last executing test programs: 5.42907791s ago: executing program 3 (id=298): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40014) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 3.329794377s ago: executing program 3 (id=325): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={0x0}, 0x1, 0x0, 0x0, 0xa880}, 0x4040010) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x2d, 0xfffc) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000300)="140b8cb647", 0x5}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) 3.287900735s ago: executing program 3 (id=329): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,', 0x39) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) 2.389217117s ago: executing program 3 (id=338): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r4], 0x44}}, 0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x40, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) syz_ublk_setup_io_uring(0x60bf, &(0x7f0000000180)={0x0, 0xa012, 0x40, 0x1, 0x2f}, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r6 = mmap$IORING_OFF_SQES(0x0, 0x2, 0x2000004, 0x1010, 0xffffffffffffffff, 0x10000000) socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x0, {0x0, r11}}) syz_io_uring_submit(r0, r5, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x118) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) ftruncate(r12, 0xb) fallocate(r12, 0x0, 0x9, 0x10001) 2.287487512s ago: executing program 3 (id=339): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) pipe(&(0x7f0000000500)) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0xa0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.20891678s ago: executing program 0 (id=340): socket$inet(0x2, 0x2, 0x1) syz_clone(0x24010200, &(0x7f0000000500), 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000360, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'veth0\x00', {}, 0x4}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0xc008af12, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$key(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xfe, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2.208600067s ago: executing program 0 (id=341): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x2, 0x0, 0x6c, @empty, @private0, 0x40, 0x20, 0x2, 0x10}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = creat(0x0, 0x12e) socket$unix(0x1, 0x1, 0x0) io_submit(0x0, 0x0, &(0x7f0000000b40)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42, 0x0, 0x3}, 0x28) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) truncate(0x0, 0x420) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x22240, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x19) 2.15938681s ago: executing program 0 (id=343): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 2.159048334s ago: executing program 3 (id=344): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f00)={0x34, &(0x7f0000000cc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001080)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001700)={0x34, &(0x7f0000001500)={0x20, 0x18, 0x1, ')'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002180)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000500)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002540)={0x34, &(0x7f0000002340)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0}) 2.1077206s ago: executing program 1 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) lseek(0xffffffffffffffff, 0x9c79000800000000, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a01040000f0ffffff00000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="e800000048000701fefffffffcdbdf2503"], 0xe8}}, 0xc000) ioctl$TCXONC(r5, 0x540a, 0x0) ptrace$cont(0x9, 0x0, 0xfffffffffffffffe, 0xffffffffffff7fff) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x9, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @reserved}) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='ext2\x00', 0x800a, 0x0) 1.809876841s ago: executing program 2 (id=347): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x600002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.786598459s ago: executing program 2 (id=348): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace_dev_match', 0x88140, 0x22) read$FUSE(r0, &(0x7f0000003180)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000000)="53f7c520edb4291a18ebb61d55e927fa682b4053e825c8a81081b8dcb028e63d04c6b22c284695b6359e528da7c4e62874584a15d3df9aee601503585592ba100f7baf64d9b18420407e8c46f19bc2d686423b51d7d5339a642b3774e54f89c91eaabcfd7f010561f8cd247bce57d56d2b1ad73ba6d1012366807286c9adfebcc916912ef73466206fbce6fbb8a87536275e864c61cef8952eae06540790be16c98c5354971f69fd3077420f3d680a0be1c6c0e2e782c67456cbbdb677c904239021ce94fafc7a954668", 0xca, 0x8, &(0x7f0000000100)={0x77359400}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x23, @remote}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r3, &(0x7f0000000100)=""/157, 0x9d) read(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000081000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) 1.658858107s ago: executing program 1 (id=349): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) io_cancel(0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)=@secondary) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = dup(r1) write$UHID_INPUT(r4, &(0x7f0000000140)={0xf, {"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", 0x1000}}, 0x1006) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0xc, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0x1, 0x7f, '\x00', 0xffffffffffffffdf}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000340)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x2, 0x200000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x4, 0xff, 0x0, 0x5}, {0xdddd1000, 0xeeef0000, 0x9, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x1, 0x0, 0x0, 0x4, 0x1, 0x0, 0x8, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x10000, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.658257486s ago: executing program 0 (id=350): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x1) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='rt1719 0x49', 0xb) write(r3, &(0x7f0000000400)='wusb38', 0x6) 1.529607098s ago: executing program 0 (id=351): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @local}}, 0x100, 0x6}, &(0x7f00000000c0)=0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) read(r0, &(0x7f0000000480)=""/266, 0x10a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ptrace(0x10, 0x0) ptrace$poke(0x13, 0x0, 0x0, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x9, 0x9, 0x4, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1, 0xddc1, 0x4833e8b7}}) 1.309457166s ago: executing program 1 (id=352): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1a, 0x0, 0x0, &(0x7f0000000100)) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.30918149s ago: executing program 1 (id=353): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 1.281235904s ago: executing program 2 (id=354): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) mq_open(&(0x7f00000000c0)='*,-[+[H+]\x00\xb1\xb6\xa3\xf2\xb7\x90\x14\xca\xef\x1fkd\xa6\xf72\xcb\xb86\xc6\xaaw\xe7\xfc\xcd\xa2\xad\x00|\x9bW\x7f\xe4\xd5\xd8\xfe\xb9\xecu6P\x04C\a\xf8l\xe5\r\t%\xbc\x1a\x98\x16\x91\vF\xa6#\xdahP\x87b\xb9B\xda\xa7\xfc\xdc\xe2\x85\xc2\xdc\x10\x89{~&v.\xbc:jNx\xaak\x94\x8b\xe5}^\xb2\xfc\x99\x10\xd7*J\xb9\xe1rM\xde\xc1\xab\xa9I\xe2p\xdfHls\xfek\xfcDs\x05\xe4\x19.\xbd\x0f\xb5\xbb\\\xd7\xa6\xed\x86Fl\xdf\xd6\xb8.\xb8(\xc8)3\xad\x80y(\xb3\xe5\xba\xcb\x02\xc3\x8dK\xc2\x9b\x17\\\x04^\xf2*\x92k\xb5\xc4\x8c\xf8G\xf0\x89%\x91\xbf\x1c\t\v\xc3\x0f]\xfb\xea\xb8\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\b\x9cX!\x1c4\x83\vF\r\xedht\x14h\xe4\xa1\xd37\xf5\x10\x84t\xc8\x87D\xd7\xe9\xe8', 0x40, 0x48, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 1.190070279s ago: executing program 2 (id=355): read(0xffffffffffffffff, &(0x7f0000000100)=""/194, 0xc2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x560e, &(0x7f0000000000)) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$KDSKBENT(r4, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xfffffc13}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) 626.090383ms ago: executing program 0 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r6, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 348.880285ms ago: executing program 1 (id=357): chroot(0x0) pivot_root(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x2, 0x3, 0x0, 0x2, [0x0], [0x0, 0xffffffff, 0x800400, 0x10000], [0x0, 0x4, 0xfffffffc, 0x3], [0x3, 0x0, 0x4]}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="19c3d6d9", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r4}) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0) 75.983382ms ago: executing program 1 (id=358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='rd_pages=8', 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00), 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8d4}, 0x800) 75.552829ms ago: executing program 2 (id=359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x600002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 0s ago: executing program 2 (id=360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc", 0xd81}], 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r6, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r7 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) mknod$loop(0x0, 0xfff, 0x0) fanotify_mark(0xffffffffffffffff, 0x5, 0x1018, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) kernel console output (not intermixed with test programs): [ 28.979386][ T43] audit: type=1400 audit(1788231069.111:116): avc: denied { rlimitinh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.979499][ T43] audit: type=1400 audit(1788231069.111:117): avc: denied { siginh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 29.509452][ T43] audit: type=1400 audit(1788231069.641:118): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.551961][ T43] audit: type=1400 audit(1788231069.681:119): avc: denied { write } for pid=5647 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.616038][ T43] audit: type=1400 audit(1788231069.751:120): avc: denied { write } for