last executing test programs: 2.578027046s ago: executing program 3 (id=296): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x585182) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x40) 2.499980977s ago: executing program 3 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x801) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x10, 0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) mmap(&(0x7f000095a000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r3, 0x4db4000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4040001}, 0xc090) 2.389920547s ago: executing program 3 (id=298): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) umount2(0x0, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/101) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xe4, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x6e, 0x1, 0x3, 0x1, 0x7, 0x4, {0x9, 0x21, 0x800, 0x80, 0x1, {0x22, 0xc15}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x5, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xee, 0x8, 0x4}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x3, 0x8, 0x6, 0x8}, 0x13, &(0x7f0000000200)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0xfffffffffffffdfd, 0x10, 0x2, 0x8, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0xc, 0x8}]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x100000001, 0x143402) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x39, &(0x7f00000000c0)=0x4d, 0xffffffffffffff72) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="645ec88040fe19961be8a56a64eb83987c99e6d5ab21a9763e0be731faa321a8c52776e49a1c826c2640881f55d9c6931c758f1a41e4e88f67e0d92b411ff5d5ab0a8af5c0bc2894a728e768e18cc6eb79a4150b9d1dee8f0b707963719ed2032b128f35b5aedb69860c29b9ee772974c1f24d33aa26354d8b1950d5c80e578c71df876f047ad14a68cd9f02b857f1b5beb8c5f8e95afec1e7703fbdf7f8a649691d2ea0d3ab2546bcf1e2a2a0aa792a2e04"], 0x30}}, 0x0) 1.38005681s ago: executing program 0 (id=305): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x2, "d0968f849af24b1ab7a2904c0171557e50ae"}, 0x13, 0x1) 1.379776648s ago: executing program 0 (id=306): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001600010000000000000000000a000014000100ff010000000000000000000000000001ae000280bf74a7dffdd8f8331ba40dfabcc81c75"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r5], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) chdir(&(0x7f0000000100)='./file0\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) read$FUSE(r9, &(0x7f0000002540)={0x2020}, 0x2076) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}}, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) open_tree(r10, &(0x7f0000000200)='./file0\x00', 0x8800) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x1, 0x2016}}}, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}) 1.25980732s ago: executing program 3 (id=308): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x3f3142, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r1 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x273}) io_uring_enter(r1, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getresuid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) (async) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) fcntl$notify(r0, 0x402, 0x2b) 1.178809094s ago: executing program 0 (id=309): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) write(r0, &(0x7f0000000040)="b8d293ad", 0x4) 1.00013472s ago: executing program 0 (id=312): r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000080)=0x94, 0x4) 999.744411ms ago: executing program 0 (id=313): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000000440)=[{&(0x7f0000000200)=""/219, 0xdb}], 0x1, &(0x7f0000000680)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) 998.232881ms ago: executing program 1 (id=314): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{}, [@null, @rose, @null, @rose, @remote, @remote, @default, @rose]}, &(0x7f00000000c0)=0x48) recvfrom$ax25(r1, &(0x7f0000000100)=""/181, 0xb5, 0x0, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000240)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000280)={r1}) r3 = memfd_secret(0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000002c0)={0xe, 0x0, 'client0\x00', 0x3, "b3dbd84efb302982", "defa0b41f11c7c95a9062c1567987b9d7da8176b14b462fa89e3f3b584858e8d", 0x1ff, 0xb}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000400)={0x0, &(0x7f0000000380)="41f0c53c191c9bb9e82dcb5676cf299ad49fe9f424dd80b592fd9eb9f780147be2937abcf615cd8b3232960b9d84f4e19818aeb935dd30405291794c75c919b25752b5c4beac390ef024d034d2eaa8fe7adabb9c934df7de509ec6743ad7ab1ef5d5", 0x62}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4140}, 0x11) (async) fgetxattr(r1, &(0x7f0000000580)=@known='system.posix_acl_default\x00', &(0x7f00000005c0)=""/204, 0xcc) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$sndseq(r3, &(0x7f00000006c0)=[{0x80, 0xe, 0xb9, 0x7, @tick=0x4, {0x3, 0x8}, {0x81, 0x3e}, @note={0x9, 0x3, 0xf8, 0xca, 0x1}}], 0x1c) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r3) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040090) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000840), 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000880)={0x3, 0x1, 0x9, 0x0, 0x2}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000900)=0xa9c) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x200008c5) (async, rerun: 32) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000a40)={@bcast, @null, 0x2, 0x20}) (async, rerun: 32) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x46963070}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaca1}]}, 0x7c}}, 0x2002000) ftruncate(r2, 0x7) (async, rerun: 32) r8 = syz_open_dev$sndpcmc(&(0x7f0000000bc0), 0x0, 0x640) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_DROP(r8, 0x4143, 0x0) (async) r9 = dup(r0) write$sndseq(r9, &(0x7f0000000c00)=[{0x4, 0x5, 0xe, 0x5, @time={0x7, 0xa}, {0xf, 0x2}, {0xfc, 0x7f}, @time=@time={0x1, 0xb16}}, {0x2, 0xf7, 0x95, 0x5, @time={0x0, 0x8000}, {0xd0, 0x4}, {0x3, 0x8}, @raw8={"755e764eaffc7d726bd334ce"}}, {0x6f, 0x5, 0x7, 0x4, @tick=0x1, {0x1}, {0x0, 0xef}, @raw8={"762c92e1255f909b9a90216e"}}, {0x0, 0xc, 0xd, 0x5, @tick=0x5, {0x2, 0x4}, {0x7, 0x8}, @note={0xe0, 0x3, 0x7, 0x1, 0x938}}], 0x70) (async, rerun: 32) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffff) (rerun: 32) ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000c80)={0x0, 0xd}) 929.90066ms ago: executing program 1 (id=315): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000000c0)={{r0}, "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"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) sendfile(r2, r2, 0x0, 0x457) r5 = openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x7) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230200000000200000000300000014f00000fc020000000000000000000000000001"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"}) write$cgroup_pressure(r5, &(0x7f00000010c0)={'full', 0x20, 0x1000000000000, 0x20, 0x7}, 0x2f) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000001100)={0x200, 0x1000, 0x0, 0x7, 0x3, [0x2, 0x6, 0xfffffffa, 0x4]}) 928.696091ms ago: executing program 0 (id=317): r0 = syz_usb_connect$uac1(0x0, 0x104, &(0x7f0000000140)={{0x12, 0x1, 0xa7f59ee20d495daf, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x3, 0x1, 0xe, 0x60, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x4}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x0, 0x7, "1ffed2de47e3"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x6, 0x8f, 0x5, 0x0, 0x96}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x1, 0x2, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x6, 0x4, 0x10}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x4, "e2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x4, 0x2, 0x5e, "78261a744b4c7e99"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x0, 0x8, "d45864bb"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x2, 0x4, "e7", "8b"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf0, 0x2, 0x1, 0x8, "3d0fe35a7d6d61"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0xed, 0xf1, "d9029f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0x6, {0x7, 0x25, 0x1, 0x82, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x18, 0x3, 0xf7, "ca092416ae"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x101, 0x7, 0x9, "1a61"}, @as_header={0x7, 0x24, 0x1, 0xdc, 0x6, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0xa9, 0x2, {0x7, 0x25, 0x1, 0x1, 0x1, 0xa}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x80, 0x1, 0x8, 0x6}, 0x33, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f33000320100a07a50000000000020000600000c000ff00f0c000000000ff000000fe010710a199a80e76d9517870020243030000000000000000"], 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x414}}, {0x8c, &(0x7f0000000300)=@string={0x8c, 0x3, "a911631780d43942c958145e504cdb926f3f2f99a1b9f1b8479b18fbf0aa92fba3e9735dba6257894eca8f97521dfb1498acde0ba5539c48cada276fe9177a2a9bd95c68d30b41ff39c507fe2928857d51037d095ed357fd4f905dd47d0d23614c4637ec70586ae8d1c529a11bff26e4c2f55310ecb0939bcbc33ac0aaf385698a8f485fffea2eba35e4"}}, {0x45, &(0x7f0000000440)=@string={0x45, 0x3, "6c550f1c8b138884b7ba118e9bbaed720deb2ca0d130d8bc4328ca7b2f5121d29074ad133100ddefe4ccc4d93f7a6e9227a59241a1bc6d6a696a2c359b2ee2a264169d"}}, {0x1d, &(0x7f00000003c0)=@string={0x1d, 0x3, "018664c6728c656e2740e04857816fccca157c2f81ab0ddbac2904"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x83e}}]}) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000580)={0x3, 0x1, 0x5, 0x9, 0x0, 0x42}) r4 = dup(r1) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="100000000000"], 0x10}, 0x20000444) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f00004b4000/0x2000)=nil, 0x2000, 0x12) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 739.885524ms ago: executing program 2 (id=318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r5, 0x80) accept$netrom(r5, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="0f93cf0f01cb0fd5ac00900f01c90f09660f38817efc0f320fc73426f3f465660f28360001", 0x25}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 679.593997ms ago: executing program 1 (id=319): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000240)="0f060f07f20f1c8114000f01c90fb9fcbaf80c66b8a5b0678666efbafc0cb002ee640f015f000f1869000f320f01c2", 0x2f}], 0x1, 0x4e, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x100, 0xffff, 0xc1e6, 0x1ff}}) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x2070bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 679.410086ms ago: executing program 1 (id=320): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90", 0x2}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x83}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 598.655774ms ago: executing program 1 (id=321): r0 