last executing test programs: 5.979151497s ago: executing program 0 (id=25): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) (async) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) (async) close(r3) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x5c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000330001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e3367"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x100000, 0x0, 0xffffffffffffffff}) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) (async) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) rmdir(&(0x7f0000000180)='./file0\x00') 5.976279509s ago: executing program 0 (id=33): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x80) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) r3 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0xad, 0x7, &(0x7f0000000100)={0x20, "5a2f97fb4ab5a48ddbc3a0c3240199ba25d7f6c6cd8f5bbf6e7428f342c14178fd"}}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0', 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xa000, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c03"]) 1.407365828s ago: executing program 3 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x94, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @tunnel={{0xb}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 1.403850806s ago: executing program 0 (id=35): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0x80) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) r3 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e890102030109021200010854400109"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0xad, 0x7, &(0x7f0000000100)={0x20, "5a2f97fb4ab5a48ddbc3a0c3240199ba25d7f6c6cd8f5bbf6e7428f342c14178fd"}}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0', 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xa000, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c03"]) 1.344396791s ago: executing program 3 (id=28): chdir(0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 1.33719481s ago: executing program 3 (id=30): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800006a6a475310003c00000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000002b80)={0x4, 0x5, 0xfffffffb, 0x754}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf256800000008000300", @ANYRES32=r4, @ANYBLOB="1c00c700080302070320"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="40042abd7000fbdbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)={0xa, 0x4e22, 0x8000, @loopback, 0xa}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000000080)="ac8e15453e9516a95f21441e32c61c476c2d96ac64a9ada3a8841f8c7b41187384659dc02d558724dc44c19752b52edb8d526b31d3b7dcff1c3afde76f6ee4e60d19814b1c152f3d6209080bfe3d1471cf433c3c50470306597c662e2c65ed8065eed381e1ef97fb4370860479d7a3b9121781731f4e215970650b004afb1c0299fdc7ff9ddbf97de5ea524b5bf39ec1300bdf76703c69464f64bb6db49a3d3104e8cc2d2d1a254b858b59f13bee2766559df5f251", 0xb5}, {&(0x7f0000000140)="e3167df28a708c1e5149d3ec95c8c47a4b16b7ea3d4e9d32fa64d191709f159f7e022bec6f3ee5", 0x27}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="9a752dd0357b22b7afbbb71e2f100038b933139925bfd3074d85f9d87f688512847553aff742f2756e9d6e0aa775e2c4d9bb923525e446b4c6e1c3b5e41d48d48801a86f", 0x44}, {&(0x7f0000002900)="0d084fa4ade9c977bd91f424060c19e75b5bc69a", 0x14}, {&(0x7f0000002940)="de5b4b022ef527b3ad3c59cb736ef0ac6db92ae4062236ad6c3c9c59dd359ccb4d175a", 0x23}], 0x6, &(0x7f0000002a00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xfffffffd}}], 0x18}, 0x4810) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r5, 0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, @hci={0x1f, 0xffffffffffffffff, 0x6}, @hci={0x1f, 0xffffffffffffffff, 0x2}, @can={0x1d, r7}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)='veth1_to_batadv\x00', 0x1ff, 0x4, 0x3}) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1}, 0x0) 1.2104998s ago: executing program 3 (id=32): setns(0xc9, 0x0) (async) r0 = io_uring_setup(0x65fa, &(0x7f00000002c0)={0x0, 0x5b5b, 0x8, 0x3, 0x191}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6100000000003aff0000000000000000000000000000000100000000000000000000000000000001"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.20964514s ago: executing program 3 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = fanotify_init(0x20, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffc65, 0x3, 0x1}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004810) r6 = dup(r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001940)={'ip6gre0\x00', &(0x7f00000018c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0xcf, 0x6, 0x9, @empty, @remote, 0x700, 0x7800, 0x638800, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001a00)={'syztnl2\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x0, 0x8, 0x29, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x20, 0x6, 0x5}}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x24, "c2512dd4617428d7307f6a5b1a57e92a77e40b22ee17aceb2b3cbf423626d624dd35dcf1"}, &(0x7f0000000280)=0x2c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r9, 0xffff, 0x861}, &(0x7f0000000380)=0x8) sendmsg$inet(r3, &(0x7f0000001b80)={&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000680)="42ca12db381a7251cfd85c1a7ee94ed55110e0c067f322247854402ee8cba9f0446b961afe3008c91a84085401f988bf85bb534e9eacdb7163395a7ab7c62c9e12d4aaf58e03a974d05cfc1bae69f1b03bed3ae1a92b803c93b5271c2a7f03752d724085d43f2a5dd900eb1ec4eb763b1b8861ce099a6309a7bea861186d916b1b7bf554612f73aa0ca109579433f611b77dde434624317cc4b363a5394d0c737665206faef1bb59f668314bdf696e44633fcc5c7abba1fb81400cf8ee1b35726a52f2e1f0ff380adb7a7bd9af8b465c3f6d028eb5ab0eb08f0208b7de224f3d53fde67cf82092bcf221f04962d7367b31e040a26da8428ef4871b04dad54014f4b70cc96b2552041e1ecb590c9e831b537647575b83cd5eb6c3f3b932c3907cb23e216342e7a7590cf83e3266a9cecf648a4280f3b648a75e2ed496cbf3e2b0f7d17a55319ce6eb5c8b195ac9f57c112a8cee8ae10941646d876619674e68e9175143851c7a8f69455207809f44dc474c0dc845671dd180c38148aa832cebd1bc1e18c846d323f115fdc027893e585bc17ac7ce71ed8b1c48bfda44ad293038649d4d3d70ba389323775e32f9ef7c36216e22293a48c25b5952c524d642ecece6f0130b99c74df9e01e83786f387f6369a09fe3e00b77663a1d23d6f1654f3485e74acfaff2cb33f28e42f51498f865df54abe59da38b7bc3d1c74144e67cb391b78b3b5cffbfcb85ecd624996e12e06ed9c0243586c0f9e31b06caacfab4ded322192be68eb68efa3559e436f8d32e5b3051d34d6009f7484d6932531855f6356a4bfca6e3b8bf78b8a2199d248d5dee5b071899f0e854d2df6b027e7c0abfdc3c6827a5535b113ccaa2e503b524b9faf711aa793f9f07be8680ef4b483421b3e327c7756fe7eb04ccd54aa30cec718c0f6db7752244862b707778edb5dd6a2f6b7055d21b615c7844db88ae9fda6b259f7ef669f0f6cb484a9389b2fd64a9a961f3f76964a69b5b4471890f4d7e077547be1da5fdd1f4b888809be501a39ade5ef5001354b683084474b80ae77706b2632a91f4e06e8fe755347b43200c6fcbffc45ad759fd81e4f51da7aab32bdff35d1406f7fefa400b91e5c53fcee07c3360bbb1236e909b735ef5b656f356f34cd6b0ced7f53e469103ec37068536262c42ac4af4e01dfc193996cc09899486d6750db8a4e872ad4793bc7deede388215fb25733decf407739d3977a002975e362494c3ab72b211d53084d4a89331d6f81b5b54922098abfffdb9e799191899abf6631b7dbe17461ad963a13e86bde34207649e545c0da11245ca416d69c707f71ef6525f147fcfe3de5e42d61689f1bd68249b71f85a3c1e4fca33cd8e44b1b771a65a143ae4691ca4eff5b6fb1e3b268d1005f0c8eee7f178b009da3e5c6515a52d66ee9e70fe43e28822e13a20dca3ffa09b4b2d73920746882d6abf562ddded29fea299b456d3a919f3e996a011d00768aece44f7db5e8e0a55febe314a1cd2449cbc9bd5cbb99734e61ca527dbdb97a65fc0a22830d4d3f900d0ffeb157bd7274aed7f5be0cee17adbb3863d253e62b16ab863b4f7991eb755eb00bea75cd51f5bf9fee5d7237a68e67155e06b804f507b526101ad462f14bacc7bc28d064aeea8b49b18e1f9692f0cffef104d04f6f20afe367d90febcf200c5cbe3ab3f4a1ffe8f3db0e0817d4748be7828a44460469ba5bb25bc9985c361f8fad083e8cf139dda100018c29e3f167b01aff794df391ccafc26e936f2ef9201a26cab4a93448527354f1a5769f19dbfb8a98cd185fbff824ffae9431f6a37c1bba5457b22f50a8c42f9bcdd9acf3a2acf69ff8ed0e492624835109b45332941689e15588e240eab9f38b064df2aef56a25910a811d357f0731fdd102d4f3ece93abda3e06289a402f311086084f3c21dc6eb6154032fea3eb003fd5eb88258fde6631835369a868b2a4bf897fe3f624cc7df207178643c98a9a58351930bed9c8492d41301e277090a792b033671a4002a2eecfb394e288d198311b903639969375e7c311af96f370e3c524ba39e1defe4df9a765bd5dea8344237ebbf5e84b56d65fc9d924f20d58ccfbec1e596cf529d1c89e4423a6bd73bb00167c85d930949b5aedf8fab6dae24241c399942d18be85afb2af3299e135d7616022ab5f0786c0a1abc7d75b13021fddc7a261414d4aad63ae9fbd6702e67e170ca8cd9cc86e812171352bf9cd47b252b48a3ae9255fa3c4a3689415d79a862a2914e8052eb3076eb6d678c1f6617263bf984f3179ee704fd9dfa173c7b3c238560e35bafc770a4ba43e3ed5985842d4e9efdf72bb2fef3638ec0137ec608e034e93d4e2b556169ac44cb343df9e5553f069ff4d6401a324c4e790deca99c17c65a934371a2c181ec6f7fd8161e4b26613956be9bfd3b9b449757b67faa7687de3dc1025e29da5a9cfc7c0b65bcf5a689de6a1673d2bc156ae1a5576530e05132b00d926e8b7b6d8128dedd841d654b56a468885c840e29f51e002f9ed587341fdb59a59f8fc6ac5f9d2adc1d6921658dfa76b69d7302b0401f2627d1639beb9638b035a3b1dcd9632c23c977703ff41b64bbe499e78661600aa51f6f6f430e945a31d3b8b910aee57e7eebc4b27b4de941ab2a7bdd73fd8f3b2d5fb11f04ab58229cf10ed1f34eb71cfe92db6c06f9fd3254860896577981c89d1a11ece68de191c1920da5a4548c55dfbacd72510f2e279832a840e66bfac98a4a3b6ff7b65803fa8cee110dbe22aec82d00efca94784b4e5551488e22d5ef8f5a16d622488529bbafbc725053d07b31de41a9e67f2fcc7d334f25f8fadc0550b8940f6278f81cea57a2f86580287cc42c507fba1b546921b19298aa5868ba76f76aad9087045a07f1e193e27a6b10077f66ad11d97fc3797795846f6122ab62f97441bb59413d58fb6c0ad8ff5de25e46fd6e334abd7bdf7f8830de66cda5668fa0a330415bd3c25efde39d3540efb612cd93835f382d9d136fa1140bd9d8a81d0f1228915013f79ba2e7d78eba0cb0de8fd30ce1257e46a1d5b9a82e38a2e36ec1334d87b47a1c111cf0a86e8ce48839ee8d1201d6853053e807e1ee8b15973d3465e503907ca7eb1de8c7d1d9525599a0528633afecf7121bd515fb4c1cb604a84d035ff56ba6