pid=5650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:16399' (ED25519) to the list of known hosts. [ 32.933233][ T5685] cgroup: Unknown subsys name 'net' [ 33.057386][ T5685] cgroup: Unknown subsys name 'cpuset' [ 33.060997][ T5685] cgroup: Unknown subsys name 'rlimit' [ 33.249440][ T5712] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.906368][ T5685] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.883922][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 36.883983][ T43] audit: type=1400 audit(1788231077.011:156): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.020615][ T43] audit: type=1400 audit(1788231077.151:157): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.020930][ T43] audit: type=1400 audit(1788231077.151:158): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.021321][ T43] audit: type=1400 audit(1788231077.151:159): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.029964][ T43] audit: type=1400 audit(1788231077.161:160): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[2925]" dev="sockfs" ino=2925 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.054208][ T5732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.055060][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.058343][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.061358][ T5732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.061492][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.061882][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.061900][ T5738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.062827][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.063232][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.063801][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.063873][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.064108][ T5732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.065630][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.066115][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.066768][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.066790][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.066835][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.067207][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.067993][ T5738] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.069508][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.074680][ T43] audit: type=1400 audit(1788231077.201:161): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.077820][ T43] audit: type=1400 audit(1788231077.201:162): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.077845][ T43] audit: type=1400 audit(1788231077.211:163): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.079404][ T43] audit: type=1400 audit(1788231077.211:164): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.102280][ T43] audit: type=1400 audit(1788231077.231:165): avc: denied { sys_module } for pid=5734 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.544625][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.545101][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.545173][ T5725] bridge_slave_0: entered allmulticast mode [ 37.545906][ T5725] bridge_slave_0: entered promiscuous mode [ 37.562586][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.562662][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.562718][ T5725] bridge_slave_1: entered allmulticast mode [ 37.563451][ T5725] bridge_slave_1: entered promiscuous mode [ 37.616829][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.616892][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.617077][ T5724] bridge_slave_0: entered allmulticast mode [ 37.617785][ T5724] bridge_slave_0: entered promiscuous mode [ 37.624460][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.635854][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.635973][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.636248][ T5724] bridge_slave_1: entered allmulticast mode [ 37.637611][ T5724] bridge_slave_1: entered promiscuous mode [ 37.639539][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.652322][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.652400][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.652491][ T5730] bridge_slave_0: entered allmulticast mode [ 37.653224][ T5730] bridge_slave_0: entered promiscuous mode [ 37.654308][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.654347][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.655560][ T5730] bridge_slave_1: entered allmulticast mode [ 37.656369][ T5730] bridge_slave_1: entered promiscuous mode [ 37.678967][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.679029][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.679092][ T5734] bridge_slave_0: entered allmulticast mode [ 37.679789][ T5734] bridge_slave_0: entered promiscuous mode [ 37.681427][ T5725] team0: Port device team_slave_0 added [ 37.682690][ T5725] team0: Port device team_slave_1 added [ 37.690889][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.692355][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.692502][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.692596][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.692656][ T5734] bridge_slave_1: entered allmulticast mode [ 37.693406][ T5734] bridge_slave_1: entered promiscuous mode [ 37.706343][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.712785][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.735442][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.737013][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.737390][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.737397][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.737409][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.738583][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.738591][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.738602][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.750806][ T5724] team0: Port device team_slave_0 added [ 37.751684][ T5730] team0: Port device team_slave_0 added [ 37.753534][ T5730] team0: Port device team_slave_1 added [ 37.762006][ T5724] team0: Port device team_slave_1 added [ 37.785318][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.785358][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.785403][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.791734][ T5734] team0: Port device team_slave_0 added [ 37.793532][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.793540][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.793552][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.794414][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.794421][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.794434][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.801070][ T5734] team0: Port device team_slave_1 added [ 37.801429][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.801438][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.801450][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.828676][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.828687][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.828699][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.829623][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.829630][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.829641][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.833196][ T5725] hsr_slave_0: entered promiscuous mode [ 37.833650][ T5725] hsr_slave_1: entered promiscuous mode [ 37.851900][ T5724] hsr_slave_0: entered promiscuous mode [ 37.852691][ T5724] hsr_slave_1: entered promiscuous mode [ 37.852985][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 37.853034][ T5724] Cannot create hsr debugfs directory [ 37.886815][ T5730] hsr_slave_0: entered promiscuous mode [ 37.887502][ T5730] hsr_slave_1: entered promiscuous mode [ 37.887799][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 37.887810][ T5730] Cannot create hsr debugfs directory [ 37.953309][ T5734] hsr_slave_0: entered promiscuous mode [ 37.953771][ T5734] hsr_slave_1: entered promiscuous mode [ 37.954063][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 37.954074][ T5734] Cannot create hsr debugfs directory [ 38.155748][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.162814][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.163244][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.167971][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.169120][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.172164][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.172507][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.176293][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.210501][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.210591][ T5725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.211122][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.211167][ T5725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.214971][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.219230][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.219637][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.222932][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.230861][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.236266][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.236686][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.241371][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.280900][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.280993][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.281092][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.281140][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.282901][ T5734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.285662][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.291813][ T5734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.295265][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.304577][ T5734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.308376][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.308819][ T5734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.312414][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.345756][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.345980][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.350081][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.352599][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.354283][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.354715][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.358555][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.361027][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.361071][ T5734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.361213][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.361255][ T5734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.363848][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.367357][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.389617][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.392042][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.394631][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.397095][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.400514][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.403226][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.417549][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.428958][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.432877][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.432947][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.447930][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.448010][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.467810][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.471321][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.486097][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.489835][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.489914][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.494670][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.494753][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.503884][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.503959][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.518530][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.518618][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.526089][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.552214][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.563515][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.563613][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.574750][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.574886][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.710492][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.732047][ T5725] veth0_vlan: entered promiscuous mode [ 38.735997][ T5725] veth1_vlan: entered promiscuous mode [ 38.753965][ T5725] veth0_macvtap: entered promiscuous mode [ 38.757952][ T5725] veth1_macvtap: entered promiscuous mode [ 38.769016][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.774443][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.777799][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.796933][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.815820][ T5599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.839781][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.843744][ T5724] veth0_vlan: entered promiscuous mode [ 38.865589][ T5724] veth1_vlan: entered promiscuous mode [ 38.866225][ T5734] veth0_vlan: entered promiscuous mode [ 38.869505][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.869563][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.874353][ T5734] veth1_vlan: entered promiscuous mode [ 38.899960][ T371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.900012][ T371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.911211][ T5724] veth0_macvtap: entered promiscuous mode [ 38.913501][ T5734] veth0_macvtap: entered promiscuous mode [ 38.922335][ T5734] veth1_macvtap: entered promiscuous mode [ 38.923381][ T5724] veth1_macvtap: entered promiscuous mode [ 38.933940][ T5730] veth0_vlan: entered promiscuous mode [ 38.936427][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.940856][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.941945][ T5725] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.946524][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.954129][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.958964][ T5730] veth1_vlan: entered promiscuous mode [ 38.999801][ T5730] veth0_macvtap: entered promiscuous mode [ 38.999969][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.999980][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.001824][ T5730] veth1_macvtap: entered promiscuous mode [ 39.008541][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.015399][ T5599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.015447][ T5599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.015481][ T5599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.023980][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.032281][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.032815][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.032838][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.032856][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036828][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.036962][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037112][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037131][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037149][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037167][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037184][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.047714][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.047726][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.058501][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.058512][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.092904][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.092951][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.097767][ T5735] Bluetooth: hci3: command tx timeout [ 39.097899][ T5738] Bluetooth: hci2: command tx timeout [ 39.098030][ T5728] Bluetooth: hci0: command tx timeout [ 39.098034][ T5735] Bluetooth: hci1: command tx timeout [ 39.122792][ T371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.122848][ T371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.125227][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.163008][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.163064][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.201369][ T5885] process 'syz.1.2' launched '/dev/fd/8' with NULL argv: empty string added [ 39.204340][ T37] IPVS: starting estimator thread 0... [ 39.305505][ T5886] IPVS: using max 43 ests per chain, 103200 per kthread [ 39.327852][ T5894] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 39.407664][ T5901] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 39.462743][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 39.482108][ T5908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5908 comm=syz.2.13 [ 39.519301][ T5911] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 39.530070][ T5913] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 39.530668][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 39.534286][ T5913] gretap1: entered promiscuous mode [ 39.543822][ T5911] ip6_vti0: entered promiscuous mode [ 39.543866][ T5911] ip6_vti0: entered allmulticast mode [ 39.732804][ T5599] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 39.745986][ T5931] loop6: detected capacity change from 0 to 2640 [ 39.749897][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.750203][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.750419][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.750624][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.751341][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.894054][ T5928] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 39.902199][ T5922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 39.996696][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.997226][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.023855][ T5938] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 40.037663][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.039760][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.049700][ T5943] Zero length message leads to an empty skb [ 40.072182][ T5943] nvme_fabrics: missing parameter 'transport=%s' [ 40.072225][ T5943] nvme_fabrics: missing parameter 'nqn=%s' [ 40.104957][ T5873] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.125227][ T5873] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.128169][ T5873] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.145466][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.293144][ T5957] syzkaller0: entered promiscuous mode [ 40.293182][ T5957] syzkaller0: entered allmulticast mode [ 40.549685][ T5973] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 40.565223][ T5973] veth3: entered allmulticast mode [ 40.772084][ T5981] syzkaller0: entered promiscuous mode [ 40.772137][ T5981] syzkaller0: entered allmulticast mode [ 40.787898][ T5979] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 40.788003][ T5979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 40.861188][ T5987] syzkaller0: entered promiscuous mode [ 40.861276][ T5987] syzkaller0: entered allmulticast mode [ 41.174964][ T64] Bluetooth: hci1: command tx timeout [ 41.175011][ T64] Bluetooth: hci3: command tx timeout [ 41.184957][ T64] Bluetooth: hci0: command tx timeout [ 41.333957][ T5992] loop6: detected capacity change from 0 to 2640 [ 41.336589][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.337410][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.337629][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.337834][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.338083][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 41.948454][ T43] kauditd_printk_skb: 107 callbacks suppressed [ 41.948485][ T6009] syzkaller0: entered promiscuous mode [ 41.948528][ T43] audit: type=1400 audit(1788231082.081:273): avc: denied { ioctl } for pid=6008 