745][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.015299][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.068268][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.071710][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.092870][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.095381][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.111155][ T5741] Bluetooth: hci3: command tx timeout [ 78.167889][ T6532] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 78.271612][ T6535] syzkaller1: entered promiscuous mode [ 78.274513][ T6535] syzkaller1: entered allmulticast mode [ 78.281282][ T71] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 78.340099][ T6542] syz.4.155 uses obsolete (PF_INET,SOCK_PACKET) [ 78.360935][ T6542] netlink: 'syz.4.155': attribute type 11 has an invalid length. [ 78.612148][ T10] cfg80211: failed to load regulatory.db [ 78.741362][ T71] usb 5-1: USB disconnect, device number 3 [ 79.289102][ T6565] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 79.294921][ T6565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.299499][ T42] kauditd_printk_skb: 169 callbacks suppressed [ 79.299521][ T42] audit: type=1400 audit(1785337293.296:821): avc: denied { mount } for pid=6563 comm="syz.3.163" name="/" dev="ramfs" ino=12167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.303195][ T6567] cgroup: none used incorrectly [ 79.310075][ T42] audit: type=1400 audit(1785337293.306:822): avc: denied { mounton } for pid=6563 comm="syz.3.163" path="/" dev="ramfs" ino=12167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 79.370456][ T42] audit: type=1400 audit(1785337293.366:823): avc: denied { map } for pid=6561 comm="syz.2.162" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.383004][ T42] audit: type=1400 audit(1785337293.386:824): avc: denied { write } for pid=6572 comm="syz.0.164" name="0:0:0:0" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.397371][ T42] audit: type=1400 audit(1785337293.396:825): avc: denied { ioctl } for pid=6572 comm="syz.0.164" path="socket:[13159]" dev="sockfs" ino=13159 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.410533][ T42] audit: type=1400 audit(1785337293.406:826): avc: denied { write } for pid=6572 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 79.507288][ T6585] overlayfs: failed to resolve './bus': -2 [ 79.520965][ T42] audit: type=1400 audit(1785337293.526:827): avc: denied { create } for pid=6582 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.563146][ T42] audit: type=1400 audit(1785337293.566:828): avc: denied { create } for pid=6582 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.569607][ T42] audit: type=1400 audit(1785337293.566:829): avc: denied { write } for pid=6582 comm="syz.3.166" path="socket:[12190]" dev="sockfs" ino=12190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.601634][ T42] audit: type=1400 audit(1785337293.606:830): avc: denied { append } for pid=6594 comm="syz.4.168" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.821401][ T34] libceph: connect (1)[c::]:6789 error -101 [ 79.825077][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 80.023853][ T6615] ceph: No mds server is up or the cluster is laggy [ 80.099184][ T6645] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.104741][ T6645] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 80.165383][ T6653] binder: BINDER_SET_CONTEXT_MGR already set [ 80.168470][ T6653] binder: 6651:6653 ioctl 4018620d 2000000000c0 returned -16 [ 80.190871][ T5741] Bluetooth: hci3: command tx timeout [ 80.257817][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.263508][ T6662] __nla_validate_parse: 2 callbacks suppressed [ 80.263524][ T6662] netlink: 72 bytes leftover after parsing attributes in process `syz.4.183'. [ 80.480593][ T6670] xt_hashlimit: size too large, truncated to 1048576 [ 80.641478][ T71] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 80.774991][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 80.779253][ T6674] netlink: 92 bytes leftover after parsing attributes in process `syz.2.188'. [ 80.782844][ T6674] nbd: must specify at least one socket [ 80.786126][ T64] block nbd0: Receive control failed (result -32) [ 80.793963][ T71] usb 9-1: unable to get BOS descriptor or descriptor too short [ 80.802540][ T71] usb 9-1: config 5 has an invalid interface number: 91 but max is 0 [ 80.805393][ T71] usb 9-1: config 5 has no interface number 0 [ 80.807992][ T71] usb 9-1: config 5 interface 91 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 80.817296][ T71] usb 9-1: string descriptor 0 read error: -22 [ 80.820382][ T71] usb 9-1: New USB device found, idVendor=0403, idProduct=dafb, bcdDevice=d3.ad [ 80.823903][ T71] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.832718][ T6668] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 80.841228][ T71] ftdi_sio 9-1:5.91: FTDI USB Serial Device converter detected [ 80.850059][ T71] ftdi_sio ttyUSB0: unknown device type: 0xd3ad [ 80.930295][ T6683] Bluetooth: hci0: unsupported parameter 33 [ 80.935772][ T6683] Bluetooth: hci0: unsupported parameter 33 [ 81.004392][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 81.013922][ T6691] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 81.097517][ T6698] autofs: Unknown parameter 'N¶ŻDb°ľS »‚ş;ľĆ}ҦźÂóV˛&Łűňź$F18fˇh;°EçZq•|°89•>ĹX˛Vł' [ 81.143209][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 81.249594][ T6712] key id 000004d2 not found [ 81.259491][ T5826] usb 9-1: USB disconnect, device number 2 [ 81.273832][ T5826] ftdi_sio 9-1:5.91: device disconnected [ 81.425751][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 81.428706][ T6716] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 81.431270][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 81.817404][ T5741] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 81.833032][ T6737] can0: slcan on ttyS3. [ 81.921129][ T6733] syz.3.206: attempt to access beyond end of device [ 81.921129][ T6733] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 81.926008][ T6733] gfs2: error -5 reading superblock [ 81.931888][ T6735] can0 (unregistered): slcan off ttyS3. [ 82.271872][ T5741] Bluetooth: hci3: command tx timeout [ 82.648096][ T6779] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 82.780076][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 82.793039][ T71] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.805336][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 82.817322][ T6800] gretap0: entered promiscuous mode [ 82.820697][ T6800] macvlan2: entered allmulticast mode [ 82.822708][ T6800] gretap0: entered allmulticast mode [ 82.844756][ T6804] Invalid argument reading file caps for ./file0 [ 82.856577][ T6804] usbip-vudc usbip-vudc.0: gadget not bound [ 82.879413][ T6809] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 82.883560][ T6809] tmpfs: Bad value for 'mpol' [ 82.888230][ T6809] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 82.909100][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 82.936753][ T6809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.974362][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.987991][ T71] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.997676][ T71] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 83.008150][ T71] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.020851][ T71] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.026612][ T71] usb 5-1: config 0 descriptor?? [ 83.087881][ T6829] dlm: no locking on control device [ 83.176207][ T6843] input: syz1 as /devices/virtual/input/input6 [ 83.245981][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.246747][ T6841] kvm: pic: non byte write [ 83.248505][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.260817][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.261478][ T6850] kvm: user requested TSC rate below hardware speed [ 83.270951][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.275944][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.291152][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.294330][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.320935][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.324228][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.327284][ T71] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 83.382611][ T71] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 83.756481][ T10] libceph: connect (1)[c::]:6789 error -101 [ 83.758619][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 83.823094][ T34] usb 5-1: USB disconnect, device number 4 [ 84.024449][ T10] libceph: connect (1)[c::]:6789 error -101 [ 84.026947][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 84.070376][ T6892] overlayfs: missing 'lowerdir' [ 84.217466][ T5741] Bluetooth: hci1: ISO packet for unknown connection handle 201 [ 84.342714][ T6919] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 84.348292][ T6919] netlink: 'syz.2.258': attribute type 32 has an invalid length. [ 84.351027][ T5741] Bluetooth: hci3: command tx timeout [ 84.543155][ T9] libceph: connect (1)[c::]:6789 error -101 [ 84.546427][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 84.579691][ T6868] ceph: No mds server is up or the cluster is laggy [ 84.778675][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 84.778704][ T42] audit: type=1400 audit(1785337298.776:870): avc: denied { map } for pid=6941 comm="syz.3.264" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.873026][ T6950] smc: net device vlan1 applied user defined pnetid SYZ2 [ 84.954148][ T42] audit: type=1804 audit(1785337298.956:871): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.266" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 84.962835][ T42] audit: type=1800 audit(1785337298.956:872): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.266" name="/" dev="fuse" ino=1 res=0 errno=0 [ 85.002776][ T42] audit: type=1400 audit(1785337299.006:873): avc: denied { write } for pid=6953 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.058137][ T42] audit: type=1400 audit(1785337299.056:874): avc: denied { getopt } for pid=6953 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.199954][ T6964] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 85.377202][ T6976] netlink: 'syz.2.274': attribute type 16 has an invalid length. [ 85.380493][ T6976] __nla_validate_parse: 8 callbacks suppressed [ 85.380508][ T6976] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.274'. [ 85.422043][ T6976] netlink: 'syz.2.274': attribute type 10 has an invalid length. [ 85.426378][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.428120][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.432470][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.434771][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.440885][ T6978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.452093][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.455243][ T6976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.459284][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.462454][ T6976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.469296][ T6976] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.475032][ T42] audit: type=1400 audit(1785337299.476:875): avc: denied { map } for pid=6972 comm="syz.2.274" path="socket:[14089]" dev="sockfs" ino=14089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 85.926281][ T42] audit: type=1400 audit(1785337299.926:876): avc: denied { unlink } for pid=6982 comm="syz.0.277" name="#1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.985218][ T42] audit: type=1400 audit(1785337299.986:877): avc: denied { read } for pid=6984 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.991450][ T42] audit: type=1400 audit(1785337299.986:878): avc: denied { setopt } for pid=6984 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.997207][ T42] audit: type=1400 audit(1785337299.986:879): avc: denied { connect } for pid=6984 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.038181][ T6987] batadv_slave_1: entered promiscuous mode [ 86.044718][ T6987] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 86.059644][ T6987] erspan1: entered allmulticast mode [ 86.099764][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 86.129217][ T5817] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.134310][ T5817] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.146830][ T6986] batadv_slave_1: left promiscuous mode [ 86.151166][ T5817] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.155321][ T5817] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.296134][ T7009] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 86.299860][ T7009] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.357154][ T7005] kvm: pic: non byte write [ 86.478268][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 86.483121][ T7024] xt_bpf: check failed: parse error [ 86.501624][ T7028] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 86.504257][ T7028] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 86.755386][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 86.763739][ T7045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.297'. [ 86.783907][ T7045] tun0: tun_chr_ioctl cmd 1074025675 [ 86.786388][ T7045] tun0: persist enabled [ 86.789486][ T7045] tun0: tun_chr_ioctl cmd 1074025675 [ 86.793680][ T7045] tun0: persist disabled [ 86.802518][ T7047] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 86.806065][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.4.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.806084][ T7047] Tainted: [L]=SOFTLOCKUP [ 86.806089][ T7047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.806107][ T7047] Call Trace: [ 86.806112][ T7047] [ 86.806118][ T7047] dump_stack_lvl+0x100/0x190 [ 86.806187][ T7047] sysfs_warn_dup.cold+0x1c/0x28 [ 86.806217][ T7047] sysfs_create_dir_ns+0x24b/0x2b0 [ 86.806250][ T7047] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 86.806268][ T7047] ? find_held_lock+0x2b/0x80 [ 86.806294][ T7047] ? kobject_add_internal+0x25f/0x930 [ 86.806318][ T7047] ? kobject_add_internal+0x25f/0x930 [ 86.806338][ T7047] ? class_dir_child_ns_type+0xd/0x60 [ 86.806420][ T7047] kobject_add_internal+0x2c8/0x930 [ 86.806441][ T7047] kobject_add+0x16a/0x1e0 [ 86.806460][ T7047] ? __pfx_kobject_add+0x10/0x10 [ 86.806480][ T7047] ? get_device_parent+0x1b3/0x4c0 [ 86.806497][ T7047] ? kobject_put+0xb9/0x640 [ 86.806518][ T7047] device_add+0x294/0x1970 [ 86.806537][ T7047] ? lockdep_init_map_type+0x5c/0x250 [ 86.806553][ T7047] ? __pfx_device_add+0x10/0x10 [ 86.806570][ T7047] ? lockdep_init_map_type+0x5c/0x250 [ 86.806587][ T7047] ? __init_waitqueue_head+0xca/0x150 [ 86.806606][ T7047] tty_register_device_attr+0x388/0x7f0 [ 86.806628][ T7047] ? lockdep_init_map_type+0x5c/0x250 [ 86.806642][ T7047] ? __pfx_tty_register_device_attr+0x10/0x10 [ 86.806659][ T7047] ? tty_port_init+0x156/0x1c0 [ 86.806675][ T7047] gsm_activate_mux+0x155/0x2a0 [ 86.806690][ T7047] gsmld_ioctl+0xbbc/0x15c0 [ 86.806710][ T7047] ? __pfx_gsmld_ioctl+0x10/0x10 [ 86.806730][ T7047] ? __ldsem_down_read_nested+0xf3/0x890 [ 86.806750][ T7047] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 86.806774][ T7047] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.806794][ T7047] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 86.806807][ T7047] ? __pfx_gsmld_ioctl+0x10/0x10 [ 86.806822][ T7047] tty_ioctl+0x11b4/0x1640 [ 86.806836][ T7047] ? __pfx_tty_ioctl+0x10/0x10 [ 86.806849][ T7047] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 86.806912][ T7047] ? __fget_files+0x215/0x3d0 [ 86.806928][ T7047] ? hook_file_ioctl_common+0x140/0x440 [ 86.806947][ T7047] ? selinux_file_ioctl+0x13b/0x290 [ 86.806966][ T7047] ? selinux_file_ioctl+0xb6/0x290 [ 86.806986][ T7047] ? __pfx_tty_ioctl+0x10/0x10 [ 86.807001][ T7047] __x64_sys_ioctl+0x18e/0x210 [ 86.807021][ T7047] do_syscall_64+0x115/0x870 [ 86.807034][ T7047] ? clear_bhb_loop+0x40/0x90 [ 86.807049][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.807061][ T7047] RIP: 0033:0x7f6e8179de99 [ 86.807072][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.807083][ T7047] RSP: 002b:00007f6e82634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.807096][ T7047] RAX: ffffffffffffffda RBX: 00007f6e81a26090 RCX: 00007f6e8179de99 [ 86.807109][ T7047] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000004 [ 86.807117][ T7047] RBP: 00007f6e81833eaf R08: 0000000000000000 R09: 0000000000000000 [ 86.807125][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.807134][ T7047] R13: 00007f6e81a26128 R14: 00007f6e81a26090 R15: 00007ffc8ee90cd8 [ 86.807150][ T7047] [ 86.807234][ T7047] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.863067][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 86.922193][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 87.136103][ T7056] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.299'. [ 87.166041][ T7058] vlan2: entered promiscuous mode [ 87.167652][ T7058] hsr0: entered promiscuous mode [ 87.169535][ T7058] vlan2: entered allmulticast mode [ 87.171840][ T7058] hsr0: entered allmulticast mode [ 87.173401][ T7058] hsr_slave_0: entered allmulticast mode [ 87.175085][ T7058] hsr_slave_1: entered allmulticast mode [ 87.238514][ T7061] 9pnet_fd: p9_fd_create_tcp (7061): problem connecting socket to 127.0.0.1 [ 87.267916][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 87.289436][ T7074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 87.339574][ T7077] veth0_virt_wifi: entered allmulticast mode [ 87.369635][ T10] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 87.414862][ T7085] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.309'. [ 87.543350][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.545818][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.549512][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.552322][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.568713][ T7103] netlink: 'syz.2.316': attribute type 3 has an invalid length. [ 87.641694][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 87.719113][ T7111] input: syz0 as /devices/virtual/input/input7 [ 87.737829][ T7111] loop7: detected capacity change from 0 to 16384 [ 87.761753][ T5891] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 87.882583][ T7115] loop7: detected capacity change from 16384 to 0 [ 87.912328][ T5891] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.918512][ T5891] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 87.922895][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.925612][ T5891] usb 8-1: Product: syz [ 87.926978][ T5891] usb 8-1: Manufacturer: syz [ 87.936387][ T5891] usb_debug 8-1:1.0: debug converter detected [ 87.947145][ T5891] usb 8-1: debug converter now attached to ttyUSB0 [ 88.164487][ T10] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 88.255905][ T55] usb 8-1: USB disconnect, device number 7 [ 88.267314][ T55] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 88.272245][ T55] usb_debug 8-1:1.0: device disconnected [ 88.370848][ T5819] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.444441][ T7081] ceph: No mds server is up or the cluster is laggy [ 88.542731][ T5819] usb 9-1: Using ep0 maxpacket: 8 [ 88.549482][ T5819] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 88.559856][ T5819] usb 9-1: config 0 has no interface number 0 [ 88.562714][ T5819] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 88.567139][ T5819] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 88.577165][ T5819] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.581706][ T5819] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.586944][ T5819] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 88.592649][ T5819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.603644][ T5819] usb 9-1: config 0 descriptor?? [ 88.611026][ T5819] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 88.742817][ T7177] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 88.751472][ T7177] CIFS: Attempting to mount //127.0.0.1/share [ 88.798177][ T7179] CIFS: VFS: Invalid response size 0 for command 0 [ 88.801416][ T7179] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 88.804675][ T7177] CIFS: VFS: cifs_mount failed w/return code = -5 [ 88.832593][ T5819] usb 9-1: USB disconnect, device number 3 [ 88.846305][ T5819] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 88.905402][ T7193] bridge_slave_1: default FDB implementation only supports local addresses [ 88.923072][ T7194] Bluetooth: MGMT ver 1.23 [ 88.946131][ T7197] netlink: 'syz.3.332': attribute type 10 has an invalid length. [ 88.961777][ T7197] team0 (unregistering): Port device team_slave_0 removed [ 88.969661][ T7197] team0 (unregistering): Port device team_slave_1 removed [ 89.112981][ T7221] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 89.140603][ T7220] bond1 (unregistering): Released all slaves [ 89.174666][ T7226] fuse: Bad value for 'fd' [ 89.285046][ T7220] bond1 (unregistering): Released all slaves [ 89.392313][ T7220] bond1 (unregistering): Released all slaves [ 89.442495][ T7255] cgroup: release_agent respecified [ 89.528785][ T7220] bond1 (unregistering): Released all slaves [ 89.659418][ T7220] bond1 (unregistering): Released all slaves [ 89.747749][ T71] IPVS: starting estimator thread 0... [ 89.806125][ T7280] binder: 7279:7280 ioctl c0306201 200000000080 returned -14 [ 89.806980][ T7220] bond1 (unregistering): Released all slaves [ 89.823220][ T7281] binder: 7279:7281 ioctl c0306201 2000000003c0 returned -14 [ 89.826489][ T7280] binder: 7279:7280 ioctl c0306201 2000000003c0 returned -14 [ 89.829738][ T7281] binder: 7279:7281 ioctl c0385869 2000000002c0 returned -22 [ 89.851109][ T7276] IPVS: using max 43 ests per chain, 103200 per kthread [ 89.872088][ T5528] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 89.880870][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.881791][ T5528] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 89.908065][ T7287] openvswitch: netlink: Duplicate key (type 6). [ 89.925577][ T7220] bond1 (unregistering): Released all slaves [ 89.949745][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.994319][ T7295] netlink: 'syz.0.356': attribute type 7 has an invalid length. [ 90.142940][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 90.142966][ T42] audit: type=1400 audit(1785337304.146:928): avc: denied { mount } for pid=7307 comm="syz.2.361" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 90.153918][ T7310] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 90.166184][ T42] audit: type=1400 audit(1785337304.166:929): avc: denied { setopt } for pid=7319 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.217774][ T7328] libceph: resolve '0' (ret=-3): failed [ 90.254906][ T42] audit: type=1400 audit(1785337304.256:930): avc: denied { map } for pid=7333 comm="syz.2.369" path="socket:[17669]" dev="sockfs" ino=17669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.263900][ T42] audit: type=1400 audit(1785337304.256:931): avc: denied { read } for pid=7333 comm="syz.2.369" path="socket:[17669]" dev="sockfs" ino=17669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.280452][ T7335] /dev/sr0: Can't open blockdev [ 90.306198][ T42] audit: type=1400 audit(1785337304.316:932): avc: denied { read } for pid=7338 comm="syz.3.370" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.318858][ T42] audit: type=1400 audit(1785337304.316:933): avc: denied { open } for pid=7338 comm="syz.3.370" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.327228][ T42] audit: type=1400 audit(1785337304.316:934): avc: denied { getopt } for pid=7339 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.366512][ T7353] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 90.386559][ T7350] __nla_validate_parse: 10 callbacks suppressed [ 90.386570][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 90.398362][ T7350] block nbd4: shutting down sockets [ 90.430822][ T42] audit: type=1400 audit(1785337304.426:935): avc: denied { setattr } for pid=7359 comm="syz.3.376" name="NETLINK" dev="sockfs" ino=15168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.466275][ T7369] raw_sendmsg: syz.4.379 forgot to set AF_INET. Fix it! [ 90.680696][ T42] audit: type=1400 audit(1785337304.676:936): avc: denied { read } for pid=7396 comm="syz.2.389" name="g1" dev="configfs" ino=12765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.689796][ T42] audit: type=1400 audit(1785337304.676:937): avc: denied { read open } for pid=7396 comm="syz.2.389" path="/95/my_configfs/usb_gadget/g1" dev="configfs" ino=12765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.787954][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 90.809364][ T7397] team0: Port device team_slave_0 removed [ 90.878929][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 90.884006][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 90.889957][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 90.946125][ T10] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 91.025498][ T55] vcan0 speed is unknown, defaulting to 1000 [ 91.028372][ T7409] infiniband syz1: set active [ 91.030088][ T7409] infiniband syz1: added vcan0 [ 91.044663][ T7409] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 91.049451][ T7409] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 91.055615][ T7409] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 91.103855][ T7409] RDS/IB: syz1: added [ 91.107081][ T7409] smc: adding ib device syz1 with port count 1 [ 91.109290][ T7409] smc: ib device syz1 port 1 has no pnetid [ 91.113771][ T5819] vcan0 speed is unknown, defaulting to 1000 [ 91.120610][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 91.216162][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 91.247157][ T7419] Cannot find del_set index 1 as target [ 91.251975][ T7419] 9p: Bad value for 'wfdno' [ 91.320377][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 91.452604][ T7409] vcan0 speed is unknown, defaulting to 1000 [ 91.623758][ T7426] netlink: 180 bytes leftover after parsing attributes in process `syz.3.398'. [ 91.634011][ T7426] netlink: 180 bytes leftover after parsing attributes in process `syz.3.398'. [ 91.904984][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 91.911738][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.914684][ T7442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.918744][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.922284][ T7442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.953280][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.956742][ T5528] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 91.962848][ T5528] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 92.094046][ T55] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.182398][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 92.186402][ T7473] ipt_rpfilter: unknown options [ 92.250917][ T55] usb 8-1: Using ep0 maxpacket: 8 [ 92.256192][ T55] usb 8-1: unable to get BOS descriptor or descriptor too short [ 92.260156][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 92.264917][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.268783][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 92.275010][ T55] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 92.279012][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 92.284085][ T55] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 92.289746][ T55] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 92.293721][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.296921][ T55] usb 8-1: Product: syz [ 92.298660][ T55] usb 8-1: Manufacturer: syz [ 92.300373][ T55] usb 8-1: SerialNumber: syz [ 92.308039][ T55] usb 8-1: config 0 descriptor?? [ 92.311676][ T7438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.315092][ T7438] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.323046][ T55] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.343698][ T71] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.390895][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.495417][ T71] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 92.499128][ T71] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.502271][ T71] usb 7-1: Product: syz [ 92.503874][ T71] usb 7-1: Manufacturer: syz [ 92.505673][ T71] usb 7-1: SerialNumber: syz [ 92.537621][ T7438] netlink: 778 bytes leftover after parsing attributes in process `syz.3.402'. [ 92.540944][ T7439] netlink: 778 bytes leftover after parsing attributes in process `syz.3.402'. [ 92.541758][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 92.556032][ T5891] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 92.559354][ T5891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.565646][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.569562][ T5891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.574019][ T5891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.579144][ T5891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.582868][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.596570][ T5892] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.637474][ T7482] comedi: valid board names for 8255 driver are: [ 92.640518][ T7482] 8255 [ 92.642367][ T7482] comedi: valid board names for vmk80xx driver are: [ 92.645105][ T7482] vmk80xx [ 92.646367][ T7482] comedi: valid board names for usbduxsigma driver are: [ 92.649072][ T7482] usbduxsigma [ 92.650480][ T7482] comedi: valid board names for usbduxfast driver are: [ 92.653699][ T7482] usbduxfast [ 92.655232][ T7482] comedi: valid board names for usbdux driver are: [ 92.659176][ T7482] usbdux [ 92.660511][ T7482] comedi: valid board names for ni6501 driver are: [ 92.663200][ T7482] ni6501 [ 92.664352][ T7482] comedi: valid board names for dt9812 driver are: [ 92.666867][ T7482] dt9812 [ 92.668059][ T7482] comedi: valid board names for ni_labpc_cs driver are: [ 92.671005][ T7482] ni_labpc_cs [ 92.672425][ T7482] comedi: valid board names for ni_daq_700 driver are: [ 92.675067][ T7482] ni_daq_700 [ 92.676476][ T7482] comedi: valid board names for labpc_pci driver are: [ 92.679140][ T7482] labpc_pci [ 92.680468][ T7482] comedi: valid board names for adl_pci9118 driver are: [ 92.683390][ T7482] pci9118dg [ 92.684746][ T7482] pci9118hg [ 92.686125][ T7482] pci9118hr [ 92.687473][ T7482] comedi: valid board names for 8255_pci driver are: [ 92.690067][ T7482] 8255_pci [ 92.691505][ T7482] comedi: valid board names for s526 driver are: [ 92.694099][ T7482] s526 [ 92.695198][ T7482] comedi: valid board names for multiq3 driver are: [ 92.697823][ T7482] multiq3 [ 92.699096][ T7482] comedi: valid board names for pcmuio driver are: [ 92.701761][ T7482] pcmuio48 [ 92.703026][ T7482] pcmuio96 [ 92.704341][ T7482] comedi: valid board names for pcmmio driver are: [ 92.706906][ T7482] pcmmio [ 92.708206][ T7482] comedi: valid board names for pcmda12 driver are: [ 92.711439][ T7482] pcmda12 [ 92.712762][ T7482] comedi: valid board names for pcmad driver are: [ 92.715235][ T7482] pcmad12 [ 92.716479][ T7482] pcmad16 [ 92.717702][ T7482] comedi: valid board names for ni_labpc driver are: [ 92.720302][ T7482] lab-pc-1200 [ 92.721831][ T7482] lab-pc-1200ai [ 92.723254][ T7482] lab-pc+ [ 92.724615][ T7482] comedi: valid board names for atmio16 driver are: [ 92.727184][ T7482] atmio16 [ 92.728444][ T7482] atmio16d [ 92.729745][ T7482] comedi: valid board names for ni_at_ao driver are: [ 92.732520][ T7482] at-ao-6 [ 92.733753][ T7482] at-ao-10 [ 92.735048][ T7482] comedi: valid board names for ni_at_a2150 driver are: [ 92.737709][ T7482] ni_at_a2150 [ 92.738988][ T7482] comedi: valid board names for adq12b driver are: [ 92.741362][ T7482] adq12b [ 92.742596][ T7482] comedi: valid board names for mpc624 driver are: [ 92.745102][ T7482] mpc624 [ 92.746267][ T7482] comedi: valid board names for c6xdigio driver are: [ 92.748684][ T7482] c6xdigio [ 92.749833][ T7482] comedi: valid board names for aio_iiro_16 driver are: [ 92.752644][ T7482] aio_iiro_16 [ 92.754120][ T7482] comedi: valid board names for aio_aio12_8 driver are: [ 92.756993][ T7482] aio_aio12_8 [ 92.758442][ T7482] aio_ai12_8 [ 92.759944][ T7482] aio_ao12_4 [ 92.761504][ T7482] comedi: valid board names for fl512 driver are: [ 92.764266][ T7482] fl512 [ 92.765529][ T7482] comedi: valid board names for dmm32at driver are: [ 92.768274][ T7482] dmm32at [ 92.769684][ T7482] comedi: valid board names for dt282x driver are: [ 92.772682][ T7482] dt2821 [ 92.773934][ T7482] dt2821-f [ 92.775297][ T7482] dt2821-g [ 92.776731][ T7482] dt2823 [ 92.778154][ T7482] dt2824-pgh [ 92.779605][ T7482] dt2824-pgl [ 92.781191][ T7482] dt2825 [ 92.782406][ T7482] dt2827 [ 92.783741][ T7482] dt2828 [ 92.785009][ T7482] dt2829 [ 92.786329][ T7482] dt21-ez [ 92.787672][ T7482] dt23-ez [ 92.789058][ T7482] dt24-ez [ 92.790395][ T7482] dt24-ez-pgl [ 92.792015][ T7482] comedi: valid board names for dt2817 driver are: [ 92.794633][ T5891] usb 5-1: usb_control_msg returned -32 [ 92.794700][ T7482] dt2817 [ 92.794724][ T7482] comedi: valid board names for dt2815 driver are: [ 92.794733][ T7482] dt2815 [ 92.794740][ T7482] comedi: valid board names for dt2814 driver are: [ 92.794748][ T7482] dt2814 [ 92.794755][ T7482] comedi: valid board names for dt2811 driver are: [ 92.794763][ T7482] dt2811-pgh [ 92.794770][ T7482] dt2811-pgl [ 92.794777][ T7482] comedi: valid board names for dt2801 driver are: [ 92.794785][ T7482] dt2801 [ 92.794791][ T7482] comedi: valid board names for das6402 driver are: [ 92.794800][ T7482] das6402-12 [ 92.794805][ T7482] das6402-16 [ 92.794812][ T7482] comedi: valid board names for das1800 driver are: [ 92.800214][ T5891] usbtmc 5-1:16.0: can't read capabilities [ 92.801166][ T7482] das-1701st [ 92.801176][ T7482] das-1701st-da [ 92.801184][ T7482] das-1702st [ 92.801191][ T7482] das-1702st-da [ 92.801198][ T7482] das-1702hr [ 92.801204][ T7482] das-1702hr-da [ 92.801212][ T7482] das-1701ao [ 92.801218][ T7482] das-1702ao [ 92.801225][ T7482] das-1801st [ 92.801232][ T7482] das-1801st-da [ 92.801239][ T7482] das-1802st [ 92.801245][ T7482] das-1802st-da [ 92.801251][ T7482] das-1802hr [ 92.801257][ T7482] das-1802hr-da [ 92.801263][ T7482] das-1801hc [ 92.801270][ T7482] das-1802hc [ 92.853893][ T7482] das-1801ao [ 92.855044][ T7482] das-1802ao [ 92.856242][ T7482] comedi: valid board names for das800 driver are: [ 92.858420][ T7482] das-800 [ 92.859477][ T7482] cio-das800 [ 92.860849][ T7482] das-801 [ 92.862167][ T7482] cio-das801 [ 92.863481][ T7482] das-802 [ 92.864701][ T7482] cio-das802 [ 92.865975][ T7482] cio-das802/16 [ 92.867357][ T7482] comedi: valid board names for isa-das08 driver are: [ 92.870042][ T7482] isa-das08 [ 92.871375][ T7482] das08-pgm [ 92.872699][ T7482] das08-pgh [ 92.873954][ T7482] das08-pgl [ 92.875240][ T7482] das08-aoh [ 92.876575][ T7482] das08-aol [ 92.877851][ T7482] das08-aom [ 92.879216][ T7482] das08/jr-ao [ 92.880570][ T7482] das08jr-16-ao [ 92.882157][ T7482] pc104-das08 [ 92.883527][ T7482] das08jr/16 [ 92.884885][ T7482] comedi: valid board names for das16m1 driver are: [ 92.887473][ T7482] das16m1 [ 92.888728][ T7482] comedi: valid board names for dac02 driver are: [ 92.891268][ T7482] dac02 [ 92.892645][ T7482] comedi: valid board names for rti802 driver are: [ 92.895057][ T7482] rti802 [ 92.896268][ T7482] comedi: valid board names for rti800 driver are: [ 92.898728][ T7482] rti800 [ 92.899961][ T7482] rti815 [ 92.901284][ T7482] comedi: valid board names for pcm3724 driver are: [ 92.903939][ T7482] pcm3724 [ 92.905601][ T7482] comedi: valid board names for pcl818 driver are: [ 92.908173][ T7482] pcl818l [ 92.909438][ T7482] pcl818h [ 92.910693][ T7482] pcl818hd [ 92.911880][ T7482] pcl818hg [ 92.913660][ T7482] pcl818 [ 92.914636][ T7482] pcl718 [ 92.916034][ T7482] pcm3718 [ 92.917274][ T7482] comedi: valid board names for pcl816 driver are: [ 92.919830][ T7482] pcl816 [ 92.921779][ T7482] pcl814b [ 92.923053][ T7482] comedi: valid board names for pcl812 driver are: [ 92.925618][ T7482] pcl812 [ 92.926898][ T7482] pcl812pg [ 92.927940][ T7482] acl8112pg [ 92.928990][ T7482] acl8112dg [ 92.930070][ T7482] acl8112hg [ 92.931501][ T7482] a821pgl [ 92.932726][ T7482] a821pglnda [ 92.934013][ T7482] a821pgh [ 92.935243][ T7482] a822pgl [ 92.936479][ T7482] a822pgh [ 92.937686][ T7482] a823pgl [ 92.938861][ T7482] a823pgh [ 92.940063][ T7482] pcl813 [ 92.941279][ T7482] pcl813b [ 92.942390][ T7482] acl8113 [ 92.943572][ T7482] iso813 [ 92.944733][ T7482] acl8216 [ 92.945916][ T7482] a826pg [ 92.947026][ T7482] comedi: valid board names for pcl730 driver are: [ 92.949158][ T7482] pcl730 [ 92.950161][ T7482] iso730 [ 92.951292][ T7482] acl7130 [ 92.952558][ T7482] pcm3730 [ 92.953955][ T7482] pcl725 [ 92.955176][ T7482] p8r8dio [ 92.956331][ T7482] acl7225b [ 92.957468][ T7482] p16r16dio [ 92.958661][ T7482] pcl733 [ 92.959710][ T7482] pcl734 [ 92.961011][ T7482] opmm-1616-xt [ 92.962326][ T7482] pearl-mm-p [ 92.963582][ T7482] ir104-pbf [ 92.964827][ T7482] comedi: valid board names for pcl726 driver are: [ 92.967220][ T7482] pcl726 [ 92.968298][ T7482] pcl727 [ 92.969389][ T7482] pcl728 [ 92.970617][ T7482] acl6126 [ 92.972167][ T7482] acl6128 [ 92.973470][ T7482] comedi: valid board names for pcl724 driver are: [ 92.976116][ T7482] pcl724 [ 92.977329][ T7482] pcl722 [ 92.978309][ T7482] pcl731 [ 92.979305][ T7482] acl7122 [ 92.980531][ T7482] acl7124 [ 92.981933][ T7482] pet48dio [ 92.983210][ T7482] pcmio48 [ 92.984205][ T7482] onyx-mm-dio [ 92.985434][ T7482] comedi: valid board names for pcl711 driver are: [ 92.987920][ T7482] pcl711 [ 92.989491][ T7482] pcl711b [ 92.990951][ T7482] acl8112hg [ 92.992397][ T7482] acl8112dg [ 92.993663][ T7482] comedi: valid board names for amplc_pc263 driver are: [ 92.996235][ T7482] pc263 [ 92.997326][ T7482] comedi: valid board names for amplc_pc236 driver are: [ 92.999673][ T7482] pc36at [ 93.000593][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.000667][ T7482] comedi: valid board names for amplc_dio200 driver are: [ 93.000676][ T7482] pc212e [ 93.000680][ T7482] pc214e [ 93.000685][ T7482] pc215e [ 93.000689][ T7482] pc218e [ 93.000694][ T7482] pc272e [ 93.000698][ T7482] comedi: valid board names for comedi_parport driver are: [ 93.000704][ T7482] comedi_parport [ 93.000709][ T7482] comedi: valid board names for comedi_test driver are: [ 93.000783][ T7482] comedi_test [ 93.000790][ T7482] comedi: valid board names for comedi_bond driver are: [ 93.000796][ T7482] comedi_bond [ 93.030630][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.051573][ T55] usb 7-1: USB disconnect, device number 3 [ 93.108063][ T7494] trusted_key: syz.4.419 sent an empty control message without MSG_MORE. [ 93.163600][ T7496] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 93.167970][ T7470] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 93.174725][ T5819] usb 5-1: USB disconnect, device number 5 [ 93.232722][ T10] Process accounting resumed [ 93.248111][ T7504] syzkaller0: entered promiscuous mode [ 93.250410][ T7504] syzkaller0: entered allmulticast mode [ 93.257834][ T7504] evm: overlay not supported [ 93.395068][ T7513] use of bytesused == 0 is deprecated and will be removed in the future, [ 93.399504][ T7513] use the actual size instead. [ 93.501674][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 93.860921][ T5819] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 93.871072][ T5892] usb 7-1: Service connection timeout for: 256 [ 93.874110][ T5892] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 93.880197][ T5892] ath9k_htc: Failed to initialize the device [ 93.887306][ T55] usb 7-1: ath9k_htc: USB layer deinitialized [ 93.990877][ T5819] usb 9-1: device descriptor read/64, error -71 [ 94.056253][ T7526] netlink: 80 bytes leftover after parsing attributes in process `syz.0.428'. [ 94.111015][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.111052][ T5528] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 94.116352][ T5528] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 94.223569][ T7532] hsr_slave_0: left promiscuous mode [ 94.226978][ T7532] hsr_slave_1: left promiscuous mode [ 94.250871][ T5819] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 94.391330][ T5819] usb 9-1: device descriptor read/64, error -71 [ 94.503520][ T5819] usb usb9-port1: attempt power cycle [ 94.620979][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.770875][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 94.775016][ T10] usb 5-1: config 0 has