last executing test programs: 3.777854415s ago: executing program 3 (id=1517): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @loopback}, {0x2, 0x2, @empty}, 0x248, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x3, 0x1}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x8, 0x7fff, 0x400, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) (async) r3 = open(0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x80000000) (async) r4 = syz_open_dev$cec(0x0, 0x0, 0x0) (async, rerun: 64) r5 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)={0x20000013}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d666435726607877bc59cc11ac661bdedf864f35d1e", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',version=9p2000,\x00']) (async) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0x3, 0x0, 0x8, [0x2, 0x2, 0x4, 0x95f, 0xfffffffffffffff9, 0xffffffffffff8393, 0x9661, 0x5]}}) (rerun: 64) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 64) mkdir(&(0x7f0000000140)='./file0\x00', 0x56) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 3.708220542s ago: executing program 3 (id=1519): pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10040) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000001580)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000094000380040001008c00038088"], 0xc0}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x5) write(r5, &(0x7f0000000340)="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", 0x1000) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000140)=0x20) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000013c0)={0x1, 0x1, 0x4, 0xffff, 0x5e5f, 0xf415}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT, @ANYBLOB="2c00d0346285017c553fe3903e77cb0d951607bdce006927590a7e74e7a550682b904f8d6fe3656997a4c73df43f"]) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r7, 0xfffffffb}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001440)={r7, 0x7e, "dfd15080647d819079d4a6c06bf556c991a6e1de5bd5549bf568acd15799aafbc6915d90cba06f98743663671119534383c89c28857fc821c964ce898b1fb6c3a5e2e5c0123e17daca0618cd876a092803984c7de5b63f270c30262008dc80c489d1c436265c2d677f7144c721ee328f0644f399b93241252cf3b0f13f12"}, &(0x7f0000001500)=0x86) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="c00e020030000b02d25a806f8c2d94f90724fc602f1a03d54ac2d6acdc68453dc736470a39f686ff8739d5c34e9a6895ed94eba8eb3b5689b1ba1851fad375afcf707dee186b068be00ab8fc494973ec80f18d5bcff621c677f5d94b251afeb74fbf5258e8c21c339fc1409d04f9f0e8333fab4f95b127fc976b2e7f06a76d7f4d82a0ffe5ba9c08ca8cb989379b5a0ad88ff93fa30f0d9a42295db39dfc374c3b19d735d43239f45ba419e1ba9bb5fb30e15de2ef65432d70f47c8f", 0xbc}], 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r8 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_PEC(r8, 0x708, 0x62f) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000001c0)={0x0, 0xf, 0x5, &(0x7f0000000140)={0xf, "25f210caf4d99a17ffffff7f066cc1d80085469289ab99912870fe4a59784bc987"}}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffff7) r9 = socket(0x2, 0x80805, 0x0) getsockopt$WPAN_WANTLQI(r9, 0x0, 0x3, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000001400)=@gcm_128={{0x304}, "80a82c55b5464cc3", "61437ce74d8418e6019e7fa140788fdc", "d3dd6727", "d49d0da876dd7287"}, 0x28) r10 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r10, 0x8b32, &(0x7f0000000040)) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, r11, 0xaae46000) close(0x4) 2.833747618s ago: executing program 3 (id=1541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000cef90bb68a4d927b0dc5b26a23b67fa3b8f54ad14b26659c731fed62", @ANYRES16=r1, @ANYBLOB="15082dbd7000ffdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0080000000060011000f000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, 0x0, &(0x7f0000003500)=0x1e) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00922fb97555d67ada00000b11200000b37488dffc"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0xc018480b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r5}}, 0x30) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="040026bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r10, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00030000000800010070636900a9b9bf47c0978db83a30303a31302e300000000008008b00201b9d268fb079f9e1c84013a714f52c65fd2eccf648ba72ce6797e6acb98b01f63b0ad0b061e4855d5682", @ANYRES32=r10, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001500010028bd7000ffdbdf2500000000000000000000000000000000ac1414aa0000000000000000000000004e2100094e2300090a00a00032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e00020000230a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x4004050}, 0x20000000) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000580)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 1.346218556s ago: executing program 3 (id=1574): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$afs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4, 0x0) 975.66846ms ago: executing program 0 (id=1582): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='ip6gre0\x00', 0x10) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x80000) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x9) recvmsg$can_j1939(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x10000) 844.558608ms ago: executing program 2 (id=1583): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) 843.593646ms ago: executing program 2 (id=1584): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000740), 0x7, 0x121402) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x8000006, 0x8}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba5704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca30ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)={0xc0c, 0x15, [{0xf, 0x1}, {0x4, 0x1}, {0xf, 0x1}, {0x8, 0x1}, {0xd, 0x1}, {0x6}, {0x8, 0x1}, {0xd, 0x1}, {0xf}, {0xf, 0x1}, {0x4, 0x1}, {0x1}, {0xe, 0x1}, {0xe, 0x1}, {0xe}, {0xd, 0x1}, {0xa, 0x1}, {0x1, 0x1}, {0xd}, {0xf, 0x1}, {0x6}]}) 764.118787ms ago: executing program 0 (id=1585): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r0, 0x560b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2) 763.769452ms ago: executing program 2 (id=1586): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000480)={&(0x7f0000000400)=""/127, 0x7f, 0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x13, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x97, &(0x7f0000000200)=""/151, 0x41100, 0x10, '\x00', r2, @fallback=0x27, r1, 0x8, &(0x7f00000003c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, r1, 0x5, &(0x7f0000001540)=[r1, r1, 0x1], &(0x7f0000001580)=[{0x3, 0x3, 0x10, 0x9}, {0x1, 0x3, 0x2, 0x6}, {0x5, 0x5, 0x10, 0x4}, {0x4, 0x3, 0xa}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0x401}, 0x94) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x801, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 762.819111ms ago: executing program 0 (id=1587): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x10) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0xe1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, r2, 0x2) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000100)={0x1, {{0x2, 0x4e22, @local}}, 0x0, 0x1, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0xc, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r1, 0x7, 0x1, 0xfffffffd, &(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, 0x12, 0xe00, 0x70bd2c, 0x25dfdbff, {0xb}, [@nested={0x14e, 0x54, 0x0, 0x1, [@generic="c4d30edfba917e11066c8a21a7d37130ff3253b757f06312dd135da8fd27ae405a4be80feb52c0df8194f544b3e34088d7dc194983f8476dfbca8969cfdc9de213e98d2c9ec9dd3cf30be31ee7a864fa6dda1595d4560df9cb6ed66f15f822e29e18301c471c4925650ae45c56267efc1939ea8be29727c0a942106ff6f647a8aea0dee4cef707acb5a39e176ee5ce9b7040e748c6ba7a8295d47423a7205fd838b6e1e738eb6e", @generic="c71cfd76f34d39ff552eccdca1f245e0e3a489fa52b378008c28e48991d719792bac9e585b6e8934daf7a5d5c74139b2d2000ee3eae8769a17ccb45c1c3abc", @typed={0x57, 0xef, 0x0, 0x0, @binary="c13d83ae7fcefa08dfc3521d06beba68e04f5ff9a6f27afa282b4b9b84988659754d11fb8f8ef886784bc2dd5dad9480c1a903442016522374d697c2a32c760c43250bd9ea5d514431e924a2680686fe69f394"}, @typed={0xc, 0x130, 0x0, 0x0, @str='!/+%+![\x00'}]}, @nested={0x1c, 0xeb, 0x0, 0x1, [@nested={0x4, 0x70}, @typed={0x14, 0x11, 0x0, 0x0, @str='*,{\x95]#[%:$\xfa[[]@\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x47}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c221736f4f29"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000880)={0x9, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @remote}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x7ff, 0x4, {{0x16, 0x4, 0x3, 0x3e, 0x58, 0x66, 0x0, 0xd0, 0x2f, 0x0, @local, @empty, {[@ssrr={0x89, 0x1f, 0x5a, [@private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @multicast2]}, @ssrr={0x89, 0xf, 0x21, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x96, [@local, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, @private=0xa010100]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f00000009c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000a00)="72ee6cc63dbeec9a426e0d11e7854dd92176e5882551358e512ac409d29f8b8c4d2eeb184e2ccf24c1ed48fc97c0a81d7b2d326e98eba482a929b50221531b52a5734b67dbc066338bf0b7aaa6c0b994022fb3975d8d1b4530ed65d2453e7cad568fcb677af5f7946d3167bf02c6df984808ebe6673d6e17265b57f3369d453782b745cd11d71254ca530d96eba513806c50f7d0055e57c6c33807f89992918d92e7efe0df28ceaad436da52544659cf44babb1f53", 0xb5}, {&(0x7f0000000ac0)="5ddb3c8c790d5c546f5f2011b78d759389315e7b5bb67e75b3872dfd992b4bc36a7d6a87c0d94beb28b6fb1ab3e43fea46ea08052b7bed6da64ce72d1a0672ed11b0c0e9f84348a958754688d2ba9236a0fa2a8d2b6ae41d0aebfb847b4b5b6ee9e9adf1a612119929625dde706ec3de774d2ee6bf0df92c318167f9da1ffaf1c5cd44b5a012c5c1442dcb63f9e3d06af4ceab2f39e2bb25a08508a4580829", 0x9f}], 0x2, &(0x7f0000000c80)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xf4, 0x1, 0x9, [{@loopback, 0x6ecc}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0xc}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1cb}, {@broadcast, 0x58684501}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffe01}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xfd, [@loopback, @private=0xa010102]}, @rr={0x7, 0x27, 0x4d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @remote, @local, @empty]}, @lsrr={0x83, 0x1b, 0xf3, [@loopback, @private=0xa010102, @private=0x9, @private=0xa010100, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x9f, 0x1, 0x5, [{@rand_addr=0x64010100, 0xe}, {@multicast2, 0x9}, {@multicast1, 0x1}, {@multicast2, 0x3ff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1e87}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x2a}, @timestamp={0x44, 0x2c, 0xd9, 0x0, 0x4, [0x6, 0x828, 0x6e4, 0x76, 0x4, 0x101, 0x40fed0d7, 0x80000001, 0xf, 0x0]}, @ssrr={0x89, 0x7, 0x2a, [@local]}, @ssrr={0x89, 0x7, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xee}, @cipso={0x86, 0x38, 0x3, [{0x7, 0x8, "d9a8f5f12726"}, {0x1, 0x9, "88b1a3c5cb975b"}, {0x0, 0x9, "a9579b87df894b"}, {0x0, 0xd, "fbf4666945974391179f81"}, {0x5, 0x2}, {0x6, 0x9, "318f6acb2902f0"}]}, @timestamp_addr={0x44, 0xc, 0xc2, 0x1, 0xc, [{@remote, 0x3c3}]}, @lsrr={0x83, 0x27, 0x41, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x200}}, {{&(0x7f0000000e80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="121a5ce992e2cd1b9de88a50ad408ef02df594011fe84a830f9d6b80a9e469ab520f54104cbeedaaa57b7b1d62f04a1b2425eb9f29eaeaf77d3db9e4cd947928d9999a520801776fc29af45f0f4c3db245b9e16a32", 0x55}], 0x1, &(0x7f0000000f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x7, 0x77, [@rand_addr=0x64010102]}, @rr={0x7, 0xf, 0x73, [@empty, @private=0xa010101, @remote]}]}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x6e, [@multicast2, @loopback, @loopback, @multicast2, @remote, @multicast2]}, @ssrr={0x89, 0x13, 0x9a, [@multicast2, @multicast2, @local, @local]}, @ssrr={0x89, 0x1f, 0x83, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0xd8, [@broadcast, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x27, 0x8e, [@empty, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @broadcast, @private=0xa010102, @empty, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x654a83fe}}], 0x168}}, {{&(0x7f0000001100)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000001140)="a4caf2f84eae92a5f4e5706906d7e16715eeeb178c59e3e837faf514d0bb725b8c3d6d2545c69914b7bd9a6d314527210cd93ae52b498497690ce8c10cc3f9c663df6f7d32c2e1c919d1702688e214dd46bacbd1fb66f7f58eb3ed191c6ab594dd55c9c9a7ffaf910b32b0939143ea391c0c9a54e33ad574595dbd70e47c98814d2f6983c1bcbb7dbe4c02a54526d687a10cfeb7ce5bdb6e0610", 0x9a}, {&(0x7f0000001200)="de3053e354794737ba6b0f60e2cdff0f54b16bc116189e03001dddf64c476258634f1935895b1be3b1e5d8c7b3f33e1d39d2a073587cf6d833eba406c0af1a90b31b4c5ffd787f8d4475a5010b31e639fae9df6bc410e3df64cbac258eb99cf1e979af2a0c0b", 0x66}, {&(0x7f0000001280)="c9ecbf6f98800f03eabcb990594fbf7120f5334a1fe8485ceafcc3ff80cee5a8f6cb7388a835a2c0e967f08e5d5570c9d5368038667ed6dd9736761d25f8d2d6ef0012876fd90b28e71eb202085a6729401e82fe9f059fb1bbae7799c3cd496a2991eaeec23956ceaf6f764887b60ecf1d1753c50813b008f242743f9b013f928124fbaea0de509c4eaf5e0caf9e10af2a0d731df02cc2f49f21637c0911495452d3d9c93d94f19e9879f70bfe0beb9b757a", 0xb2}, {&(0x7f0000001340)="3741547f96e0ca08a0b7e88ee512b58dff2f425544f0988c6360d3c5da3fe51890c84a330166b0e193d652d292b4fae4fc334315cfdd42b9135f9059299e3a00e9e2742c962be0c520942e925561018be3d7bdb4ff0bad0c212ea5709dc2485c9d", 0x61}, {&(0x7f00000013c0)="e879d84198c32a993aac321078b368beada96565fa17f0362a84550e71f9c49af5713627b8f927f9a79579fdb8de56f96c020255d0ff1cedd2b8d81fec0cbac28ce9a4fb5609facf3504f367a6dd8118d09c63b04f262c53618cdf0392f5c92a3cade36ecd7ca7e4d5d5ee323a59d72aff1cae24c64bc429ea30e46faca14962b18ece8ae161f27844dfe343780ed7d2e5db2f4e0578414ae086c6e25afea63276cfc1d4a50b9a2c80ac9400f37b2c8e9ca37a1febdb8c5ce743cf25727cc7c3a273591b4e201c508327418b5db69ed2d40d6467b0efb2c0d9a30a854bda6496f924568af0cdcba0b90c6c3a0f3d93e0edac447fc821b20b89a1a963e34626d7e98866c8efd2147e3850b58679d6eb766141f5cf1acbaecea0fb5b4ca02ccfb51dab21e5f33e8c963836b63c476be2a406b9811a061cc5d41e354f15eea2580623780de8a383c808ac4151582eeff6777c1d43f3bac72af0027f24dbaf03c87edbd01d3296f71cf8c6e93515a553df311bca0a38df9752dd650d3b6c0817f10ea01d42a6f79d3ac43c719fbd7ad4896815b49729f10ba210fa427ee9e329c9854a7e9ffc976fa2d335cf49003929ae16a8bf5777e27528b28045b4a8b0fb6e6e02db3f7c5f7e5db15895e3ae750eca7622ae22f82cfd4b29c3a1176e4e5256bf36501776b004418699a2e19f76e973de8e042261768b434685266ea37c64bc2ac0b8b5e536b0af981d3e2fa993259c6bc88114ca29c298eebd1e69454fc40aecdd122288a56c9e41839ae05880e4429f92606435448397b6347336a01ebc9778cfe77ea1ae34af1a351fc032edac565811d1842f1749f365caf59eee7104dedff0545edbb7e561649c35909d8f18c1752741351849862e477c1bf8a60e6aeed4a251f2c3320790f973df0af44b5f115d10a27212a5138a0d7c14918bc935971552b9b0ee32ecdbd715eda925c764419a22ae2fee23c4c3036015d2dbf60254eac38b2e25f48959fd876e78ee0287256e8ab0ff06c823a748e23c05904fbe717c05f039045a1e758f08a7e5907c26243b9b659f1ceff24f220c60853b9e1d1ceaad4fd9c86d10b8c4f21927611fa8f259ce3ad8a0c0c30d97dbed63a2255ae83ede229d63eb45121c16ffaac6fcee97defa4279d377582c77e58d202b32e47a3bc3e9eb5402102351c2a0ad46ddb19c8525146646c3614039bcdf83a479148440e0789a74022bc72cb67f7c18c45d7a4020e52378a766b40160f88231ca5ecedf2149262856d61c667d33574011f10ef48e236bf9e0f7dbaf2ec2f4f896a46535d61e8b15966e1c374fce6dc07bc0ac133295ad6bb65cdddd573ac959288fe31d6a40e0c5e640bc89ed952a782fd5346fb4cec40dbc4666be0bc3db8106f495c68bcc57f7a303e8e3b981f97f64d82786319c1a2a10fc2f70d28791c8ba46ac6eba3a62368c91c585f15561be654c33c4a905c6bb3e96c3380aa7c2d75d8e16f5340db7371e1e74652cbf9bd9b0f0d10aed011bc960366fd6bd2e6df91852aecd2f12b82ad7b8dec61ac62d9614a6c20840e64b61e04656a878314429aa9adc5c3ddaf99df772f95d77ec8816c9157f4dc2f543c3369b1a854a1fc5ccdccf495752436ec9e446a8389c405102150cfd6040857e6bacee8c51dab3d376fca96adedc0dc51a2e8f1111ceeff5e2a5edfc77065a4ea25f89d3e72dedbcdec45aa09d679171655017c17a12e7d75872ea050b5fa0582a4b148739a5e53b38e21da9d6c0a691f6144d40d99d15b726e01751a668fddffd0a2e1065f84a0dc3b4fbee7940e18a4c17ebd3445e7cad582dfbe1cf1ce92985fb4f95259ac43157c1b936f750d72aba4597944ba78295c55f83fca1a634137f5ac66656a1324fea98226dd7fb260675e8d6c6777da3beea1f3d8e4933ce2ea81c27dbeb269f01cbb43090705719aeb872980a49c29f9263d29df3aa97157bb9600509d44adb8eae71b2545e6f5f582e0949b73084f5e5c1ba73ad4499cc16e62211be8dc6bc6b84e78f48c04a2bda817cd0404ff188fab127982e90f24353887b6ec9cef052936ef62a2dddefa1cf51cd26b68a67a905813b3e9ac1828b0919cc051922729419a1b640c9265486c9af00687b056dfd254d2af11238f92c9f71eeeffc6f9c920e4dcb454c28c5f313756b26655f33650b8984610f200eee4c40a9f4c92a7e27d5d5e710194b0ffdae0fc6b8d982bac43c602cf528ebc515e5e701ab569f0e82039bb9f449886efe2bb68243aa1fd89bb1b4c3bfa89e7315511771174699ff0f6b7831ccab48849505bb3ae1accc41875e6717e8f53a761ed5ed4e36d015f08577eff2e99328b84e4c9ad7d56a3694e5b53f9e43bd42608a29b965781f755ef2eefe146841dd5652f6ee9f00d7d853f353802aa99889a6958dbac8d378b88136b2a44b04f56c6bebe04bfa74cb41ba79695d847677efd2336405ece8ab00a92c75e2508596ec04f155ee5f743db562c3972eaeb3a10aacd3f2759d8db955b9407322f794cfee45bf46cd010001cb5e9175b43ac7bd5383139672ff3f0e924def43cfe324fe77b280539d586b6edb12567f48c0ec1b79eb6827fa234df27f68f5fd1f7ed6cbe992560cf9354185f4b4c5a9e4b30b9bb2864efc35e593a8a26ae65f66b0b238e97ffe626902455ca415ac679974129bc831ad1b010acf07469072de1f204ddf4612a1d91a85e2817798854ad672ee8a395ccbcea7603d2c0c68e4d04d610b1ab96866ff118f2cf09d191ddd0e3ba2b274ac84fb13167aebfe7855be07b0bb1af0a2554dff52d31c3b58139a84423faf8d81e6a541500449161d4827da10d8d4e64f2b616d4fa41930f58fee3056fdc930b81bd777001e010372ce477ebef674eb3686556e45deddabddb3f19bba2524c2319847c13ccacef11df2006bde68a5adf452656499b5c9753c53707f0e7de58102bc991fa2728de1702bf836888a1370ffb51727639f535f7c8d432710900ec51632c7fae931b12287c313742aff3360a699c4685c4af3db077570e3c8bfd347d7cc3f0c5ecb70dacceb824fa98e5dabc6e0bce1b9e452c10bcdd30b154939a55bf788dac6db8190fa9b2104cbbc77f938878251ea0a5d05a81a98940c0aaa8ecfba7d7129d5c5f0ac84960edae7eb360ab24035f5c2472c85d6bcd5efa6f5900e78429b3523e80cc0cf038c6dd56767dbce817d16bb3addfcd288c61ece1b347179e4c7e66f1a7723e38d029897db1f83