comm="syz.1.51" path="socket:[11515]" dev="sockfs" ino=11515 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.948537][ T6009] syzkaller0: entered allmulticast mode [ 41.996936][ T43] audit: type=1400 audit(1788231082.131:274): avc: denied { relabelfrom } for pid=6010 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.996997][ T43] audit: type=1400 audit(1788231082.131:275): avc: denied { relabelto } for pid=6010 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 42.021230][ T6010] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 42.055138][ T64] Bluetooth: hci2: command tx timeout [ 42.144928][ T43] audit: type=1400 audit(1788231082.271:276): avc: denied { connect } for pid=6015 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.144989][ T43] audit: type=1400 audit(1788231082.271:277): avc: denied { listen } for pid=6015 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.145030][ T43] audit: type=1400 audit(1788231082.271:278): avc: denied { accept } for pid=6015 comm="syz.3.54" lport=40122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.146189][ T43] audit: type=1400 audit(1788231082.281:279): avc: denied { write } for pid=6015 comm="syz.3.54" name="001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.439172][ T6029] syzkaller0: entered promiscuous mode [ 42.439232][ T6029] syzkaller0: entered allmulticast mode [ 42.531936][ T6031] syzkaller0: entered promiscuous mode [ 42.531981][ T6031] syzkaller0: entered allmulticast mode [ 42.619217][ T43] audit: type=1400 audit(1788231082.751:280): avc: denied { mount } for pid=6032 comm="syz.3.60" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.629724][ T6033] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.638058][ T6033] loop0: detected capacity change from 0 to 4096 [ 42.698528][ T6033] md: loop0 does not have a valid v1.0 superblock, not importing! [ 42.711372][ T43] audit: type=1400 audit(1788231082.841:281): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.738664][ T6035] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.794507][ T6037] syzkaller0: entered promiscuous mode [ 42.794544][ T6037] syzkaller0: entered allmulticast mode [ 42.801196][ T43] audit: type=1400 audit(1788231082.931:282): avc: denied { ioctl } for pid=6038 comm="syz.3.63" path="socket:[9970]" dev="sockfs" ino=9970 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.957971][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 43.035627][ T6056] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 43.035702][ T6056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 43.036672][ T6056] Trying to write to read-only block-device nullb0 [ 43.099189][ T6061] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET) [ 43.166941][ T6063] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.219189][ T6067] syzkaller0: entered promiscuous mode [ 43.219251][ T6067] syzkaller0: entered allmulticast mode [ 43.247543][ T6071] syzkaller0: entered promiscuous mode [ 43.249404][ T6071] syzkaller0: entered allmulticast mode [ 43.255371][ T5735] Bluetooth: hci1: command tx timeout [ 43.255425][ T5735] Bluetooth: hci3: command tx timeout [ 43.256483][ T64] Bluetooth: hci0: command tx timeout [ 43.307992][ T6074] syzkaller0: entered promiscuous mode [ 43.308051][ T6074] syzkaller0: entered allmulticast mode [ 43.312422][ T6074] tipc: Started in network mode [ 43.312478][ T6074] tipc: Node identity ba5ce8d044e5, cluster identity 4711 [ 43.313294][ T6074] tipc: Enabled bearer , priority 0 [ 43.315227][ T6073] tipc: Resetting bearer [ 43.327342][ T6073] tipc: Disabling bearer [ 43.349356][ T6069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.75'. [ 43.800162][ T6097] syzkaller0: entered promiscuous mode [ 43.800214][ T6097] syzkaller0: entered allmulticast mode [ 44.109225][ T6113] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 44.135042][ T64] Bluetooth: hci2: command tx timeout [ 44.262087][ T6119] syzkaller0: entered promiscuous mode [ 44.262138][ T6119] syzkaller0: entered allmulticast mode [ 44.266039][ T6119] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 44.386037][ T6124] syzkaller0: entered promiscuous mode [ 44.386091][ T6124] syzkaller0: entered allmulticast mode [ 45.334944][ T64] Bluetooth: hci1: command tx timeout [ 45.334985][ T64] Bluetooth: hci0: command tx timeout [ 45.394497][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.394543][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.397734][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.397746][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.512897][ T6083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.567418][ T6148] syzkaller0: entered promiscuous mode [ 46.567487][ T6148] syzkaller0: entered allmulticast mode [ 46.573416][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 46.775851][ T6163] syzkaller0: entered promiscuous mode [ 46.775904][ T6163] syzkaller0: entered allmulticast mode [ 46.914926][ T5517] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 47.016397][ T6165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.111'. [ 47.043485][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 47.043579][ T43] audit: type=1400 audit(1788231087.171:331): avc: denied { search } for pid=6170 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.043621][ T43] audit: type=1400 audit(1788231087.171:332): avc: denied { search } for pid=6170 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.043657][ T43] audit: type=1400 audit(1788231087.171:333): avc: denied { search } for pid=6170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.043691][ T43] audit: type=1400 audit(1788231087.171:334): avc: denied { search } for pid=6170 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.047055][ T43] audit: type=1400 audit(1788231087.181:335): avc: denied { read } for pid=6171 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.047270][ T43] audit: type=1400 audit(1788231087.181:336): avc: denied { read open } for pid=6171 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.047420][ T43] audit: type=1400 audit(1788231087.181:337): avc: denied { getattr } for pid=6171 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.055943][ T43] audit: type=1400 audit(1788231087.181:338): avc: denied { write } for pid=6170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.055985][ T43] audit: type=1400 audit(1788231087.181:339): avc: denied { add_name } for pid=6170 comm="dhcpcd-run-hook" name="resolv.conf.lapb1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.056022][ T43] audit: type=1400 audit(1788231087.181:340): avc: denied { create } for pid=6170 comm="dhcpcd-run-hook" name="resolv.conf.lapb1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.078062][ T5517] usb 8-1: Using ep0 maxpacket: 8 [ 47.079879][ T5517] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 47.083137][ T5517] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 47.083174][ T5517] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.083193][ T5517] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.083211][ T5517] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 47.083228][ T5517] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 47.083247][ T5517] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.083278][ T5517] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.094125][ T5517] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 47.255554][ T6184] device-mapper: ioctl: Unable to rename non-existent device, ò to uuid  [ 47.584957][ T1480] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.712731][ T6214] bond1 (unregistering): Released all slaves [ 47.735729][ T1480] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 47.740701][ T1480] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.746161][ T1480] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.751006][ T1480] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.753594][ T1480] usb 6-1: Product: syz [ 47.755128][ T1480] usb 6-1: Manufacturer: syz [ 47.756766][ T1480] usb 6-1: SerialNumber: syz [ 47.763955][ T1480] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 47.777161][ T1480] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 47.784365][ T1480] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 48.697600][ T6232] warning: `syz.2.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.981131][ T6241] o2cb: Local heartbeat has not been started. [ 48.981169][ T6241] o2cb: Cluster check failed. Fix errors before retrying. [ 48.981536][ T6241] (syz.0.125,6241,1):user_dlm_register:674 ERROR: status = -22 [ 48.981552][ T6241] (syz.0.125,6241,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 49.676860][ T35] usb 8-1: USB disconnect, device number 2 [ 49.698697][ T6257] syzkaller0: entered promiscuous mode [ 49.698744][ T6257] syzkaller0: entered allmulticast mode [ 49.918574][ T371] IPVS: starting estimator thread 0... [ 49.921125][ T6274] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 49.960530][ T6277] FAULT_INJECTION: forcing a failure. [ 49.960530][ T6277] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.960577][ T6277] CPU: 3 UID: 0 PID: 6277 Comm: syz.0.