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x470f4a2d, 0xe5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000040)={0x6, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', r1}, 0x18) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) 598.244256ms ago: executing program 1 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0xc0, &(0x7f0000000500)=@string={0xc0, 0x3, "78a311261ccdf90669ff4b951f49c20b36e7246a43170a938ce708fb0294431afe2f141ef2c3d613e97daa9c39b8ff530dbd82b99c459c732de75f2ecef401e861151587b389f208548918fe5b8299bd570876664feb4c5f37d8b529ce150775032f6e40619df4bd0902f84459d2f0c4f62fe2a1661b06f0a914869af97bca9cb9da8d3b8e4d3724a0acbc6902248b0aed624ab32b4f78c7cf8c76beda3a582ac10cbcab7c908058e44a616247670230748c3596480bf300e7f6b0cacd48"}}, {0xe1, &(0x7f0000000680)=@string={0xe1, 0x3, "635fd478109e82544f82cb5c1f5ccd23bf74a0258bb32deff0d2ae85fe1c9a240aa62a4f6153cc1b71321595bda28ac9266c1b0ecf9c6eba822fa3c6c86cb9e65da29f6b3b9d9d57631c80d5ecca6a1af7d5cab3aa230164c5b52c51d6eba0a3bb4d415f328bcd6cb804223a26c7b18830a31f90daa43d13745dcd97ff3bb027345c0d6ba73eb72938af3a0e637a75236622e4605127508b25d6a3547f7b247034a509ee77d0cea721abfbe75271bab953a934cac0f7ff7f40eaf71c22b21ba64db1290454c846d7dd9bfee6e14378306fbbcdd9b18b551179097f61ea5e9c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESOCT=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(r2, 0x0, 0x0, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f40)={0x14, r8, 0x1, 0x2000, 0x25dfdbfc, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x24000815}, 0x4004844) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000dc0)={0x0, 0xfff, 0xa}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000011c0)={r11, 0x100000001, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x6, 0x20}, &(0x7f0000000480)=0xc) r13 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000009c0)={@fda={0x66646185, 0x4, 0x1, 0x26}, @ptr={0x70742a85, 0x0, &(0x7f0000000800)=""/229, 0xe5}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r13, 0x13, &(0x7f0000000040)=[0x81, 0x2], 0x2) 399.154985ms ago: executing program 2 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd29, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44893}, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x8}], 0x1, 0x6) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) r2 = getpid() (async) timer_create(0x3, &(0x7f00000004c0)={0x0, 0xc, 0x0, @thr={&(0x7f0000000400)="d326ca37e0857721094520ad7ec40f286334db7f5db27caf", &(0x7f0000000440)="dfa5e95f5605091f037c078b3247cb08aa8065499f22f29e85ab4846f818a0b6aaf2426ed0de96bb805a30576749a33f47ebcf928163b7c33242407ecf848fac6445bcaffe6f52a755400f3b64a913ce64737da24ac6b10f3a3ab742e251e98a27a67e737b82a6ed67ad24b7a252ba2d8a5f20a3479cef063ea00fcf"}}, &(0x7f0000000500)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async, rerun: 64) syz_pidfd_open(r2, 0x0) (rerun: 64) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400003, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (rerun: 64) mkdir(&(0x7f0000000140)='./control\x00', 0x111) (async) rmdir(&(0x7f0000000100)='./control\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) umount2(&(0x7f0000001b00)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) recvmsg$unix(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000200)=""/179, 0xb3}], 0x3, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000540)={0x400, 0x5}) (async, rerun: 32) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x101, 0xfffffffb}, 0x10) (async, rerun: 32) setns(r4, 0x24020000) (async, rerun: 32) getpid() (async) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) 395.520989ms ago: executing program 2 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2f, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x6, 0x3000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macvlan0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x508, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x40000) 310.201538ms ago: executing program 2 (id=325): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') getpeername$unix(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000100)=0x6e) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x1ff, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 239.594617ms ago: executing program 2 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x8}, @local, 0xc, 0x0, 0xa82a, 0x80, 0x4, 0xfffffff8, 0x800}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x1, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@local, 0x8}, @local, 0xc, 0x0, 0xa82a, 0x80, 0x4, 0xfffffff8, 0x800}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x1, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) (async) 239.122533ms ago: executing program 2 (id=327): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000000c0)={{r0}, "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"}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) sendfile(r2, r2, 0x0, 0x457) r5 = openat$cgroup_pressure(r2, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x7) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230200000000200000000300000014f00000fc020000000000000000000000000001"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe) ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f00000001c0)={0x75, "d3e96f57555f5f18513ebfdd1ef90f8dfc772693e9f8e46909c8d4b62787cc4fdf615ffde1bba22c3ae4859df02af000cec5ebdef01a5c9a4dc200aeed53ee16bac1ae9108a64270077c0382f493b40ba4f79292e5adbcc6479bba03355c4e857b929c0d156014681e69e8bc73e5c283e4bc747951571ed819967907d6376af3"}) write$cgroup_pressure(r5, &(0x7f00000010c0)={'full', 0x20, 0x1000000000000, 0x20, 0x7}, 0x2f) 80.161021ms ago: executing program 3 (id=328): sched_setaffinity(0x0, 0x2f, &(0x7f0000000080)=0x14f) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xb, 0xfff6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) 0s ago: executing program 3 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x8001af85, &(0x7f0000000080)={0x1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3297' (ED25519) to the list of known hosts. [ 54.926810][ T40] audit: type=1400 audit(1769976035.441:62): avc: denied { name_bind } for pid=5919 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.965741][ T40] audit: type=1400 audit(1769976035.481:63): avc: denied { execute } for pid=5920 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 54.974457][ T40] audit: type=1400 audit(1769976035.481:64): avc: denied { execute_no_trans } for pid=5920 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.044631][ T40] audit: type=1400 audit(1769976037.561:65): avc: denied { mounton } for pid=5920 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.056075][ T5920] cgroup: Unknown subsys name 'net' [ 57.057468][ T40] audit: type=1400 audit(1769976037.571:66): avc: denied { mount } for pid=5920 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.230980][ T5920] cgroup: Unknown subsys name 'cpuset' [ 57.237046][ T5920] cgroup: Unknown subsys name 'rlimit' [ 57.428223][ T5925] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.240401][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.270562][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 62.270574][ T40] audit: type=1400 audit(1769976042.791:82): avc: denied { execmem } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.477579][ T40] audit: type=1400 audit(1769976042.991:83): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.483872][ T40] audit: type=1400 audit(1769976042.991:84): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.493215][ T40] audit: type=1400 audit(1769976042.991:85): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 62.501522][ T40] audit: type=1400 audit(1769976043.011:86): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[6619]" dev="sockfs" ino=6619 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.527014][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.530354][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.533804][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.536747][ T5941] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.539831][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.542320][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.545116][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.546385][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.547684][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.551559][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.553387][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.555181][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.556002][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.556248][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.558421][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.562946][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.563182][ T40] audit: type=1400 audit(1769976043.081:87): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.563229][ T40] audit: type=1400 audit(1769976043.081:88): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.566971][ T40] audit: type=1400 audit(1769976043.081:89): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.567642][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.578930][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.599834][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.609320][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.814497][ T40] audit: type=1400 audit(1769976043.331:90): avc: denied { module_request } for pid=5933 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.893976][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 62.991478][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 63.041563][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 63.055753][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.059094][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.062108][ T5933] bridge_slave_0: entered allmulticast mode [ 63.065340][ T5933] bridge_slave_0: entered promiscuous mode [ 63.091085][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.094038][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.096697][ T5933] bridge_slave_1: entered allmulticast mode [ 63.100322][ T5933] bridge_slave_1: entered promiscuous mode [ 63.127017][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.136613][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.172938][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 63.182910][ T5933] team0: Port device team_slave_0 added [ 63.197163][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.200244][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.203186][ T5934] bridge_slave_0: entered allmulticast mode [ 63.206269][ T5934] bridge_slave_0: entered promiscuous mode [ 63.210447][ T5933] team0: Port