fe2cc1ed4876c9dce8ef9af360d77310d762ab75c3d2908eb0a44a8a2b586d0a9888a08fa54f97399eb27964917f9811c097bd3aa1dea17ab0c5fc877075f7aca354541a96b7d8828d15a5d401b06b1893ff2d3f2711b2c67719dd34e00740c5d7916fdf0c5d9ea6c8b679e83537bb53dcde282033e0f339b387edbf65fabb0e3dfaf3ae5f9f9c72eaad05fe86e5b46c1ee30c0d9243411f44e844c7a33a91c33c93364d6398f4a4b5762077a69bc6ca950ea598279dd02482421bce9329e5b3ea63b2930b4a6c7c6adef13768ec706eb608a36208792203f799319ba66c1868f91cf8a6c76d0a015befafb3ce454ba713c891e6570cf6b206a8b4fdee564cee05e41f23cd183aaf9160bf36f08249e1bf84744b7f1103d3eec5c628d4f2a9052e8d06f00219a25b5c22f559b842e0afb2d97f1c8a6ec9e174feaa3fcc957a14ffd1957b5d4096ce8b9080810fcbc44cfdebd286f0764732a96337fe592b6c0ac5165f710f9253811811004c54bc747414fd9a5aab01ae573ad818f2e0522202f6c533b848b0a51f9a23420913cf1c6ca0c6a55c071a0693dd984d8cf2d0edb65db2c58668a25ab075e1fa2e4766b40958b10297600efbfe28f72189c8e3e4c2369fe7a4f619fc2721e075667c0ef9654c2b421950b0b0fc1d0e1f32933caedf5c99a5d8a2f82f34c18b2c80d3c3f92bc89a210480900517007e083103d23cd749fb90209053bdd531d9b5a6236cacfec3cf8c3d6c7ffb9970c4be36fb7aae6b0ea03ce2c863993dc27bd7d80f6a330cfd267ef57b17b0df8fb20808ea24eadbcd9ba140e5dcb45391c784ddefb99c8c30c4f790b76a06ab66c8a3d0866b62b279cfd92b0dba5320123456a8d5cc3c437d709c1353a0210425529b2ba4c1b71d0cb58d4f9a424b3d09b43caa727863f2aab40fd586fa2b65d586bac27f0b7bcfc104d14c03efac93b9836c4f4d5df981b57ae1ec981b78c1da5326ea35883c8baac8900ee50ea5c4b492ef66c18437c1905eb02b85e953afaf1fafdb61271d27603fc9a1b8fd239b9922fc96284798cdb26897382be407642d1652cfcb659735cf0ee784ad7544ca8d20f5beccdaacd1e5ff93c7ce707840175d9848c00910976276529787c8ec5678720c17237be95473a202356bfa6790d6f4077e3427c32c19e5dd366275290ccf2f75d64e35dc0e945f71f85dec8ebb0c46c563343c97a2705ff8c4a8f219980c260fa452d05d2236ee1b583c018e31e5e86d3bab7ed15ad084609e3d05fb7d272aac537e956179e68bd207ae5433c03ba3e4094fec9d63d4302f5d262db8b7065617ba8e335879bba39bd1c24b1245f6e171b56ab968be9804fbf18efbac80e2eaaf8b96ba0c418945234b109355e09ccd85dfc8e3973e96d41708dc3b08edc2f118b3aa8d93bdee059bd0bbbf810133e6bfff77060de67077eeffda86a48d562744aa267f7efff6c196479399737dc1beaacea2b1acd371cd9489d1baa7aa209cc41457c96e5cc2b49fa34838b5096497b49f43c24b35fe198ab53d8b3f392bf384db423d439bc63afa5dd6679c298ad76079a88b0d15fa3480124c1bb1c094b1fce8cfe12b6b61fc8d5534a49b9a6cca5cfb1f013b6bc273d0e3cbd54f40adcdb07c95ee7bce814f79ebb5ede57b2f3f23968859613f1597dcc7e462b7c597b081c3b2ec78de38cbd0e6c73cc92f7faa369e25f0e5c24994ce998c156b248a5d9a4781a6fcd62f24285f91afffc1d38e16444d5dc709070684bd9d5bd05f94d977f8482ce631f296a99e030790ee747db387cf164d54c2cf519fb058533a84a025fd4d7097b3615264871b53487ed08d017a22530b29c886d08b56496e2800a1156c42ea734d3231e91a73256a46b9c068253b64e0ce9c9c5648a07bd45e2c612ddce6ec9ffdae8541b6a934ff5c5f7eb34030e97312aaadcf97d32b32195a70963d54555ce3059dfc4e82c45bd92e3d0acce1e0889dd1b494151e210b140c68d17076f865bf0dd4b93cde23761644a54bf494691a95b45e85dc60defaa4aaa50571cc5468059e87802aa4632db41c5d23b5f04a8ee92e218079e8e0d4d5457f5e896e83132cb054ed0a9b1a47511ce79935c66301dd6a9fc255559d1d26fc8fd184e9bed7bd94d90e3311c12c1c0388d2c7e4e590ba7221f3dfcbcbbea7448c3831cb278ff8f85e9113eac2ae4a2c066590a6b62f3fb86d53e372b7d43b697008a8243e94846eebc1e12eac2a0af59670de5fda290a11594ac5458c132d47c28402b2df22ded4286d1208317d1834ec50a4e2e4c300758d852c3d4db245839428e9cfbfe969e440f553314698f3c8053f38fef138ceb09a27de092a6e8c65f2415286504d4b427167ec5dd32a6fabb1082542b23e53c89889e6c80d6c9209c9808e31e804d0c0aeac6c43fd08857c1b2ebdfcd96a623a1ea9dc465633c2760935f3972bb5f0e5bb76b51e747b319fa27a6d9aa9eee5909138b8dfea6af51edd542f144221832cd48b78433b184c56202659ee5aeded456190e295d986b3dc855c95a45db3c9764318bb1c94fb2e517b1a6e32b0f9c98dc6e82d2955f728a7c65de747a38c5e53e0bce5936", 0x1000}, {&(0x7f0000001680)="97fb445f5fb47ab9af3995f3d0f0bcee47d9ec90b361c1ba0baf74dcce66a87aafb5a5328f033e5ae25c82d7a5b7bf1b86ad99e157a983462ea14907f85cc82d2951e4b3ccad9a1e0b4dc5b9caf7ea994ed718223723e7af099b4aaf36371285cce278cb7672ed9d7a8ca1858323156c0d98def01e2bfecd90a4f2", 0x7b}, {&(0x7f0000001700)="9bc10cd19c177a4fabf8e90467f87761652f60248731349bc7ff0366d3c90a22f61ff70c627e41fc987b589c094d6298887aa7122e165f058fcba49de16dc45f0afaa5ac1e8982ed7e5d1b2b0fc573defc2e16b91f2be46507c74c58c4555b38d9301003b5cd03346e1fb06ccf1abe17a30ada00488f", 0x76}, {&(0x7f0000001780)="a2e7ac1733770a70400310c144a5970e6fe26361282a08976479af4ae04cda8dc74a936bb10691b1f47c73573aeabf08e4d949ab3097b8dbf13e33d258ab8f93c344f49a2f018a598081e0b804444aa5091c6dd874853b125f2db3d4289d15f488da2a5fb07c6aa643015cbc15c4c8c4fc43b6f0a271690b8eae0d0da6bda46030244bac249c54a7633218e70c3d4f3356a5e367c70de0cfd5039a6d971510eeef083f387c61069ee58354b37744c187d1a180466570f2e956440c34c88216b1bf91d662e7800892438a29675a3a44411854430962448e80a692ae", 0xdb}], 0x4, &(0x7f0000001a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @noop, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0xfc}]}, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x3f, 0x1, 0x1, [{@remote, 0x1}, {@rand_addr=0x64010101, 0xd5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @local}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x9}, @end, @lsrr={0x83, 0xb, 0xfa, [@loopback, @dev={0xac, 0x14, 0x14, 0x3a}]}, @cipso={0x86, 0xb, 0x3, [{0xeb6c8cab34e86b88, 0x5, 'L2['}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010100, @multicast1}}}], 0x138}, 0x24000815) fanotify_mark(r2, 0x201, 0x30, r6, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './trace\x00'}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r10, 0x40086806, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x1b) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.100184504s ago: executing program 3 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = open_tree(r1, &(0x7f0000000300)='mnt\x00', 0x8801) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) ioctl$I2C_PEC(r3, 0x708, 0x4) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x1, 0xf6, 0x7, &(0x7f0000000040)={0x19, "51748c5aa07be8803dcab87f591729bf017ef92ed18344d8d5c9b2b1d0fe4d04e2"}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) move_mount(r2, 0x0, r4, 0x0, 0x46) r5 = getpid() openat2(r1, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)={0x40, 0x0, 0x805d84dcbc2204fd}, 0x18) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000280)='mnt\x00', &(0x7f00000002c0)='logfs\x00', 0x104400, &(0x7f0000000340)='\x00') r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x8, 0x17, 0x1b, 0xfe, 0xb, 0x4, 0x1, 0xd, 0x4, [0x4000000c, 0x10083, 0x1000000, 0x2, 0x2eea0afb, 0xb, 0x4000004d, 0xb9ad]}}) r9 = syz_pidfd_open(r7, 0x0) setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f0000000200)=0x1, 0x4) setns(r9, 0x24020000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 950.227609ms ago: executing program 1 (id=41): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f00000000c0)=@routing={0x8, 0x0, 0x2, 0x9}, 0x8) keyctl$revoke(0x3, 0x0) sendmsg$inet6(r5, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0xfffffffb}, 0x1c, 0x0}, 0x3400c8d4) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x6f}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) 859.17767ms ago: executing program 2 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) fstat(r0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001800dd8d27bd7000fedbdf2502201000fd00fe020000000008000400", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 758.142469ms ago: executing program 2 (id=46): r0 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='vers\x00', &(0x7f0000000200)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='proto\x00', &(0x7f0000000280)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='10\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014"], 0x1f0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 757.371765ms ago: executing program 1 (id=47): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f00000002c0)={0x2, [0x0, 0x0]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x5, 0x9, 0x6a3f7d58, 0x9, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffffc5e8ae7a, 0xfffffbfffffffffc, 0x6, 0x5, 0xfffffffffffffffd, 0xfffffffffffffe], 0x0, 0x98340}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back', 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0xce16, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001940), 0x40281, 0x0) ioctl$FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f0000001980)) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x0, 0x1}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r7}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8b2b, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x200000000}}], 0x18}}], 0x1, 0x4044840) r10 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000080), 0x45d41, 0x0) writev(r10, &(0x7f0000001600)=[{&(0x7f0000000000)="6047a707cc8209cca6cf4ff5f9eb4fca6e64f2eb9b15aef7be9a8dadb06700"/42, 0x2a}, {&(0x7f0000000180)="4f985c0ab8caa43d59814f1a5fd4cc6038a284ad66d567cbc4ca293a45efe0d1d1da852e0b17c27f56504c305534ffc207485c716bd33a11e20e23e5dc1990f002d1053f4985891795e91d1385257f8b14a668d1ece24ed4a75bf9789ceaf0fbd2d316731b05b8b4d7db190d04548ab0c7f2b82e7875737b689c5537f58dcd30e82ea4c9a65158949417e2baaf38c643b481f3868049fec34884bd1108c154", 0xfffffe9c}, {&(0x7f0000001640)="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", 0xf37}], 0x3) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in=@local, 0x4e24, 0x7f, 0x4e23, 0x9, 0x2, 0x80, 0x0, 0x32}, {0xffffffff, 0x7, 0x5, 0x1, 0x5, 0x5, 0x9, 0x6}, {0x101, 0x4, 0x0, 0xfffffffffffffffc}, 0xc, 0x6e6bb0, 0x2, 0x0, 0x3, 0x3}, {{@in6=@remote, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x3501, 0x5, 0x2, 0x72, 0x10, 0x40, 0xfffffffe}}, 0xe8) 679.191231ms ago: executing program 2 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x801, 