af0a7777d7f755f6c54f7228567f1b80c3411d41be975ee290583da0b09290ad12e44236080b886b864f85e1555877e05857514c45b672a1b236c004a56aea7257aaf994df28f0a5075aa6e92a94bf43f22ab4b51df40d9ff0af3abce07e53845c00c9fbeafc10b3fc774e3ce752b6743c0cc4a76add41ca4b455307c63685c72b699877cda782314b33423cc5074913eddbe02fab63bab709ec51e1e133cbfc68f1bd1c4cd03655a380d50f666efd4734bd68e492adc8eb0780494644f3298d322480b7857ada9c141d0a2076b01de425b34b05fc09d89f64f6dd23cfec0831e893c77eb79b80920ba5767bf80fc433aa76e1bb43c8a3c2cd1fead23888849a718b73f3d60c339500f2c9a54b0b87a47ec220f163d56fabb4cd002d42472270cdc393f05ef9ef717c149a7d4f3d1476535334467f1e29d19361605eb53ca8a241c6a7f56575ac0190e28cbeced523054acfab1896e39abfed86189d5e15ca469960709292c9d2c0918c6a60e1a2b0eccc1e3c93c9dc1a02b46855b6e1944708d9a0a57971e01a943bcb53d1ec473941614b0b0a04ae18ae2981bccc4f3507fe2a153f7f830be048fa30fce1f0a749fdc363dbefcd6e58f96918aad442c714960c9c1ab2d76db53e5bea4809198bcbf5cc3e824c276046c51f63c7987e2176fda1076c2f57be15a573700c265c744800bac259a3ff47951cb40f7032f2f1474cb6fb61ec184870bd5a612bf47cc6573e18e3b449b8c7b9b72b0fccb090811539e4b4b7e338905b46688abca623d3569ab369f9b7d96ababf75098170e5b719e2f8d06af0815d1bfb59597f2e79eaad218708ad1610dd99908f937b239aee58d210c147820febda600e5fae6f1d79968e87b6a22e2af0ab6219ce2c1bf27150c2d00e54449f5247a1523949aa0f59749f602bedeb30e481cdcafbd0f83cd6ba91ec5bdfeb32f4541f08d06be6610f79f929dfca5c7490aad0f834eddc60432ca5fd8c5ec6ecdd225470b7559127f93b50a3d044859019380184aff20f3f9f53f65f65b54ff3a99192f9629f8ca0c83463d98236189211751e91c451ed592870b0f278dfa674369d399c891ed7a1ef397c091edff39ae134783ea4a870e8a5548962999a39c39263ced5352f4261ad663bed2fb9b4ec1030c03d45ad8c932b053e2e7be7b1525afdc664ec847a80a9eac358d98badb8241fe81b442bb8b6fd851eacfafc8323437299825838c62e2292d79430b3ab587f978e2d0e8df1b63fea64511ba7012819622877b44b7c5806e8a3150555d463c824db02b397ffe6b7fcb66607215261dce612b057ba9ece5fdc0560977375cecdb341a6206ecafc2b55125a99725c2647513b5d6295ce7f102ff8c43a2028a206e0d6bdc56e36256e0115f1494ab565abad73ccd781de5779e0b4426a6fbafe0b57bb13b52fefc2a7c75e791801ba23725a704e8ea64294a3253414cd67ac14cd2f0751475e619eb586451824d1b7614f208f6387adc2fcb49b21c8e5e5c1990a5883319cceae63d7ab07425a5f107201b5a330496c0a01db2bc000871fe7f8e877b1d5d51f766cc7f5a1bfbac6a4f629e27a4a4638a77f0e3b9e016144b44addfb9ea84e09c948445c778b4c14eb3bb3c6ff19e9b4b0c40cda9ecd4bd2816be2d8d731f925313371e9e07380f5d7317ec47e3482e110ea93d983bf131d3130fa6c75a52b7a548d2731ecc7a71a8361a82dc2a1548f8b4392b9dcc9fdc89c4cd1a96a0a8a7d8740cfd30007187ec07aeaa7331007707d909a0e6240de347a99e778786f9dd0bdb5120acd102156a2af522b608c7f9b90fe3ca1f03d4375764ace4352a53c6b0685c04823c17293538a3721a0bea6d8865ada0629165caa62d09a50a43f5597ec614fabfa867d34d96a2b9c51e5d1296e76983b85897972f122e81f47688236c632728c1d38df2e931e9621133bf4adc066a544ffbf9fad60852aa1211ef2b7214dd3989e379b9a0847aeabd0d4d8916b77ae7f49a7450100fc6c740345c77648dbca4a0819b5fc25db69a93dc4b573a5da1d3542baff2eadfb5166dfc2603a980d6fb2867ebb974074a394efcedef2a9761ffec61d7a527202f9375ad02e4545cb2ef60bf771fef0b5affa211f5606d68e2973e9065dece1899ec5aae6a70656358c507569613195577ff928cf293c9f1d92176a648397246f6294d180fa4997bc534ffb8aaf9f9bbd9b0aa0b43a0bea17b5b90c5ee29b365a6b0ddf652dddfef55ceff7726012100d7e0d1d7cc034ee664204ed65f53732e4c2e6b00714c0ec163df6b49e8b3396637c586ed60fc4cb6958a7a0eba08c42604d9d735b99564b75eceb5c2490560fafa5ba04a8cbb4b3d5e9f460831c5c3412a032dd6da286f54223b6c1a306557302b110a44cb2d17723078a4b90389df40e521a7f13e32cdf6dd0bef4fc80a324d7decbb026fa08b9a7490db4e7c26fe21d70413d3dd8a73bedd3978a1331668e26c8f8514485de0a51a5ccc456caf26ad38e872b1a44873948770a", 0x1000}, {&(0x7f00000023c0)="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", 0xfb}, {&(0x7f00000024c0)="7a52f0cdd37ccc4be18de962577dbac4e697a9306fc62dde5a6660c5609d948ecb20c7080424b3c47d47f3f5e9c5159d5965f109f205f6f5636c5550bb20812889f742019b6788266a310850752dd3bb1e12be2bb4e6ac84c5ed2ce0fae9792792083c322bf1afc7a7f7ec9b7d18db7397a6e0074919e2a36d793a611277b2b9e397afbf196e478437b62b2dff44bfda4baeb54e8288625489f732140d16738862cbde01a6b71ec6ba8e2e1e58076e4a7015ebda8a4660f92c6f83273b833247cb6eac5cf5b391cf87eb4ee25c91511063b8012d0928a3c1efca0c187e710ef40feab991cf09", 0xe6}], 0x7, &(0x7f0000002640)=[@ip_retopts={{0x48, 0x0, 0x7, {[@noop, @end, @timestamp_prespec={0x44, 0xc, 0xeb, 0x3, 0x5, [{@rand_addr=0x64010100, 0x2}]}, @ssrr={0x89, 0xf, 0x35, [@broadcast, @broadcast, @private=0xa010100]}, @cipso={0x86, 0xd, 0x3, [{0x0, 0x7, "d9621f080f"}]}, @rr={0x7, 0xb, 0xfd, [@broadcast, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x70, [@dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100, @remote, @remote]}, @rr={0x7, 0x1f, 0x23, [@rand_addr=0x64010101, @remote, @rand_addr=0x64010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0x71, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x24, 0x50, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x2b}, {@multicast2, 0xfffff001}, {@broadcast, 0x9}, {@loopback, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x85}}], 0x108}}], 0x3, 0x40480c0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000002840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x54, r6, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), r1) getsockname$packet(r1, &(0x7f0000002c80)={0x11, 0x0, 0x0}, &(0x7f0000002cc0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000002f00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x190, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000003000)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x28021401}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x14, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc0c0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000003040)=0x5d5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000003080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000030c0)={@mcast1, r9}, 0x14) mount$binder(0x0, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140), 0x40002, &(0x7f0000003180)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x2}}], [{@subj_type={'subj_type', 0x3d, 'syztnl2\x00'}}, {@fsname}]}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x20, &(0x7f0000003200)={@remote, @multicast1, r8}, 0xc) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000003380)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f00000032c0)={0x60, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004050}, 0x4) 760.950506ms ago: executing program 2 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0xb, 0x0, 0x0, 0x2, 0x0, 0x4070bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) read$FUSE(r3, &(0x7f00000028c0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 684.030998ms ago: executing program 2 (id=1589): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r6, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010003704030000000300008800000000", @ANYRES32=r8, @ANYBLOB="0b1b050000000000300012800b00010065727370616e000020000280040012"], 0x58}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000010) sendto$packet(r2, &(0x7f0000000580)="6f3d12caa129679e0000000000c0", 0xe, 0x4, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0xe9, 0x6, @local}, 0x14) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) unlink(&(0x7f0000000080)='./file0/file1\x00') 622.96053ms ago: executing program 0 (id=1590): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xe4e6e000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000034c000/0x3000)=nil, 0x3000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8}, [@IFLA_LINKMODE={0x5, 0x11, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x200008d1}, 0x8000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 622.566863ms ago: executing program 0 (id=1591): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_format(r0, &(0x7f00000018c0)='-1\x00', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010002", 0x7) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYRES8=r2], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write(r6, &(0x7f0000000280)="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", 0x6ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@private, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="020000403d4ec574039d4d000f00000000000000359faf7c974ee708145ae3d66867c7ad1e606c631c934354cef3ee316f259f175e678c5c5e7d8f616edc356070df201bbb05391180bbbaec81695f415f344ebe2e3551e537d1124cc8f4269bd11728a37c7e3623d8bc860487952e8a886c86a3ae8d4b8817c8290db1d491731ec6c62c211beea1e2e92572f0ffe816e61a3ab4b986e1b36fd53d836b914f5af061f7795eb5584b21a399c7298984dc69cf117efda40fbb5e031079332e118b46a42ff548f5a827aa612aa2c3ba30", @ANYRES32=r4, @ANYBLOB="00efff00000000000000001728000000000073f43348e646d091644d4d2eca6c5ef2b9e8e0b2677c0cc61619ef895bc27638b2a575c2b7b3f26af9593d92f2a661ab6dd3c622481f6fb79f776eb439530487569aaa303640b76b2d5b4c05d36b", @ANYRES32=r8, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wgdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r10], 0x15) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) 472.680499ms ago: executing program 3 (id=1592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)=0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRESOCT=r2, @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x3d982809cb2bb644}, 0x40804) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(0x3) 472.238922ms ago: executing program 0 (id=1593): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 342.628641ms ago: executing program 1 (id=1596): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x20100) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x9) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x109401, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'veth0_to_team\x00', @local}) 341.57366ms ago: executing program 2 (id=1597): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0x2, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/191, 0xbf) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000380)=@generic={0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r4, &(0x7f0000001180)=""/4096, 0x1000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc"}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x1f8, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ip={@broadcast, @private=0xa010102, 0xffffff00, 0xff000000, 'wlan1\x00', 'macsec0\x00', {}, {0xff}, 0x4, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x3, 0x1, 0x3, 0x8, 0x1], 0x5, 0x4}, {0x4, [0x4, 0x2, 0x0, 0x4, 0x2, 0x1], 0x1, 0x1}}}}, {{@ip={@loopback, @local, 0xff000000, 0x0, 'syzkaller0\x00', 'vlan0\x00', {}, {0xff}, 0x1d, 0x0, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x800], 0x1}}, @common=@icmp={{0x28}, {0xd, 'IT', 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x2, 0x0, 0x4, 0x4, 0x9], 0x5, 0x4}, {0xffffffffffffffff, [0x0, 0x6, 0x2, 0x3, 0xc, 0x1], 0x1, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x16, "d432"}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x4}, {0x1, 0x8, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x3, 0x4}) 341.300163ms ago: executing program 3 (id=1598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 340.656625ms ago: executing program 1 (id=1599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x34c8c835514c4302, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 251.739941ms ago: executing program 1 (id=1600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000025c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB="24008201", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf250500000008000600", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="20f4e89ccbfb", 0x6}], 0x1}}], 0x1, 0x80) sendto$inet6(r0, &(0x7f0000000580)="fb6c", 0xc3ff, 0x4008804, 0x0, 0x0) 251.399323ms ago: executing program 1 (id=1601): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) ioprio_get$pid(0x1, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffc, [0x1040, 0xfffffffe], 0x2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r4 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 71.039131ms ago: executing program 1 (id=1602): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x9}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40, 0xfbc9afa00d94d2ca, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x1000) r11 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r11, &(0x7f0000000000)={0x2020}, 0x96) close(r10) read$FUSE(r11, &(0x7f0000004340)={0x2020}, 0x2020) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="34f4e500e08067014dbbb8635dd49aa83654d5636fc2eef39772252d1d2b26b14f2a4a1dd050132f75e7a72dbe7ded773fbc225a7d7c45a0595a3c266400"/73, @ANYRES16=r12, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="050018012700000008002600b4090000050019010e000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x880) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r12, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x400}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x10) 0s ago: executing program 1 (id=1603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) io_setup(0x973, &(0x7f0000000380)=0x0) r3 = eventfd2(0x0, 0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x9, 0x3, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000080)={0x7, 0x9f, 0x0, 'queue1\x00', 0x4}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) io_getevents(r2, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) 0s ago: executing program 1 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x400005, 0xc3, &(0x7f0000001300)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) fcntl$setpipe(r0, 0x407, 0x7) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r3, 0x407, 0x100004) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001400), 0x48000, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x10000000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f0000000080)={0x2e, 0x0}) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000ffffff7f040000000700000021000000", @ANYRES32, @ANYBLOB="0400080000000000000022000000000000000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0200000004000000030000000b00"/28], 0x50) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab2847dbcb5080024001280110001006272696467655f736c617665000000000c00058005001e0001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) kernel console output (not intermixed with test programs): hefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 93.882533][ T7923] team0 (unregistering): Port device team_slave_0 removed [ 93.888257][ T7923] team0 (unregistering): Port device team_slave_1 removed [ 93.900331][ T7929] No buffer was provided with the request [ 93.945473][ T7922] batadv_slave_1: left promiscuous mode [ 93.947286][ T7931] netlink: 'syz.2.557': attribute type 8 has an invalid length. [ 93.950589][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 93.955714][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 93.974853][ T7933] netlink: 496 bytes leftover after parsing attributes in process `syz.0.558'. [ 93.978046][ T7933] netlink: 312 bytes leftover after parsing attributes in process `syz.0.558'. [ 94.029193][ T7939] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 94.035026][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.557'. [ 94.038885][ T7937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.557'. [ 94.142515][ T40] audit: type=1400 audit(1769749432.737:27849): avc: denied { read } for pid=7940 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.465346][ T59] usb 8-1: USB disconnect, device number 6 [ 94.524014][ T7954] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.970528][ T7973] futex_wake_op: syz.2.569 tries to shift op by -1; fix this program [ 95.210552][ T40] audit: type=1400 audit(1769749433.797:27850): avc: denied { append } for pid=7983 comm="syz.2.573" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.690685][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.705242][ T8044] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 95.812491][ T40] audit: type=1400 audit(1769749434.407:27851): avc: denied { recv } for pid=8057 comm="syz.2.595" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=50072 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.823243][ T40] audit: type=1400 audit(1769749434.407:27852): avc: denied { recv } for pid=8057 comm="syz.2.595" saddr=127.0.0.1 src=50072 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 95.845203][ T40] audit: type=1400 audit(1769749434.437:27853): avc: denied { egress } for pid=8057 comm="syz.2.595" saddr=::ffff:172.20.20.187 daddr=ff02::1 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 95.855444][ T8061] gretap1: entered promiscuous mode [ 95.871940][ T8063] tipc: Failed to obtain node identity [ 95.874534][ T8063] tipc: Enabling of bearer rejected, failed to enable media [ 96.040567][ T74] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.080569][ T1339] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 96.211919][ T74] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 96.216817][ T74] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.222748][ T74] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.226440][ T74] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.230286][ T74] usb 5-1: Product: syz [ 96.234371][ T74] usb 5-1: Manufacturer: syz [ 96.236407][ T74] usb 5-1: SerialNumber: syz [ 96.241589][ T74] usb 5-1: config 0 descriptor?? [ 96.247914][ T74] usb 5-1: selecting invalid altsetting 0 [ 96.255767][ T1339] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 96.260419][ T1339] usb 7-1: config 0 interface 0 has no altsetting 0 [ 96.265969][ T1339] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.269582][ T1339] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.274023][ T1339] usb 7-1: Product: syz [ 96.277056][ T1339] usb 7-1: Manufacturer: syz [ 96.282659][ T1339] usb 7-1: SerialNumber: syz [ 96.291916][ T1339] usb 7-1: config 0 descriptor?? [ 96.305102][ T1339] usb 7-1: selecting invalid altsetting 0 [ 