device team_slave_1 added [ 63.247788][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.249848][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.251991][ T5934] bridge_slave_1: entered allmulticast mode [ 63.254451][ T5934] bridge_slave_1: entered promiscuous mode [ 63.285025][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.288972][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.292099][ T5940] bridge_slave_0: entered allmulticast mode [ 63.296040][ T5940] bridge_slave_0: entered promiscuous mode [ 63.301566][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.304587][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.308074][ T5940] bridge_slave_1: entered allmulticast mode [ 63.311897][ T5940] bridge_slave_1: entered promiscuous mode [ 63.329513][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.334100][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.336968][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.348038][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.354872][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.358061][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.365963][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.390919][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.427541][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.467137][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.496387][ T5933] hsr_slave_0: entered promiscuous mode [ 63.500061][ T5933] hsr_slave_1: entered promiscuous mode [ 63.515291][ T5934] team0: Port device team_slave_0 added [ 63.517984][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.520776][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.523951][ T5936] bridge_slave_0: entered allmulticast mode [ 63.528066][ T5936] bridge_slave_0: entered promiscuous mode [ 63.556234][ T5934] team0: Port device team_slave_1 added [ 63.568491][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.571582][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.574675][ T5936] bridge_slave_1: entered allmulticast mode [ 63.579144][ T5936] bridge_slave_1: entered promiscuous mode [ 63.583602][ T5940] team0: Port device team_slave_0 added [ 63.593001][ T5940] team0: Port device team_slave_1 added [ 63.616132][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.620693][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.630254][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.661899][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.664876][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.675878][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.691996][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.703335][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.714733][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.717657][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.728517][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.738715][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.741620][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.752400][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.785618][ T5936] team0: Port device team_slave_0 added [ 63.793223][ T5936] team0: Port device team_slave_1 added [ 63.896213][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.899057][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.907205][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.916327][ T5934] hsr_slave_0: entered promiscuous mode [ 63.919553][ T5934] hsr_slave_1: entered promiscuous mode [ 63.922495][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 63.924982][ T5934] Cannot create hsr debugfs directory [ 63.932763][ T5940] hsr_slave_0: entered promiscuous mode [ 63.935891][ T5940] hsr_slave_1: entered promiscuous mode [ 63.938877][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 63.941269][ T5940] Cannot create hsr debugfs directory [ 63.944239][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.946564][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.954745][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.026107][ T5936] hsr_slave_0: entered promiscuous mode [ 64.028519][ T5936] hsr_slave_1: entered promiscuous mode [ 64.030724][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 64.032578][ T5936] Cannot create hsr debugfs directory [ 64.172595][ T5933] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.199951][ T5933] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.225191][ T5933] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.253477][ T5933] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.321937][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.329831][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.338395][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.346044][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.419741][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.428630][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.438819][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.446344][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.530983][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.543094][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.548367][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.552572][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.557214][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.588611][ T5946] Bluetooth: hci0: command tx timeout [ 64.590960][ T5946] Bluetooth: hci1: command tx timeout [ 64.591910][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.606903][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.609813][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.632583][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.639880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.642481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.659034][ T5938] Bluetooth: hci3: command tx timeout [ 64.661137][ T5938] Bluetooth: hci2: command tx timeout [ 64.694081][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.722131][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.725196][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.742805][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.745126][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.750872][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.769943][ T40] audit: type=1400 audit(1769976045.291:91): avc: denied { sys_module } for pid=5933 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.779549][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.794703][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.797758][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.818945][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.821229][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.841002][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.861444][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.903851][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.907002][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.915903][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.919000][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.943877][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.973971][ T5936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.980936][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.013629][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.047930][ T5933] veth0_vlan: entered promiscuous mode [ 65.072641][ T5933] veth1_vlan: entered promiscuous mode [ 65.087627][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.092424][ T5934] veth0_vlan: entered promiscuous mode [ 65.118567][ T5934] veth1_vlan: entered promiscuous mode [ 65.152782][ T5933] veth0_macvtap: entered promiscuous mode [ 65.164242][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.168239][ T5940] veth0_vlan: entered promiscuous mode [ 65.171471][ T5933] veth1_macvtap: entered promiscuous mode [ 65.194763][ T5940] veth1_vlan: entered promiscuous mode [ 65.200648][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.206776][ T5934] veth0_macvtap: entered promiscuous mode [ 65.215116][ T5934] veth1_macvtap: entered promiscuous mode [ 65.220453][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.238649][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.241553][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.250258][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.253991][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.260609][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.266057][ T5936] veth0_vlan: entered promiscuous mode [ 65.287801][ T5940] veth0_macvtap: entered promiscuous mode [ 65.293369][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.298330][ T5936] veth1_vlan: entered promiscuous mode [ 65.325027][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.328621][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.331660][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.334624][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.338203][ T5940] veth1_macvtap: entered promiscuous mode [ 65.363393][ T1193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.368271][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.370128][ T1193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.413151][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.417779][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.421030][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.434313][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.443030][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.460764][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.464572][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.469872][ T5936] veth0_macvtap: entered promiscuous mode [ 65.471014][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.475780][ T5936] veth1_macvtap: entered promiscuous mode [ 65.477289][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.490483][ T5933] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.511468][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.514851][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.519698][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.534950][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.560870][ T6024] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.585401][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.589763][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.593783][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.602738][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.605303][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.626424][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.643175][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.645937][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.678817][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.681355][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.699997][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.702821][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.744213][ T6038] Zero length message leads to an empty skb [ 65.822816][ T6048] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 65.953278][ T6056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6056 comm=syz.1.10 [ 66.658013][ T5946] Bluetooth: hci1: command tx timeout [ 66.658181][ T5938] Bluetooth: hci0: command tx timeout [ 66.747665][ T5938] Bluetooth: hci2: command tx timeout [ 66.747677][ T5946] Bluetooth: hci3: command tx timeout [ 68.737580][ T5946] Bluetooth: hci1: command tx timeout [ 68.737884][ T5938] Bluetooth: hci0: command tx timeout [ 68.817712][ T5938] Bluetooth: hci2: command tx timeout [ 68.817729][ T5946] Bluetooth: hci3: command tx timeout [ 70.819298][ T5938] Bluetooth: hci1: command tx timeout [ 70.819314][ T5946] Bluetooth: hci0: command tx timeout [ 70.897695][ T5938] Bluetooth: hci3: command tx timeout [ 70.909155][ T5938] Bluetooth: hci2: command tx timeout [ 76.344879][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.348249][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.844943][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 82.844959][ T40] audit: type=1400 audit(1769976063.361:133): avc: denied { create } for pid=6075 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.852333][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 82.860217][ T40] audit: type=1400 audit(1769976063.371:134): avc: denied { ioctl } for pid=6077 comm="syz.3.16" path="socket:[11278]" dev="sockfs" ino=11278 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.863651][ T6078] bridge0: entered promiscuous mode [ 82.871158][ T40] audit: type=1400 audit(1769976063.371:135): avc: denied { write } for pid=6075 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.873166][ T6078] macsec1: entered allmulticast mode [ 82.882704][ T6078] bridge0: entered allmulticast mode [ 82.885386][ T40] audit: type=1400 audit(1769976063.371:136): avc: denied { connect } for pid=6075 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.886010][ T6078] bridge0: port 3(macsec1) entered blocking state [ 82.893612][ T40] audit: type=1400 audit(1769976063.371:137): avc: denied { name_connect } for pid=6075 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 82.896666][ T6078] bridge0: port 3(macsec1) entered disabled state [ 82.904849][ T40] audit: type=1400 audit(1769976063.421:138): avc: denied { listen } for pid=6075 comm="syz.1.14" lport=42246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.909790][ T6080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 82.916427][ T40] audit: type=1400 audit(1769976063.421:139): avc: denied { setopt } for pid=6075 comm="syz.1.14" lport=42246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.924719][ T6080] CIFS mount error: No usable UNC path provided in device string! [ 82.924719][ T6080] [ 82.924837][ T6080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 82.933549][ T40] audit: type=1400 audit(1769976063.421:140): avc: denied { accept } for pid=6075 comm="syz.1.14" lport=42246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.937061][ T6078] bridge0: left allmulticast mode [ 82.954894][ T6078] bridge0: left promiscuous mode [ 82.956182][ T40] audit: type=1400 audit(1769976063.471:141): avc: denied { append } for pid=6071 comm="syz.0.13" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.958607][ T40] audit: type=1400 audit(1769976063.481:142): avc: denied { read } for pid=6075 comm="syz.1.14" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 83.006632][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.006741][ T6085] netlink: 'syz.2.17': attribute type 11 has an invalid length. [ 83.012544][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.017090][ T6085] netlink: 'syz.2.17': attribute type 11 has an invalid length. [ 83.091224][ T6090] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 83.095133][ T6088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.100765][ T6088] block device autoloading is deprecated and will be removed. [ 83.228456][ T9] IPVS: starting estimator thread 0... [ 83.267141][ T6117] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.26'. [ 83.327724][ T6115] IPVS: using max 44 ests per chain, 105600 per kthread [ 83.456659][ T6131] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 83.468772][ T6131] ./bus: Can't lookup blockdev [ 83.595495][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 83.598657][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 83.703275][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 83.706359][ T6150] netlink: 'syz.2.33': attribute type 3 has an invalid length. [ 83.707526][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 83.752431][ T6154] Bluetooth: MGMT ver 1.23 [ 83.768697][ T6157] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 83.793586][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.38'. [ 83.807020][ T6156] netfs: Duplicate cookie detected [ 83.809950][ T6156] netfs: O-cookie c=00000002 [fl=4008 na=0 nA=0 s=-] [ 83.812708][ T6156] netfs: O-cookie V=00000001 [9p,syz,] [ 83.815312][ T6156] netfs: O-key=[8] 'c900540400000000' [ 83.817595][ T6156] netfs: N-cookie c=00000003 [fl=8 na=0 nA=0 s=-] [ 83.820446][ T6156] netfs: N-cookie V=00000001 [9p,syz,] [ 83.822733][ T6156] netfs: N-key=[8] 'c900540400000000' [ 84.018625][ T6186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 84.052143][ T6186] process 'syz.2.42' launched './file0' with NULL argv: empty string added [ 84.063128][ T6186] loop7: detected capacity change from 0 to 7 [ 84.067635][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.070710][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.074757][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.077715][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.080332][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.083280][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.086067][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.087538][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.089170][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.094247][ T6188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 84.097537][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.103320][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.106664][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.109863][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.113508][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.116902][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.118322][ T6190] bond0: entered promiscuous mode [ 84.119472][ T6186] ldm_validate_partition_table(): Disk read failed. [ 84.120957][ T6190] bond_slave_0: entered promiscuous mode [ 84.123252][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.125083][ T6190] bond_slave_1: entered promiscuous mode [ 84.128219][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.128365][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.128382][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.128484][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.133674][ T6190] batadv0: entered promiscuous mode [ 84.136730][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 84.141549][ T6190] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 84.147847][ T6186] Dev loop7: unable to read RDB block 0 [ 84.154319][ T6186] loop7: unable to read partition table [ 84.157094][ T6186] loop7: partition table beyond EOD, truncated [ 84.157467][ T6190] bond0: left promiscuous mode [ 84.160419][ T6186] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.164441][ T6190] bond_slave_0: left promiscuous mode [ 84.166835][ T6192] loop5: detected capacity change from 0 to 7 [ 84.170126][ T6190] bond_slave_1: left promiscuous mode [ 84.173478][ T6190] batadv0: left promiscuous mode [ 84.176355][ T6192] ldm_validate_partition_table(): Disk read failed. [ 84.186113][ T6192] Dev loop5: unable to read RDB block 0 [ 84.189153][ T6192] loop5: unable to read partition table [ 84.192502][ T6192] loop5: partition table beyond EOD, truncated [ 84.195130][ T6192] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 84.247537][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 84.251738][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 84.254846][ T60] usb 6-1: can't read configurations, error -61 [ 84.387541][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 84.537489][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 84.540925][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 84.543706][ T60] usb 6-1: can't read configurations, error -61 [ 84.546485][ T60] usb usb6-port1: attempt power cycle [ 84.547437][ T5943] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 84.717555][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 84.721491][ T5943] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.725500][ T5943] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.729709][ T5943] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.733773][ T5943] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.739445][ T5943] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.743314][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.750874][ T6197] block nbd0: shutting down sockets [ 84.887605][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.908976][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 84.922109][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 84.925366][ T60] usb 6-1: can't read configurations, error -61 [ 84.941187][ T6206] ipt_REJECT: TCP_RESET invalid for non-tcp [ 84.954152][ T5943] usb 7-1: GET_CAPABILITIES returned 0 [ 84.956062][ T5943] usbtmc 7-1:16.0: can't read capabilities [ 85.038436][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.048709][ T6209] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 85.067488][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.088384][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 85.092708][ T60] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 85.095921][ T60] usb 6-1: can't read configurations, error -61 [ 85.099287][ T60] usb usb6-port1: unable to enumerate USB device [ 85.131473][ T6215] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 85.155818][ T6196] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 85.163260][ T6223] netlink: 'syz.0.56': attribute type 11 has an invalid length. [ 85.164354][ T5943] usb 7-1: USB disconnect, device number 2 [ 85.166621][ T6223] netlink: 'syz.0.56': attribute type 7 has an invalid length. [ 