no interfaces? [ 94.779812][ T10] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 94.784015][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.787544][ T10] usb 5-1: Product: syz [ 94.789354][ T10] usb 5-1: Manufacturer: syz [ 94.791545][ T10] usb 5-1: SerialNumber: syz [ 94.797805][ T10] usb 5-1: config 0 descriptor?? [ 94.860862][ T5819] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 94.891489][ T5819] usb 9-1: device descriptor read/8, error -71 [ 94.941745][ T5847] usb 8-1: USB disconnect, device number 8 [ 95.126502][ T7553] tmpfs: Unknown parameter 'É\”zka' [ 95.131046][ T5819] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 95.151617][ T5819] usb 9-1: device descriptor read/8, error -71 [ 95.263267][ T5819] usb usb9-port1: unable to enumerate USB device [ 95.352828][ T7565] overlay: filesystem on ./file0 not supported as upperdir [ 95.440279][ T7569] __nla_validate_parse: 3 callbacks suppressed [ 95.440293][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 95.486224][ T7574] comedi comedi0: Minor 2 could not be opened [ 95.602578][ T5819] usb 5-1: USB disconnect, device number 6 [ 95.664445][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 95.664476][ T42] audit: type=1400 audit(1785337309.666:964): avc: denied { setopt } for pid=7586 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.667493][ T7587] cgroup: Name too long [ 95.715726][ T42] audit: type=1400 audit(1785337309.716:965): avc: denied { wake_alarm } for pid=7590 comm="syz.2.449" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.724411][ T42] audit: type=1400 audit(1785337309.726:966): avc: denied { kexec_image_load } for pid=7590 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 95.861900][ T42] audit: type=1400 audit(1785337309.866:967): avc: denied { create } for pid=7592 comm="syz.2.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 96.030980][ T5819] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.150950][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 96.172487][ T42] audit: type=1326 audit(1785337310.176:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe19de99 code=0x7ffc0000 [ 96.182617][ T42] audit: type=1326 audit(1785337310.176:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe19de99 code=0x7ffc0000 [ 96.193233][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 96.193350][ T42] audit: type=1326 audit(1785337310.176:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe19de99 code=0x7ffc0000 [ 96.197358][ T5819] usb 5-1: config 0 has no interfaces? [ 96.206096][ T42] audit: type=1326 audit(1785337310.176:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fe19de99 code=0x7ffc0000 [ 96.213565][ T5819] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 96.219283][ T42] audit: type=1326 audit(1785337310.176:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.453" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88fe19dc02 code=0x7ffc0000 [ 96.222560][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.232736][ T42] audit: type=1326 audit(1785337310.176:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7600 comm="syz.3.453" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f88fe19dc97 code=0x7ffc0000 [ 96.239638][ T5819] usb 5-1: Product: syz [ 96.246081][ T5819] usb 5-1: Manufacturer: syz [ 96.248039][ T5819] usb 5-1: SerialNumber: syz [ 96.254436][ T5819] usb 5-1: config 0 descriptor?? [ 96.291005][ T9] usb 7-1: device descriptor read/64, error -71 [ 96.502434][ T7619] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 96.541854][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 96.688515][ T9] usb 7-1: device descriptor read/64, error -71 [ 96.815202][ T9] usb usb7-port1: attempt power cycle [ 96.864892][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 96.868626][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 96.956469][ T7589] pim6reg1: entered promiscuous mode [ 96.959830][ T7589] pim6reg1: entered allmulticast mode [ 97.019442][ T7647] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 97.022686][ T7647] netlink: 84 bytes leftover after parsing attributes in process `syz.4.467'. [ 97.023503][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 97.025894][ T7647] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 97.025908][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 97.037596][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.466'. [ 97.163022][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 97.191546][ T9] usb 7-1: device descriptor read/8, error -71 [ 97.441077][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 97.471832][ T9] usb 7-1: device descriptor read/8, error -71 [ 97.591078][ T9] usb usb7-port1: unable to enumerate USB device [ 98.086751][ T7682] bridge_slave_1: left allmulticast mode [ 98.089185][ T7682] bridge_slave_1: left promiscuous mode [ 98.092463][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.099166][ T7682] bridge_slave_0: left allmulticast mode [ 98.102713][ T7682] bridge_slave_0: left promiscuous mode [ 98.104844][ T7682] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.119862][ T7700] kernel profiling enabled (shift: 5) [ 98.148040][ T7688] loop2: detected capacity change from 0 to 7 [ 98.154150][ T7688] Dev loop2: unable to read RDB block 7 [ 98.157169][ T7688] loop2: AHDI p1 p2 p3 [ 98.159250][ T7688] loop2: partition table partially beyond EOD, truncated [ 98.162357][ T7688] loop2: p1 start 1601398130 is beyond EOD, truncated [ 98.165055][ T7688] loop2: p2 start 1702059890 is beyond EOD, truncated [ 98.754876][ T9] usb 5-1: USB disconnect, device number 7 [ 98.917991][ T7709] trusted_key: encrypted_key: insufficient parameters specified [ 98.923625][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 98.929509][ T7709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.934539][ T7715] futex_wake_op: syz.0.485 tries to shift op by -1; fix this program [ 98.998958][ T7720] syzkaller1: entered promiscuous mode [ 99.001514][ T7720] syzkaller1: entered allmulticast mode [ 99.206012][ T7733] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 99.209206][ T7733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.215946][ T7733] vhci_hcd vhci_hcd.0: Device attached [ 99.226452][ T7737] vhci_hcd: connection closed [ 99.232224][ T12] vhci_hcd vhci_hcd.3: stop threads [ 99.237242][ T12] vhci_hcd vhci_hcd.3: release socket [ 99.239533][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 99.410515][ T7752] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 99.429137][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 99.449693][ T7758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.463499][ T7759] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 99.528488][ T7764] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 99.843419][ T7793] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 99.862839][ T7796] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 99.903994][ T7793] bond1: entered promiscuous mode [ 99.906541][ T7793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.912615][ T7796] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 99.929241][ T7799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.933517][ T7799] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 99.937457][ T7799] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 99.949761][ T7799] bond1: (slave ip6gre1): making interface the new active one [ 99.953537][ T7799] ip6gre1: entered promiscuous mode [ 99.958694][ T7799] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 99.968499][ T7801] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 100.048146][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 100.084915][ T7804] hsr_slave_0: left promiscuous mode [ 100.098933][ T7804] hsr_slave_1: left promiscuous mode [ 100.152270][ T1135] ata1.00: exception Emask 0x0 SAct 0x10 SErr 0x0 action 0x6 [ 100.155593][ T1135] ata1.00: waking up from sleep [ 100.158630][ T1135] ata1: hard resetting link [ 100.311423][ T7823] binder: 7820:7823 ioctl c0306201 200000000080 returned -14 [ 100.428133][ T7835] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.436013][ T7829] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 100.461870][ T7837] input: syz0 as /devices/virtual/input/input10 [ 100.487560][ T7841] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 100.491457][ T1135] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 100.495049][ T7841] __nla_validate_parse: 1 callbacks suppressed [ 100.495065][ T7841] netlink: 140 bytes leftover after parsing attributes in process `syz.0.526'. [ 100.498719][ T1135] ata1.00: configured for UDMA/100 [ 100.510277][ T1135] ata1: EH complete [ 100.522332][ T7841] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.526'. [ 100.580895][ T7846] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 100.580895][ T7846] program syz.0.528 not setting count and/or reply_len properly [ 100.588746][ T7846] program syz.0.