96.453307][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.457421][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.461414][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.466382][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.469981][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.473710][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.477190][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.480374][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.484066][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.487057][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.489587][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.492402][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.495368][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.498292][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.498325][ T942] usb 7-1: USB disconnect, device number 7 [ 96.502412][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.508110][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.514469][ T8055] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 96.527147][ T10] usb 5-1: USB disconnect, device number 7 [ 96.867476][ T8113] bridge_slave_0: left allmulticast mode [ 96.871728][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.052193][ T8121] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 97.088696][ T8121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.106827][ T8127] binder: 8126:8127 ioctl 3ba0 2000000005c0 returned -22 [ 97.650665][ T74] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 97.802336][ T74] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.806446][ T74] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.809858][ T74] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 97.813169][ T74] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.817246][ T74] usb 8-1: config 0 descriptor?? [ 97.820597][ T74] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 97.822935][ T74] dvb-usb: bulk message failed: -22 (3/0) [ 97.830531][ T74] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.833753][ T74] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 97.836049][ T74] usb 8-1: media controller created [ 97.838808][ T74] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.845937][ T74] dvb-usb: bulk message failed: -22 (6/0) [ 97.848980][ T74] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 97.853697][ T74] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input14 [ 97.858811][ T74] dvb-usb: schedule remote query interval to 150 msecs. [ 97.861128][ T74] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 98.022034][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 98.024130][ T74] dvb-usb: error while querying for an remote control event. [ 98.064180][ T8160] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 98.169691][ T8169] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 98.181380][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 98.187172][ T74] dvb-usb: error while querying for an remote control event. [ 98.269862][ T8183] bridge0: port 3(syz_tun) entered disabled state [ 98.272826][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.276559][ T8183] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.342325][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 98.344569][ T74] dvb-usb: error while querying for an remote control event. [ 98.393682][ T8189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.488635][ T8189] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.500586][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 98.502447][ T74] dvb-usb: error while querying for an remote control event. [ 98.610542][ T59] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 98.670603][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 98.673407][ T74] dvb-usb: error while querying for an remote control event. [ 98.705936][ T8199] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 98.760550][ T59] usb 5-1: Invalid ep0 maxpacket: 64 [ 98.840620][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 98.842506][ T74] dvb-usb: error while querying for an remote control event. [ 98.890703][ T59] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 99.010539][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 99.020514][ T74] dvb-usb: error while querying for an remote control event. [ 99.040562][ T59] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.043197][ T59] usb usb5-port1: attempt power cycle [ 99.180564][ T74] dvb-usb: bulk message failed: -22 (1/0) [ 99.182427][ T74] dvb-usb: error while querying for an remote control event. [ 99.240587][ T1031] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 99.340786][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 99.343263][ T53] dvb-usb: error while querying for an remote control event. [ 99.381881][ T59] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 99.401638][ T59] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.404310][ T1031] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 99.407940][ T1031] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.411951][ T1031] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.415083][ T1031] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.417964][ T1031] usb 7-1: Product: syz [ 99.419375][ T1031] usb 7-1: Manufacturer: syz [ 99.421018][ T1031] usb 7-1: SerialNumber: syz [ 99.424005][ T1031] usb 7-1: config 0 descriptor?? [ 99.429060][ T1031] usb 7-1: selecting invalid altsetting 0 [ 99.511537][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 99.514591][ T53] dvb-usb: error while querying for an remote control event. [ 99.540604][ T59] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 99.561126][ T59] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.563168][ T59] usb usb5-port1: unable to enumerate USB device [ 99.632502][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.635235][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.637957][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.641299][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.644747][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.647820][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.650741][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.654991][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.658503][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.662070][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.665602][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.669762][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.673186][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 99.675590][ T53] dvb-usb: error while querying for an remote control event. [ 99.676082][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.682405][ T8210] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 99.830593][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 99.832784][ T53] dvb-usb: error while querying for an remote control event. [ 99.991341][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 99.993875][ T53] dvb-usb: error while querying for an remote control event. [ 100.160646][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 100.162484][ T53] dvb-usb: error while querying for an remote control event. [ 100.320568][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 100.323242][ T53] dvb-usb: error while querying for an remote control event. [ 100.360711][ T59] usb 8-1: USB disconnect, device number 7 [ 100.398940][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.690038][ T8230] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 100.695349][ T8230] netlink: 'syz.3.644': attribute type 2 has an invalid length. [ 100.701433][ T8230] loop6: detected capacity change from 0 to 524287999 [ 100.716364][ T8230] __nla_validate_parse: 13 callbacks suppressed [ 100.716379][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 100.722975][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 100.818300][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 100.818316][ T40] audit: type=1400 audit(1769749439.407:27862): avc: denied { listen } for pid=8233 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.830595][ T40] audit: type=1400 audit(1769749439.407:27863): avc: denied { connect } for pid=8233 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.912686][ T40] audit: type=1400 audit(1769749439.507:27864): avc: denied { append } for pid=8240 comm="syz.3.648" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.160565][ T59] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 101.251229][ T8243] netlink: 7 bytes leftover after parsing attributes in process `syz.1.649'. [ 101.255841][ T8243] netlink: 7 bytes leftover after parsing attributes in process `syz.1.649'. [ 101.312275][ T59] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 101.320658][ T59] usb 8-1: config 0 interface 0 has no altsetting 0 [ 101.352245][ T59] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.356267][ T59] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.359818][ T59] usb 8-1: Product: syz [ 101.362605][ T59] usb 8-1: Manufacturer: syz [ 101.364689][ T59] usb 8-1: SerialNumber: syz [ 101.369521][ T59] usb 8-1: config 0 descriptor?? [ 101.381691][ T59] usb 8-1: selecting invalid altsetting 0 [ 101.385244][ T8209] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 101.557453][ T8265] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.565347][ T8265] netlink: 'syz.1.654': attribute type 23 has an invalid length. [ 101.569481][ T8265] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.575864][ T59] usb 8-1: USB disconnect, device number 8 [ 101.585849][ T8264] program syz.0.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.727596][ T40] audit: type=1400 audit(1769749440.317:27865): avc: denied { accept } for pid=8276 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.849186][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'. [ 102.115114][ T8294] kthread_run failed with err -4 [ 102.229363][ T8307] dummy0: Caught tx_queue_len zero misconfig [ 102.306165][ T8311] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 102.395243][ T10] usb 7-1: USB disconnect, device number 8 [ 102.449560][ T8331] syzkaller1: entered allmulticast mode [ 102.459463][ T40] audit: type=1400 audit(1769749441.047:27866): avc: denied { sys_admin } for pid=8328 comm="syz.2.674" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 102.471281][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.475125][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.487784][ T8333] (syz.0.673,8333,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.500583][ T8333] (syz.0.673,8333,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.515093][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.518671][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.530355][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.536894][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.545577][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.549278][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.562615][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.566227][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.574076][ T8342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1306 sclass=netlink_route_socket pid=8342 comm=syz.1.678 [ 102.578978][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.582210][ T8340] mkiss: ax0: crc mode is auto. [ 102.583676][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.596030][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.599639][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.610070][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.614235][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.623412][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.627398][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.639261][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.643478][ T8333] (syz.0.673,8333,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.643522][ T1339] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 102.665270][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.668919][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.677812][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.681692][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.690969][ T8333] (syz.0.673,8333,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.694548][ T8333] (syz.0.673,8333,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.703191][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.706953][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.715771][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.719517][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.728966][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.732739][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.742103][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.745679][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.754308][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.757842][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.766200][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.769656][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.779526][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.783164][ T8333] (syz.0.673,8333,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.790975][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.791211][ T40] audit: type=1400 audit(1769749441.387:27867): avc: denied { ioctl } for pid=8344 comm="syz.1.679" path="socket:[21591]" dev="sockfs" ino=21591 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.794662][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.811367][ T1339] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 102.819636][ T1339] usb 8-1: config 0 interface 0 has no altsetting 0 [ 102.826675][ T1339] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.831307][ T1339] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.835106][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.838860][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.842526][ T1339] usb 8-1: Product: syz [ 102.844566][ T1339] usb 8-1: Manufacturer: syz [ 102.846589][ T1339] usb 8-1: SerialNumber: syz [ 102.853493][ T1339] usb 8-1: config 0 descriptor?? [ 102.864992][ T1339] usb 8-1: selecting invalid altsetting 0 [ 102.868963][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.872853][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.894097][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.897716][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.908031][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.912115][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.920603][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.924141][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.932827][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.936453][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.944640][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.948285][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.956744][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.960380][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.967977][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.971628][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.978135][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.981049][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 102.987190][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.989916][ T8333] (syz.0.673,8333,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 103.062163][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.071184][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.075446][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.078934][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.090404][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.094076][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.097633][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.101296][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.104790][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.108133][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.115720][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.118793][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.133376][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.134173][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'. [ 103.142177][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.151551][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.154329][ T8325] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 103.252579][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'. [ 103.259876][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 103.271547][ T8368] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 103.376071][ T8373] input: syz0 as /devices/virtual/input/input15 [ 103.588713][ T8405] netlink: 'syz.1.694': attribute type 3 has an invalid length. [ 103.591540][ T8405] netlink: 'syz.1.694': attribute type 3 has an invalid length. [ 103.594261][ T8405] netlink: 'syz.1.694': attribute type 3 has an invalid length. [ 103.623323][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.695'. [ 103.628591][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.695'. [ 103.857021][ T8427] comedi: No check for data length of config insn id 33554458 is implemented [ 103.860257][ T8427] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 103.863826][ T8427] comedi: Assuming n=15 is correct [ 104.028409][ T8456] netlink: 'syz.2.704': attribute type 8 has an invalid length. [ 104.033421][ T8456] bond0: entered promiscuous mode [ 104.035042][ T8456] bond_slave_0: entered promiscuous mode [ 104.036997][ T8456] bond_slave_1: entered promiscuous mode [ 104.041749][ T8456] gretap0: entered promiscuous mode [ 104.045424][ T8456] hsr1: entered promiscuous mode [ 104.050436][ T8456] netlink: 'syz.2.704': attribute type 8 has an invalid length. [ 104.170364][ T8458] team0 (unregistering): Port device team_slave_0 removed [ 104.181485][ T8458] team0 (unregistering): Port device team_slave_1 removed [ 104.682829][ T40] audit: type=1326 audit(1769749443.277:27868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.2.