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 49.960593][ T6277] Tainted: [L]=SOFTLOCKUP [ 49.960597][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.960603][ T6277] Call Trace: [ 49.960607][ T6277] [ 49.960612][ T6277] dump_stack_lvl+0x100/0x190 [ 49.960640][ T6277] should_fail_ex.cold+0x5/0xa [ 49.960654][ T6277] ? prepare_alloc_pages+0x16d/0x5b0 [ 49.960672][ T6277] should_fail_alloc_page+0xeb/0x140 [ 49.960686][ T6277] prepare_alloc_pages+0x1f0/0x5b0 [ 49.960698][ T6277] ? is_bpf_text_address+0x94/0x1a0 [ 49.960715][ T6277] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 49.960739][ T6277] ? stack_trace_save+0x8e/0xc0 [ 49.960757][ T6277] ? __pfx_stack_trace_save+0x10/0x10 [ 49.960773][ T6277] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 49.960789][ T6277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 49.960805][ T6277] ? is_bpf_text_address+0x94/0x1a0 [ 49.960821][ T6277] ? kasan_save_stack+0x3f/0x50 [ 49.960832][ T6277] ? kasan_save_stack+0x30/0x50 [ 49.960842][ T6277] ? kasan_save_track+0x14/0x30 [ 49.960853][ T6277] ? __kasan_slab_alloc+0x89/0x90 [ 49.960865][ T6277] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 49.960877][ T6277] ? alloc_vmap_area+0x640/0x2bb0 [ 49.960887][ T6277] ? __get_vm_area_node+0x1ed/0x350 [ 49.960899][ T6277] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 49.960911][ T6277] ? __vmalloc_node_noprof+0xad/0xf0 [ 49.960923][ T6277] ? __vmalloc_noprof+0xa3/0x120 [ 49.960936][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.960948][ T6277] ? bpf_prog_alloc+0x3b/0x200 [ 49.960959][ T6277] ? bpf_prog_create_from_user+0xb4/0x2e0 [ 49.960976][ T6277] ? do_seccomp+0x870/0x27c0 [ 49.960989][ T6277] ? do_syscall_64+0x123/0x790 [ 49.961005][ T6277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.961021][ T6277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.961034][ T6277] ? policy_nodemask+0xed/0x4f0 [ 49.961048][ T6277] alloc_pages_mpol+0x201/0x550 [ 49.961062][ T6277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 49.961081][ T6277] alloc_pages_noprof+0x1a/0x160 [ 49.961097][ T6277] get_free_pages_noprof+0x10/0xb0 [ 49.961109][ T6277] __kasan_populate_vmalloc+0xa0/0x210 [ 49.961123][ T6277] alloc_vmap_area+0x95d/0x2bb0 [ 49.961144][ T6277] ? kasan_save_track+0x14/0x30 [ 49.961157][ T6277] ? __kasan_kmalloc+0xaa/0xb0 [ 49.961168][ T6277] ? __pfx_alloc_vmap_area+0x10/0x10 [ 49.961182][ T6277] ? __get_vm_area_node+0x124/0x350 [ 49.961196][ T6277] __get_vm_area_node+0x1ed/0x350 [ 49.961213][ T6277] __vmalloc_node_range_noprof+0x268/0x1420 [ 49.961227][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.961241][ T6277] ? __pfx_stack_trace_save+0x10/0x10 [ 49.961259][ T6277] ? stack_depot_save_flags+0x27/0x9f0 [ 49.961274][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.961287][ T6277] ? __kasan_kmalloc+0xaa/0xb0 [ 49.961297][ T6277] ? do_syscall_64+0x123/0x790 [ 49.961310][ T6277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 49.961328][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.961340][ T6277] __vmalloc_node_noprof+0xad/0xf0 [ 49.961354][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.961368][ T6277] __vmalloc_noprof+0xa3/0x120 [ 49.961381][ T6277] ? __pfx___vmalloc_noprof+0x10/0x10 [ 49.961399][ T6277] bpf_prog_alloc_no_stats+0x59/0x690 [ 49.961413][ T6277] bpf_prog_alloc+0x3b/0x200 [ 49.961427][ T6277] bpf_prog_create_from_user+0xb4/0x2e0 [ 49.961441][ T6277] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.961456][ T6277] do_seccomp+0x870/0x27c0 [ 49.961471][ T6277] ? mntput_no_expire+0xd8/0x220 [ 49.961485][ T6277] ? __pfx_do_seccomp+0x10/0x10 [ 49.961500][ T6277] ? xfd_validate_state+0x129/0x190 [ 49.961517][ T6277] do_syscall_64+0x123/0x790 [ 49.961530][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.961541][ T6277] RIP: 0033:0x7f9b5b19e159 [ 49.961550][ T6277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.961560][ T6277] RSP: 002b:00007f9b5c0d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 49.961571][ T6277] RAX: ffffffffffffffda RBX: 00007f9b5b425fa0 RCX: 00007f9b5b19e159 [ 49.961578][ T6277] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 49.961585][ T6277] RBP: 00007f9b5b235024 R08: 0000000000000000 R09: 0000000000000000 [ 49.961591][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.961597][ T6277] R13: 00007f9b5b426038 R14: 00007f9b5b425fa0 R15: 00007ffc9e8538f8 [ 49.961610][ T6277] [ 49.961737][ T6277] syz.0.138: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 49.961798][ T6277] CPU: 3 UID: 0 PID: 6277 Comm: syz.0.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 49.961814][ T6277] Tainted: [L]=SOFTLOCKUP [ 49.961818][ T6277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.961825][ T6277] Call Trace: [ 49.961829][ T6277] [ 49.961833][ T6277] dump_stack_lvl+0x100/0x190 [ 49.961851][ T6277] warn_alloc.cold+0x9e/0xb2 [ 49.961863][ T6277] ? __pfx_warn_alloc+0x10/0x10 [ 49.961879][ T6277] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.961893][ T6277] ? __get_vm_area_node+0x2f0/0x350 [ 49.961908][ T6277] ? __get_vm_area_node+0x22b/0x350 [ 49.961923][ T6277] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 49.961937][ T6277] ? __pfx_stack_trace_save+0x10/0x10 [ 49.961953][ T6277] ? stack_depot_save_flags+0x27/0x9f0 [ 49.961967][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.961979][ T6277] ? __kasan_kmalloc+0xaa/0xb0 [ 49.961990][ T6277] ? do_syscall_64+0x123/0x790 [ 49.962003][ T6277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 49.962021][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.962034][ T6277] __vmalloc_node_noprof+0xad/0xf0 [ 49.962047][ T6277] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 49.962061][ T6277] __vmalloc_noprof+0xa3/0x120 [ 49.962074][ T6277] ? __pfx___vmalloc_noprof+0x10/0x10 [ 49.962091][ T6277] bpf_prog_alloc_no_stats+0x59/0x690 [ 49.962107][ T6277] bpf_prog_alloc+0x3b/0x200 [ 49.962122][ T6277] bpf_prog_create_from_user+0xb4/0x2e0 [ 49.962144][ T6277] ? __pfx_seccomp_check_filter+0x10/0x10 [ 49.962160][ T6277] do_seccomp+0x870/0x27c0 [ 49.962177][ T6277] ? mntput_no_expire+0xd8/0x220 [ 49.962192][ T6277] ? __pfx_do_seccomp+0x10/0x10 [ 49.962209][ T6277] ? xfd_validate_state+0x129/0x190 [ 49.962226][ T6277] do_syscall_64+0x123/0x790 [ 49.962239][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.962250][ T6277] RIP: 0033:0x7f9b5b19e159 [ 49.962258][ T6277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.962267][ T6277] RSP: 002b:00007f9b5c0d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 49.962277][ T6277] RAX: ffffffffffffffda RBX: 00007f9b5b425fa0 RCX: 00007f9b5b19e159 [ 49.962284][ T6277] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 49.962290][ T6277] RBP: 00007f9b5b235024 R08: 0000000000000000 R09: 0000000000000000 [ 49.962296][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.962302][ T6277] R13: 00007f9b5b426038 R14: 00007f9b5b425fa0 R15: 00007ffc9e8538f8 [ 49.962315][ T6277] [ 49.962319][ T6277] Mem-Info: [ 49.962325][ T6277] active_anon:8729 inactive_anon:2 isolated_anon:0 [ 49.962325][ T6277] active_file:2575 inactive_file:53448 isolated_file:0 [ 49.962325][ T6277] unevictable:1000 dirty:147 writeback:0 [ 49.962325][ T6277] slab_reclaimable:11627 slab_unreclaimable:65442 [ 49.962325][ T6277] mapped:24660 shmem:1558 pagetables:1233 [ 49.962325][ T6277] sec_pagetables:294 bounce:0 [ 49.962325][ T6277] kernel_misc_reclaimable:0 [ 49.962325][ T6277] free:441556 free_pcp:14484 free_cma:0 [ 49.962351][ T6277] Node 0 active_anon:34916kB inactive_anon:8kB active_file:10300kB inactive_file:213596kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:98640kB dirty:584kB writeback:0kB shmem:4232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:4788kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 49.962377][ T6277] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 49.962404][ T6277] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 49.962434][ T6277] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 49.962455][ T6277] Node 0 DMA32 free:105480kB boost:0kB min:27360kB low:34200kB high:41040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34916kB inactive_anon:8kB active_file:10300kB inactive_file:213596kB unevictable:2000kB writepending:584kB zspages:548kB present:2080628kB managed:1253032kB mlocked:0kB bounce:0kB free_pcp:55392kB local_pcp:4904kB free_cma:0kB [ 49.962487][ T6277] lowmem_reserve[]: 0 0 0 0 0 [ 49.962505][ T6277] Node 1 Normal free:1645384kB boost:0kB min:39876kB low:49844kB high:59812kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:2448kB local_pcp:0kB free_cma:0kB [ 49.962572][ T6277] lowmem_reserve[]: 0 0 0 0 0 [ 49.962592][ T6277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 49.962701][ T6277] Node 0 DMA32: 3*4kB (ME) 1*8kB (E) 11*16kB (UME) 0*32kB 6*64kB (ME) 42*128kB (ME) 36*256kB (UME) 18*512kB (M) 15*1024kB (ME) 4*2048kB (ME) 14*4096kB (M) = 105284kB [ 49.962790][ T6277] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 12*16kB (UM) 17*32kB (UM) 9*64kB (UM) 6*128kB (UM) 1*256kB (U) 3*512kB (M) 1*1024kB (U) 3*2048kB (UM) 399*4096kB (M) = 1645384kB [ 49.962880][ T6277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 49.962889][ T6277] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 49.962897][ T6277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 49.962906][ T6277] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 49.962913][ T6277] 57580 total pagecache pages [ 49.962917][ T6277] 3 pages in swap cache [ 49.962920][ T6277] Free swap = 124824kB [ 49.962924][ T6277] Total swap = 124996kB [ 49.962928][ T6277] 1048443 pages RAM [ 49.962931][ T6277] 0 pages HighMem/MovableOnly [ 49.962935][ T6277] 285875 pages reserved [ 49.962938][ T6277] 0 pages cma reserved [ 50.025053][ T6275] IPVS: using max 44 ests per chain, 105600 per kthread [ 50.635005][ T6294] tipc: Started in network mode [ 50.635133][ T6294] tipc: Node identity aeecc4101974, cluster identity 4711 [ 50.635342][ T6294] tipc: Enabled bearer , priority 0 [ 50.644265][ T6294] syzkaller0: entered promiscuous mode [ 50.647760][ T6294] syzkaller0: entered allmulticast mode [ 50.655787][ T6294] tipc: Resetting bearer [ 50.658951][ T6293] tipc: Resetting bearer [ 50.666818][ T6293] tipc: Disabling bearer [ 51.078832][ T6309] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 51.911599][ T6340] Bluetooth: MGMT ver 1.23 [ 51.947780][ T6342] jffs2: notice: (6342) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 52.058905][ T6192] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -110 [ 52.064043][ T5517] usb 6-1: USB disconnect, device number 2 [ 52.099763][ T5517] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 52.106495][ T5517] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 52.107048][ T5517] ti_usb_3410_5052 6-1:2.0: device disconnected [ 52.154638][ T43] kauditd_printk_skb: 62 callbacks suppressed [ 52.154727][ T43] audit: type=1400 audit(1788231092.281:403): avc: denied { create } for pid=6344 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 52.175802][ T43] audit: type=1400 audit(1788231092.301:404): avc: denied { allowed } for pid=6344 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.280391][ T43] audit: type=1400 audit(1788231092.411:405): avc: denied { mount } for pid=6350 comm="syz.1.163" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.280904][ T6351] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 52.315160][ T6351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.352625][ T6351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.355102][ T6351] bond1: (slave bond2): Enslaving as an active interface with a down link [ 52.363712][ T6351] gretap1: entered promiscuous mode [ 52.365706][ T6351] bond1: (slave gretap1): making interface the new active one [ 52.368192][ T6351] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 52.398773][ T6355] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 52.408796][ T6355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 52.417594][ T6355] vlan2: entered allmulticast mode [ 52.419905][ T6355] veth0_to_bond: entered allmulticast mode [ 52.424544][ T6355] bond3: (slave vlan2): making interface the new active one [ 52.429780][ T6355] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 52.749843][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 52.761897][ T43] audit: type=1400 audit(1788231092.891:406): avc: denied { prog_load } for pid=6361 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.764876][ T6362] vlan2: entered allmulticast mode [ 52.764888][ T6362] bridge1: entered allmulticast mode [ 52.765910][ T6362] bridge1: port 1(erspan0) entered blocking state [ 52.765985][ T6362] bridge1: port 1(erspan0) entered disabled state [ 52.766049][ T6362] erspan0: entered allmulticast mode [ 52.766787][ T6362] erspan0: entered promiscuous mode [ 52.802175][ T43] audit: type=1400 audit(1788231092.931:407): avc: denied { cmd } for pid=6363 comm="syz.0.168" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 53.104727][ T43] audit: type=1400 audit(1788231093.231:408): avc: denied { ioctl } for pid=6373 comm="syz.0.171" path="socket:[15429]" dev="sockfs" ino=15429 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.231570][ T6379] vlan3: entered promiscuous mode [ 53.233332][ T6379] hsr0: entered promiscuous mode [ 53.233798][ T6379] vlan3: entered allmulticast mode [ 53.233809][ T6379] hsr0: entered allmulticast mode [ 53.233816][ T6379] hsr_slave_0: entered allmulticast mode [ 53.233825][ T6379] hsr_slave_1: entered allmulticast mode [ 53.266920][ T43] audit: type=1400 audit(1788231093.401:409): avc: denied { map_create } for pid=6380 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.267042][ T43] audit: type=1400 audit(1788231093.401:410): avc: denied { map_read map_write } for pid=6380 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.287767][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 53.291186][ T6382] hsr_slave_0: left promiscuous mode [ 53.294061][ T6382] hsr_slave_1: left promiscuous mode [ 53.567791][ T43] audit: type=1400 audit(1788231093.701:411): avc: denied { create } for pid=6391 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.568175][ T43] audit: type=1400 audit(1788231093.701:412): avc: denied { ioctl } for pid=6391 comm="syz.1.177" path="socket:[15615]" dev="sockfs" ino=15615 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.568208][ T6392] syzkaller0: entered promiscuous mode [ 53.568219][ T6392] syzkaller0: entered allmulticast mode [ 53.674625][ T6396] syzkaller0: entered promiscuous mode [ 53.674685][ T6396] syzkaller0: entered allmulticast mode [ 53.830471][ T6399] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 53.840906][ T6399] kvm: pic: level sensitive irq not supported [ 53.841824][ T6399] kvm: pic: non byte read [ 53.848320][ T6399] kvm: pic: level sensitive irq not supported [ 53.848809][ T6399] kvm: pic: non byte read [ 53.851259][ T6399] kvm: pic: level sensitive irq not supported [ 53.851526][ T6399] kvm: pic: non byte read [ 53.852420][ T6399] kvm: pic: level sensitive irq not supported [ 53.852694][ T6399] kvm: pic: non byte read [ 53.999899][ T6405] kvm [6404]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000100 [ 54.231266][ T6418] ubi31: attaching mtd0 [ 54.233174][ T6418] ubi31: scanning is finished [ 54.233250][ T6418] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 54.488913][ T6418] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 54.524667][ T6421] kvm [6420]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x90 [ 54.543293][ T6421] kvm [6420]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100 [ 54.571527][ T6429] bond1: (slave ip6gretap1): making interface the new active one [ 54.574626][ T6429] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 54.753797][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 54.753841][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.753870][ T64] Tainted: [L]=SOFTLOCKUP [ 54.753875][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.753882][ T64] Workqueue: hci1 hci_rx_work [ 54.753916][ T64] Call Trace: [ 54.753921][ T64] [ 54.753926][ T64] dump_stack_lvl+0x100/0x190 [ 54.753943][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 54.753961][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 54.753979][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 54.753991][ T64] ? find_held_lock+0x2b/0x80 [ 54.754006][ T64] ? kobject_add_internal+0x25f/0x930 [ 54.754026][ T64] ? kobject_add_internal+0x25f/0x930 [ 54.754042][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.754057][ T64] kobject_add_internal+0x2c8/0x930 [ 54.754074][ T64] kobject_add+0x16a/0x1e0 [ 54.754092][ T64] ? __pfx_kobject_add+0x10/0x10 [ 54.754107][ T64] ? class_to_subsys+0x10f/0x150 [ 54.754123][ T64] ? kobject_put+0xb9/0x640 [ 54.754136][ T64] ? _raw_spin_unlock+0x28/0x50 [ 54.754156][ T64] device_add+0x294/0x1970 [ 54.754168][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 54.754182][ T64] ? __pfx_device_add+0x10/0x10 [ 54.754194][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 54.754209][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 54.754222][ T64] le_conn_complete_evt+0x122f/0x2130 [ 54.754242][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 54.754258][ T64] ? hci_event_packet+0x186/0xcd0 [ 54.754278][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 54.754296][ T64] ? skb_pull_data+0x15f/0x1e0 [ 54.754311][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 54.754322][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 54.754341][ T64] hci_event_packet+0x51c/0xcd0 [ 54.754358][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 54.754369][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 54.754389][ T64] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.754404][ T64] hci_rx_work+0x451/0xfc0 [ 54.754422][ T64] process_one_work+0xac7/0x1b10 [ 54.754445][ T64] ? __pfx_process_one_work+0x10/0x10 [ 54.754462][ T64] ? lock_acquire+0x1d1/0x380 [ 54.754477][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 54.754494][ T64] worker_thread+0x5ef/0xe50 [ 54.754522][ T64] ? kthread+0x13a/0x450 [ 54.754537][ T64] ? __pfx_worker_thread+0x10/0x10 [ 54.754552][ T64] kthread+0x373/0x450 [ 54.754567][ T64] ? __pfx_kthread+0x10/0x10 [ 54.754584][ T64] ret_from_fork+0x730/0xd60 [ 54.754598][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 54.754612][ T64] ? __switch_to+0x800/0x10f0 [ 54.754626][ T64] ? __pfx_kthread+0x10/0x10 [ 54.754642][ T64] ret_from_fork_asm+0x1a/0x30 [ 54.754661][ T64] [ 54.754700][ T64] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 54.754719][ T64] Bluetooth: hci1: failed to register connection device [ 54.897887][ T6456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.198'. [ 54.931064][ T6458] gadgetfs: bound to dummy_udc driver [ 55.014702][ T6460] lo speed is unknown, defaulting to 1000 [ 55.014781][ T6460] lo speed is unknown, defaulting to 1000 [ 55.015749][ T6460] lo speed is unknown, defaulting to 1000 [ 55.017155][ T6460] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 55.017175][ T6460] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 55.017198][ T6460] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 55.019295][ T6460] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 55.037018][ T6460] lo speed is unknown, defaulting to 1000 [ 55.037891][ T6460] lo speed is unknown, defaulting to 1000 [ 55.038792][ T6460] lo speed is unknown, defaulting to 1000 [ 55.040023][ T6460] lo speed is unknown, defaulting to 1000 [ 55.040781][ T6460] lo speed is unknown, defaulting to 1000 [ 55.164981][ T5517] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.165279][ C2] gadgetfs: connected [ 55.166421][ T5517] gadgetfs: disconnected [ 55.390805][ T6486] i2c i2c-0: new_device: Missing parameters [ 55.424215][ T6489] syzkaller0: entered promiscuous mode [ 55.424268][ T6489] syzkaller0: entered allmulticast mode [ 55.643045][ T6499] jffs2: notice: (6499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 55.720851][ T6513] tipc: Enabled bearer , priority 0 [ 55.724214][ T6513] syzkaller0: entered promiscuous mode [ 55.725262][ T6513] syzkaller0: entered allmulticast mode [ 55.728790][ T6513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 55.744503][ T6513] tipc: Resetting bearer [ 55.747384][ T6512] tipc: Resetting bearer [ 55.755603][ T6512] tipc: Disabling bearer [ 55.799267][ T6516] evm: overlay not supported [ 55.849147][ T6521] Unable to extract alua_access_type [ 55.854224][ T6518] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.859407][ T6518] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 55.892831][ T6525] syzkaller0: entered promiscuous mode [ 55.892878][ T6525] syzkaller0: entered allmulticast mode [ 56.032063][ T6527] syzkaller0: entered promiscuous mode [ 56.032108][ T6527] syzkaller0: entered allmulticast mode [ 56.346265][ T6533] bond1: option mode: unable to set because the bond device has slaves [ 56.350941][ T6533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.225'. [ 56.358811][ T6533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.364681][ T6533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.371108][ T6533] bond0 (unregistering): Released all slaves [ 56.394307][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394361][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394400][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394407][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394412][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394418][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394423][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394428][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394434][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394440][ T6535] tc action pedit unable to extract header offset for header type (0x4) [ 56.394451][ T6535] 0: reclassify loop, rule prio 0, protocol 800 [ 56.633469][ T6540] kvm [6539]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 56.639159][ T6540] kvm [6539]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 56.799010][ T6553] syzkaller0: entered promiscuous mode [ 56.799062][ T6553] syzkaller0: entered allmulticast mode [ 56.961005][ T6573] input: syz1 as /devices/virtual/input/input5 [ 57.022227][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 57.024946][ T6574] bridge_slave_1: left allmulticast mode [ 57.025370][ T6574] bridge_slave_1: left promiscuous mode [ 57.025680][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.031116][ T6574] bridge_slave_0: left allmulticast mode [ 57.031175][ T6574] bridge_slave_0: left promiscuous mode [ 57.031286][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.110570][ T6583] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 57.217482][ T6595] syzkaller0: entered promiscuous mode [ 57.219829][ T6595] syzkaller0: entered allmulticast mode [ 57.417701][ T6602] syzkaller0: entered promiscuous mode [ 57.417751][ T6602] syzkaller0: entered allmulticast mode [ 57.474264][ T6604] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 57.475424][ T6604] netlink: 84 bytes leftover after parsing attributes in process `syz.3.248'. [ 57.475627][ T6604] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 57.650340][ T6619] netlink: 277 bytes leftover after parsing attributes in process `syz.1.252'. [ 57.651474][ T6619] netlink: 64 bytes leftover after parsing attributes in process `syz.1.252'. [ 57.806615][ T6625] syzkaller0: entered promiscuous mode [ 57.806674][ T6625] syzkaller0: entered allmulticast mode [ 57.840413][ T6627] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 57.941656][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 57.943385][ T43] kauditd_printk_skb: 29 callbacks suppressed [ 57.943395][ T43] audit: type=1400 audit(1788231098.071:442): avc: denied { bind } for pid=6629 comm="syz.3.256" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.943699][ T43] audit: type=1400 audit(1788231098.071:443): avc: denied { name_bind } for pid=6629 comm="syz.3.256" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.943845][ T43] audit: type=1400 audit(1788231098.071:444): avc: denied { node_bind } for pid=6629 comm="syz.3.256" saddr=ff00::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.971659][ T6632] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 57.972735][ T6632] netlink: 84 bytes leftover after parsing attributes in process `syz.1.257'. [ 58.220637][ T6637] kvm [6636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.237758][ T6637] kvm [6636]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 58.335020][ T5517] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.484918][ T5517] usb 6-1: Using ep0 maxpacket: 32 [ 58.485618][ T5517] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 58.486708][ T5517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.491075][ T5517] usb 6-1: config 0 descriptor?? [ 58.501099][ T5517] as10x_usb: device has been detected [ 58.501984][ T5517] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 58.517667][ T5517] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 58.536300][ T43] audit: type=1400 audit(1788231098.661:445): avc: denied { firmware_load } for pid=5517 comm="kworker/2:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 58.537065][ T5517] as10x_usb: error during firmware upload part1 [ 58.537398][ T5517] Registered device nBox DVB-T Dongle [ 58.696652][ T43] audit: type=1400 audit(1788231098.821:446): avc: denied { read append } for pid=6638 comm="syz.1.260" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.696745][ T43] audit: type=1400 audit(1788231098.831:447): avc: denied { open } for pid=6638 comm="syz.1.260" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 58.718443][ T43] audit: type=1400 audit(1788231098.851:448): avc: denied { create } for pid=6664 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.751628][ T6639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.752477][ T6639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.760121][ T6639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.765627][ T6639] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 58.769259][ T6639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.769859][ T6639] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.777014][ T6639] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 58.785001][ T6639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.785108][ T6639] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.790521][ T6639] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 58.793970][ T6639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.794069][ T6639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.802337][ T6639] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 58.811919][ T43] audit: type=1400 audit(1788231098.941:449): avc: denied { create } for pid=6638 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.812962][ T43] audit: type=1400 audit(1788231098.941:450): avc: denied { setopt } for pid=6638 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.821340][ T2394] usb 6-1: USB disconnect, device number 3 [ 58.847175][ T2394] Unregistered device nBox DVB-T Dongle [ 58.850567][ T2394] as10x_usb: device has been disconnected [ 59.039378][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.358653][ T43] audit: type=1400 audit(1788231099.491:451): avc: denied { write } for pid=6695 comm="syz.1.277" name="subsystems" dev="configfs" ino=6075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.361922][ T6696] nvmet: adding nsid 1 to subsystem testsubsys [ 59.419056][ T6698] syzkaller0: entered promiscuous mode [ 59.419120][ T6698] syzkaller0: entered allmulticast mode [ 59.603798][ T6706] tc action pedit offset 132 out of bounds [ 59.711547][ T6709] syzkaller0: entered promiscuous mode [ 59.711603][ T6709] syzkaller0: entered allmulticast mode [ 59.785482][ T2394] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.935580][ T2394] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.937181][ T2394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.937198][ T2394] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.937209][ T2394] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.937230][ T2394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.944254][ T2394] usb 6-1: config 0 descriptor?? [ 60.005954][ T6726] syzkaller0: entered promiscuous mode [ 60.007684][ T6726] syzkaller0: entered allmulticast mode [ 60.122735][ T6734] usb3503 0-0008: unknown mode is requested [ 60.122798][ T6734] usb3503 0-0008: usb3503_probe: probed in standby mode [ 60.125732][ T6734] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 60.217906][ T6736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.218066][ T6736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.218176][ T6736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.218242][ T6736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.218272][ T6736] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.308307][ T6746] syzkaller0: entered promiscuous mode [ 60.308344][ T6746] syzkaller0: entered allmulticast mode [ 60.357148][ T2394] usbhid 6-1:0.0: can't add hid device: -71 [ 60.359175][ T2394] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 60.364240][ T2394] usb 6-1: USB disconnect, device number 4 [ 60.836111][ T6765] overlayfs: missing 'workdir' [ 61.070480][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 61.134895][ T5876] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.171854][ T6783] tc action pedit 'at' offset 164 out of bounds [ 61.273307][ T6785] ip_tables: iptables: counters copy to user failed while replacing table [ 61.285688][ T5876] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 61.287840][ T5876] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 61.287853][ T5876] usb 5-1: config 1 has no interface number 0 [ 61.289487][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.289499][ T5876] usb 5-1: Product: syz [ 61.289506][ T5876] usb 5-1: Manufacturer: syz [ 61.289513][ T5876] usb 5-1: SerialNumber: syz [ 61.298972][ T5876] usb 5-1: 3:1 : does not exist [ 61.298985][ T5876] usb 5-1: 3:2 : does not exist [ 61.397223][ T6794] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 61.504341][ T6799] syzkaller0: entered promiscuous mode [ 61.504383][ T6799] syzkaller0: entered allmulticast mode [ 61.506755][ T6799] tipc: Started in network mode [ 61.506778][ T6799] tipc: Node identity bac35a1fd4ef, cluster identity 4711 [ 61.508292][ T6799] tipc: Enabled bearer , priority 0 [ 61.511736][ T6799] tipc: Resetting bearer [ 61.516102][ T6798] tipc: Resetting bearer [ 61.527968][ T6798] tipc: Disabling bearer [ 61.740375][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 61.772748][ T6804] netlink: 460 bytes leftover after parsing attributes in process `syz.2.320'. [ 61.828620][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.321'. [ 61.829345][ T6806] netlink: 'syz.2.321': attribute type 3 has an invalid length. [ 61.831236][ T6806] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 61.831246][ T6806] netlink: 224 bytes leftover after parsing attributes in process `syz.2.321'. [ 61.831253][ T6806] NCSI netlink: No device for ifindex 0 [ 62.062238][ T5517] usb 5-1: USB disconnect, device number 3 [ 62.217022][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.295004][ T5735] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.295062][ T5735] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.295158][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.032590][ T6846] tipc: Enabling of bearer rejected, failed to enable media [ 63.035976][ T6846] ip_tables: iptables: counters copy to user failed while replacing table [ 63.229123][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 63.263513][ T6852] bond0: (slave bond_slave_0): Releasing backup interface [ 63.271532][ T6852] bond0: (slave bond_slave_1): Releasing backup interface [ 63.279190][ T6852] team0: Port device team_slave_0 removed [ 63.284350][ T6852] team0: Port device team_slave_1 removed [ 63.285062][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.285074][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.287376][ T6852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.287387][ T6852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.290263][ T6852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.297468][ T6852] team0: Mode changed to "random" [ 63.298361][ T6852] vlan0: entered promiscuous mode [ 63.305839][ T6852] team0: Port device vlan0 added [ 63.311678][ T6852] tipc: Enabled bearer , priority 0 [ 63.336431][ T13] bond3: (slave vlan2): link status definitely down, disabling slave [ 63.340752][ T13] bond3: now running without any active interface! [ 63.391760][ T6857] bond0: (slave veth0_to_batadv): Device is not bonding slave [ 63.391805][ T6857] bond0: option active_slave: invalid value (veth0_to_batadv) [ 63.396339][ T6857] bond0 (unregistering): Released all slaves [ 63.410759][ T6858] vlan3: entered promiscuous mode [ 63.410814][ T6858] hsr0: entered promiscuous mode [ 63.412017][ T6858] vlan3: entered allmulticast mode [ 63.412028][ T6858] hsr0: entered allmulticast mode [ 63.412035][ T6858] hsr_slave_0: entered allmulticast mode [ 63.412042][ T6858] hsr_slave_1: entered allmulticast mode [ 63.420070][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 63.423932][ T6858] hsr_slave_0: left promiscuous mode [ 63.425719][ T6858] hsr_slave_1: left promiscuous mode [ 63.720153][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 63.720315][ T43] audit: type=1400 audit(1788231103.851:482): avc: denied { mounton } for pid=6882 comm="syz.1.345" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 63.720978][ T6887] EXT4-fs (loop1): unable to read superblock [ 63.781711][ T43] audit: type=1400 audit(1788231103.911:483): avc: denied { bind } for pid=6889 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.855017][ T5517] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.005430][ T5517] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 64.007762][ T5517] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.007774][ T5517] usb 8-1: Product: syz [ 64.007781][ T5517] usb 8-1: Manufacturer: syz [ 64.007788][ T5517] usb 8-1: SerialNumber: syz [ 64.021002][ T6874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.022621][ T6885] netlink: 88 bytes leftover after parsing attributes in process `syz.1.345'. [ 64.071716][ T6901] FAT-fs (nbd1): unable to read boot sector [ 64.158019][ T6906] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 64.161347][ T6903] i2c i2c-0: new_device: Missing parameters [ 64.174752][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.175583][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.201287][ T6901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.240136][ T43] audit: type=1400 audit(1788231104.371:484): avc: denied { listen } for pid=6912 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.241841][ T43] audit: type=1400 audit(1788231104.371:485): avc: denied { connect } for pid=6912 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.242422][ T43] audit: type=1400 audit(1788231104.371:486): avc: denied { write } for pid=6912 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.242672][ T43] audit: type=1400 audit(1788231104.371:487): avc: denied { accept } for pid=6912 comm="syz.0.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.295429][ T5728] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.354956][ T5599] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.355054][ T5599] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.355130][ T5599] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.355175][ T5599] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.370894][ T5599] bond3: (slave vlan2): link status definitely up, 10000 Mbps full duplex [ 64.371225][ T5599] bond3: (slave vlan2): making interface the new active one [ 64.375008][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 64.375030][ T5728] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.375049][ T5728] Bluetooth: hci2: command 0x0c1a tx timeout [ 64.375859][ T5599] bond3: active interface up! [ 64.415528][ T43] audit: type=1400 audit(1788231104.551:488): avc: denied { create } for pid=6916 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.436509][ T35] tipc: Node number set to 4273596624 [ 64.466261][ T43] audit: type=1400 audit(1788231104.601:489): avc: denied { map } for pid=6918 comm="syz.1.353" path="/dev/ublkc1" dev="devtmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.632279][ T43] audit: type=1400 audit(1788231104.761:490): avc: denied { read } for pid=6923 comm="syz.2.355" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.632389][ T43] audit: type=1400 audit(1788231104.761:491): avc: denied { open } for pid=6923 comm="syz.2.355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.633859][ T5517] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 64.633979][ T5517] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 64.639600][ T5517] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 64.710909][ T5517] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 65.456889][ T6941] batman_adv: batadv0: Adding interface: dummy0 [ 65.457053][ T6941] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.457428][ T6941] batman_adv: batadv0: Interface activated: dummy0 [ 65.505689][ T6941] batadv0: mtu less than device minimum [ 65.508052][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.508866][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.510161][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.511003][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.511839][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.512699][ T6941] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 65.755660][ T6951] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 65.759703][ T6951] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 65.762419][ T6951] CPU: 2 UID: 0 PID: 6951 Comm: syz.1.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.766104][ T6951] Tainted: [L]=SOFTLOCKUP [ 65.767513][ T6951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.769811][ T6936] configfs-gadget.g1 gadget.0: HOST MAC f6:c2:62:24:84:66 [ 65.769845][ T6936] configfs-gadget.g1 gadget.0: MAC 4a:80:50:b5:48:e8 [ 65.774866][ T6951] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 [ 65.776989][ T6951] Code: bd 0b 09 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 2b 71 45 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b [ 65.782892][ T6951] RSP: 0018:ffffc9000c5ffb30 EFLAGS: 00010206 [ 65.784785][ T6951] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007582000 [ 65.787321][ T6951] RDX: 000000000000000c RSI: ffffffff82c67be5 RDI: 0000000000000060 [ 65.789758][ T6951] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 65.792251][ T6951] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 65.794724][ T6951] R13: ffff888049e0a800 R14: ffff888049e0a800 R15: ffff888049e0a942 [ 65.797227][ T6951] FS: 00007f133784e6c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 65.799981][ T6951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.802250][ T6951] CR2: 00007f133784cfa8 CR3: 0000000022f85000 CR4: 0000000000352ef0 [ 65.804810][ T6951] Call Trace: [ 65.805876][ T6951] [ 65.806817][ T6951] usbg_make_tpg+0x251/0x610 [ 65.808285][ T6951] ? __pfx_usbg_make_tpg+0x10/0x10 [ 65.809919][ T6951] ? find_held_lock+0x2b/0x80 [ 65.811414][ T6951] ? __pfx_usbg_make_tpg+0x10/0x10 [ 65.812972][ T6951] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 65.814794][ T6951] target_fabric_make_tpg+0xab/0x8c0 [ 65.816473][ T6951] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 65.818413][ T6951] configfs_mkdir+0x525/0xd40 [ 65.819907][ T6951] ? may_create+0x285/0x440 [ 65.821478][ T6951] ? __pfx_configfs_mkdir+0x10/0x10 [ 65.823124][ T6951] vfs_mkdir+0x364/0x850 [ 65.824513][ T6951] filename_mkdirat+0x48b/0x5e0 [ 65.826082][ T6951] ? __pfx_filename_mkdirat+0x10/0x10 [ 65.827797][ T6951] ? strncpy_from_user+0x19d/0x2d0 [ 65.829389][ T6951] ? do_getname+0x191/0x390 [ 65.830802][ T6951] __x64_sys_mkdir+0x6b/0x90 [ 65.832261][ T6951] do_syscall_64+0x123/0x790 [ 65.833735][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.835632][ T6951] RIP: 0033:0x7f133699e159 [ 65.837120][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.843314][ T6951] RSP: 002b:00007f133784e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 65.845796][ T6951] RAX: ffffffffffffffda RBX: 00007f1336c26090 RCX: 00007f133699e159 [ 65.848385][ T6951] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 65.850906][ T6951] RBP: 00007f1336a35024 R08: 0000000000000000 R09: 0000000000000000 [ 65.853415][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.855898][ T6951] R13: 00007f1336c26128 R14: 00007f1336c26090 R15: 00007fff14291068 [ 65.858380][ T6951] [ 65.859373][ T6951] Modules linked in: [ 65.861034][ T6951] ---[ end trace 0000000000000000 ]--- [ ** replaying previous printk message ** [ 65.866690][ T6951] RIP: 0010:configfs_depend_item_unlocked+0x24a/0x6a0 [ 65.866755][ T6951] Code: bd 0b 09 c7 44 24 1c fe ff ff ff e9 a6 02 00 00 e8 2b 71 45 ff 48 8d 7d 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1d 04 00 00 48 bb 00 00 00 00 00 fc ff df 4c 8b [ 65.866768][ T6951] RSP: 0018:ffffc9000c5ffb30 EFLAGS: 00010206 [ 65.866779][ T6951] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90007582000 [ 65.866786][ T6951] RDX: 000000000000000c RSI: ffffffff82c67be5 RDI: 0000000000000060 [ 65.866825][ T6951] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 65.866836][ T6951] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 65.866842][ T6951] R13: ffff888049e0a800 R14: ffff888049e0a800 R15: ffff888049e0a942 [ 65.866849][ T6951] FS: 00007f133784e6c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 65.866876][ T6951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.866885][ T6951] CR2: 000000110c4653ac CR3: 0000000022f85000 CR4: 0000000000352ef0 [ 65.866893][ T6951] Kernel panic - not syncing: Fatal exception [ 65.900943][ T6951] Kernel Offset: disabled [ 65.902334][ T6951] Rebooting in 86400 seconds..