85.279136][ T6227] loop2: detected capacity change from 0 to 7 [ 85.284551][ T6093] Dev loop2: unable to read RDB block 7 [ 85.286459][ T6093] loop2: unable to read partition table [ 85.289371][ T6093] loop2: partition table beyond EOD, truncated [ 85.294440][ T6227] Dev loop2: unable to read RDB block 7 [ 85.296320][ T6227] loop2: unable to read partition table [ 85.299074][ T6227] loop2: partition table beyond EOD, truncated [ 85.301232][ T6227] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 85.354770][ T6233] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 85.361295][ T6233] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 85.367569][ T6233] netlink: 'syz.0.59': attribute type 4 has an invalid length. [ 85.731975][ T6242] ======================================================= [ 85.731975][ T6242] WARNING: The mand mount option has been deprecated and [ 85.731975][ T6242] and is ignored by this kernel. Remove the mand [ 85.731975][ T6242] option from the mount to silence this warning. [ 85.731975][ T6242] ======================================================= [ 85.757340][ T6244] bond1: entered promiscuous mode [ 85.759439][ T6244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.832140][ T6250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.879838][ T6254] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.906327][ T6257] gretap0: entered allmulticast mode [ 85.909064][ T6257] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.948510][ T5943] kernel write not supported for file /audio1 (pid: 5943 comm: kworker/2:3) [ 85.964604][ T6262] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 86.013442][ T6269] nfs: Unknown parameter '' [ 86.089726][ T6277] warning: `syz.3.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.177510][ T5938] Bluetooth: hci1: command tx timeout [ 86.589182][ T961] cfg80211: failed to load regulatory.db [ 86.904202][ T6322] bridge0: port 3(syz_tun) entered blocking state [ 86.917900][ T6322] bridge0: port 3(syz_tun) entered disabled state [ 86.920977][ T6322] syz_tun: entered allmulticast mode [ 86.924989][ T6322] syz_tun: entered promiscuous mode [ 86.930434][ T6322] bridge0: port 3(syz_tun) entered blocking state [ 86.932906][ T6322] bridge0: port 3(syz_tun) entered forwarding state [ 86.993972][ T6330] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 87.109091][ T53] IPVS: starting estimator thread 0... [ 87.197519][ T6352] IPVS: using max 44 ests per chain, 105600 per kthread [ 87.262723][ T6363] netfs: Duplicate cookie detected [ 87.264387][ T6363] netfs: O-cookie c=00000004 [fl=4008 na=0 nA=0 s=-] [ 87.266486][ T6363] netfs: O-cookie V=00000002 [9p,syz,] [ 87.268369][ T6363] netfs: O-key=[8] 'c900540400000000' [ 87.270112][ T6363] netfs: N-cookie c=00000005 [fl=8 na=0 nA=0 s=-] [ 87.272148][ T6363] netfs: N-cookie V=00000002 [9p,syz,] [ 87.273912][ T6363] netfs: N-key=[8] 'c900540400000000' [ 87.379058][ T961] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 87.417492][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.459892][ T6368] veth1: entered promiscuous mode [ 87.462142][ T6368] veth1: entered allmulticast mode [ 87.509625][ T6370] sctp: [Deprecated]: syz.1.101 (pid 6370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.509625][ T6370] Use struct sctp_sack_info instead [ 87.549029][ T961] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.552602][ T961] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.555673][ T961] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.561405][ T961] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.564549][ T961] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.569911][ T53] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 87.571134][ T961] usb 8-1: config 0 descriptor?? [ 87.574790][ T53] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.580043][ T53] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.585736][ T53] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.590433][ T53] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.594917][ T53] usb 5-1: Product: syz [ 87.596891][ T53] usb 5-1: Manufacturer: syz [ 87.599512][ T53] usb 5-1: SerialNumber: syz [ 87.604386][ T53] usb 5-1: config 0 descriptor?? [ 87.615720][ T53] hub 5-1:0.0: bad descriptor, ignoring hub [ 87.618990][ T53] hub 5-1:0.0: probe with driver hub failed with error -5 [ 87.625815][ T53] usb 5-1: selecting invalid altsetting 0 [ 87.874622][ T6388] capability: warning: `syz.1.106' uses deprecated v2 capabilities in a way that may be insecure [ 87.879874][ T6386] __nla_validate_parse: 9 callbacks suppressed [ 87.879888][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 87.991853][ T40] kauditd_printk_skb: 140 callbacks suppressed [ 87.991869][ T40] audit: type=1400 audit(1769976068.511:283): avc: denied { ioctl } for pid=6396 comm="syz.1.108" path="socket:[12315]" dev="sockfs" ino=12315 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.013456][ T6350] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 88.033984][ T5946] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 88.065998][ T6401] netlink: 112 bytes leftover after parsing attributes in process `syz.1.110'. [ 88.438306][ T961] usbhid 8-1:0.0: can't add hid device: -71 [ 88.440388][ T961] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 88.444326][ T961] usb 8-1: USB disconnect, device number 2 [ 88.648017][ T6405] validate_nla: 66 callbacks suppressed [ 88.648033][ T6405] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 88.671707][ T6405] bond1 (unregistering): Released all slaves [ 88.706205][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 88.709693][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 88.778269][ T6409] pim6reg: entered allmulticast mode [ 88.824031][ T40] audit: type=1400 audit(1769976069.341:284): avc: denied { write } for pid=6412 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.880736][ T40] audit: type=1400 audit(1769976069.401:285): avc: denied { create } for pid=6414 comm="syz.1.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.948990][ T40] audit: type=1400 audit(1769976069.471:286): avc: denied { connect } for pid=6418 comm="syz.2.117" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.963778][ T40] audit: type=1400 audit(1769976069.481:287): avc: denied { write } for pid=6418 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.983562][ T40] audit: type=1400 audit(1769976069.501:288): avc: denied { create } for pid=6421 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.991606][ T40] audit: type=1400 audit(1769976069.511:289): avc: denied { write } for pid=6421 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 89.020620][ T40] audit: type=1400 audit(1769976069.541:290): avc: denied { mounton } for pid=6418 comm="syz.2.117" path="/30/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.029763][ T40] audit: type=1400 audit(1769976069.541:291): avc: denied { write } for pid=6424 comm="syz.3.119" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 89.066001][ T40] audit: type=1400 audit(1769976069.581:292): avc: denied { append } for pid=6428 comm="syz.2.120" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.082056][ T6420] netlink: 'syz.1.116': attribute type 39 has an invalid length. [ 89.129921][ T6433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6433 comm=syz.3.121 [ 89.199879][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.204932][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.210127][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.214014][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.220984][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.234048][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.364971][ T6452] erspan1: entered promiscuous mode [ 89.415773][ T5938] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 89.601577][ T6460] 9p: Could not find request transport: f [ 89.648500][ T6469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6469 comm=syz.1.133 [ 89.654327][ T6469] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 89.868396][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 89.900964][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 89.997584][ T10] usb 8-1: device descriptor read/64, error -71 [ 90.051648][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.055560][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.097229][ T6485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.138'. [ 90.133798][ T6487] overlay: filesystem on ./bus is read-only [ 90.237527][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.377568][ T10] usb 8-1: device descriptor read/64, error -71 [ 90.487882][ T10] usb usb8-port1: attempt power cycle [ 90.721192][ T6525] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.827642][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.848451][ T10] usb 8-1: device descriptor read/8, error -71 [ 90.977761][ T6530] block nbd2: Device being setup by another task [ 91.004560][ T6530] xt_hashlimit: size too large, truncated to 1048576 [ 91.087484][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 91.107913][ T10] usb 8-1: device descriptor read/8, error -71 [ 91.140375][ T5943] usb 5-1: USB disconnect, device number 2 [ 91.220129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.220284][ T10] usb usb8-port1: unable to enumerate USB device [ 91.244574][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 91.274159][ T6538] syzkaller0: entered promiscuous mode [ 91.276922][ T6538] syzkaller0: entered allmulticast mode [ 92.410245][ T5938] block nbd2: Receive control failed (result -32) [ 92.412520][ T6529] block nbd2: shutting down sockets [ 92.544232][ T6558] tmpfs: Bad value for 'mpol' [ 92.633183][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 92.711322][ T6571] xt_TCPMSS: Only works on TCP SYN packets [ 92.876196][ T6581] gfs2: not a GFS2 filesystem [ 92.979571][ T6021] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.141340][ T6021] usb 8-1: unable to get BOS descriptor or descriptor too short [ 93.143125][ T6587] loop2: detected capacity change from 0 to 7 [ 93.145925][ T6021] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.151819][ T6021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.151895][ T6093] Dev loop2: unable to read RDB block 7 [ 93.156259][ T6021] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.156846][ T6093] loop2: unable to read partition table [ 93.160142][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.162184][ T6093] loop2: partition table beyond EOD, truncated [ 93.164464][ T6021] usb 8-1: Product: syz [ 93.164474][ T6021] usb 8-1: Manufacturer: syz [ 93.172028][ T6021] usb 8-1: SerialNumber: syz [ 93.175327][ T6587] Dev loop2: unable to read RDB block 7 [ 93.178456][ T6587] loop2: unable to read partition table [ 