0x60000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x4}]}, 0x2c}}, 0x0) 540.39102ms ago: executing program 1 (id=49): socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x804, 0xfffffffe, 0x100000, 0x8, 0x1}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x20, 0x80, 0x2, 0x7, {{0x5, 0x4, 0x1, 0x32, 0x14, 0x64, 0x0, 0x7, 0x0, 0x0, @loopback, @private=0xa010101}}}}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4091) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r5 = gettid() process_vm_readv(r5, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) 477.487507ms ago: executing program 1 (id=50): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/34, 0x22}], 0x1, 0x4003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x808d4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 368.86728ms ago: executing program 2 (id=51): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee9500000000000000020000", 0x58}], 0x1) 368.671915ms ago: executing program 2 (id=52): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @cipso={0x86, 0x33, 0x3, [{0x7, 0x2}, {0x5, 0x12, "02a0d1f245d21435f19870ab2659b98d"}, {0x1, 0xa, "70501b0bd1a78a14"}, {0x2, 0xf, "a00358e7c1ec183ae8b98ac073"}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 310.268311ms ago: executing program 1 (id=53): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x8}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000006140)={@local, @multicast, @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x0, 0x966}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="87f78be9f46c", @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback}}}}, 0x0) 309.55495ms ago: executing program 2 (id=54): syz_usb_connect(0x0, 0x24, 0x0, 0x0) nanosleep(0x0, 0x0) (async) nanosleep(0x0, 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) write(r0, &(0x7f0000000600)='stm32g0-typec 0x3', 0x11) 309.315006ms ago: executing program 1 (id=55): syz_open_dev$dvb_frontend(0x0, 0x0, 0x400) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) read$FUSE(r0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x2, 0x4, 0x10, 0x80000000, @vifc_lcl_ifindex, @loopback}, 0x10) 89.70625ms ago: executing program 0 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010001f5ffffff0000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440c50a2971f4629b3573797a3000000000080003400000000134000000140a03000000000000e40000020000000900010073797a30000000000800034000000001090002"], 0x98}}, 0x0) 89.482788ms ago: executing program 0 (id=57): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 0s ago: executing program 0 (id=58): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) (fail_nth: 4) kernel console output (not intermixed with test programs): [ 38.018070][ T42] audit: type=1400 audit(1787303134.882:117): avc: denied { write } for pid=5630 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.408591][ T42] audit: type=1400 audit(1787303135.292:118): avc: denied { write } for pid=5637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.460125][ T42] audit: type=1400 audit(1787303135.342:119): avc: denied { write } for pid=5640 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.658846][ T42] audit: type=1400 audit(1787303135.542:120): avc: denied { write } for pid=5643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:15424' (ED25519) to the list of known hosts. [ 42.215039][ T5687] cgroup: Unknown subsys name 'net' [ 42.352551][ T5687] cgroup: Unknown subsys name 'cpuset' [ 42.358683][ T5687] cgroup: Unknown subsys name 'rlimit' [ 42.611115][ T5711] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.294469][ T5687] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.990397][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 46.990411][ T42] audit: type=1400 audit(1787303143.872:156): avc: denied { execmem } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.222371][ T42] audit: type=1400 audit(1787303144.102:157): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.230048][ T42] audit: type=1400 audit(1787303144.102:158): avc: denied { read write } for pid=5718 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.239703][ T42] audit: type=1400 audit(1787303144.102:159): avc: denied { open } for pid=5718 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.249080][ T42] audit: type=1400 audit(1787303144.112:160): avc: denied { ioctl } for pid=5718 comm="syz-executor" path="socket:[2819]" dev="sockfs" ino=2819 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.258262][ T5724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.261164][ T5724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.262479][ T5727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.265556][ T5724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.268590][ T5727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.272328][ T5724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.276182][ T5724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.276741][ T5733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.279630][ T5724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.281281][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.282159][ T5733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.282683][ T5733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.283026][ T5733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.283446][ T5724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.286308][ T5724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.291208][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.292442][ T42] audit: type=1400 audit(1787303144.172:161): avc: denied { read } for pid=5718 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.297292][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.299021][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.300393][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.301753][ T42] audit: type=1400 audit(1787303144.172:162): avc: denied { open } for pid=5726 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.301793][ T42] audit: type=1400 audit(1787303144.172:163): avc: denied { mounton } for pid=5726 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.304071][ T42] audit: type=1400 audit(1787303144.182:164): avc: denied { module_request } for pid=5726 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.307492][ T5733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.326253][ T42] audit: type=1400 audit(1787303144.202:165): avc: denied { sys_module } for pid=5718 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.887155][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.890043][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.892435][ T5718] bridge_slave_0: entered allmulticast mode [ 47.895188][ T5718] bridge_slave_0: entered promiscuous mode [ 47.935814][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.938940][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.941911][ T5718] bridge_slave_1: entered allmulticast mode [ 47.945554][ T5718] bridge_slave_1: entered promiscuous mode [ 48.015967][ T5718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.047446][ T5718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.076797][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.079223][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.081666][ T5726] bridge_slave_0: entered allmulticast mode [ 48.084332][ T5726] bridge_slave_0: entered promiscuous mode [ 48.099746][ T5720] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.101989][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.104817][ T5720] bridge_slave_0: entered allmulticast mode [ 48.107685][ T5720] bridge_slave_0: entered promiscuous mode [ 48.119107][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.122017][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.124387][ T5721] bridge_slave_0: entered allmulticast mode [ 48.127047][ T5721] bridge_slave_0: entered promiscuous mode [ 48.130342][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.132810][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.135086][ T5726] bridge_slave_1: entered allmulticast mode [ 48.137664][ T5726] bridge_slave_1: entered promiscuous mode [ 48.147557][ T5720] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.150350][ T5720] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.152672][ T5720] bridge_slave_1: entered allmulticast mode [ 48.155379][ T5720] bridge_slave_1: entered promiscuous mode [ 48.158613][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.161457][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.164382][ T5721] bridge_slave_1: entered allmulticast mode [ 48.168201][ T5721] bridge_slave_1: entered promiscuous mode [ 48.193586][ T5718] team0: Port device team_slave_0 added [ 48.204675][ T5718] team0: Port device team_slave_1 added [ 48.219367][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.223742][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.233521][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.238939][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.254509][ T5720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.263412][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.265839][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.273795][ T5718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.287594][ T5726] team0: Port device team_slave_0 added [ 48.290890][ T5720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.307282][ T5718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.309640][ T5718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.317636][ T5718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.323142][ T5726] team0: Port device team_slave_1 added [ 48.326660][ T5721] team0: Port device team_slave_0 added [ 48.352866][ T5721] team0: Port device team_slave_1 added [ 48.356290][ T5720] team0: Port device team_slave_0 added [ 48.360019][ T5720] team0: Port device team_slave_1 added [ 48.406924][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.410052][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.418148][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.422719][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.425061][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.433262][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.450384][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.453291][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.463996][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.469770][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.472417][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.481389][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.485392][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.487619][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.495790][ T5720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.523899][ T5718] hsr_slave_0: entered promiscuous mode [ 48.527269][ T5718] hsr_slave_1: entered promiscuous mode [ 48.531789][ T5720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.534042][ T5720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.543321][ T5720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.563117][ T5726] hsr_slave_0: entered promiscuous mode [ 48.565473][ T5726] hsr_slave_1: entered promiscuous mode [ 48.567796][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 48.569787][ T5726] Cannot create hsr debugfs directory [ 48.635633][ T5721] hsr_slave_0: entered promiscuous mode [ 48.638820][ T5721] hsr_slave_1: entered promiscuous mode [ 48.641809][ T5721] debugfs: 'hsr0' already exists in 'hsr' [ 48.644276][ T5721] Cannot create hsr debugfs directory [ 48.697752][ T5720] hsr_slave_0: entered promiscuous mode [ 48.700324][ T5720] hsr_slave_1: entered promiscuous mode [ 48.702633][ T5720] debugfs: 'hsr0' already exists in 'hsr' [ 48.704510][ T5720] Cannot create hsr debugfs directory [ 49.031316][ T5726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.042122][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.045276][ T5726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.055288][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.059233][ T5726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.064642][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.068301][ T5726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.075055][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.132598][ T5718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.139321][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.147589][ T5718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.152071][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.155039][ T5718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.159429][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.162193][ T5718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.166224][ T5718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.252048][ T5721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.257633][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.261305][ T5721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.266027][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.269681][ T5721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.273434][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.277192][ T5721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.281520][ T5721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.309934][ T5733] Bluetooth: hci0: command tx timeout [ 49.318032][ T5733] Bluetooth: hci3: command tx timeout [ 49.338885][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.359133][ T5720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.364528][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.372244][ T5720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.377681][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.384194][ T5720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.388031][ T5733] Bluetooth: hci2: command tx timeout [ 49.388410][ T5722] Bluetooth: hci1: command tx timeout [ 49.389539][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.391016][ T5720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.398812][ T5720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.418193][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.438176][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.440775][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.455636][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.457909][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.480475][ T5718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.511671][ T5718] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.531324][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.538179][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.541102][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.563469][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.566440][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.589415][ T5721] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.603379][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.605745][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.624911][ T5720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.635946][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.638909][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.667722][ T5720] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.693665][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.696750][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.717448][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.720542][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.890678][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.946522][ T5726] veth0_vlan: entered promiscuous mode [ 49.959472][ T5726] veth1_vlan: entered promiscuous mode [ 49.991416][ T5726] veth0_macvtap: entered promiscuous mode [ 49.999902][ T5726] veth1_macvtap: entered promiscuous mode [ 50.022035][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.031806][ T5718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.036044][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.046591][ T5720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.059827][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.142005][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.144931][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.147731][ T5720] veth0_vlan: entered promiscuous mode [ 50.160053][ T5721] veth0_vlan: entered promiscuous mode [ 50.162868][ T5718] veth0_vlan: entered promiscuous mode [ 50.184822][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.185363][ T5720] veth1_vlan: entered promiscuous mode [ 50.187705][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.201170][ T5718] veth1_vlan: entered promiscuous mode [ 50.206491][ T5721] veth1_vlan: entered promiscuous mode [ 50.219335][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.243065][ T5720] veth0_macvtap: entered promiscuous mode [ 50.246925][ T5721] veth0_macvtap: entered promiscuous mode [ 50.250011][ T5726] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.253901][ T5718] veth0_macvtap: entered promiscuous mode [ 50.258075][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.262417][ T5720] veth1_macvtap: entered promiscuous mode [ 50.266067][ T5721] veth1_macvtap: entered promiscuous mode [ 50.273661][ T5718] veth1_macvtap: entered promiscuous mode [ 50.288231][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.297064][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.308981][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.312847][ T5720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.330074][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.345304][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.358246][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.379155][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.383138][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.428730][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.431806][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.441371][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.444909][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.469025][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.473310][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.479345][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.491001][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.493558][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.549730][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.590153][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.595780][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.620058][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.624130][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.649912][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.656114][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.669981][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 50.678287][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.684095][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.690358][ T5888] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.778305][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.818045][ T5902] loop6: detected capacity change from 