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84b9aeb9 code=0x7ffc0000 [ 104.692772][ T40] audit: type=1326 audit(1769749443.277:27869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.2.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84b9aeb9 code=0x7ffc0000 [ 104.703352][ T40] audit: type=1326 audit(1769749443.277:27870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.2.712" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea84b9aeb9 code=0x7ffc0000 [ 104.718176][ T40] audit: type=1326 audit(1769749443.277:27871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8482 comm="syz.2.712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea84b9aeb9 code=0x7ffc0000 [ 104.813262][ T8498] program syz.2.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.826441][ T8324] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 104.898923][ T8509] program syz.2.720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.346418][ T8537] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 105.372547][ T8537] bond5: (slave geneve2): making interface the new active one [ 105.376056][ T8537] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 105.379571][ T7443] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.385879][ T7443] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.390100][ T7443] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.394070][ T7443] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 105.450727][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.451079][ T1339] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.456228][ T1339] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 105.837856][ T59] usb 8-1: USB disconnect, device number 9 [ 105.861648][ T8561] __nla_validate_parse: 9 callbacks suppressed [ 105.861665][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.735'. [ 105.863931][ T8560] pimreg3: entered allmulticast mode [ 105.934989][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 106.045155][ T8579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.742'. [ 106.156050][ T8594] tmpfs: Unknown parameter 'grpquota_bl' [ 106.159063][ T8593] bond0: Caught tx_queue_len zero misconfig [ 106.177330][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 106.181290][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 106.185652][ T8593] netlink: 'syz.3.746': attribute type 20 has an invalid length. [ 106.193146][ T8597] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.195936][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 106.202216][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 106.205748][ T8593] netlink: 'syz.3.746': attribute type 20 has an invalid length. [ 106.348746][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 106.352546][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.752'. [ 106.367298][ T7436] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.367351][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 106.370112][ T7436] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.377251][ T7436] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.380828][ T7436] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.641968][ T8639] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.686904][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 106.686920][ T40] audit: type=1400 audit(1769749445.267:27893): avc: denied { getopt } for pid=8641 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.103037][ T40] audit: type=1400 audit(1769749445.697:27894): avc: denied { setopt } for pid=8661 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.381834][ T8623] ceph: No mds server is up or the cluster is laggy [ 107.381871][ T8632] ceph: No mds server is up or the cluster is laggy [ 107.444847][ T8681] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.769' resets device [ 107.478698][ T40] audit: type=1400 audit(1769749446.067:27895): avc: denied { write } for pid=8682 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.527195][ T8689] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.530573][ T1339] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 107.530588][ T1339] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 108.422290][ T8704] mkiss: ax0: crc mode is auto. [ 108.467080][ T8705] bridge0: entered promiscuous mode [ 108.469199][ T8705] macsec2: entered allmulticast mode [ 108.471167][ T8705] bridge0: entered allmulticast mode [ 108.473866][ T8705] bridge0: port 4(macsec2) entered blocking state [ 108.476100][ T8705] bridge0: port 4(macsec2) entered disabled state [ 108.480230][ T8705] bridge0: left allmulticast mode [ 108.483759][ T8705] bridge0: left promiscuous mode [ 109.017520][ T40] audit: type=1400 audit(1769749703.606:27896): avc: denied { shutdown } for pid=8743 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.025677][ T40] audit: type=1400 audit(1769749703.616:27897): avc: denied { connect } for pid=8743 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.042917][ T40] audit: type=1400 audit(1769749703.636:27898): avc: denied { write } for pid=8747 comm="syz.3.788" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 109.084865][ T8751] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 109.107956][ T8749] Cannot find map_set index 65532 as target [ 109.224769][ T8764] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 109.279128][ T8770] SET target dimension over the limit! [ 109.570452][ T40] audit: type=1400 audit(1769749704.156:27899): avc: denied { read } for pid=8782 comm="syz.3.798" name="msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.580643][ T40] audit: type=1400 audit(1769749704.166:27900): avc: denied { open } for pid=8782 comm="syz.3.798" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 109.610761][ T1339] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 109.613612][ T1339] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 109.616496][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.810551][ T53] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 109.919500][ T8791] tls_set_device_offload: netdev not found [ 109.962942][ T53] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 109.966800][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.971075][ T53] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.974069][ T53] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.976668][ T53] usb 7-1: Product: syz [ 109.978575][ T53] usb 7-1: Manufacturer: syz [ 109.980128][ T53] usb 7-1: SerialNumber: syz [ 109.983296][ T53] usb 7-1: config 0 descriptor?? [ 109.988476][ T53] usb 7-1: selecting invalid altsetting 0 [ 110.195609][ T8788] rtc_cmos 00:05: Alarms can be up to one day in the future [ 110.227880][ T53] usb 7-1: USB disconnect, device number 9 [ 110.314865][ T40] audit: type=1326 audit(1769749704.906:27901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8818 comm="syz.3.809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8948b9aeb9 code=0x7ffc0000 [ 110.325103][ T40] audit: type=1326 audit(1769749704.906:27902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8818 comm="syz.3.809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8948b9aeb9 code=0x7ffc0000 [ 110.398697][ T5949] rtc_cmos 00:05: Alarms can be up to one day in the future [ 110.404086][ T5949] rtc_cmos 00:05: Alarms can be up to one day in the future [ 110.408145][ T5949] rtc_cmos 00:05: Alarms can be up to one day in the future [ 110.412232][ T5949] rtc_cmos 00:05: Alarms can be up to one day in the future [ 110.415164][ T5949] rtc rtc0: __rtc_set_alarm: err=-22 [ 110.690642][ T60] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 110.838534][ T8850] sctp: [Deprecated]: syz.2.817 (pid 8850) Use of int in maxseg socket option. [ 110.838534][ T8850] Use struct sctp_assoc_value instead [ 110.861159][ T60] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 110.865159][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.868619][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.872500][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.876272][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.879565][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.884060][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.887322][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.893187][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.897347][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.903943][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.907669][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.912457][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.915920][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.919492][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.923632][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.927255][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.931136][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.934993][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.938405][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.942028][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.946293][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.950286][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.953982][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.957895][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 110.961957][ T60] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 110.965630][ T60] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 110.968329][ T60] usb 8-1: Product: syz [ 110.969725][ T60] usb 8-1: Manufacturer: syz [ 110.971577][ T60] usb 8-1: SerialNumber: syz [ 110.974741][ T60] usb 8-1: config 0 descriptor?? [ 110.980312][ T60] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 111.009358][ T8863] __nla_validate_parse: 17 callbacks suppressed [ 111.009414][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 111.050957][ T8872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8872 comm=syz.1.822 [ 111.054984][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 111.067506][ T8872] bond0: entered promiscuous mode [ 111.069453][ T8872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.074462][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 111.077354][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 111.080166][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 111.088810][ T8872] bond0: (slave sit1): refused to change device type [ 111.231400][ C2] usb 8-1: yurex_control_callback - control failed: -71 [ 111.231542][ T53] usb 8-1: USB disconnect, device number 10 [ 111.238480][ T53] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 111.283387][ T8885] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 111.690577][ T1339] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 111.690794][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.693060][ T1339] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 112.070626][ T53] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 112.116443][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 112.116455][ T40] audit: type=1400 audit(1769749706.706:27950): avc: denied { lock } for pid=8925 comm="syz.1.835" path="socket:[21500]" dev="sockfs" ino=21500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.175229][ T8934] nbd: couldn't find device at index -2127233020 [ 112.178538][ T40] audit: type=1400 audit(1769749706.766:27951): avc: denied { mount } for pid=8933 comm="syz.1.838" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 112.200595][ T53] usb 7-1: device descriptor read/64, error -71 [ 112.279878][ T8939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.841'. [ 112.339614][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 112.440561][ T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 112.468249][ T40] audit: type=1400 audit(1769749707.056:27952): avc: denied { connect } for pid=8957 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 112.507338][ T8961] netlink: 184 bytes leftover after parsing attributes in process `syz.1.849'. [ 112.563603][ T8970] netlink: 3900 bytes leftover after parsing attributes in process `syz.1.852'. [ 112.580845][ T53] usb 7-1: device descriptor read/64, error -71 [ 112.648849][ T8978] gtp0: entered promiscuous mode [ 112.653247][ T8978] gtp0: entered allmulticast mode [ 112.655371][ T8978] team0: Device gtp0 is of different type [ 112.690872][ T53] usb usb7-port1: attempt power cycle [ 112.740648][ T942] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 112.857555][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 112.863677][ T8985] vlan4: entered promiscuous mode [ 112.865315][ T8985] bridge0: entered promiscuous mode [ 112.892420][ T942] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 112.896139][ T942] usb 8-1: config 0 interface 0 has no altsetting 0 [ 112.900055][ T942] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.903886][ T942] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.906514][ T942] usb 8-1: Product: syz [ 112.907887][ T942] usb 8-1: Manufacturer: syz [ 112.909453][ T942] usb 8-1: SerialNumber: syz [ 112.913036][ T942] usb 8-1: config 0 descriptor?? [ 112.916971][ T942] usb 8-1: selecting invalid altsetting 0 [ 113.040888][ T53] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 113.061409][ T53] usb 7-1: device descriptor read/8, error -71 [ 113.126730][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.129419][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.132387][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.135056][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.137738][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.140449][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.143309][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.146201][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.149623][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.153541][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.157112][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.161059][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.167164][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.170224][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.173038][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.175422][ T8963] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 113.321260][ T53] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 113.341298][ T53] usb 7-1: device descriptor read/8, error -71 [ 113.373317][ T40] audit: type=1400 audit(1769749707.966:27953): avc: denied { create } for pid=9016 comm="syz.1.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 113.460929][ T53] usb usb7-port1: unable to enumerate USB device [ 113.771653][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 113.774308][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.151683][ T9051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9051 comm=syz.0.872 [ 114.156727][ T9051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9051 comm=syz.0.872 [ 114.895563][ T8962] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 114.901511][ T9069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.904739][ T9069] IPv6: NLM_F_CREATE should be set when creating new route [ 115.105409][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.128253][ T9083] bridge_slave_0 (unregistering): left allmulticast mode [ 115.130635][ T9083] bridge_slave_0 (unregistering): left promiscuous mode [ 115.133010][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.388718][ T9094] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 115.540176][ T40] audit: type=1400 audit(1769749710.126:27954): avc: denied { block_suspend } for pid=9107 comm="syz.2.888" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.686418][ T9118] bridge0: port 3(syz_tun) entered disabled state [ 115.697525][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.818973][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.834542][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.902913][ T59] usb 8-1: USB disconnect, device number 11 [ 116.000200][ T9118] batman_adv: batadv0: Interface deactivated: gretap1 [ 116.058256][ T1151] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.062583][ T1151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.066347][ T1151] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 116.070990][ T1151] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.074758][ T1151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.078772][ T1151] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 116.083756][ T1151] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.087411][ T1151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.091354][ T1151] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 116.099924][ T1151] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.107083][ T1151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.109675][ T40] audit: type=1400 audit(1769749710.696:27955): avc: denied { audit_write } for pid=9139 comm="syz.3.893" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.110918][ T1151] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 116.124378][ T40] audit: type=1400 audit(1769749710.716:27956): avc: denied { name_bind } for pid=9148 comm="syz.2.895" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 116.378722][ T9176] __nla_validate_parse: 2 callbacks suppressed [ 116.378738][ T9176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.903'. [ 116.394154][ T9179] 8021q: adding VLAN 0 to HW filter on device bond7 [ 116.402001][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 116.402588][ T9176] pim6reg: entered allmulticast mode [ 116.405603][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 116.408211][ T9177] pim6reg: left allmulticast mode [ 116.468997][ T9182] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 116.510602][ T9131] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.549392][ T9184] macsec1: entered promiscuous mode [ 116.552461][ T9185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.906'. [ 116.552542][ T9184] macsec1: entered allmulticast mode [ 116.568756][ T40] audit: type=1400 audit(1769749711.156:27957): avc: denied { write } for pid=9187 comm="syz.1.