93.181124][ T6587] loop2: partition table beyond EOD, truncated [ 93.183801][ T6587] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 93.229597][ T6589] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 93.229597][ T6589] program syz.0.168 not setting count and/or reply_len properly [ 93.281638][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 93.382767][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.386500][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.396536][ T6021] usb 8-1: 0:2 : does not exist [ 93.406899][ T6021] usb 8-1: USB disconnect, device number 7 [ 93.421634][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.429190][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 93.429201][ T40] audit: type=1400 audit(1769976073.951:342): avc: denied { ioctl } for pid=6601 comm="syz.0.171" path="/dev/input/mouse1" dev="devtmpfs" ino=1297 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 93.483022][ T40] audit: type=1400 audit(1769976074.001:343): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.510844][ T40] audit: type=1400 audit(1769976074.031:344): avc: denied { create } for pid=6607 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.519253][ T40] audit: type=1400 audit(1769976074.031:345): avc: denied { listen } for pid=6607 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.541111][ T6613] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 93.593871][ T40] audit: type=1400 audit(1769976074.111:346): avc: denied { create } for pid=6616 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.601595][ T40] audit: type=1400 audit(1769976074.111:347): avc: denied { write } for pid=6616 comm="syz.0.176" path="socket:[14445]" dev="sockfs" ino=14445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.608975][ T40] audit: type=1400 audit(1769976074.121:348): avc: denied { read } for pid=6616 comm="syz.0.176" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.618700][ T40] audit: type=1400 audit(1769976074.121:349): avc: denied { open } for pid=6616 comm="syz.0.176" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 93.626288][ T40] audit: type=1400 audit(1769976074.121:350): avc: denied { ioctl } for pid=6616 comm="syz.0.176" path="socket:[14445]" dev="sockfs" ino=14445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.670427][ T6622] tipc: Started in network mode [ 93.672540][ T6622] tipc: Node identity eafb2323583, cluster identity 4711 [ 93.675668][ T6622] tipc: Enabled bearer , priority 0 [ 93.778213][ T5938] Bluetooth: hci3: command 0x0405 tx timeout [ 93.917931][ T6021] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.927854][ T40] audit: type=1400 audit(1769976074.451:351): avc: denied { write } for pid=6629 comm="syz.2.180" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 93.963433][ T6634] openvswitch: netlink: Message has 16 unknown bytes. [ 94.078676][ T6021] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.082373][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.085770][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.089027][ T6021] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 94.094468][ T6021] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 94.097352][ T6021] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.100237][ T6021] usb 5-1: Manufacturer: syz [ 94.104014][ T6021] usb 5-1: config 0 descriptor?? [ 94.109718][ T6644] netlink: 'syz.1.186': attribute type 23 has an invalid length. [ 94.288633][ T6654] sctp: [Deprecated]: syz.1.188 (pid 6654) Use of int in max_burst socket option deprecated. [ 94.288633][ T6654] Use struct sctp_assoc_value instead [ 94.435051][ T6664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.192'. [ 94.512951][ T6021] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 94.523329][ T6021] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 94.548699][ T6670] binder: 6669:6670 ioctl c058560f 200000000380 returned -22 [ 94.599738][ T6667] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.194'. [ 94.663344][ T6678] netlink: 'syz.3.196': attribute type 21 has an invalid length. [ 94.666075][ T6678] netlink: 'syz.3.196': attribute type 22 has an invalid length. [ 94.669710][ T6678] netlink: 'syz.3.196': attribute type 23 has an invalid length. [ 94.673229][ T6678] netlink: 'syz.3.196': attribute type 25 has an invalid length. [ 94.675796][ T6678] netlink: 'syz.3.196': attribute type 26 has an invalid length. [ 94.679622][ T34] tipc: Node number set to 2999657251 [ 94.681959][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 94.768735][ T6622] syzkaller0: MTU too low for tipc bearer [ 94.770709][ T6622] tipc: Disabling bearer [ 94.775138][ T6686] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.198'. [ 94.784841][ T34] usb 5-1: USB disconnect, device number 3 [ 94.838005][ T6688] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.910253][ T6699] dlm: non-version read from control device 8224 [ 94.932236][ T6702] batadv_slave_0: entered promiscuous mode [ 94.933024][ T6693] gfs2: not a GFS2 filesystem [ 94.934670][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 94.940070][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.965460][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.120572][ T6727] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 95.126070][ T6727] batman_adv: batadv0: Adding interface: team0 [ 95.132400][ T6727] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.136577][ T6729] program syz.3.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.140870][ T6727] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 95.146347][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 95.202275][ T6727] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 95.205599][ T6727] netlink: 2 bytes leftover after parsing attributes in process `syz.1.211'. [ 95.211080][ T6727] team0: entered promiscuous mode [ 95.213033][ T6727] team_slave_0: entered promiscuous mode [ 95.215538][ T6727] team_slave_1: entered promiscuous mode [ 95.223157][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.225861][ T6727] batman_adv: batadv0: Interface activated: team0 [ 95.228864][ T6727] batman_adv: batadv0: Interface deactivated: team0 [ 95.231445][ T6727] batman_adv: batadv0: Removing interface: team0 [ 95.234700][ T6727] bridge0: port 3(team0) entered blocking state [ 95.236814][ T6727] bridge0: port 3(team0) entered disabled state [ 95.239479][ T6727] team0: entered allmulticast mode [ 95.241232][ T6727] team_slave_0: entered allmulticast mode [ 95.243128][ T6727] team_slave_1: entered allmulticast mode [ 95.300817][ T6735] program syz.3.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.487047][ T6757] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.552068][ T6761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6761 comm=syz.3.221 [ 95.552309][ T5940] cgroup: fork rejected by pids controller in /syz1 [ 95.630335][ T1146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.679054][ T6761] veth0_to_team: entered promiscuous mode [ 95.682782][ T6761] veth0_to_team: left promiscuous mode [ 95.719748][ T1146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.735828][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 95.745454][ T6764] bond0: entered promiscuous mode [ 95.747794][ T6764] bond_slave_0: entered promiscuous mode [ 95.750486][ T6764] bond_slave_1: entered promiscuous mode [ 95.754627][ T6764] gretap0: entered promiscuous mode [ 95.758390][ T6764] hsr1: entered promiscuous mode [ 95.849943][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.854621][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.860069][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.865075][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.873246][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.874662][ T1146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.938888][ T6771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.956007][ T1146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.016189][ T6771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.143599][ T6771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.149282][ T6766] chnl_net:caif_netlink_parms(): no params data found [ 96.170108][ T1146] team0: left allmulticast mode [ 96.173259][ T1146] team_slave_0: left allmulticast mode [ 96.175463][ T1146] team_slave_1: left allmulticast mode [ 96.183976][ T1146] bridge0: port 3(team0) entered disabled state [ 96.190758][ T1146] bridge_slave_1: left allmulticast mode [ 96.193160][ T1146] bridge_slave_1: left promiscuous mode [ 96.195616][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.216825][ T1146] bridge_slave_0: left allmulticast mode [ 96.219391][ T1146] bridge_slave_0: left promiscuous mode [ 96.223812][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.348809][ T6795] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.230'. [ 96.351805][ T6795] openvswitch: netlink: Missing key (keys=40, expected=100) [ 96.518064][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.526297][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.534803][ T1146] bond0 (unregistering): Released all slaves [ 96.586779][ T6771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.654738][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.661150][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.664310][ T6766] bridge_slave_0: entered allmulticast mode [ 96.673534][ T6766] bridge_slave_0: entered promiscuous mode [ 96.679346][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.680653][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.682224][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.688733][ T6766] bridge_slave_1: entered allmulticast mode [ 96.692424][ T6766] bridge_slave_1: entered promiscuous mode [ 96.718966][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.724823][ T6815] QAT: failed to copy from user cfg_data. [ 96.763274][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.829115][ T1171] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.851514][ T6766] team0: Port device team_slave_0 added [ 96.853796][ T1171] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.857135][ T1171] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.871417][ T9] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 96.888281][ T9] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 96.891838][ T9] usb 8-1: config 220 interface 0 has no altsetting 0 [ 96.895886][ T6766] team0: Port device team_slave_1 added [ 96.896180][ T9] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 96.901329][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.904242][ T9] usb 8-1: Product: syz [ 96.905623][ T9] usb 8-1: Manufacturer: syz [ 96.907260][ T9] usb 8-1: SerialNumber: syz [ 96.915778][ T1171] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.983581][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.985797][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.994018][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.020612][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.022841][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.031722][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.055984][ T6766] hsr_slave_0: entered promiscuous mode [ 97.058682][ T6766] hsr_slave_1: entered promiscuous mode [ 97.060751][ T6766] debugfs: 'hsr0' already exists in 'hsr' [ 97.062572][ T6766] Cannot create hsr debugfs directory [ 97.082852][ T6852] tmpfs: Bad value for 'mpol' [ 97.119873][ T1146] hsr_slave_0: left promiscuous mode [ 97.122602][ T1146] hsr_slave_1: left promiscuous mode [ 97.124803][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.127325][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.134437][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.135970][ T9] uvcvideo 8-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 97.136871][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.141863][ T9] uvcvideo 8-1:220.0: No valid video chain found. [ 97.153694][ T9] usb 8-1: USB disconnect, device number 8 [ 97.163493][ T1146] veth1_macvtap: left promiscuous mode [ 97.166060][ T1146] veth0_macvtap: left promiscuous mode [ 97.168812][ T1146] veth1_vlan: left promiscuous mode [ 97.171186][ T1146] veth0_vlan: left promiscuous mode [ 97.252360][ T1146] pim6reg (unregistering): left allmulticast mode [ 97.463626][ T1146] team_slave_1 (unregistering): left promiscuous mode [ 97.466706][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 97.487042][ T1146] team_slave_0 (unregistering): left promiscuous mode [ 97.490303][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 97.720371][ T6857] xt_hashlimit: max too large, truncated to 1048576 [ 97.947860][ T5938] Bluetooth: hci3: command tx timeout [ 98.008695][ T6890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.171672][ T1146] IPVS: stop unused estimator thread 0... [ 98.204852][ T6907] nbd: nbd64 already in use [ 98.298461][ T6766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.307142][ T6766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.317632][ T6766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.322755][ T6766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.371038][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.380360][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.385844][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.388289][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.396050][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.399030][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.530791][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.551577][ T6766] veth0_vlan: entered promiscuous mode [ 98.556731][ T6766] veth1_vlan: entered promiscuous mode [ 98.571505][ T6766] veth0_macvtap: entered promiscuous mode [ 98.576523][ T6766] veth1_macvtap: entered promiscuous mode [ 98.586720][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.595120][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.601391][ T6833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.605269][ T6833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.610507][ T6833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.614283][ T6833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.654854][ T6823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.658439][ T6823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.676648][ T6823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.680429][ T6823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.754770][ T6940] __nla_validate_parse: 1 callbacks suppressed [ 98.754787][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 98.758979][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 98.758989][ T40] audit: type=1400 audit(1769976079.271:403): avc: denied { mounton } for pid=6939 comm="syz.1.223" path="/proc/3/cgroup" dev="proc" ino=14980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 98.770850][ T40] audit: type=1400 audit(1769976079.271:404): avc: denied { remount } for pid=6939 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 98.771325][ T6835] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.771470][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 98.787350][ T6835] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.793203][ T6835] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.796995][ T6835] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.839754][ T40] audit: type=1400 audit(1769976079.361:405): avc: denied { getopt } for pid=6941 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.948112][ T6951] mmap: syz.2.257 (6951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.012973][ T40] audit: type=1400 audit(1769976079.531:406): avc: denied { execute } for pid=6950 comm="syz.2.257" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.034692][ T40] audit: type=1400 audit(1769976079.551:407): avc: denied { create } for pid=6955 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.045312][ T6956] netlink: 'syz.3.253': attribute type 7 has an invalid length. [ 99.050687][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 99.050854][ T40] audit: type=1400 audit(1769976079.571:408): avc: denied { bind } for pid=6955 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.067567][ T40] audit: type=1400 audit(1769976079.571:409): avc: denied { ioctl } for pid=6955 comm="syz.3.253" path="socket:[17439]" dev="sockfs" ino=17439 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.076065][ T40] audit: type=1400 audit(1769976079.571:410): avc: denied { write } for pid=6955 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.083222][ T40] audit: type=1400 audit(1769976079.571:411): avc: denied { create } for pid=6955 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.089673][ T40] audit: type=1400 audit(1769976079.571:412): avc: denied { getopt } for pid=6955 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.233339][ T6969] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 99.241747][ T6969] team0: Cannot enslave team device to itself [ 99.446904][ T6975] netlink: 'syz.1.262': attribute type 29 has an invalid length. [ 99.451304][ T6977] netlink: 'syz.1.262': attribute type 29 has an invalid length. [ 100.027543][ T5938] Bluetooth: hci3: command tx timeout [ 100.084442][ T7004] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 100.089210][ T7004] nbd: must specify an index to disconnect [ 100.130663][ T7014] xt_time: unknown flags 0xf4 [ 100.155429][ T7015] xt_hashlimit: max too large, truncated to 1048576 [ 100.157191][ T7012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 100.327733][ T5972] delete_channel: no stack [ 100.355863][ T7020] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.359282][ T7020] overlayfs: failed to set xattr on upper [ 100.362287][ T7020] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.365203][ T7020] overlayfs: ...falling back to index=off. [ 100.375293][ T7020] overlayfs: ...falling back to uuid=null. [ 100.382055][ T7020] overlayfs: missing 'lowerdir' [ 100.498951][ T7029] binder: BC_ATTEMPT_ACQUIRE not supported [ 100.500883][ T7029] binder: 7028:7029 ioctl c0306201 200000000440 returned -22 [ 100.504301][ T7029] binder: BC_ATTEMPT_ACQUIRE not supported [ 100.506249][ T7029] binder: 7028:7029 ioctl c0306201 200000000440 returned -22 [ 100.615343][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.281'. [ 100.622462][ T7045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 100.625905][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.281'. [ 100.631921][ T7045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 100.653084][ T7047] tipc: Started in network mode [ 100.655169][ T7047] tipc: Node identity , cluster identity 4711 [ 100.658562][ T7047] tipc: Failed to set node id, please configure manually [ 100.661581][ T7047] tipc: Enabling of bearer rejected, failed to enable media [ 100.762864][ T7055] sg_read: process 221 (syz.2.282) changed security contexts after opening file descriptor, this is not allowed. [ 100.780717][ T7059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7059 comm=syz.1.284 [ 101.010969][ T7074] syzkaller1: entered promiscuous mode [ 101.012845][ T7074] syzkaller1: entered allmulticast mode [ 101.053300][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 101.053313][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 101.238641][ T5972] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.358046][ T7097] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.297'. [ 101.363191][ T7097] openvswitch: netlink: Missing key (keys=40, expected=100) [ 101.389775][ T5972] usb 5-1: config index 0 descriptor too short (expected 23553, got 27) [ 101.393019][ T5972] usb 5-1: config 226 has too many interfaces: 52, using maximum allowed: 32 [ 101.396561][ T5972] usb 5-1: config 226 has an invalid descriptor of length 222, skipping remainder of the config [ 101.400357][ T5972] usb 5-1: config 226 has 0 interfaces, different from the descriptor's value: 52 [ 101.406198][ T5972] usb 5-1: New USB device found, idVendor=54c4, idProduct=0283, bcdDevice=99.0b [ 101.409611][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.413049][ T5972] usb 5-1: Product: syz [ 101.414529][ T5972] usb 5-1: Manufacturer: syz [ 101.415967][ T5972] usb 5-1: SerialNumber: syz [ 101.637510][ T6021] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 101.701557][ T5938] Bluetooth: hci2: unexpected subevent 0x0a length: 108 > 30 [ 101.790102][ T6021] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.794345][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 101.798258][ T6021] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 101.802096][ T6021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.808417][ T6021] usb 8-1: config 0 descriptor?? [ 101.813405][ T6021] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 101.816505][ T6021] dvb-usb: bulk message failed: -22 (3/0) [ 101.825383][ T6021] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 101.829870][ T6021] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 101.832865][ T6021] usb 8-1: media controller created [ 101.839775][ T6021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.840407][ T5972] usb 5-1: USB disconnect, device number 4 [ 101.853721][ T6021] dvb-usb: bulk message failed: -22 (6/0) [ 101.855864][ T6021] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 101.860705][ T6021] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input6 [ 101.868909][ T6021] dvb-usb: schedule remote query interval to 150 msecs. [ 101.871170][ T6021] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 102.021321][ T7101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.024194][ T7101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.029160][ T9] usb 8-1: USB disconnect, device number 9 [ 102.043086][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 102.097517][ T5938] Bluetooth: hci3: command tx timeout [ 102.709551][ T7146] ieee802154 phy1 wpan1: encryption failed: -22 [ 102.807487][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 102.918395][ T5938] Bluetooth: hci3: unexpected subevent 0x0a length: 108 > 30 [ 102.959032][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.963392][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.967532][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.971243][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.977771][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.981193][ T9] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.984511][ T9] usb 8-1: Manufacturer: syz [ 102.988675][ T9] usb 8-1: config 0 descriptor?? [ 103.014428][ T7165] FAT-fs (loop2): unable to read boot sector [ 103.127565][ T6837] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.175126][ T7177] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 103.239774][ T7181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.257633][ T6837] usb 5-1: device descriptor read/64, error -71 [ 103.396186][ T9] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 103.401433][ T9] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 103.487592][ T6838] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 103.507465][ T6837] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.618120][ T6838] usb 6-1: device descriptor read/64, error -71 [ 103.637456][ T6837] usb 5-1: device descriptor read/64, error -71 [ 103.662470][ T5938] Bluetooth: hci2: unexpected subevent 0x0a length: 108 > 30 [ 103.662765][ T5938] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 103.662807][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.662832][ T5938] Tainted: [L]=SOFTLOCKUP [ 103.662838][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.662851][ T5938] Workqueue: hci2 hci_rx_work [ 103.662873][ T5938] Call Trace: [ 103.662879][ T5938] [ 103.662886][ T5938] dump_stack_lvl+0x100/0x190 [ 103.662912][ T5938] sysfs_warn_dup.cold+0x1c/0x28 [ 103.662938][ T5938] sysfs_create_dir_ns+0x24b/0x2b0 [ 103.662986][ T5938] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 103.663011][ T5938] ? find_held_lock+0x2b/0x80 [ 103.663036][ T5938] ? kobject_add_internal+0x25f/0x930 [ 103.663057][ T5938] ? kobject_add_internal+0x25f/0x930 [ 103.663080][ T5938] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.663102][ T5938] kobject_add_internal+0x2c8/0x930 [ 103.663126][ T5938] kobject_add+0x16a/0x1e0 [ 103.663147][ T5938] ? __pfx_kobject_add+0x10/0x10 [ 103.663167][ T5938] ? class_to_subsys+0x10f/0x150 [ 103.663212][ T5938] ? kobject_put+0xb9/0x640 [ 103.663231][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 103.663255][ T5938] device_add+0x294/0x1950 [ 103.663277][ T5938] ? __pfx_dev_set_name+0x10/0x10 [ 103.663302][ T5938] ? __pfx_device_add+0x10/0x10 [ 103.663323][ T5938] ? mgmt_send_event_skb+0x2fb/0x460 [ 103.663349][ T5938] hci_conn_add_sysfs+0x1a3/0x260 [ 103.663372][ T5938] le_conn_complete_evt+0x11cb/0x1f40 [ 103.663398][ T5938] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 103.663425][ T5938] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 103.663445][ T5938] ? skb_pull_data+0x15f/0x1e0 [ 103.663466][ T5938] hci_le_meta_evt+0x34a/0x5f0 [ 103.663487][ T5938] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 103.663510][ T5938] hci_event_packet+0x682/0x11c0 [ 103.663531][ T5938] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 103.663553][ T5938] ? __pfx_hci_event_packet+0x10/0x10 [ 103.663575][ T5938] ? kcov_remote_start+0x374/0x660 [ 103.663599][ T5938] ? lockdep_hardirqs_on+0x78/0x100 [ 103.663623][ T5938] hci_rx_work+0x451/0xfc0 [ 103.663647][ T5938] process_one_work+0x9c2/0x1840 [ 103.663677][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 103.663703][ T5938] ? assign_work+0x19c/0x250 [ 103.663724][ T5938] worker_thread+0x5da/0xe40 [ 103.663752][ T5938] ? kthread+0x17d/0x730 [ 103.663767][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 103.663785][ T5938] kthread+0x3b3/0x730 [ 103.663803][ T5938] ? __pfx_kthread+0x10/0x10 [ 103.663819][ T5938] ? ret_from_fork+0x79/0xaf0 [ 103.663837][ T5938] ? ret_from_fork+0x79/0xaf0 [ 103.663856][ T5938] ? rcu_is_watching+0x12/0xc0 [ 103.663878][ T5938] ? __pfx_kthread+0x10/0x10 [ 103.663897][ T5938] ret_from_fork+0x754/0xaf0 [ 103.663916][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 103.663937][ T5938] ? __switch_to+0x7b9/0x10c0 [ 103.663960][ T5938] ? __pfx_kthread+0x10/0x10 [ 103.663979][ T5938] ret_from_fork_asm+0x1a/0x30 [ 103.664008][ T5938] [ 103.664101][ T5938] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 103.664134][ T5938] Bluetooth: hci2: failed to register connection device [ 103.677239][ T6840] usb 8-1: USB disconnect, device number 10 [ 103.778618][ T5938] Bluetooth: hci2: command 0x0406 tx timeout [ 103.782466][ T6837] usb usb5-port1: attempt power cycle [ 103.858849][ T5938] ------------[ cut here ]------------ [ 103.860824][ T5938] refcnt < 0 [ 103.860832][ T5938] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0x16a/0x230, CPU#0: kworker/u33:2/5938 [ 103.865525][ T5938] Modules linked in: [ 103.867576][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.871312][ T5938] Tainted: [L]=SOFTLOCKUP [ 103.872699][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.876285][ T5938] Workqueue: hci2 hci_conn_timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.878065][ T5938] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 103.880050][ T5938] Code: 44 0f b6 2d 2b 2a 41 06 31 ff 41 83 e5 40 44 89 ee e8 4a 3b 95 f7 45 84 ed 0f 84 02 ff ff ff e9 2c a1 ff f6 e8 e7 40 95 f7 90 <0f> 0b 90 e8 de 40 95 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 103.886487][ T5938] RSP: 0018:ffffc90003307bb0 EFLAGS: 00010293 [ 103.888879][ T5938] RAX: 0000000000000000 RBX: ffff8880375aca40 RCX: ffffffff8a71b97f [ 103.891577][ T5938] RDX: ffff8880265624c0 RSI: ffffffff8a71ba79 RDI: ffff8880265624c0 [ 103.894091][ T5938] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 103.896646][ T5938] R10: 00000000ffffffff R11: 00000000000075a9 R12: ffff8880375ac000 [ 103.899251][ T5938] R13: ffff888026562944 R14: 0000000000000000 R15: ffff888024279400 [ 103.901822][ T5938] FS: 0000000000000000(0000) GS:ffff8880d65d9000(0000) knlGS:0000000000000000 [ 103.904683][ T5938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.906832][ T5938] CR2: 00007fc2eabe9880 CR3: 00000000586ac000 CR4: 0000000000352ef0 [ 103.909470][ T5938] Call Trace: [ 103.910573][ T5938] [ 103.911547][ T5938] process_one_work+0x9c2/0x1840 [ 103.913151][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 103.914953][ T5938] ? assign_work+0x19c/0x250 [ 103.916497][ T5938] worker_thread+0x5da/0xe40 [ 103.917472][ T6838] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 103.918092][ T5938] ? kthread+0x17d/0x730 [ 103.921889][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 103.923766][ T5938] kthread+0x3b3/0x730 [ 103.925094][ T5938] ? __pfx_kthread+0x10/0x10 [ 103.926582][ T5938] ? ret_from_fork+0x79/0xaf0 [ 103.928512][ T5938] ? ret_from_fork+0x79/0xaf0 [ 103.930133][ T5938] ? rcu_is_watching+0x12/0xc0 [ 103.931670][ T5938] ? __pfx_kthread+0x10/0x10 [ 103.933153][ T5938] ret_from_fork+0x754/0xaf0 [ 103.934679][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 103.936330][ T5938] ? __switch_to+0x7b9/0x10c0 [ 103.938498][ T5938] ? __pfx_kthread+0x10/0x10 [ 103.939998][ T5938] ret_from_fork_asm+0x1a/0x30 [ 103.941603][ T5938] [ 103.942633][ T5938] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.945006][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.948420][ T5938] Tainted: [L]=SOFTLOCKUP [ 103.949789][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.953007][ T5938] Workqueue: hci2 hci_conn_timeout [ 103.954819][ T5938] Call Trace: [ 103.955898][ T5938] [ 103.956860][ T5938] dump_stack_lvl+0x100/0x190 [ 103.958401][ T5938] vpanic+0x20d/0x630 [ 103.959684][ T5938] panic+0xd1/0xd1 [ 103.960894][ T5938] ? __pfx_panic+0x10/0x10 [ 103.962348][ T5938] ? check_panic_on_warn+0x1f/0x90 [ 103.963984][ T5938] check_panic_on_warn.cold+0x19/0x34 [ 103.965723][ T5938] ? hci_conn_timeout+0x16a/0x230 [ 103.967409][ T5938] __warn.cold+0x191/0x2f8 [ 103.969236][ T5938] __report_bug+0x296/0x3d0 [ 103.970707][ T5938] ? hci_conn_timeout+0x16a/0x230 [ 103.972315][ T5938] ? __pfx___report_bug+0x10/0x10 [ 103.973921][ T5938] ? add_lock_to_list+0x99/0x110 [ 103.975572][ T5938] ? hci_conn_timeout+0x16a/0x230 [ 103.977260][ T5938] report_bug+0xb2/0x220 [ 103.978670][ T5938] ? hci_conn_timeout+0x16a/0x230 [ 103.980286][ T5938] handle_bug+0x166/0x2a0 [ 103.981739][ T5938] exc_invalid_op+0x17/0x50 [ 103.983187][ T5938] asm_exc_invalid_op+0x1a/0x20 [ 103.984854][ T5938] RIP: 0010:hci_conn_timeout+0x16a/0x230 [ 103.986649][ T5938] Code: 44 0f b6 2d 2b 2a 41 06 31 ff 41 83 e5 40 44 89 ee e8 4a 3b 95 f7 45 84 ed 0f 84 02 ff ff ff e9 2c a1 ff f6 e8 e7 40 95 f7 90 <0f> 0b 90 e8 de 40 95 f7 48 8d bb fd f5 ff ff 48 b8 00 00 00 00 00 [ 103.992768][ T5938] RSP: 0018:ffffc90003307bb0 EFLAGS: 00010293 [ 103.994745][ T5938] RAX: 0000000000000000 RBX: ffff8880375aca40 RCX: ffffffff8a71b97f [ 103.997319][ T5938] RDX: ffff8880265624c0 RSI: ffffffff8a71ba79 RDI: ffff8880265624c0 [ 103.999825][ T5938] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 104.002325][ T5938] R10: 00000000ffffffff R11: 00000000000075a9 R12: ffff8880375ac000 [ 104.004852][ T5938] R13: ffff888026562944 R14: 0000000000000000 R15: ffff888024279400 [ 104.007367][ T5938] ? hci_conn_timeout+0x6f/0x230 [ 104.009333][ T5938] ? hci_conn_timeout+0x169/0x230 [ 104.011067][ T5938] process_one_work+0x9c2/0x1840 [ 104.012681][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 104.014428][ T5938] ? assign_work+0x19c/0x250 [ 104.015917][ T5938] worker_thread+0x5da/0xe40 [ 104.017411][ T5938] ? kthread+0x17d/0x730 [ 104.018797][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 104.020440][ T5938] kthread+0x3b3/0x730 [ 104.021842][ T5938] ? __pfx_kthread+0x10/0x10 [ 104.023336][ T5938] ? ret_from_fork+0x79/0xaf0 [ 104.024859][ T5938] ? ret_from_fork+0x79/0xaf0 [ 104.026382][ T5938] ? rcu_is_watching+0x12/0xc0 [ 104.027970][ T5938] ? __pfx_kthread+0x10/0x10 [ 104.029457][ T5938] ret_from_fork+0x754/0xaf0 [ 104.030944][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 104.032575][ T5938] ? __switch_to+0x7b9/0x10c0 [ 104.034120][ T5938] ? __pfx_kthread+0x10/0x10 [ 104.035674][ T5938] ret_from_fork_asm+0x1a/0x30 [ 104.037214][ T5938] [ 104.038846][ T5938] Kernel Offset: disabled [ 104.040232][ T5938] Rebooting in 86400 seconds..