0 to 2640 [ 50.824784][ T5728] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.828862][ T5728] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.832334][ T5728] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.835014][ T5728] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.837578][ T5728] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.909764][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12'. [ 51.014676][ T5916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.017379][ T5916] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 51.039165][ T5916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 51.041993][ T5916] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 51.114826][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 51.149480][ T5927] jffs2: notice: (5927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 51.163547][ T5927] overlay: ./file0 is not a directory [ 51.227081][ T5927] event trace: Could not enable event p [ 51.300398][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 51.409817][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.494456][ T5733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.499454][ T5733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.503032][ T5733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.507650][ T5733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.512410][ T5733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.519940][ T5722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.522574][ T5722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.525089][ T5722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.528784][ T5722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.531559][ T5722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.904238][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.907028][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.909914][ T5951] bridge_slave_0: entered allmulticast mode [ 51.912893][ T5951] bridge_slave_0: entered promiscuous mode [ 51.916521][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.920555][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.923216][ T5951] bridge_slave_1: entered allmulticast mode [ 51.926532][ T5951] bridge_slave_1: entered promiscuous mode [ 51.948070][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.953386][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.971126][ T5951] team0: Port device team_slave_0 added [ 51.974534][ T5951] team0: Port device team_slave_1 added [ 51.997583][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.000963][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.010123][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.015025][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.017287][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.026491][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.044760][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.054990][ T5733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.059196][ T5733] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.061919][ T5733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.065151][ T5733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.067901][ T5733] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.072048][ T5951] hsr_slave_0: entered promiscuous mode [ 52.074412][ T5951] hsr_slave_1: entered promiscuous mode [ 52.076463][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 52.078586][ T5951] Cannot create hsr debugfs directory [ 52.172654][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 52.172667][ T42] audit: type=1400 audit(1787303149.052:262): avc: denied { create } for pid=5978 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.184186][ T42] audit: type=1400 audit(1787303149.052:263): avc: denied { write } for pid=5978 comm="syz.0.22" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.209917][ T42] audit: type=1400 audit(1787303149.092:264): avc: denied { create } for pid=5978 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.211106][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.216643][ T42] audit: type=1400 audit(1787303149.092:265): avc: denied { ioctl } for pid=5978 comm="syz.0.22" path="socket:[8791]" dev="sockfs" ino=8791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.230741][ T42] audit: type=1400 audit(1787303149.092:266): avc: denied { connect } for pid=5978 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.237728][ T42] audit: type=1400 audit(1787303149.092:267): avc: denied { write } for pid=5978 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.273599][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.331615][ T5992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.333266][ T42] audit: type=1400 audit(1787303149.212:268): avc: denied { read write } for pid=5989 comm="syz.0.24" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 52.344181][ T42] audit: type=1400 audit(1787303149.212:269): avc: denied { open } for pid=5989 comm="syz.0.24" path="/12/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 52.352711][ T5990] warning: `syz.0.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 52.354162][ T42] audit: type=1400 audit(1787303149.222:270): avc: denied { write } for pid=5989 comm="syz.0.24" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 52.365646][ T42] audit: type=1400 audit(1787303149.222:271): avc: denied { open } for pid=5989 comm="syz.0.24" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 52.503721][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.506690][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.508462][ T6002] process 'syz.0.25' launched './file0' with NULL argv: empty string added [ 52.510052][ T5970] bridge_slave_0: entered allmulticast mode [ 52.516243][ T5970] bridge_slave_0: entered promiscuous mode [ 52.522566][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.525621][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.529118][ T5970] bridge_slave_1: entered allmulticast mode [ 52.532473][ T5970] bridge_slave_1: entered promiscuous mode [ 52.562636][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.569585][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.594263][ T5970] team0: Port device team_slave_0 added [ 52.597525][ T5970] team0: Port device team_slave_1 added [ 52.610731][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.612762][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.620966][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.626234][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.629698][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.639060][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.660318][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.692952][ T5970] hsr_slave_0: entered promiscuous mode [ 52.695694][ T5970] hsr_slave_1: entered promiscuous mode [ 52.698331][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 52.700379][ T5970] Cannot create hsr debugfs directory [ 52.808867][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.899794][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.978074][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 52.983867][ T5875] usb 5-1: unable to get BOS descriptor or descriptor too short [ 52.987067][ T5875] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 52.997635][ T5875] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 53.003062][ T5875] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 53.015569][ T5875] usb 5-1: string descriptor 0 read error: -22 [ 53.018397][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.044808][ T13] bridge_slave_1: left allmulticast mode [ 53.047473][ T13] bridge_slave_1: left promiscuous mode [ 53.051730][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.061071][ T13] bridge_slave_0: left allmulticast mode [ 53.063496][ T13] bridge_slave_0: left promiscuous mode [ 53.065875][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.161658][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.166612][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.170657][ T13] bond0 (unregistering): Released all slaves [ 53.281520][ T6007] program syz.0.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.338453][ T5434] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.354559][ T56] usb 5-1: USB disconnect, device number 2 [ 53.551934][ T5733] Bluetooth: hci0: command tx timeout [ 53.573847][ T13] hsr_slave_0: left promiscuous mode [ 53.577422][ T13] hsr_slave_1: left promiscuous mode [ 53.581693][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.584747][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.589466][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.592460][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.606501][ T13] veth1_macvtap: left promiscuous mode [ 53.609396][ T13] veth0_macvtap: left promiscuous mode [ 53.611812][ T13] veth1_vlan: left promiscuous mode [ 53.614106][ T13] veth0_vlan: left promiscuous mode [ 53.777231][ T13] team0 (unregistering): Port device team_slave_1 removed [ 53.795726][ T13] team0 (unregistering): Port device team_slave_0 removed [ 53.911349][ T5970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.052098][ T5970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.112484][ T5733] Bluetooth: hci1: command tx timeout [ 54.168854][ T5970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.288237][ T5970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.479798][ T5970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.485164][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.487907][ T5970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.494274][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.497076][ T5970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.501110][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.514869][ T5970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.523053][ T5970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.529021][ T13] bridge_slave_1: left allmulticast mode [ 54.531425][ T13] bridge_slave_1: left promiscuous mode [ 54.534040][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.540746][ T13] bridge_slave_0: left allmulticast mode [ 54.542842][ T13] bridge_slave_0: left promiscuous mode [ 54.544852][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.622806][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.627071][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.630940][ T13] bond0 (unregistering): Released all slaves [ 54.679840][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.692796][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.698509][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.705137][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.708733][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.713838][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.719031][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.724857][ T5951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.803062][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.825080][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.830627][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.837602][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.840774][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.848345][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.850659][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.856218][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.872534][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.875282][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.886963][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.889322][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.913642][ T13] hsr_slave_0: left promiscuous mode [ 54.915823][ T13] hsr_slave_1: left promiscuous mode [ 54.919303][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.922175][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.925023][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.927507][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.934668][ T13] veth1_macvtap: left promiscuous mode [ 54.936516][ T13] veth0_macvtap: left promiscuous mode [ 54.940298][ T13] veth1_vlan: left promiscuous mode [ 54.942214][ T13] veth0_vlan: left promiscuous mode [ 55.068799][ T13] team0 (unregistering): Port device team_slave_1 removed [ 55.076938][ T13] team0 (unregistering): Port device team_slave_0 removed [ 55.393353][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.427331][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.438755][ T5970] veth0_vlan: entered promiscuous mode [ 55.452451][ T5970] veth1_vlan: entered promiscuous mode [ 55.476189][ T5951] veth0_vlan: entered promiscuous mode [ 55.487116][ T5970] veth0_macvtap: entered promiscuous mode [ 55.492086][ T5951] veth1_vlan: entered promiscuous mode [ 55.495859][ T5970] veth1_macvtap: entered promiscuous mode [ 55.510313][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.520939][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.538185][ T5951] veth0_macvtap: entered promiscuous mode [ 55.553958][ T5951] veth1_macvtap: entered promiscuous mode [ 55.577184][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.597556][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.603191][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.605624][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.626043][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.630845][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.638341][ T5733] Bluetooth: hci0: command tx timeout [ 55.640277][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.665372][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.669676][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.692036][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.694617][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.738143][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.742195][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.767977][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.771008][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.774275][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.777805][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.781509][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.987982][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.097958][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.138035][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 56.142008][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 56.144535][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 56.150907][ T10] usb 7-1: string descriptor 0 read error: -22 [ 56.152901][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.163279][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 56.166127][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 56.169835][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 56.175271][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 56.179076][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 56.181577][ T10] usb 7-1: media controller created [ 56.183392][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.185197][ T10] dw2102: i2c transfer failed. [ 56.186732][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.188090][ T5733] Bluetooth: hci1: command tx timeout [ 56.190194][ T10] dw2102: i2c transfer failed. [ 56.193665][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.195437][ T10] dw2102: i2c transfer failed. [ 56.196937][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.198804][ T10] dw2102: i2c transfer failed. [ 56.200314][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.202792][ T10] dw2102: i2c transfer failed. [ 56.204228][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.205908][ T10] dw2102: i2c transfer failed. [ 56.207382][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 56.215969][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.229628][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 56.234399][ T10] dw2102: command 0x0e transfer failed. [ 56.242175][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 56.246763][ T10] dw2102: command 0x0e transfer failed. [ 56.249093][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 56.253555][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 56.256684][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 56.264916][ T9] usb 6-1: string descriptor 0 read error: -22 [ 56.267416][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.278279][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 56.281311][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 56.283708][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 56.289992][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 56.294623][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 56.297233][ T9] usb 6-1: media controller created [ 56.299015][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 56.300852][ T9] dw2102: i2c transfer failed. [ 56.302386][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 56.304204][ T9] dw2102: i2c transfer failed. [ 56.305717][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 56.307525][ T9] dw2102: i2c transfer failed. [ 56.309159][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 56.310972][ T9] dw2102: i2c transfer failed. [ 56.312471][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 56.314258][ T9] dw2102: i2c transfer failed. [ 56.315711][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 56.317490][ T9] dw2102: i2c transfer failed. [ 56.319074][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 56.325909][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.338893][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 56.340782][ T9] dw2102: command 0x0e transfer failed. [ 56.342507][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 56.344285][ T9] dw2102: command 0x0e transfer failed. [ 56.558757][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 56.560618][ T10] dw2102: command 0x0e transfer failed. [ 56.562286][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 56.564069][ T10] dw2102: command 0x0e transfer failed. [ 56.565759][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 56.567063][ T6071] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.567950][ T10] dw2102: command 0x51 transfer failed. [ 56.569989][ T6064] dvb-usb: bulk message failed: -22 (31/0) [ 56.576654][ T6064] dw2102: i2c transfer failed. [ 56.581625][ T6066] dvb-usb: bulk message failed: -22 (38/0) [ 56.583575][ T6066] dw2102: i2c transfer failed. [ 56.585720][ T6066] i2c i2c-2: Invalid block size returned: 34 [ 56.588802][ T10] DVB: Unable to find symbol ds3000_attach() [ 56.590717][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 56.638214][ T10] rc_core: IR keymap rc-su3000 not found [ 56.640469][ T10] Registered IR keymap rc-empty [ 56.647233][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 56.651972][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 56.656277][ T9] dw2102: command 0x0e transfer failed. [ 56.659364][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input5 [ 56.662685][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 56.664506][ T9] dw2102: command 0x0e transfer failed. [ 56.667415][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 56.670074][ T9] dw2102: command 0x51 transfer failed. [ 56.674638][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 56.677628][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 56.679939][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 56.692409][ T9] DVB: Unable to find symbol ds3000_attach() [ 56.694484][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 56.738096][ T9] rc_core: IR keymap rc-su3000 not found [ 56.741191][ T9] Registered IR keymap rc-empty [ 56.745671][ T9] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc1 [ 56.751620][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc1/input6 [ 56.759946][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 56.762354][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 56.764273][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 56.768629][ T9] usb 6-1: USB disconnect, device number 2 [ 56.809647][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 56.829547][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 56.832272][ T10] dw2102: i2c transfer failed. [ 56.988092][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 56.991207][ T9] dw2102: i2c transfer failed. [ 57.119051][ T9] usb 7-1: USB disconnect, device number 2 [ 57.164540][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 57.234245][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'. [ 57.240488][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 57.240500][ T42] audit: type=1400 audit(1787303154.122:296): avc: denied { getopt } for pid=6089 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.251185][ T6086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.253234][ T42] audit: type=1400 audit(1787303154.132:297): avc: denied { bind } for pid=6089 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.253253][ T6090] Bluetooth: MGMT ver 1.23 [ 57.260209][ T6086] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 57.264729][ T42] audit: type=1400 audit(1787303154.132:298): avc: denied { write } for pid=6089 comm="syz.1.31" path="socket:[12421]" dev="sockfs" ino=12421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.274793][ T42] audit: type=1400 audit(1787303154.152:299): avc: denied { allowed } for pid=6092 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.281514][ T42] audit: type=1400 audit(1787303154.162:300): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 57.289747][ T6086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.292229][ T6086] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 57.330208][ T6097] netlink: 144 bytes leftover after parsing attributes in process `syz.3.36'. [ 57.332979][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 57.337779][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36'. [ 57.379490][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.386709][ T42] audit: type=1400 audit(1787303154.262:301): avc: denied { name_bind 0x1000000 } for pid=6096 comm="syz.3.36" path="socket:[11256]" dev="sockfs" ino=11256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 57.394363][ T42] audit: type=1400 audit(1787303154.262:302): avc: denied { read } for pid=6096 comm="syz.3.36" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.401149][ T42] audit: type=1400 audit(1787303154.262:303): avc: denied { open } for pid=6096 comm="syz.3.36" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.408746][ T42] audit: type=1400 audit(1787303154.272:304): avc: denied { ioctl } for pid=6096 comm="syz.3.36" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.473300][ T6109] netlink: 144 bytes leftover after parsing attributes in process `syz.2.39'. [ 57.476838][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'. [ 57.484531][ T6109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 57.538732][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 57.542567][ T56] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.545375][ T56] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 57.550214][ T56] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 57.554591][ T42] audit: type=1400 audit(1787303154.432:305): avc: denied { read append } for pid=6114 comm="syz.1.41" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 57.557221][ T56] usb 5-1: string descriptor 0 read error: -22 [ 57.564302][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.634339][ T6115] bond1: option downdelay: invalid value (18446744073709551615) [ 57.637425][ T6115] bond1: option downdelay: allowed values 0 - 2147483647 [ 57.645074][ T6115] bond1 (unregistering): Released all slaves [ 57.674154][ T6124] bridge0: port 3(vlan2) entered blocking state [ 57.676967][ T6124] bridge0: port 3(vlan2) entered disabled state [ 57.680171][ T6124] vlan2: entered allmulticast mode [ 57.681832][ T6124] geneve0: entered allmulticast mode [ 57.684353][ T6124] vlan2: entered promiscuous mode [ 57.685880][ T6124] geneve0: entered promiscuous mode [ 57.687938][ T5875] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.689284][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'. [ 57.691992][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 57.693159][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.41'. [ 57.739564][ T6126] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 57.796501][ T6081] program syz.0.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.849068][ T5875] usb 8-1: Using ep0 maxpacket: 32 [ 57.853341][ T5875] usb 8-1: unable to get BOS descriptor or descriptor too short [ 57.856463][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.859512][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.860433][ T5875] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 57.865504][ T6134] usb 5-1: USB disconnect, device number 3 [ 57.872682][ T5875] usb 8-1: string descriptor 0 read error: -22 [ 57.875001][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.881245][ T5875] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 57.884343][ T5875] dw2102: su3000_power_ctrl: 1, initialized 0 [ 57.886455][ T5875] dvb-usb: bulk message failed: -22 (2/0) [ 57.895080][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 57.900814][ T5875] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 57.904974][ T5875] usb 8-1: media controller created [ 57.906687][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 57.908724][ T5875] dw2102: i2c transfer failed. [ 57.912979][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 57.914812][ T5875] dw2102: i2c transfer failed. [ 57.917228][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 57.920538][ T5875] dw2102: i2c transfer failed. [ 57.922084][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 57.924828][ T5875] dw2102: i2c transfer failed. [ 57.926416][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 57.928768][ T5875] dw2102: i2c transfer failed. [ 57.930608][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 57.932799][ T5875] dw2102: i2c transfer failed. [ 57.934692][ T5875] dvb-usb: MAC address: 02:02:02:02:02:02 [ 57.940182][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.943743][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 57.950748][ T6132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.956830][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 57.958918][ T5875] dw2102: command 0x0e transfer failed. [ 57.960649][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 57.962478][ T5875] dw2102: command 0x0e transfer failed. [ 58.098050][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.101704][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.105187][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.108731][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.224684][ T6156] bond1: Removing last ns target with arp_interval on [ 58.235139][ T6157] bond2: Removing last ns target with arp_interval on [ 58.243779][ T6156] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: -95 [ 58.246428][ T6156] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 58.250776][ T6156] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 58.268092][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 58.269834][ T5875] dw2102: command 0x0e transfer failed. [ 58.271593][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 58.273426][ T5875] dw2102: command 0x0e transfer failed. [ 58.275350][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 58.277120][ T5875] dw2102: command 0x51 transfer failed. [ 58.279120][ T6104] dvb-usb: bulk message failed: -22 (31/0) [ 58.282213][ T6104] dw2102: i2c transfer failed. [ 58.301070][ T5875] DVB: Unable to find symbol ds3000_attach() [ 58.303709][ T5875] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 58.348211][ T5875] rc_core: IR keymap rc-su3000 not found [ 58.354126][ T5875] Registered IR keymap rc-empty [ 58.358600][ T5875] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 58.363350][ T5875] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input7 [ 58.368061][ T5875] dvb-usb: schedule remote query interval to 150 msecs. [ 58.370778][ T5875] dw2102: su3000_power_ctrl: 0, initialized 1 [ 58.372688][ T5875] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 58.452489][ T6167] No source specified [ 58.468652][ T6137] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 58.494238][ T6169] FAULT_INJECTION: forcing a failure. [ 58.494238][ T6169] name failslab, interval 1, probability 0, space 0, times 1 [ 58.499391][ T6169] CPU: 3 UID: 0 PID: 6169 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 58.499408][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.499421][ T6169] Call Trace: [ 58.499432][ T6169] [ 58.499437][ T6169] dump_stack_lvl+0x100/0x190 [ 58.499483][ T6169] should_fail_ex.cold+0x5/0xa [ 58.499505][ T6169] should_failslab+0xc2/0x120 [ 58.499529][ T6169] __kmalloc_noprof+0xfc/0x820 [ 58.499546][ T6169] ? tracepoint_add_func+0x3a8/0x1150 [ 58.499572][ T6169] ? __pfx_probe_sched_switch+0x10/0x10 [ 58.499583][ T6169] tracepoint_add_func+0x3a8/0x1150 [ 58.499600][ T6169] ? __pfx_probe_sched_switch+0x10/0x10 [ 58.499610][ T6169] ? __pfx___mutex_lock+0x10/0x10 [ 58.499631][ T6169] ? __pfx_probe_sched_switch+0x10/0x10 [ 58.499641][ T6169] tracepoint_probe_register+0xc4/0x110 [ 58.499659][ T6169] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 58.499676][ T6169] ? __pfx_probe_sched_switch+0x10/0x10 [ 58.499688][ T6169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 58.499703][ T6169] tracing_start_sched_switch+0x109/0x170 [ 58.499720][ T6169] __ftrace_event_enable_disable+0x557/0x6f0 [ 58.499741][ T6169] event_enable_write+0x262/0x340 [ 58.499758][ T6169] ? __pfx_event_enable_write+0x10/0x10 [ 58.499780][ T6169] vfs_write+0x2aa/0x1050 [ 58.499796][ T6169] ? __pfx_event_enable_write+0x10/0x10 [ 58.499815][ T6169] ? __pfx_vfs_write+0x10/0x10 [ 58.499827][ T6169] ? find_held_lock+0x2b/0x80 [ 58.499841][ T6169] ? __fget_files+0x215/0x3d0 [ 58.499860][ T6169] ? __fget_files+0x21f/0x3d0 [ 58.499880][ T6169] ksys_write+0x12a/0x250 [ 58.499893][ T6169] ? __pfx_ksys_write+0x10/0x10 [ 58.499911][ T6169] do_syscall_64+0x123/0x790 [ 58.499925][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.499936][ T6169] RIP: 0033:0x7fb96879e0d9 [ 58.499947][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.499957][ T6169] RSP: 002b:00007fb9669f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.499968][ T6169] RAX: ffffffffffffffda RBX: 00007fb968a25fa0 RCX: 00007fb96879e0d9 [ 58.499975][ T6169] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 58.499981][ T6169] RBP: 00007fb9669f6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.499987][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.499993][ T6169] R13: 00007fb968a26038 R14: 00007fb968a25fa0 R15: 00007ffc817bc1c8 [ 58.500007][ T6169] [ 58.500012][ T6169] sched trace: Couldn't activate tracepoint probe to kernel_sched_switch [ 58.537957][ T5875] dvb-usb: bulk message failed: -22 (1/0) [ 58.589124][ T5875] dw2102: i2c transfer failed. [ 58.632140][ T6137] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 58.636757][ T6137] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.640528][ T6137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.643953][ T6137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 58.649068][ T6137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.649740][ T6169] ------------[ cut here ]------------ [ 58.651542][ T6137] usb 6-1: Product: syz [ 58.651553][ T6137] usb 6-1: Manufacturer: syz [ 58.651560][ T6137] usb 6-1: SerialNumber: syz [ 58.652986][ T6137] usb 6-1: config 0 descriptor?? [ 58.653350][ T6169] IS_ERR(old) [ 58.655356][ T6160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.656188][ T6169] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#3: syz.0.58/6169 [ 58.666285][ T6169] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 58.667973][ T6169] CPU: 3 UID: 0 PID: 6169 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 58.671022][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.674262][ T6169] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 58.675464][ T29] usb 8-1: USB disconnect, device number 2 [ 58.676292][ T6169] Code: 09 e8 3d 20 fe ff 48 8d 73 f0 48 c7 c2 c0 d0 0c 82 48 c7 c7 80 98 e7 8e e8 e6 8d e1 ff eb ba bb fe ff ff ff e8 1a 20 fe ff 90 <0f> 0b 90 eb ac e8 0f 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 58.684508][ T6169] RSP: 0018:ffffc900033a7bb0 EFLAGS: 00010293 [ 58.687225][ T6169] RAX: 0000000000000000 RBX: 00000000fffffffe RCX: 0000000000000000 [ 58.690563][ T6169] RDX: ffff88802f0ccb00 RSI: ffffffff820ce1b6 RDI: ffff88802f0ccb00 [ 58.693588][ T6169] RBP: 00000000fffffffb R08: 0000000000000005 R09: 0000000000000000 [ 58.696159][ T6169] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82133f00 [ 58.698714][ T6169] R13: 0000000000000000 R14: 0000000000010000 R15: ffff8880384d2458 [ 58.701221][ T6169] FS: 00007fb9669f66c0(0000) GS:ffff8880d5ea2000(0000) knlGS:0000000000000000 [ 58.704103][ T6169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.706207][ T6169] CR2: 0000559419b3b168 CR3: 0000000059eba000 CR4: 0000000000352ef0 [ 58.708814][ T6169] Call Trace: [ 58.709903][ T6169] [ 58.710882][ T6169] tracing_stop_cmdline_record+0x66/0xa0 [ 58.712677][ T6169] __ftrace_event_enable_disable+0x6df/0x6f0 [ 58.714904][ T6169] event_enable_write+0x262/0x340 [ 58.716997][ T6169] ? __pfx_event_enable_write+0x10/0x10 [ 58.719582][ T6169] vfs_write+0x2aa/0x1050 [ 58.721056][ T6169] ? __pfx_event_enable_write+0x10/0x10 [ 58.722869][ T6169] ? __pfx_vfs_write+0x10/0x10 [ 58.724629][ T6169] ? find_held_lock+0x2b/0x80 [ 58.726100][ T6169] ? __fget_files+0x215/0x3d0 [ 58.727575][ T6169] ? __fget_files+0x21f/0x3d0 [ 58.727918][ T6137] rc_core: IR keymap rc-streamzap not found [ 58.729165][ T6169] ksys_write+0x12a/0x250 [ 58.731034][ T6137] Registered IR keymap rc-empty [ 58.732292][ T6169] ? __pfx_ksys_write+0x10/0x10 [ 58.735454][ T6169] do_syscall_64+0x123/0x790 [ 58.736906][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.738887][ T6169] RIP: 0033:0x7fb96879e0d9 [ 58.740284][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.742345][ T6137] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1 [ 58.746856][ T6169] RSP: 002b:00007fb9669f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.746885][ T6169] RAX: ffffffffffffffda RBX: 00007fb968a25fa0 RCX: 00007fb96879e0d9 [ 58.756633][ T6169] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 58.759857][ T6169] RBP: 00007fb9669f6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.761604][ T6137] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc1/input8 [ 58.762878][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.762894][ T6169] R13: 00007fb968a26038 R14: 00007fb968a25fa0 R15: 00007ffc817bc1c8 [ 58.762922][ T6169] [ 58.773781][ T6169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.776565][ T6169] CPU: 3 UID: 0 PID: 6169 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 58.779978][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.783744][ T6169] Call Trace: [ 58.785065][ T6169] [ 58.786219][ T6169] dump_stack_lvl+0x100/0x190 [ 58.788115][ T6169] vpanic+0x553/0x970 [ 58.789680][ T6169] ? __pfx_vpanic+0x10/0x10 [ 58.791484][ T6169] panic+0xd1/0xe0 [ 58.792943][ T6169] ? __pfx_panic+0x10/0x10 [ 58.794731][ T6169] check_panic_on_warn.cold+0x19/0x34 [ 58.796778][ T6169] ? tracepoint_probe_unregister+0x837/0xd10 [ 58.799107][ T6169] __warn.cold+0x191/0x318 [ 58.800841][ T6169] __report_bug+0x30f/0x440 [ 58.802627][ T6169] ? tracepoint_probe_unregister+0x837/0xd10 [ 58.804992][ T6169] ? __pfx___report_bug+0x10/0x10 [ 58.806940][ T6169] ? rcu_is_watching+0x13/0xc0 [ 58.808797][ T6169] ? trace_contention_end+0x126/0x160 [ 58.810968][ T6169] ? __mutex_lock+0x26c/0x1bc0 [ 58.812799][ T6169] ? tracepoint_probe_unregister+0x31/0xd10 [ 58.815135][ T6169] ? rcu_is_watching+0x13/0xc0 [ 58.817019][ T6169] ? tracepoint_probe_unregister+0x837/0xd10 [ 58.819378][ T6169] report_bug+0xb3/0x220 [ 58.821062][ T6169] ? tracepoint_probe_unregister+0x837/0xd10 [ 58.823440][ T6169] handle_bug+0x16a/0x2a0 [ 58.825224][ T6169] exc_invalid_op+0x17/0x50 [ 58.827055][ T6169] asm_exc_invalid_op+0x1a/0x20 [ 58.828959][ T6169] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 58.831539][ T6169] Code: 09 e8 3d 20 fe ff 48 8d 73 f0 48 c7 c2 c0 d0 0c 82 48 c7 c7 80 98 e7 8e e8 e6 8d e1 ff eb ba bb fe ff ff ff e8 1a 20 fe ff 90 <0f> 0b 90 eb ac e8 0f 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 58.838878][ T6169] RSP: 0018:ffffc900033a7bb0 EFLAGS: 00010293 [ 58.841243][ T6169] RAX: 0000000000000000 RBX: 00000000fffffffe RCX: 0000000000000000 [ 58.844310][ T6169] RDX: ffff88802f0ccb00 RSI: ffffffff820ce1b6 RDI: ffff88802f0ccb00 [ 58.847341][ T6169] RBP: 00000000fffffffb R08: 0000000000000005 R09: 0000000000000000 [ 58.850403][ T6169] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82133f00 [ 58.853456][ T6169] R13: 0000000000000000 R14: 0000000000010000 R15: ffff8880384d2458 [ 58.856507][ T6169] ? __pfx_probe_sched_switch+0x10/0x10 [ 58.858653][ T6169] ? tracepoint_probe_unregister+0x836/0xd10 [ 58.861024][ T6169] tracing_stop_cmdline_record+0x66/0xa0 [ 58.863269][ T6169] __ftrace_event_enable_disable+0x6df/0x6f0 [ 58.865664][ T6169] event_enable_write+0x262/0x340 [ 58.867681][ T6169] ? __pfx_event_enable_write+0x10/0x10 [ 58.869865][ T6169] vfs_write+0x2aa/0x1050 [ 58.871599][ T6169] ? __pfx_event_enable_write+0x10/0x10 [ 58.873809][ T6169] ? __pfx_vfs_write+0x10/0x10 [ 58.875709][ T6169] ? find_held_lock+0x2b/0x80 [ 58.877571][ T6169] ? __fget_files+0x215/0x3d0 [ 58.879415][ T6169] ? __fget_files+0x21f/0x3d0 [ 58.881289][ T6169] ksys_write+0x12a/0x250 [ 58.882786][ T6169] ? __pfx_ksys_write+0x10/0x10 [ 58.884274][ T6169] do_syscall_64+0x123/0x790 [ 58.885646][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.887412][ T6169] RIP: 0033:0x7fb96879e0d9 [ 58.888745][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.894284][ T6169] RSP: 002b:00007fb9669f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.896715][ T6169] RAX: ffffffffffffffda RBX: 00007fb968a25fa0 RCX: 00007fb96879e0d9 [ 58.899051][ T6169] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 58.901364][ T6169] RBP: 00007fb9669f6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.903779][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.906132][ T6169] R13: 00007fb968a26038 R14: 00007fb968a25fa0 R15: 00007ffc817bc1c8 [ 58.908400][ T6169] [ 58.909961][ T6169] Kernel Offset: disabled [ 58.911254][ T6169] Rebooting in 86400 seconds..