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.692080][ T9131] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 116.696006][ T9131] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.708195][ T9131] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.713047][ T9131] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 116.715756][ T9131] usb 5-1: Product: syz [ 116.717469][ T9131] usb 5-1: Manufacturer: syz [ 116.719166][ T9131] usb 5-1: SerialNumber: syz [ 116.727184][ T9131] usb 5-1: config 0 descriptor?? [ 116.732638][ T9131] usb 5-1: selecting invalid altsetting 0 [ 116.740156][ T40] audit: type=1400 audit(1769749711.326:27958): avc: denied { map } for pid=9181 comm="syz.2.905" path="socket:[24965]" dev="sockfs" ino=24965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 116.876776][ T9209] 9pnet_fd: Insufficient options for proto=fd [ 116.883675][ T9211] netlink: 'syz.3.913': attribute type 8 has an invalid length. [ 116.886883][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 116.892013][ T9212] netlink: 'syz.3.913': attribute type 8 has an invalid length. [ 116.895170][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 116.903762][ T9212] bond0: entered promiscuous mode [ 116.905873][ T9212] bond_slave_0: entered promiscuous mode [ 116.908308][ T9212] bond_slave_1: entered promiscuous mode [ 116.921952][ T9212] gretap0: entered promiscuous mode [ 116.925035][ T9212] veth0: entered promiscuous mode [ 116.927682][ T9212] debugfs: 'hsr1' already exists in 'hsr' [ 116.930293][ T9212] Cannot create hsr debugfs directory [ 116.933050][ T9212] hsr1: entered promiscuous mode [ 116.936876][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.940886][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.944357][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.950015][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.954179][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.958573][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 116.958707][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.970904][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.975522][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.980854][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.987611][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 116.993012][ T9169] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 117.029275][ T40] audit: type=1400 audit(1769749711.616:27959): avc: denied { setattr } for pid=9219 comm="syz.1.915" name="ALG" dev="sockfs" ino=24987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.142337][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 117.142352][ T40] audit: type=1400 audit(1769749711.736:27961): avc: denied { name_bind } for pid=9227 comm="syz.1.918" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 117.370869][ T9242] overlayfs: statfs failed on './file0' [ 117.417741][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 117.421584][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'. [ 117.475504][ T9249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.925'. [ 117.498352][ T9249] bond0 (unregistering): left promiscuous mode [ 117.501746][ T9249] bond_slave_0: left promiscuous mode [ 117.503670][ T9249] bond_slave_1: left promiscuous mode [ 117.506592][ T9249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.510289][ T9249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.514435][ T9249] bond0 (unregistering): Released all slaves [ 117.585225][ T9258] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 117.600313][ T40] audit: type=1400 audit(1769749712.186:27962): avc: denied { accept } for pid=9259 comm="syz.2.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 117.639185][ T40] audit: type=1400 audit(1769749712.226:27963): avc: denied { remount } for pid=9261 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.110549][ T9131] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 118.117922][ T9295] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 118.256571][ T9131] usb 8-1: device descriptor read/64, error -71 [ 118.496035][ T9317] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.498847][ T9317] overlayfs: failed to set xattr on upper [ 118.500891][ T9317] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.503154][ T9317] overlayfs: ...falling back to index=off. [ 118.505131][ T9317] overlayfs: ...falling back to uuid=null. [ 118.510206][ T9317] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 118.510540][ T9131] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 118.640536][ T9131] usb 8-1: device descriptor read/64, error -71 [ 118.657845][ T9168] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 118.750713][ T9131] usb usb8-port1: attempt power cycle [ 119.090582][ T9131] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 119.111284][ T9131] usb 8-1: device descriptor read/8, error -71 [ 119.370630][ T9131] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 119.401318][ T9131] usb 8-1: device descriptor read/8, error -71 [ 119.511078][ T9131] usb usb8-port1: unable to enumerate USB device [ 119.543377][ T40] audit: type=1400 audit(1769749714.136:27964): avc: denied { ioctl } for pid=9341 comm="syz.2.950" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.553326][ T40] audit: type=1400 audit(1769749714.146:27965): avc: denied { watch_sb } for pid=9341 comm="syz.2.950" path="/252" dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.657213][ T9354] batman_adv: batadv0: Adding interface: macsec2 [ 119.659636][ T9354] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.670722][ T9354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.674693][ T9131] usb 5-1: USB disconnect, device number 12 [ 119.675283][ T9354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.682133][ T9354] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 119.723239][ T9356] netlink: 'syz.1.955': attribute type 2 has an invalid length. [ 119.726538][ T9356] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 119.773012][ T40] audit: type=1400 audit(1770274002.375:27966): avc: denied { name_bind } for pid=9361 comm="syz.2.958" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 119.782546][ T9365] ata1.00: invalid multi_count 128 ignored [ 119.833442][ T9365] syz_tun: left allmulticast mode [ 119.835923][ T9365] syz_tun: left promiscuous mode [ 119.837672][ T9365] bridge0: port 3(syz_tun) entered disabled state [ 119.841994][ T9365] bridge_slave_1: left allmulticast mode [ 119.844497][ T9365] bridge_slave_1: left promiscuous mode [ 119.847060][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.854159][ T9365] bridge_slave_0: left allmulticast mode [ 119.855972][ T9365] bridge_slave_0: left promiscuous mode [ 119.858123][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.010861][ T9387] netlink: 'syz.1.963': attribute type 12 has an invalid length. [ 120.019275][ T40] audit: type=1800 audit(1770274002.615:27967): pid=9389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.964" name="file0" dev="9p" ino=72614201 res=0 errno=0 [ 120.030109][ T40] audit: type=1800 audit(1770274002.625:27968): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.964" name="file0" dev="9p" ino=72614201 res=0 errno=0 [ 120.045009][ T9388] netfs: Couldn't get user pages (rc=-14) [ 120.201417][ T9405] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 120.205765][ T40] audit: type=1400 audit(1770274002.805:27969): avc: denied { relabelto } for pid=9399 comm="syz.0.970" name="207" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 120.214847][ T40] audit: type=1400 audit(1770274002.805:27970): avc: denied { associate } for pid=9399 comm="syz.0.970" name="207" dev="tmpfs" ino=1107 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 120.284247][ T9407] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 120.327081][ T9419] netlink: 'syz.2.974': attribute type 4 has an invalid length. [ 120.335883][ T9419] netlink: 'syz.2.974': attribute type 4 has an invalid length. [ 120.345058][ T9419] autofs4:pid:9419:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 120.350801][ T9419] autofs4:pid:9419:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 120.633504][ T9438] 9p: Bad value for 'rfdno' [ 120.693937][ T9442] netlink: 'syz.1.983': attribute type 11 has an invalid length. [ 120.890919][ T9469] netlink: 'syz.3.991': attribute type 10 has an invalid length. [ 121.188189][ T9503] FAULT_INJECTION: forcing a failure. [ 121.188189][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.193529][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.2.1003 Not tainted syzkaller #0 PREEMPT(full) [ 121.193549][ T9503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.193558][ T9503] Call Trace: [ 121.193564][ T9503] [ 121.193571][ T9503] dump_stack_lvl+0x100/0x190 [ 121.193596][ T9503] should_fail_ex.cold+0x5/0xa [ 121.193614][ T9503] _copy_from_iter+0x1f4/0x1690 [ 121.193648][ T9503] ? alloc_pages_mpol+0x25a/0x550 [ 121.193668][ T9503] ? __pfx__copy_from_iter+0x10/0x10 [ 121.193687][ T9503] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 121.193716][ T9503] copy_page_from_iter+0xde/0x180 [ 121.193739][ T9503] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 121.193770][ T9503] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 121.193807][ T9503] ? _kstrtoull+0x13c/0x1f0 [ 121.193821][ T9503] ? __pfx__kstrtoull+0x10/0x10 [ 121.193838][ T9503] tun_get_user+0x16d0/0x3e10 [ 121.193870][ T9503] ? __pfx_tun_get_user+0x10/0x10 [ 121.193897][ T9503] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 121.193929][ T9503] ? find_held_lock+0x2b/0x80 [ 121.193950][ T9503] ? tun_get+0x191/0x370 [ 121.193971][ T9503] ? tun_get+0x191/0x370 [ 121.193998][ T9503] tun_chr_write_iter+0xdc/0x200 [ 121.194022][ T9503] vfs_write+0x6ac/0x1070 [ 121.194040][ T9503] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 121.194063][ T9503] ? __pfx_vfs_write+0x10/0x10 [ 121.194078][ T9503] ? find_held_lock+0x2b/0x80 [ 121.194113][ T9503] ksys_write+0x12a/0x250 [ 121.194130][ T9503] ? __pfx_ksys_write+0x10/0x10 [ 121.194146][ T9503] ? do_user_addr_fault+0x8d6/0x12f0 [ 121.194173][ T9503] do_syscall_64+0xc9/0xf80 [ 121.194193][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.194210][ T9503] RIP: 0033:0x7fea84b5b78e [ 121.194222][ T9503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.194237][ T9503] RSP: 002b:00007fea85a03fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.194253][ T9503] RAX: ffffffffffffffda RBX: 00007fea85a046c0 RCX: 00007fea84b5b78e [ 121.194264][ T9503] RDX: 00000000000005fa RSI: 0000200000000880 RDI: 00000000000000c8 [ 121.194274][ T9503] RBP: 00007fea85a04090 R08: 0000000000000000 R09: 0000000000000000 [ 121.194284][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.194293][ T9503] R13: 00007fea84e16038 R14: 00007fea84e15fa0 R15: 00007ffece94bee8 [ 121.194315][ T9503] [ 121.389691][ T9517] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 121.391783][ T9517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 121.407700][ T9519] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 121.408540][ T9517] vhci_hcd vhci_hcd.0: Device attached [ 121.409794][ T9519] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 121.421194][ T9519] vhci_hcd vhci_hcd.0: Device attached [ 121.436212][ T9522] vhci_hcd: connection closed [ 121.436247][ T9518] vhci_hcd: connection closed [ 121.441656][ T7420] vhci_hcd vhci_hcd.0: stop threads [ 121.445457][ T7420] vhci_hcd vhci_hcd.0: release socket [ 121.447582][ T7420] vhci_hcd vhci_hcd.0: disconnect device [ 121.448194][ T9513] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.450793][ T7420] vhci_hcd vhci_hcd.0: stop threads [ 121.454351][ T7420] vhci_hcd vhci_hcd.0: release socket [ 121.459860][ T7420] vhci_hcd vhci_hcd.0: disconnect device [ 122.405293][ T9535] syzkaller0: entered promiscuous mode [ 122.407943][ T9535] syzkaller0: entered allmulticast mode [ 122.415677][ T9543] __nla_validate_parse: 19 callbacks suppressed [ 122.415689][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 122.471331][ T9551] Cannot find add_set index 4 as target [ 122.488256][ T9553] geneve2: entered promiscuous mode [ 122.495637][ T9553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9553 comm=syz.0.1016 [ 122.502840][ T9553] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 122.536624][ T9560] tmpfs: Bad value for 'mpol' [ 122.540498][ T9564] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1019'. [ 122.550614][ T9564] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 122.552825][ T9564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 122.555692][ T9564] vhci_hcd vhci_hcd.0: Device attached [ 122.559413][ T9564] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 122.560092][ T9573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9573 comm=syz.0.1016 [ 122.562047][ T9564] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.574398][ T9564] vhci_hcd vhci_hcd.0: Device attached [ 122.580218][ T9564] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 122.582339][ T9564] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 122.584908][ T9564] vhci_hcd vhci_hcd.0: Device attached [ 122.654172][ T9578] syz.2.1019 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.758847][ T1031] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 122.819247][ T1031] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 123.002731][ T9591] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 123.011747][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.016609][ T9591] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 123.023011][ T9591] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 123.026341][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1025'. [ 123.030069][ T9591] batadv0: entered promiscuous mode [ 123.032752][ T9591] batadv0: entered allmulticast mode [ 123.036753][ T9591] bond0: (slave batadv0): Releasing backup interface [ 123.042093][ T9591] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 123.163175][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 123.163193][ T40] audit: type=1400 audit(1770274005.743:27986): avc: denied { mounton } for pid=9594 comm="syz.0.1027" path="/227/file0" dev="tmpfs" ino=1217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 123.163540][ T9605] Invalid source name [ 123.177365][ T9605] UBIFS error (pid: 9605): cannot open "./file0", error -22 [ 123.363912][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.370891][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.374852][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.375917][ T9571] vhci_hcd: connection reset by peer [ 123.376497][ T9574] vhci_hcd: connection closed [ 123.377523][ T9569] vhci_hcd: connection closed [ 123.382545][ T9610] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.382677][ T7420] vhci_hcd vhci_hcd.2: stop threads [ 123.392651][ T9610] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.396218][ T7420] vhci_hcd vhci_hcd.2: release socket [ 123.404288][ T7420] vhci_hcd vhci_hcd.2: disconnect device [ 123.406914][ T7420] vhci_hcd vhci_hcd.2: stop threads [ 123.409381][ T7420] vhci_hcd vhci_hcd.2: release socket [ 123.412349][ T7420] vhci_hcd vhci_hcd.2: disconnect device [ 123.419476][ T40] audit: type=1400 audit(1770274005.992:27987): avc: denied { read } for pid=9617 comm="syz.0.1033" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.432928][ T7420] vhci_hcd vhci_hcd.2: stop threads [ 123.435588][ T7420] vhci_hcd vhci_hcd.2: release socket [ 123.435724][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.437976][ T7420] vhci_hcd vhci_hcd.2: disconnect device [ 123.440225][ T40] audit: type=1400 audit(1770274005.992:27988): avc: denied { open } for pid=9617 comm="syz.0.1033" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.442311][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.443213][ T40] audit: type=1400 audit(1770274005.992:27989): avc: denied { ioctl } for pid=9617 comm="syz.0.1033" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.459435][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.471479][ T9610] xfrm0 speed is unknown, defaulting to 1000 [ 123.478618][ T40] audit: type=1400 audit(1770274006.051:27990): avc: denied { write } for pid=9617 comm="syz.0.1033" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.554095][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 123.564424][ T40] audit: type=1400 audit(1770274006.130:27991): avc: denied { ioctl } for pid=9626 comm="syz.3.1035" path="socket:[28049]" dev="sockfs" ino=28049 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 123.671639][ T40] audit: type=1400 audit(1770274006.240:27992): avc: denied { map } for pid=9640 comm="syz.1.1039" path="socket:[26169]" dev="sockfs" ino=26169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.741783][ T40] audit: type=1400 audit(1770274006.309:27993): avc: denied { setopt } for pid=9652 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 123.756105][ T40] audit: type=1400 audit(1770274006.319:27994): avc: denied { accept } for pid=9652 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 123.791134][ T40] audit: type=1400 audit(1770274006.359:27995): avc: denied { ioctl } for pid=9661 comm="syz.1.1043" path="socket:[25366]" dev="sockfs" ino=25366 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.797652][ T9662] netlink: 'syz.1.1043': attribute type 6 has an invalid length. [ 123.877189][ T34] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 123.899998][ T9671] netlink: 'syz.0.1044': attribute type 2 has an invalid length. [ 124.015274][ T9675] vxcan1 speed is unknown, defaulting to 1000 [ 124.038457][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 124.043426][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 124.046311][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.049667][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.052833][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.056241][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.060854][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.066031][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.090360][ T9675] xfrm0 speed is unknown, defaulting to 1000 [ 124.181852][ T9682] netlink: 'syz.1.1049': attribute type 28 has an invalid length. [ 124.187111][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 124.191062][ T9682] netlink: 'syz.1.1049': attribute type 7 has an invalid length. [ 124.194175][ T9682] netlink: 'syz.1.1049': attribute type 8 has an invalid length. [ 124.196606][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 124.274609][ T34] usb 8-1: usb_control_msg returned -32 [ 124.277453][ T34] usbtmc 8-1:16.0: can't read capabilities [ 124.291326][ T9691] netlink: 700 bytes leftover after parsing attributes in process `syz.1.1051'. [ 124.294497][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1051'. [ 124.369886][ T9697] sctp: [Deprecated]: syz.1.1054 (pid 9697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.369886][ T9697] Use struct sctp_sack_info instead [ 124.419456][ T9699] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1055'. [ 124.631408][ T9702] usbtmc 8-1:16.0: stb usb_control_msg returned -32 [ 124.635076][ T1339] usb 8-1: USB disconnect, device number 16 [ 124.667086][ T9709] netlink: 23 bytes leftover after parsing attributes in process `syz.2.1058'. [ 124.865936][ T9724] program syz.2.