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.670213][ T7852] file system registered [ 100.678112][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 100.678179][ T42] audit: type=1400 audit(1785337314.686:1045): avc: denied { mount } for pid=7851 comm="syz.4.532" name="/" dev="functionfs" ino=20179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 100.700444][ T7855] netlink: 'syz.0.531': attribute type 11 has an invalid length. [ 100.703124][ T7852] read descriptors [ 100.704313][ T7855] netlink: 224 bytes leftover after parsing attributes in process `syz.0.531'. [ 100.708337][ T7852] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 100.717648][ T42] audit: type=1400 audit(1785337314.686:1046): avc: denied { ioctl } for pid=7853 comm="syz.0.531" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.808920][ T7865] macsec1: entered promiscuous mode [ 100.866074][ T7867] tmpfs: Bad value for 'mpol' [ 100.872150][ T7867] netlink: 'syz.3.536': attribute type 10 has an invalid length. [ 100.886326][ T7867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.890232][ T7867] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 100.897262][ T7867] netlink: 14 bytes leftover after parsing attributes in process `syz.3.536'. [ 100.934655][ T7867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.949062][ T7867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.964543][ T7867] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 100.975895][ T42] audit: type=1400 audit(1785337314.976:1047): avc: denied { unmount } for pid=6426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 100.976405][ T7867] bond0 (unregistering): Released all slaves [ 100.989731][ T6426] ffs_data_put(): freeing [ 101.176530][ T42] audit: type=1400 audit(1785337315.176:1048): avc: denied { mounton } for pid=7882 comm="syz.0.542" path="/101/file0" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 101.177426][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 101.193918][ T42] audit: type=1400 audit(1785337315.176:1049): avc: denied { nlmsg_read } for pid=7880 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.263190][ T7896] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 101.264440][ T42] audit: type=1400 audit(1785337315.276:1050): avc: denied { setopt } for pid=7889 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.358146][ T7890] netlink: 'syz.3.546': attribute type 9 has an invalid length. [ 101.441808][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 101.445537][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 101.458756][ T7920] Device name not specified. [ 101.458756][ T7920] [ 101.507180][ T7925] xt_hashlimit: size too large, truncated to 1048576 [ 101.576358][ T7928] MINIX-fs: blocksize too small for device [ 101.795375][ T42] audit: type=1400 audit(1785337315.796:1051): avc: denied { write } for pid=7935 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.847132][ T42] audit: type=1400 audit(1785337315.846:1052): avc: denied { read } for pid=7935 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.930947][ T5890] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 102.105645][ T5890] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.120939][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.124698][ T5890] usb 7-1: Product: syz [ 102.126637][ T5890] usb 7-1: Manufacturer: syz [ 102.128701][ T5890] usb 7-1: SerialNumber: syz [ 102.146327][ T42] audit: type=1400 audit(1785337316.156:1053): avc: denied { append } for pid=7940 comm="syz.0.559" path="/104/file0/blkio.bfq.io_merged" dev="9p" ino=79691885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.163245][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.163260][ T42] audit: type=1400 audit(1785337316.156:1054): avc: denied { ioctl } for pid=7940 comm="syz.0.559" path="/104/file0/blkio.bfq.io_merged" dev="9p" ino=79691885 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.372987][ T5891] usb 7-1: USB disconnect, device number 8 [ 102.539475][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.569'. [ 102.544769][ T7981] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.569'. [ 102.635204][ T7990] netlink: 778 bytes leftover after parsing attributes in process `syz.0.572'. [ 102.710849][ T7994] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 102.715945][ T7994] overlayfs: failed to set xattr on upper [ 102.718355][ T7994] overlayfs: ...falling back to redirect_dir=nofollow. [ 102.724135][ T7994] overlayfs: ...falling back to index=off. [ 102.726324][ T7994] overlayfs: ...falling back to uuid=null. [ 102.728913][ T7994] overlayfs: ...falling back to xino=off. [ 102.801159][ T8001] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 103.156228][ T8015] rdma_rxe: rxe_newlink: failed to add lo [ 103.162023][ T8015] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 103.162357][ T8016] binder: 8012:8016 ioctl 4058587a 2000000005c0 returned -22 [ 103.243137][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 103.246088][ T9] ath9k_htc: Failed to initialize the device [ 103.250285][ T5891] usb 7-1: ath9k_htc: USB layer deinitialized [ 103.572001][ T5891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 103.759069][ T5891] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.760196][ T8040] Mount JFS Failure: -5 [ 103.763259][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.765137][ T8040] jfs_mount failed w/return code = -5 [ 103.771231][ T5891] usb 7-1: Product: syz [ 103.773234][ T5891] usb 7-1: Manufacturer: syz [ 103.775596][ T5891] usb 7-1: SerialNumber: syz [ 103.880201][ T8044] capability: warning: `syz.3.592' uses 32-bit capabilities (legacy support in use) [ 104.084893][ T8057] 9pnet_fd: Insufficient options for proto=fd [ 104.358316][ T8064] netlink: 'syz.2.556': attribute type 10 has an invalid length. [ 104.362547][ T8064] dummy0: entered promiscuous mode [ 104.369532][ T8064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.373317][ T8064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.831195][ T5892] usb 7-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 104.850075][ T5892] usb 7-1: ath9k_htc: USB layer deinitialized [ 104.926900][ T8050] orangefs_mount: mount request failed with -4 [ 105.065525][ T8076] vcan0 speed is unknown, defaulting to 1000 [ 105.328344][ T8092] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.403468][ T5891] usb 7-1: USB disconnect, device number 9 [ 105.446027][ T8102] ipvlan2: entered allmulticast mode [ 105.448482][ T8102] batadv_slave_0: entered allmulticast mode [ 105.774100][ T8120] 9p: Unknown access argument 18446744073709551615: -34 [ 105.774414][ T8122] __nla_validate_parse: 10 callbacks suppressed [ 105.774431][ T8122] netlink: 348 bytes leftover after parsing attributes in process `syz.3.616'. [ 105.827388][ T8122] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 105.903889][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 105.903913][ T42] audit: type=1400 audit(1785337319.906:1066): avc: denied { setopt } for pid=8131 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.033417][ T8139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 106.127075][ T42] audit: type=1400 audit(1785337320.126:1067): avc: denied { write } for pid=8143 comm="syz.3.624" name="functions" dev="configfs" ino=12766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.153763][ T42] audit: type=1400 audit(1785337320.156:1068): avc: denied { write } for pid=8143 comm="syz.3.624" name="header" dev="configfs" ino=23796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.170656][ T42] audit: type=1400 audit(1785337320.166:1069): avc: denied { write } for pid=8143 comm="syz.3.624" name="header" dev="configfs" ino=23809 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.184332][ T8144] [ 106.185345][ T8144] ====================================================== [ 106.188370][ T8144] WARNING: possible circular locking dependency detected [ 106.189548][ T42] audit: type=1400 audit(1785337320.176:1070): avc: denied { write } for pid=8143 comm="syz.3.624" name="ss" dev="configfs" ino=23806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.191195][ T8144] syzkaller #0 Tainted: G L [ 106.191205][ T8144] ------------------------------------------------------ [ 106.191209][ T8144] syz.3.624/8144 is trying to acquire lock: [ 106.191216][ T8144] ffffffff901d0908 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.191337][ T8144] [ 106.191337][ T8144] but task is already holding lock: [ 106.191342][ T8144] ffff88805dc6bf00 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 106.210807][ T42] audit: type=1400 audit(1785337320.186:1071): avc: denied { write } for pid=8143 comm="syz.3.624" name="ss" dev="configfs" ino=23806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.213515][ T8144] [ 106.213515][ T8144] which lock already depends on the new lock. [ 106.213515][ T8144] [ 106.213526][ T8144] [ 106.213526][ T8144] the existing dependency chain (in reverse order) is: [ 106.213533][ T8144] [ 106.213533][ T8144] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4} [ 106.217430][ T42] audit: type=1400 audit(1785337320.186:1072): avc: denied { write } for pid=8143 comm="syz.3.624" name="h" dev="configfs" ino=23099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.220356][ T8144] : [ 106.220378][ T8144] lock_acquire+0x1b9/0x370 [ 106.226889][ T42] audit: type=1400 audit(1785337320.186:1073): avc: denied { read } for pid=8143 comm="syz.3.624" name="h" dev="configfs" ino=23100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 106.232561][ T8144] down_write+0x8b/0x1f0 [ 106.232634][ T8144] configfs_depend_item_unlocked+0xf3/0x6a0 [ 106.237305][ T42] audit: type=1400 audit(1785337320.186:1074): avc: denied { write } for pid=8143 comm="syz.3.624" name="h" dev="configfs" ino=23099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.240088][ T8144] usbg_make_tpg+0x261/0x620 [ 106.240116][ T8144] target_fabric_make_tpg+0xab/0x8c0 [ 106.244350][ T42] audit: type=1400 audit(1785337320.236:1075): avc: denied { map } for pid=8143 comm="syz.3.624" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.252236][ T8144] configfs_mkdir+0x51e/0xb70 [ 106.252271][ T8144] vfs_mkdir+0x361/0x850 [ 106.252307][ T8144] filename_mkdirat+0x48b/0x5e0 [ 106.252326][ T8144] __x64_sys_mkdir+0x6b/0x90 [ 106.296932][ T8144] do_syscall_64+0x115/0x870 [ 106.298727][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.301397][ T8144] [ 106.301397][ T8144] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 106.304735][ T8144] lock_acquire+0x1b9/0x370 [ 106.306706][ T8144] __mutex_lock+0x1a4/0x1bd0 [ 106.308735][ T8144] tcm_set_name+0x29/0xb0 [ 106.310659][ T8144] function_make+0x21c/0x3f0 [ 106.312734][ T8144] configfs_mkdir+0x51e/0xb70 [ 106.314723][ T8144] vfs_mkdir+0x361/0x850 [ 106.316391][ T8144] filename_mkdirat+0x48b/0x5e0 [ 106.318210][ T8144] __x64_sys_mkdir+0x6b/0x90 [ 106.319969][ T8144] do_syscall_64+0x115/0x870 [ 106.321832][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.324584][ T8144] [ 106.324584][ T8144] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 106.328131][ T8144] check_prev_add+0xeb/0xe60 [ 106.330490][ T8144] __lock_acquire+0x136c/0x1a40 [ 106.332740][ T8144] lock_acquire+0x1b9/0x370 [ 106.334701][ T8144] __mutex_lock+0x1a4/0x1bd0 [ 106.337168][ T8144] uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.339829][ T8144] configfs_symlink+0x540/0x11f0 [ 106.341892][ T8144] vfs_symlink+0x178/0x4d0 [ 106.343905][ T8144] filename_symlinkat+0x2a6/0x560 [ 106.346125][ T8144] __x64_sys_symlink+0x79/0xb0 [ 106.348587][ T8144] do_syscall_64+0x115/0x870 [ 106.350784][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.353469][ T8144] [ 106.353469][ T8144] other info that might help us debug this: [ 106.353469][ T8144] [ 106.357621][ T8144] Chain exists of: [ 106.357621][ T8144] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 106.357621][ T8144] [ 106.363454][ T8144] Possible unsafe locking scenario: [ 106.363454][ T8144] [ 106.366543][ T8144] CPU0 CPU1 [ 106.368697][ T8144] ---- ---- [ 106.370955][ T8144] lock(&sb->s_type->i_mutex_key#25); [ 106.373343][ T8144] lock(&opts->dep_lock); [ 106.376145][ T8144] lock(&sb->s_type->i_mutex_key#25); [ 106.378983][ T8144] lock(gadget_subsys.su_mutex); [ 106.380763][ T8144] [ 106.380763][ T8144] *** DEADLOCK *** [ 106.380763][ T8144] [ 106.384304][ T8144] 2 locks held by syz.3.624/8144: [ 106.386190][ T8144] #0: ffff888023ca2450 (sb_writers#16){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 106.390129][ T8144] #1: ffff88805dc6bf00 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 106.395422][ T8144] [ 106.395422][ T8144] stack backtrace: [ 106.398106][ T8144] CPU: 2 UID: 0 PID: 8144 Comm: syz.3.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.398133][ T8144] Tainted: [L]=SOFTLOCKUP [ 106.398140][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.398165][ T8144] Call Trace: [ 106.398175][ T8144] [ 106.398184][ T8144] dump_stack_lvl+0x100/0x190 [ 106.398235][ T8144] print_circular_bug.cold+0x178/0x1c7 [ 106.398268][ T8144] check_noncircular+0x146/0x160 [ 106.398290][ T8144] ? audit_log_end+0x24/0x30 [ 106.398334][ T8144] check_prev_add+0xeb/0xe60 [ 106.398357][ T8144] __lock_acquire+0x136c/0x1a40 [ 106.398383][ T8144] lock_acquire+0x1b9/0x370 [ 106.398404][ T8144] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.398430][ T8144] ? __pfx___might_resched+0x10/0x10 [ 106.398453][ T8144] ? audit_inode_permission+0x1ea/0x2a0 [ 106.398510][ T8144] __mutex_lock+0x1a4/0x1bd0 [ 106.398539][ T8144] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.398562][ T8144] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.398585][ T8144] ? __lock_acquire+0x49f/0x1a40 [ 106.398608][ T8144] ? __pfx___mutex_lock+0x10/0x10 [ 106.398632][ T8144] ? selinux_inode_permission+0x14a/0x1130 [ 106.398658][ T8144] ? __pfx___might_resched+0x10/0x10 [ 106.398680][ T8144] ? make_vfsgid+0xf1/0x140 [ 106.398711][ T8144] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.398733][ T8144] ? security_inode_permission+0xbf/0x250 [ 106.398774][ T8144] uvcg_streaming_header_allow_link+0x7c/0x650 [ 106.398798][ T8144] ? inode_permission+0x374/0x620 [ 106.398822][ T8144] ? mntput_no_expire+0xe7/0x220 [ 106.398842][ T8144] configfs_symlink+0x540/0x11f0 [ 106.398870][ T8144] ? __pfx_configfs_symlink+0x10/0x10 [ 106.398898][ T8144] vfs_symlink+0x178/0x4d0 [ 106.398924][ T8144] filename_symlinkat+0x2a6/0x560 [ 106.398948][ T8144] ? __pfx_filename_symlinkat+0x10/0x10 [ 106.398970][ T8144] ? strncpy_from_user+0x19d/0x2d0 [ 106.399014][ T8144] ? do_getname+0x191/0x390 [ 106.399036][ T8144] __x64_sys_symlink+0x79/0xb0 [ 106.399058][ T8144] do_syscall_64+0x115/0x870 [ 106.399078][ T8144] ? clear_bhb_loop+0x40/0x90 [ 106.399098][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.399118][ T8144] RIP: 0033:0x7f88fe19de99 [ 106.399135][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.399153][ T8144] RSP: 002b:00007f88ff0bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 106.399173][ T8144] RAX: ffffffffffffffda RBX: 00007f88fe425fa0 RCX: 00007f88fe19de99 [ 106.399185][ T8144] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000000080 [ 106.399197][ T8144] RBP: 00007f88fe233eaf R08: 0000000000000000 R09: 0000000000000000 [ 106.399209][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.399220][ T8144] R13: 00007f88fe426038 R14: 00007f88fe425fa0 R15: 00007ffcb199e728 [ 106.399241][ T8144]