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.001028][ T9730] kvm: pic: single mode not supported [ 125.001182][ T9730] kvm: pic: level sensitive irq not supported [ 125.018986][ T9730] kvm: pic: single mode not supported [ 125.022756][ T9730] kvm: pic: level sensitive irq not supported [ 125.170452][ T9754] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 125.212298][ T9760] veth0_to_team: entered promiscuous mode [ 125.219975][ T9760] veth0_to_team: left promiscuous mode [ 125.311583][ T9772] sctp: [Deprecated]: syz.2.1076 (pid 9772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.311583][ T9772] Use struct sctp_sack_info instead [ 125.479130][ T1339] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 125.642124][ T1339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.645950][ T1339] usb 5-1: not running at top speed; connect to a high speed hub [ 125.650041][ T1339] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.656758][ T1339] usb 5-1: config 1 interface 0 has no altsetting 0 [ 125.661447][ T1339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.665260][ T1339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.668554][ T1339] usb 5-1: Product: syz [ 125.670477][ T1339] usb 5-1: Manufacturer: syz [ 125.672532][ T1339] usb 5-1: SerialNumber: syz [ 125.710706][ T34] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 125.841642][ T34] usb 8-1: device descriptor read/64, error -71 [ 125.889469][ T1339] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 125.901769][ T1339] usb 5-1: USB disconnect, device number 13 [ 126.055155][ T9799] overlayfs: failed to clone lowerpath [ 126.058120][ T9799] overlayfs: failed to resolve '/': -2 [ 126.083427][ T34] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 126.215559][ T34] usb 8-1: device descriptor read/64, error -71 [ 126.325735][ T34] usb usb8-port1: attempt power cycle [ 126.464909][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9811 comm=syz.0.1088 [ 126.493517][ T9815] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 126.497980][ T9815] bond0: (slave wlan1): Opening slave failed [ 126.667554][ T34] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 126.667570][ T9131] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 126.688212][ T34] usb 8-1: device descriptor read/8, error -71 [ 126.830581][ T9131] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 126.835810][ T9131] usb 7-1: config 0 interface 0 has no altsetting 0 [ 126.839613][ T9131] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.845977][ T9131] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.850675][ T9131] usb 7-1: Product: syz [ 126.852520][ T9131] usb 7-1: Manufacturer: syz [ 126.854645][ T9131] usb 7-1: SerialNumber: syz [ 126.859588][ T9131] usb 7-1: config 0 descriptor?? [ 126.866482][ T9131] usb 7-1: selecting invalid altsetting 0 [ 126.937783][ T9836] [U] [ 126.938954][ T9836] [U] [ 126.940064][ T9836] [U] [ 126.941147][ T9836] [U] [ 126.943544][ T9836] [U] [ 126.944706][ T9836] [U] [ 126.945591][ T9836] [U] [ 126.946500][ T9836] [U] [ 126.947555][ T9836] [U] [ 126.948154][ T9833] bond1: entered promiscuous mode [ 126.948464][ T9836] [U] [ 126.949948][ T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 126.952327][ T9833] bond1: entered allmulticast mode [ 126.954341][ T9836] [U] [ 126.957319][ T9833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.957781][ T9836] [U] [ 126.962202][ T9836] [U] [ 126.963116][ T9836] [U] [ 126.964028][ T9836] [U] [ 126.965012][ T9836] [U] [ 126.970815][ T34] usb 8-1: device descriptor read/8, error -71 [ 126.976718][ T9833] erspan2: entered allmulticast mode [ 126.984153][ T9833] bond1: (slave erspan2): making interface the new active one [ 126.987553][ T9833] erspan2: entered promiscuous mode [ 126.991435][ T9833] bond1: (slave erspan2): Enslaving as an active interface with an up link [ 126.997910][ T9836] batadv_slave_1: entered promiscuous mode [ 127.080830][ T34] usb usb8-port1: unable to enumerate USB device [ 127.085474][ T9843] overlayfs: failed to clone upperpath [ 127.100803][ T9843] overlayfs: failed to resolve './file1': -2 [ 127.139261][ T9835] batadv_slave_1: left promiscuous mode [ 127.147078][ T9835] [U] [ 127.158048][ T9851] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 127.164220][ T9851] bond2 (unregistering): Released all slaves [ 127.176376][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.179756][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.184142][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.187395][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.190656][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.193931][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.197063][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.200195][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.205243][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.208447][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.211661][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.214779][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.218665][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.222393][ T9809] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.237923][ T9855] veth1_vlan (unregistering): left allmulticast mode [ 127.260017][ T9857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.263284][ T9857] IPv6: NLM_F_CREATE should be set when creating new route [ 127.333149][ T9858] lo: entered allmulticast mode [ 127.338529][ T9858] tunl0: entered allmulticast mode [ 127.342797][ T9858] gre0: entered allmulticast mode [ 127.347671][ T9858] gretap0: entered allmulticast mode [ 127.351344][ T9858] erspan0: entered allmulticast mode [ 127.355703][ T9858] ip_vti0: entered allmulticast mode [ 127.358427][ T9858] ip6_vti0: entered allmulticast mode [ 127.361475][ T9858] sit0: entered allmulticast mode [ 127.364976][ T9858] ip6tnl0: entered allmulticast mode [ 127.367781][ T9858] ip6gre0: entered allmulticast mode [ 127.371467][ T9858] syz_tun: entered allmulticast mode [ 127.381050][ T9858] ip6gretap0: entered allmulticast mode [ 127.385480][ T9858] bridge0: port 3(team0) entered disabled state [ 127.387718][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.390106][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.393477][ T9858] bridge0: entered allmulticast mode [ 127.397866][ T9858] vcan0: entered allmulticast mode [ 127.400432][ T9858] : entered allmulticast mode [ 127.402360][ T9858] bond_slave_0: entered allmulticast mode [ 127.405419][ T9858] bond_slave_1: entered allmulticast mode [ 127.410299][ T9858] dummy0: entered allmulticast mode [ 127.414606][ T9858] nlmon0: entered allmulticast mode [ 127.417036][ T9858] caif0: entered allmulticast mode [ 127.419079][ T9858] batadv0: entered allmulticast mode [ 127.422597][ T9858] vxcan0: entered allmulticast mode [ 127.425355][ T9858] vxcan1: entered allmulticast mode [ 127.428406][ T9858] veth0: entered allmulticast mode [ 127.431343][ T9858] veth1: entered allmulticast mode [ 127.435422][ T9858] wg0: entered allmulticast mode [ 127.439254][ T9858] wg1: entered allmulticast mode [ 127.444914][ T9858] wg2: entered allmulticast mode [ 127.448723][ T9858] veth0_to_bridge: entered allmulticast mode [ 127.455527][ T9858] veth1_to_bridge: entered allmulticast mode [ 127.461019][ T9858] veth0_to_bond: entered allmulticast mode [ 127.465838][ T9858] veth1_to_bond: entered allmulticast mode [ 127.470619][ T9858] veth0_to_team: entered allmulticast mode [ 127.476459][ T9858] veth1_to_team: entered allmulticast mode [ 127.482048][ T9858] veth0_to_batadv: entered allmulticast mode [ 127.488564][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.492850][ T9858] batadv_slave_0: entered allmulticast mode [ 127.499135][ T9858] veth1_to_batadv: entered allmulticast mode [ 127.507283][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.510956][ T9858] batadv_slave_1: entered allmulticast mode [ 127.516825][ T9858] xfrm0: entered allmulticast mode [ 127.521389][ T9858] veth0_to_hsr: entered allmulticast mode [ 127.526118][ T9858] hsr_slave_0: entered allmulticast mode [ 127.530314][ T9858] veth1_to_hsr: entered allmulticast mode [ 127.537606][ T9858] hsr0: entered allmulticast mode [ 127.542141][ T9858] veth1_virt_wifi: entered allmulticast mode [ 127.549572][ T9858] veth0_virt_wifi: entered allmulticast mode [ 127.554571][ T9858] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 127.558463][ T9858] veth1_vlan: entered allmulticast mode [ 127.563531][ T9858] veth0_vlan: entered allmulticast mode [ 127.574043][ T9858] vlan0: entered allmulticast mode [ 127.576425][ T9858] vlan1: entered allmulticast mode [ 127.579329][ T9858] macvlan0: entered allmulticast mode [ 127.585315][ T9858] macvlan1: entered allmulticast mode [ 127.589768][ T9858] ipvlan0: entered allmulticast mode [ 127.592465][ T9858] ipvlan1: entered allmulticast mode [ 127.597310][ T9858] veth1_macvtap: entered allmulticast mode [ 127.601895][ T9858] veth0_macvtap: entered allmulticast mode [ 127.606254][ T9858] macvtap0: entered allmulticast mode [ 127.609681][ T9858] macsec0: entered allmulticast mode [ 127.613032][ T9858] geneve0: entered allmulticast mode [ 127.616657][ T9858] geneve1: entered allmulticast mode [ 127.619875][ T9858] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 127.623311][ T9858] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 127.627387][ T9858] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 127.630909][ T9858] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 127.633934][ T9858] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 127.636390][ T9858] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 127.639027][ T9858] mac80211_hwsim hwsim8 wlan2: entered allmulticast mode [ 127.641786][ T9858] erspan1: entered allmulticast mode [ 127.645908][ T9858] ip6erspan0: entered allmulticast mode [ 127.648331][ T9858] team1: entered allmulticast mode [ 127.651043][ T9858] vxlan0: entered allmulticast mode [ 127.654114][ T9858] vlan2: left promiscuous mode [ 127.656551][ T9858] bridge1: entered allmulticast mode [ 127.658579][ T9858] macsec1: entered allmulticast mode [ 127.661019][ T9858] : entered allmulticast mode [ 127.662912][ T9858] ipip0: entered allmulticast mode [ 127.665864][ T9858] vxlan1: entered allmulticast mode [ 127.668254][ T9858] macvlan2: entered allmulticast mode [ 127.670351][ T9858] bond0: left promiscuous mode [ 127.671875][ T9858] bond0: entered allmulticast mode [ 127.673916][ T9858] vlan3: entered allmulticast mode [ 127.675716][ T9858] vlan4: left promiscuous mode [ 127.677260][ T9858] bridge0: left promiscuous mode [ 127.678899][ T9858] vlan4: entered allmulticast mode [ 127.680576][ T9858] syztnl1: entered allmulticast mode [ 127.682346][ T9858] vlan0.2: entered allmulticast mode [ 127.684144][ T9858] macsec2: entered allmulticast mode [ 127.686313][ T9858] sit1: entered allmulticast mode [ 127.688846][ T9858] bond1: left promiscuous mode [ 127.690387][ T9858] erspan2: left promiscuous mode [ 127.695887][ T8638] vxcan1 speed is unknown, defaulting to 1000 [ 127.698852][ T8638] syz2: Port: 1 Link DOWN [ 127.704918][ T7437] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.707719][ T7437] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.710583][ T8638] vxcan1 speed is unknown, defaulting to 1000 [ 127.713869][ T7436] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.722983][ T7436] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.733438][ T7436] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.736428][ T7436] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.739351][ T7436] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.742075][ T7436] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.787219][ T9874] __nla_validate_parse: 3 callbacks suppressed [ 127.787231][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1105'. [ 127.832302][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 127.836277][ T9877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1106'. [ 127.840985][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 127.844019][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1106'. [ 127.923499][ T9894] loop2: detected capacity change from 0 to 7 [ 127.936314][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.940318][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.943887][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.947970][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.951745][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.955698][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.959498][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.963322][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.967143][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.970371][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.973205][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.976190][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.978917][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.982781][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.986170][ T6117] ldm_validate_partition_table(): Disk read failed. [ 127.987987][ T1031] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 127.989553][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 127.995841][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 127.999472][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.003526][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.007404][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.011270][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 128.014697][ T6117] Dev loop2: unable to read RDB block 0 [ 128.018105][ T6117] loop2: unable to read partition table [ 128.020892][ T6117] loop2: partition table beyond EOD, truncated [ 128.029320][ T9894] ldm_validate_partition_table(): Disk read failed. [ 128.032753][ T9894] Dev loop2: unable to read RDB block 0 [ 128.035746][ T9894] loop2: unable to read partition table [ 128.038518][ T9894] loop2: partition table beyond EOD, truncated [ 128.041188][ T9894] loop_reread_partitions: partition scan of loop2 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 128.341072][ T9911] binder: 9910:9911 ioctl c018620c 200000000300 returned -1 [ 128.527592][ T9923] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 128.958795][ T9808] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 129.021473][ T9928] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 129.027611][ T9928] raw_sendmsg: syz.3.1122 forgot to set AF_INET. Fix it! [ 129.040683][ T9928] team0: No ports can be present during mode change [ 129.097454][ T9928] team_slave_1: Caught tx_queue_len zero misconfig [ 129.110976][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1122'. [ 129.115506][ T9928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1122'. [ 129.122508][ T9928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1122'. [ 129.191757][ T9935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1124'. [ 129.196009][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 129.286355][ T59] usb usb42-port1: attempt power cycle [ 129.355355][ T9957] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 129.501623][ T9965] validate_nla: 1 callbacks suppressed [ 129.501634][ T9965] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 129.506391][ T9965] netlink: 'syz.0.1133': attribute type 5 has an invalid length. [ 129.807874][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 129.807889][ T40] audit: type=1400 audit(1770274012.326:28002): avc: denied { listen } for pid=9979 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.881353][ T59] usb usb42-port1: unable to enumerate USB device [ 129.984325][ T9131] usb 7-1: USB disconnect, device number 14 [ 130.032547][ T40] audit: type=1400 audit(1770274012.564:28003): avc: denied { load_policy } for pid=9990 comm="syz.2.1140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 130.036425][ T9991] SELinux: failed to load policy [ 130.176428][T10005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=10005 comm=syz.3.1145 [ 130.197095][T10005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10005 comm=syz.3.1145 [ 130.287007][T10017] 9p: Bad value for 'version' [ 130.290526][ T40] audit: type=1400 audit(1770274012.813:28004): avc: denied { setopt } for pid=10016 comm="syz.1.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.449908][ T40] audit: type=1400 audit(1770274012.972:28005): avc: denied { write } for pid=10030 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.776104][ T9131] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 130.782068][T10048] uprobe: syz.0.1158:10048 failed to unregister, leaking uprobe [ 130.937025][T10065] random: crng reseeded on system resumption [ 130.958239][ T9131] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.968427][ T9131] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 130.975776][ T9131] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 130.987371][ T9131] usb 8-1: Product: syz [ 130.989114][ T9131] usb 8-1: Manufacturer: syz [ 130.991057][ T9131] usb 8-1: SerialNumber: syz [ 131.026988][ T40] audit: type=1400 audit(1770274013.538:28006): avc: denied { setopt } for pid=10071 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 131.085370][T10078] atomic_op ffff888059509998 conn xmit_atomic 0000000000000000 [ 131.209183][ T9131] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 131.216787][ T9131] usb 8-1: USB disconnect, device number 21 [ 131.222683][ T9131] usblp0: removed [ 131.239850][T10082] infiniband sy: set down [ 131.241494][T10082] infiniband sy: added bond_slave_0 [ 131.257826][T10082] RDS/IB: sy: added [ 131.259532][T10082] smc: adding ib device sy with port count 1 [ 131.261464][T10082] smc: ib device sy port 1 has no pnetid [ 131.397068][T10099] trusted_key: syz.0.1176 sent an empty control message without MSG_MORE. [ 131.697321][T10105] openvswitch: netlink: Flow key attr not present in new flow. [ 131.959863][ T40] audit: type=1400 audit(1770274014.471:28007): avc: denied { getopt } for pid=10113 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.343138][ T40] audit: type=1400 audit(1770274014.849:28008): avc: denied { setattr } for pid=10151 comm="syz.2.1192" name="file0" dev="9p" ino=72614201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.348043][T10154] trusted_key: encrypted_key: key user:syz not found [ 132.353645][T10152] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 132.373130][T10152] CUSE: unknown device info "&b%ZW)3\my " [ 132.375907][T10152] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 132.379180][T10154] ip6tnl0: Caught tx_queue_len zero misconfig [ 132.381447][T10152] CUSE: DEVNAME unspecified [ 132.390160][T10156] 9pnet_virtio: no channels available for device syz [ 132.442770][T10160] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.450200][T10160] Cannot find set identified by id 3 to match [ 132.537489][T10171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10171 comm=syz.3.1199 [ 132.539109][T10169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10169 comm=syz.3.1199 [ 132.552785][ T40] audit: type=1400 audit(1770274015.058:28009): avc: denied { set_context_mgr } for pid=10162 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.552934][T10174] binder: 10162:10174 unknown command 0 [ 132.562099][T10174] binder: 10162:10174 ioctl c0306201 200000000080 returned -22 [ 132.567133][T10171] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 132.573707][T10169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.690617][T10191] pim6reg9: entered allmulticast mode [ 132.724166][ T40] audit: type=1400 audit(1770274015.227:28010): avc: denied { execute } for pid=10194 comm="syz.0.1205" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=27390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 132.942398][T10208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8274 sclass=netlink_route_socket pid=10208 comm=syz.0.1209 [ 132.989398][T10215] random: crng reseeded on system resumption [ 132.998767][ T40] audit: type=1400 audit(1770274015.505:28011): avc: denied { read } for pid=10214 comm="syz.3.1211" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.348425][T10222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10222 comm=syz.2.1212 [ 133.435378][T10226] bond2: option downdelay: invalid value (18446744073709551615) [ 133.444949][T10226] bond2: option downdelay: allowed values 0 - 2147483647 [ 133.451371][T10226] bond2 (unregistering): Released all slaves [ 133.913876][T10262] IPVS: set_ctl: invalid protocol: 2 172.30.1.4:19997 [ 134.704909][T10295] __nla_validate_parse: 18 callbacks suppressed [ 134.704922][T10295] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1234'. [ 134.872603][ T9131] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 135.028267][ T9131] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 135.031290][ T9131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.033833][ T9131] usb 5-1: Product: syz [ 135.035064][ T9131] usb 5-1: Manufacturer: syz [ 135.036540][ T9131] usb 5-1: SerialNumber: syz [ 135.039116][ T9131] usb 5-1: config 0 descriptor?? [ 135.306577][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 135.306594][ T40] audit: type=1400 audit(1770274017.800:28015): avc: denied { listen } for pid=10288 comm="syz.0.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 135.476134][T10310] tipc: Started in network mode [ 135.476152][T10310] tipc: Node identity ac14140f, cluster identity 4711 [ 135.476602][T10310] tipc: New replicast peer: 255.255.255.255 [ 135.477154][T10310] tipc: Enabled bearer , priority 10 [ 135.567352][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 135.872358][T10322] netlink: 'syz.3.1243': attribute type 8 has an invalid length. [ 135.872405][T10323] netlink: 'syz.3.1243': attribute type 8 has an invalid length. [ 135.905010][ T40] audit: type=1326 audit(1770274018.386:28016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.3.1243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8948b9aeb9 code=0x7ffc0000 [ 135.955338][T10326] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1244'. [ 135.970749][T10326] program syz.3.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.062240][T10331] netlink: 'syz.3.1246': attribute type 5 has an invalid length. [ 136.087337][T10331] overlayfs: statfs failed on './file0' [ 136.177925][T10333] i2c i2c-1: Invalid block write size 34 [ 136.462491][ T59] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 136.614312][ T1031] tipc: Node number set to 2886997007 [ 136.620358][ T59] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.623477][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.626264][ T59] usb 8-1: Product: syz [ 136.627572][ T59] usb 8-1: Manufacturer: syz [ 136.629044][ T59] usb 8-1: SerialNumber: syz [ 136.645516][ T59] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.664496][ T40] audit: type=1400 audit(1770274019.152:28017): avc: denied { firmware_load } for pid=1031 comm="kworker/3:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.670472][ T1031] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.846014][ T40] audit: type=1400 audit(1770274019.331:28018): avc: denied { create } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.853548][ T40] audit: type=1400 audit(1770274019.331:28019): avc: denied { bind } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.901553][ T40] audit: type=1400 audit(1770274019.380:28020): avc: denied { setopt } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.909796][ T40] audit: type=1400 audit(1770274019.380:28021): avc: denied { accept } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.917523][ T40] audit: type=1400 audit(1770274019.380:28022): avc: denied { read } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.954248][ T40] audit: type=1400 audit(1770274019.430:28023): avc: denied { write } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.961364][ T40] audit: type=1400 audit(1770274019.440:28024): avc: denied { create } for pid=10349 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.434209][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.437770][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.653812][ T9131] usb 5-1: USB disconnect, device number 14 [ 137.730371][ T1031] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 137.733685][ T1031] ath9k_htc: Failed to initialize the device [ 137.766427][ T1031] usb 8-1: ath9k_htc: USB layer deinitialized [ 137.782582][ T1031] usb 8-1: USB disconnect, device number 22 [ 137.932394][T10375] overlay: filesystem on ./file1 not supported [ 137.938685][T10375] xt_policy: output policy not valid in PREROUTING and INPUT [ 137.976022][T10367] xt_connbytes: Forcing CT accounting to be enabled [ 137.978276][T10367] set match dimension is over the limit! [ 137.980470][T10377] cgroup: Unknown subsys name 'cpuset' [ 138.094288][T10393] syzkaller0: entered promiscuous mode [ 138.096098][T10393] syzkaller0: entered allmulticast mode [ 138.684822][T10444] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1268'. [ 139.478757][T10448] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 139.484077][T10448] overlayfs: failed to clone lowerpath [ 139.487845][T10448] overlayfs: failed to clone lowerpath [ 139.500778][T10450] netlink: 'syz.0.1271': attribute type 21 has an invalid length. [ 139.690411][T10469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=10469 comm=syz.1.1278 [ 139.796367][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 139.811660][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=10491 comm=syz.1.1284 [ 139.949190][T10511] tmpfs: Bad value for 'mpol' [ 139.955475][T10511] gfs2: gfs2 mount does not exist [ 140.045956][T10523] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 140.138913][T10538] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1301'. [ 140.211007][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 140.397121][T10570] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.552074][T10587] No control pipe specified [ 140.555537][T10587] overlayfs: missing 'lowerdir' [ 140.619807][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 140.623480][T10595] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.741478][T10611] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 140.801797][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 140.801814][ T40] audit: type=1400 audit(1770274023.257:28032): avc: denied { accept } for pid=10621 comm="syz.1.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.911646][T10638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.947216][T10534] ceph: No mds server is up or the cluster is laggy [ 140.951397][T10644] overlayfs: failed to clone lowerpath [ 140.963416][T10644] overlayfs: failed to resolve './file0/../file0': -2 [ 141.051831][T10651] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 141.070605][T10651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 141.073909][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 141.076709][T10653] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1342'. [ 141.109350][T10651] bond7: (slave veth9): Enslaving as an active interface with a down link [ 141.121742][T10651] vlan1: entered allmulticast mode [ 141.124112][T10651] bond7: entered allmulticast mode [ 141.127537][T10651] bond7: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 141.195070][T10663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1344'. [ 141.219940][T10651] Process accounting resumed [ 141.244306][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 141.247599][ T40] audit: type=1400 audit(1770274023.705:28033): avc: denied { ioctl } for pid=10666 comm="syz.3.1345" path="socket:[31401]" dev="sockfs" ino=31401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.360001][T10682] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 141.363111][T10682] netlink: 'syz.3.1349': attribute type 2 has an invalid length. [ 141.365988][T10682] netlink: 'syz.3.1349': attribute type 1 has an invalid length. [ 141.368515][T10682] netlink: 'syz.3.1349': attribute type 3 has an invalid length. [ 141.371158][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 141.520291][T10696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 141.625702][T10705] syz_tun: entered allmulticast mode [ 141.635555][T10705] dvmrp8: entered allmulticast mode [ 141.685967][T10713] lo speed is unknown, defaulting to 1000 [ 141.688603][T10713] lo speed is unknown, defaulting to 1000 [ 141.690931][T10713] lo speed is unknown, defaulting to 1000 [ 141.776665][T10713] infiniband sz1: set active [ 141.779261][ T53] lo speed is unknown, defaulting to 1000 [ 141.781388][T10713] infiniband sz1: added lo [ 141.798881][T10713] RDS/IB: sz1: added [ 141.801175][T10704] syz_tun: left allmulticast mode [ 141.803777][T10713] smc: adding ib device sz1 with port count 1 [ 141.814750][T10713] smc: ib device sz1 port 1 has no pnetid [ 141.817217][T10713] lo speed is unknown, defaulting to 1000 [ 141.877586][ T9131] lo speed is unknown, defaulting to 1000 [ 141.912663][T10713] lo speed is unknown, defaulting to 1000 [ 141.995558][T10713] lo speed is unknown, defaulting to 1000 [ 142.084945][T10713] lo speed is unknown, defaulting to 1000 [ 142.458179][T10750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.634350][T10767] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 142.659714][T10772] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 142.797539][T10781] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.985215][T10796] program syz.3.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.042609][ T1424] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 143.046146][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.875014][ T40] audit: type=1400 audit(1770274026.310:28034): avc: denied { mounton } for pid=10812 comm="syz.1.1392" path="/bus" dev="bpf" ino=32881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 143.875303][T10813] overlay: Unknown parameter 'obj_role' [ 144.135619][T10835] kernel profiling enabled (shift: 63) [ 144.139646][T10835] profiling shift: 63 too large [ 144.255615][ T40] audit: type=1400 audit(1770274026.688:28035): avc: denied { ioctl } for pid=10846 comm="syz.3.1404" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 144.366285][T10854] loop6: detected capacity change from 0 to 524287999 [ 144.369260][ T6117] buffer_io_error: 25 callbacks suppressed [ 144.369269][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.373705][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.376245][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.379139][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.381605][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.384151][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.386800][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.390686][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.393363][ T6117] ldm_validate_partition_table(): Disk read failed. [ 144.395873][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.399633][ T6117] Buffer I/O error on dev loop6, logical block 0, async page read [ 144.402764][ T6117] Dev loop6: unable to read RDB block 0 [ 144.404922][ T6117] loop6: unable to read partition table [ 144.410364][T10854] ldm_validate_partition_table(): Disk read failed. [ 144.412607][T10854] Dev loop6: unable to read RDB block 0 [ 144.414536][T10854] loop6: unable to read partition table [ 144.416763][T10854] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 144.444846][T10856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.865422][T10908] macsec2: entered promiscuous mode [ 144.867231][T10908] bridge0: entered promiscuous mode [ 144.872970][ T53] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 144.906697][T10917] 9pnet_virtio: no channels available for device syz [ 144.977117][ T40] audit: type=1400 audit(1770274027.414:28036): avc: denied { nlmsg_write } for pid=10914 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 145.002057][T10931] vlan1: entered promiscuous mode [ 145.020563][ T40] audit: type=1326 audit(1770274027.454:28037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10934 comm="syz.0.1431" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b3a19aeb9 code=0x0 [ 145.028379][ T40] audit: type=1326 audit(1770274027.464:28038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10933 comm="syz.1.1430" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa50019aeb9 code=0x0 [ 145.044378][ T53] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 145.047423][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.051227][ T53] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 145.054480][ T53] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 145.057006][ T53] usb 8-1: Manufacturer: syz [ 145.059811][ T53] usb 8-1: config 0 descriptor?? [ 145.122381][ T53] rc_core: IR keymap rc-hauppauge not found [ 145.126521][ T53] Registered IR keymap rc-empty [ 145.130136][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 145.134982][T10941] netlink: 'syz.2.1432': attribute type 8 has an invalid length. [ 145.137096][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input17 [ 145.138469][T10941] __nla_validate_parse: 3 callbacks suppressed [ 145.138480][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 145.408183][ T53] usb 8-1: USB disconnect, device number 23 [ 145.856178][T10933] delete_channel: no stack [ 145.930250][ T40] audit: type=1400 audit(1770274028.359:28039): avc: denied { mount } for pid=10979 comm="syz.0.1438" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 145.939480][T10980] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1438'. [ 145.977617][ T40] audit: type=1400 audit(1770274028.399:28040): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 146.205060][ T40] audit: type=1400 audit(1770274028.628:28041): avc: denied { create } for pid=11004 comm="syz.0.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.395954][T11034] /dev/nullb0: Can't open blockdev [ 146.397136][T11029] gretap1: entered promiscuous mode [ 146.513486][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 146.563172][T11060] autofs: Bad value for 'fd' [ 146.575789][T11060] bond5: option arp_validate: invalid value (2048) [ 146.578938][T11060] bond5 (unregistering): Released all slaves [ 146.818794][ T40] audit: type=1400 audit(1770274029.244:28042): avc: denied { name_bind } for pid=11089 comm="syz.0.1460" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 146.822479][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 146.950453][ T40] audit: type=1400 audit(1770274029.374:28043): avc: denied { audit_read } for pid=11100 comm="syz.1.1464" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.957626][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 146.963188][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 146.966932][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 147.008509][ T40] audit: type=1400 audit(1770274029.433:28044): avc: denied { connect } for pid=11104 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.017350][ T8638] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 147.058963][ T40] audit: type=1400 audit(1770274029.483:28045): avc: denied { create } for pid=11111 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 147.119255][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1470'. [ 147.204193][ T8638] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.209089][ T8638] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 147.212827][ T8638] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.225138][ T8638] usb 8-1: config 0 descriptor?? [ 147.238215][ T8638] rndis_host 8-1:0.0: skipping garbage [ 147.240787][ T8638] usb 8-1: bad CDC descriptors [ 147.245947][T11144] evm: overlay not supported [ 147.245996][ T40] audit: type=1400 audit(1770274029.672:28046): avc: denied { setattr } for pid=11132 comm="syz.0.1474" name="file1" dev="overlay" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.261472][ T40] audit: type=1400 audit(1770274029.682:28047): avc: denied { link } for pid=11132 comm="syz.0.1474" name="00fb2100018b3d500f5c694ca28437d352af1be2505dcb5d18d206000000000000" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 147.316769][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 147.354726][T11157] netlink: 'syz.1.1481': attribute type 2 has an invalid length. [ 147.383859][ T40] audit: type=1400 audit(1770274029.801:28048): avc: denied { read } for pid=11164 comm="syz.1.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.384541][T11166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1484'. [ 147.422910][T11171] futex_wake_op: syz.2.1486 tries to shift op by 32; fix this program [ 147.428903][T11170] vxcan1 speed is unknown, defaulting to 1000 [ 147.507028][T11170] xfrm0 speed is unknown, defaulting to 1000 [ 147.557426][ T9131] usb 8-1: USB disconnect, device number 24 [ 147.566025][T11175] IPVS: Scheduler module ip_vs_sip not found [ 147.603168][ T7426] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.612516][ T7426] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.616085][T11170] lo speed is unknown, defaulting to 1000 [ 147.616130][ T7426] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.621537][ T7426] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.845366][T11188] kAFS: No cell specified [ 148.000037][T11209] netlink: 'syz.2.1499': attribute type 30 has an invalid length. [ 148.016825][ T7452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.020444][ T7452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.023943][ T7452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.027482][ T7452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.135164][T11217] overlayfs: missing 'lowerdir' [ 148.138714][ T8638] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.298618][ T8638] usb 5-1: Using ep0 maxpacket: 8 [ 148.310266][ T8638] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.313353][ T8638] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.316435][ T8638] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.320064][ T8638] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.324139][ T8638] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.327081][ T8638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.331271][T11237] overlayfs: failed to resolve './file0/file0': -2 [ 148.382913][T11242] netlink: 'syz.1.1509': attribute type 11 has an invalid length. [ 148.415185][T11244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.481362][T11252] dvmrp17: entered allmulticast mode [ 148.537960][ T8638] usb 5-1: GET_CAPABILITIES returned 0 [ 148.540642][ T8638] usbtmc 5-1:16.0: can't read capabilities [ 148.636569][T11275] 9p: Bad value for 'wfdno' [ 148.662473][T11271] netlink: 'syz.1.1518': attribute type 5 has an invalid length. [ 148.755512][ T1031] usb 5-1: USB disconnect, device number 15 [ 149.047243][T11312] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 149.330248][T11346] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 149.361244][T11346] bond2: (slave geneve2): making interface the new active one [ 149.364521][T11346] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 149.368044][ T7434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 149.370976][ T7434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 149.373852][ T7434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 149.377232][ T7434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 149.506877][T11357] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 149.675314][T11373] netlink: 'syz.0.1544': attribute type 1 has an invalid length. [ 149.698147][T11373] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.704126][T11373] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 149.708727][T11373] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 149.776079][ T9131] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 149.805748][T11390] netlink: 'syz.2.1551': attribute type 4 has an invalid length. [ 149.925067][T11401] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 149.949119][ T9131] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.952972][ T9131] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.956476][ T9131] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.961407][ T9131] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.964361][ T9131] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.970917][ T9131] usb 8-1: config 0 descriptor?? [ 150.028007][T11415] SET target dimension over the limit! [ 150.155246][T11427] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 150.159741][T11427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.252899][T11427] __nla_validate_parse: 8 callbacks suppressed [ 150.252918][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 150.260120][T11427] syz_tun: left allmulticast mode [ 150.262174][T11427] syz_tun: left promiscuous mode [ 150.264527][T11427] bridge0: port 3(syz_tun) entered disabled state [ 150.269727][T11427] bridge_slave_1: left allmulticast mode [ 150.272146][T11427] bridge_slave_1: left promiscuous mode [ 150.274607][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.430419][T11359] PID 11359 killed due to inadequate hugepage pool [ 150.586351][ T9131] usbhid 8-1:0.0: can't add hid device: -71 [ 150.588629][ T9131] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 150.597371][ T9131] usb 8-1: USB disconnect, device number 25 [ 150.618926][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1567'. [ 150.781796][T11457] batman_adv: batadv0: Adding interface: macsec1 [ 150.784622][T11457] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.796836][T11457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.801036][T11457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.804896][T11457] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 151.000256][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'. [ 151.007331][T11472] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 151.058397][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 151.058412][ T40] audit: type=1326 audit(1770274033.463:28060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11477 comm="syz.1.1578" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa50019aeb9 code=0x0 [ 151.575579][T11510] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 151.578175][T11510] overlayfs: failed to set xattr on upper [ 151.580028][T11510] overlayfs: ...falling back to redirect_dir=nofollow. [ 151.582260][T11510] overlayfs: ...falling back to index=off. [ 151.584171][T11510] overlayfs: ...falling back to uuid=null. [ 151.792998][ T40] audit: type=1400 audit(1770274034.189:28061): avc: denied { create } for pid=11524 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.802762][ T40] audit: type=1400 audit(1770274034.189:28062): avc: denied { read } for pid=11524 comm="syz.0.1591" dev="nsfs" ino=4026533305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.805499][T11525] 5gQ[: renamed from lo (while UP) [ 151.809946][ T40] audit: type=1400 audit(1770274034.189:28063): avc: denied { open } for pid=11524 comm="syz.0.1591" path="net:[4026533305]" dev="nsfs" ino=4026533305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.816855][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 151.820097][ T40] audit: type=1400 audit(1770274034.189:28064): avc: denied { create } for pid=11524 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.822587][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1589'. [ 151.827161][T11525] 9pnet_fd: Insufficient options for proto=fd [ 151.829082][ T40] audit: type=1400 audit(1770274034.189:28065): avc: denied { bind } for pid=11524 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.835826][T11519] erspan1: entered promiscuous mode [ 151.842020][T11519] erspan1: entered allmulticast mode [ 151.846098][ T40] audit: type=1400 audit(1770274034.189:28066): avc: denied { write } for pid=11524 comm="syz.0.1591" path="socket:[34355]" dev="sockfs" ino=34355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.853716][ T40] audit: type=1400 audit(1770274034.189:28067): avc: denied { write } for pid=11524 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.860075][ T40] audit: type=1400 audit(1770274034.189:28068): avc: denied { read } for pid=11524 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.866428][ T40] audit: type=1400 audit(1770274034.199:28069): avc: denied { map_create } for pid=11524 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 151.878212][T11528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 151.881867][T11528] bridge_slave_0: default FDB implementation only supports local addresses [ 152.508183][T11559] [ 152.509282][T11559] ====================================================== [ 152.512128][T11559] WARNING: possible circular locking dependency detected [ 152.515010][T11559] syzkaller #0 Not tainted [ 152.516957][T11559] ------------------------------------------------------ [ 152.519789][T11559] syz.1.1604/11559 is trying to acquire lock: [ 152.522277][T11559] ffff88803de6c468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 152.525660][T11559] [ 152.525660][T11559] but task is already holding lock: [ 152.528706][T11559] ffff888021e38420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 152.531945][T11559] [ 152.531945][T11559] which lock already depends on the new lock. [ 152.531945][T11559] [ 152.535314][T11559] [ 152.535314][T11559] the existing dependency chain (in reverse order) is: [ 152.538130][T11559] [ 152.538130][T11559] -> #4 (sb_writers#6){.+.+}-{0:0}: [ 152.540447][T11559] mnt_want_write+0x6f/0x450 [ 152.542044][T11559] ovl_create_object+0x12b/0x3b0 [ 152.543774][T11559] lookup_open.isra.0+0x139b/0x1890 [ 152.545976][T11559] path_openat+0x117d/0x3120 [ 152.547693][T11559] do_filp_open+0x1f7/0x420 [ 152.549281][T11559] do_sys_openat2+0x12e/0x220 [ 152.550956][T11559] __x64_sys_openat+0x12d/0x210 [ 152.552639][T11559] do_syscall_64+0xc9/0xf80 [ 152.554228][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.556332][T11559] [ 152.556332][T11559] -> #3 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 152.559133][T11559] down_read+0x99/0x460 [ 152.560635][T11559] lookup_slow+0x42/0x70 [ 152.562138][T11559] path_lookupat+0x5e8/0xc40 [ 152.563705][T11559] filename_lookup+0x202/0x590 [ 152.565714][T11559] kern_path+0x35/0x50 [ 152.567338][T11559] lookup_bdev+0xd8/0x280 [ 152.568997][T11559] resume_store+0x1d6/0x460 [ 152.570595][T11559] kobj_attr_store+0x58/0x80 [ 152.572239][T11559] sysfs_kf_write+0xf2/0x150 [ 152.573888][T11559] kernfs_fop_write_iter+0x3e0/0x5f0 [ 152.576215][T11559] vfs_write+0x6ac/0x1070 [ 152.578102][T11559] ksys_write+0x12a/0x250 [ 152.579608][T11559] do_syscall_64+0xc9/0xf80 [ 152.581174][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.583170][T11559] [ 152.583170][T11559] -> #2 (&of->mutex){+.+.}-{4:4}: [ 152.585451][T11559] __mutex_lock+0x1a2/0x1b90 [ 152.587086][T11559] kernfs_seq_start+0x4f/0x2a0 [ 152.588798][T11559] seq_read_iter+0x2c1/0x1270 [ 152.590403][T11559] kernfs_fop_read_iter+0x46c/0x610 [ 152.592177][T11559] copy_splice_read+0x4ba/0xb90 [ 152.593870][T11559] do_splice_read+0x285/0x370 [ 152.595575][T11559] splice_direct_to_actor+0x2a1/0xa30 [ 152.597411][T11559] do_splice_direct+0x174/0x240 [ 152.599121][T11559] do_sendfile+0xadc/0xe20 [ 152.600727][T11559] __x64_sys_sendfile64+0x1d8/0x220 [ 152.602517][T11559] do_syscall_64+0xc9/0xf80 [ 152.604173][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.606267][T11559] [ 152.606267][T11559] -> #1 (&p->lock){+.+.}-{4:4}: [ 152.608472][T11559] __mutex_lock+0x1a2/0x1b90 [ 152.610091][T11559] seq_read_iter+0xe1/0x1270 [ 152.611754][T11559] proc_reg_read_iter+0x220/0x310 [ 152.613482][T11559] copy_splice_read+0x4ba/0xb90 [ 152.615366][T11559] do_splice_read+0x285/0x370 [ 152.617083][T11559] splice_file_to_pipe+0x82/0x120 [ 152.618905][T11559] do_sendfile+0x366/0xe20 [ 152.620533][T11559] __x64_sys_sendfile64+0x1d8/0x220 [ 152.622351][T11559] do_syscall_64+0xc9/0xf80 [ 152.624009][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.626164][T11559] [ 152.626164][T11559] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 152.628468][T11559] __lock_acquire+0x14b8/0x2630 [ 152.630155][T11559] lock_acquire+0x17c/0x330 [ 152.631822][T11559] __mutex_lock+0x1a2/0x1b90 [ 152.633676][T11559] pipe_lock+0x69/0x80 [ 152.635283][T11559] iter_file_splice_write+0x1f8/0x10a0 [ 152.637189][T11559] do_splice+0x109c/0x1fd0 [ 152.638761][T11559] __do_splice+0x33b/0x370 [ 152.640333][T11559] __x64_sys_splice+0x187/0x250 [ 152.642038][T11559] do_syscall_64+0xc9/0xf80 [ 152.643596][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.645674][T11559] [ 152.645674][T11559] other info that might help us debug this: [ 152.645674][T11559] [ 152.648808][T11559] Chain exists of: [ 152.648808][T11559] &pipe->mutex --> &ovl_i_mutex_dir_key[depth]#2 --> sb_writers#6 [ 152.648808][T11559] [ 152.652999][T11559] Possible unsafe locking scenario: [ 152.652999][T11559] [ 152.655434][T11559] CPU0 CPU1 [ 152.657239][T11559] ---- ---- [ 152.658929][T11559] rlock(sb_writers#6); [ 152.660279][T11559] lock(&ovl_i_mutex_dir_key[depth]#2); [ 152.662854][T11559] lock(sb_writers#6); [ 152.665022][T11559] lock(&pipe->mutex); [ 152.666326][T11559] [ 152.666326][T11559] *** DEADLOCK *** [ 152.666326][T11559] [ 152.668800][T11559] 1 lock held by syz.1.1604/11559: [ 152.670503][T11559] #0: ffff888021e38420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x33b/0x370 [ 152.673320][T11559] [ 152.673320][T11559] stack backtrace: [ 152.675239][T11559] CPU: 1 UID: 0 PID: 11559 Comm: syz.1.1604 Not tainted syzkaller #0 PREEMPT(full) [ 152.675260][T11559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 152.675271][T11559] Call Trace: [ 152.675279][T11559] [ 152.675287][T11559] dump_stack_lvl+0x100/0x190 [ 152.675306][T11559] print_circular_bug.cold+0x178/0x1c7 [ 152.675327][T11559] check_noncircular+0x146/0x160 [ 152.675356][T11559] __lock_acquire+0x14b8/0x2630 [ 152.675374][T11559] ? __do_splice+0x33b/0x370 [ 152.675393][T11559] ? __x64_sys_splice+0x187/0x250 [ 152.675414][T11559] lock_acquire+0x17c/0x330 [ 152.675431][T11559] ? pipe_lock+0x69/0x80 [ 152.675449][T11559] ? __pfx___might_resched+0x10/0x10 [ 152.675470][T11559] __mutex_lock+0x1a2/0x1b90 [ 152.675484][T11559] ? pipe_lock+0x69/0x80 [ 152.675496][T11559] ? pipe_lock+0x69/0x80 [ 152.675509][T11559] ? __pfx___mutex_lock+0x10/0x10 [ 152.675523][T11559] ? rcu_is_watching+0x12/0xc0 [ 152.675536][T11559] ? iter_file_splice_write+0x1d3/0x10a0 [ 152.675550][T11559] ? trace_kmalloc+0x83/0xb0 [ 152.675564][T11559] ? __kmalloc_noprof+0x365/0x9c0 [ 152.675576][T11559] ? pipe_lock+0x69/0x80 [ 152.675588][T11559] pipe_lock+0x69/0x80 [ 152.675601][T11559] iter_file_splice_write+0x1f8/0x10a0 [ 152.675614][T11559] ? futex_unqueue+0x13d/0x2c0 [ 152.675626][T11559] ? __pfx___futex_wait+0x10/0x10 [ 152.675644][T11559] ? lockdep_hardirqs_on+0x78/0x100 [ 152.675656][T11559] ? __pfx_iter_file_splice_write+0x10/0x10 [ 152.675669][T11559] ? __lock_acquire+0x4a5/0x2630 [ 152.675680][T11559] ? find_held_lock+0x2b/0x80 [ 152.675697][T11559] ? __pfx_iter_file_splice_write+0x10/0x10 [ 152.675712][T11559] do_splice+0x109c/0x1fd0 [ 152.675727][T11559] ? __lock_acquire+0x4a5/0x2630 [ 152.675740][T11559] ? __pfx_do_splice+0x10/0x10 [ 152.675754][T11559] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 152.675768][T11559] ? find_held_lock+0x2b/0x80 [ 152.675783][T11559] __do_splice+0x33b/0x370 [ 152.675796][T11559] ? __pfx___do_splice+0x10/0x10 [ 152.675811][T11559] __x64_sys_splice+0x187/0x250 [ 152.675828][T11559] do_syscall_64+0xc9/0xf80 [ 152.675846][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.675863][T11559] RIP: 0033:0x7fa50019aeb9 [ 152.675882][T11559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.675900][T11559] RSP: 002b:00007fa4fe3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 152.675917][T11559] RAX: ffffffffffffffda RBX: 00007fa500415fa0 RCX: 00007fa50019aeb9 [ 152.675930][T11559] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 152.675943][T11559] RBP: 00007fa500208c1f R08: 00000000088000cc R09: 0000000000000000 [ 152.675955][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.675966][T11559] R13: 00007fa500416038 R14: 00007fa500415fa0 R15: 00007ffdb04e8998 [ 152.675983][T11559] [ 154.056638][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 154.058664][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110