last executing test programs: 26.408845444s ago: executing program 3 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x2}, @my=0x1, 0x8, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000300)={0x9, 0x5}) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi5\x00', 0x101001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYRESHEX=r3], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/92, 0x53}, {&(0x7f0000000580)=""/71, 0x47}], 0x1381, 0x0, 0x1f}, 0x40) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) ptrace$setopts(0x4206, r7, 0x0, 0x10006b) ptrace$peek(0x3, r7, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 24.241934747s ago: executing program 2 (id=305): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xf, 0xfff2}, {0xfff3, 0x2}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x1d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [{@seclabel}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r6, &(0x7f0000000240)=0xf4, 0xffffff14) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 24.194180673s ago: executing program 3 (id=306): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') 23.294756149s ago: executing program 2 (id=308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0}) sendmmsg$inet(r1, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000009c0)="ee807f0caf305fb5", 0x8}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x20d, @multicast2}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="c9f2666f2b754c62167fc40afe8fd9eb5e8bc5afbe48614c91befcaa627c313826d6315ab178bde07bc1a864f20a", 0x2e}, {&(0x7f0000000740)="b7aa2705982d7bcec4c858d05831aae3cffa0c0c779a3e4d9226700c829ac3e4102816f652b90418bf56b0f8cf0cf825d9e2081f595f49eb2d95807b86a02485d7df641615146eb87987a5153dbe1ee9a16c9a0a9234f743135ff84775bce418a77735f74782f581c6ebde61cbdbff412ca0d0cd7a7b367f4240cf406451d421a7677ca0a7b40474307ebbd82c14d949084c", 0x92}, {&(0x7f0000000800)="187e3efe6693fc1513fee4a4ee1976c2f6ce9441621a1aa8d88f1ac363049cc38ca2a8f8180511498be6f87c52322e79169bd432e1f1e08c66c4246368fbd7ae499f7ae024d6306b71b4489d25d1aa133e371dfa1e310a1a1d0cccc56012a815fb23bdc0d79adf2a887cb77fff93e6a166d3c5b028a5ae3b37191b5ff36e235cae266418526694cf57c79f752e55f6071fe20f2c56b8acf3b50999c29530c6b9", 0xa0}, {&(0x7f00000008c0)="b71ded57dd3a19526a4dd76616c0c45f1c7441203ee0b1f7685ea7764d094454dc37bde3eefb04a7a3af5be00ed98a42d3fbe55a2a2181031e0e9dd21f1e191d016dfc4b6e24faf8fb0a7d9ec6554456ae8dd693602a6f06831e11ffcd09b9528ad6335c3cc142cd51a989e6fa18aaf8b8d5eb54f772089201ee5b1778a40df2a7a5de654fc4b066859db1b7ce2ea7fea938b08ae759541fa3abba4f1a4e21e1cebb2278bf10d05c5b", 0xa9}], 0x4, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xd8}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b40)="cff55445873ced7c93da9814ddcc621922c2dffadb53074274732da39cf98c2ce52e32cd542a6d373461d11fb72ec2250ca0ae609230d73f62c7c398814a3204e4c27f6f12c8faab61417b40d96304530492f5a9ca01db7956938d33c6282a3f3a1dee9fbdf8f85082b2fa8b32734ce99eb30791938dbe71afe5da23b6924eb4d4cb5bfbe3fc6eaa0cdefde92b9ef5c5de4a452adcacab1148597e90bbe4f5e5ab14038d42d514f1abae10599e91e5c3ed7cd8d7757c71b6715d11172b7e4131ae14b241e82928c4305774f877189e8bc62cd93b", 0xd4}], 0x1, &(0x7f0000000c80)=[@ip_retopts={{0xb0, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x16, 0x0, 0x6, [0x2, 0x1ff, 0x4, 0x8, 0x4, 0xd2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x10, 0x3, 0x7, [{@remote}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0xfffffffc}, {@local, 0x7fff}]}, @timestamp_prespec={0x44, 0x1c, 0x7, 0x3, 0x0, [{@rand_addr=0x64010102, 0x80000001}, {@empty, 0x9}, {@broadcast, 0x1}]}, @cipso={0x86, 0x25, 0x3, [{0x7, 0x4, '/7'}, {0x6, 0xc, "edd2faeb6b514546b59a"}, {0x4, 0x7, "20ec99c717"}, {0x6, 0x8, "bb4a36ca86fb"}]}, @end, @ssrr={0x89, 0xf, 0x87, [@local, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x88, 0xb, "bcf439016c2308fe44"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0x130}}, {{&(0x7f0000000dc0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000037c0)=[{&(0x7f00000027c0)="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", 0x1000}], 0x1, &(0x7f0000003840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xde}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xb0}}, {{&(0x7f0000003900)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000e00)="c13524bcbbb271e01df88effa133c734ac4671362d16f856d101fc944b38d3dcd86341d57d949ee8de95ea4e07987e7658dad6babacc32eea98e0d32536f5ce7647c57209fe557f55ed3c78e90315939dcc4cb75041884b0e292fc70da5920fc30292183e6c2ea905ab7af2baa2dc25fa5817790e993828cb6af8b5c9782f0e0a2e7162d1cf39b85bc4a859ae884040e6d294f7fa0c42406decb9ce7e66a001efc14d25965476a77f844b01cc57bc82088574d33871b89e9d968a7dd", 0xbc}, {&(0x7f0000000ec0)="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", 0xfd}, {&(0x7f0000000fc0)="e8659615a20a4010ff7f6be3a32ee867701ea7300887a491a7a41c81bf66baa7675155ef7ecf1dbc761ee4ff2d3f6e9aaef8f0e0bff9d3d9aa1fbfdf3d0022eec29079e529bed4", 0x47}, {&(0x7f0000001040)="6e8ff56a01bd9fdd88900a61a85496cf9a9ca639cdd8cb21b92c400c3b84560ef81622afc4c597ab5cdf5224bd0eaa650e7c0c325b71fa1100b92fd2ec184d8c9c72144dd8c92da2716c2e4fbc383a9ef645781a", 0x54}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="cdc00762ac1c8007e3eb77f47897062d3660ee8010799d3800c9a854b4ebbc72c2ad0118c119e70df10c7b5b6e4f8e79c60ff9c25bdbaca3c16c3b119142c2a20ee752ab80676c6a7266b0767523230f7f57b70564dccb0fc32c8fd759af5d7e6aef559073f4bf637c2aba78ed6add26fe358dcdc6ae0ac7", 0x78}, {&(0x7f0000001180)="c8095835d54cfb222a4ef229b66a436ac91591a1d58f42f3249a42bacbe5", 0x1e}, {&(0x7f00000011c0)="96c3cb4a4607644ad2eecfdca5b8c942771addad6d4448bd4147fb4c8a1767432d58d5d7c8362aede8542e9d253d8a72c1dbfa396ab16835a84d218e428a51f456e1871f777c7c05ccfbe8011c7554c88cec6b4fb902fec84953cd7b86ad6dce4897377616499a4b0b85479a5e3a2622a5e48ce9a540c90806935702cdc01c941827183e0789cb679ee64c1c", 0x8c}, {&(0x7f0000001280)="96883861e4bfcda28c98b688d60dbae7defc81b6f53ecff6ea9e6833f64df2f3c4714d54d0399077769d88aa231a3232010b6b2c6c05a9962fa608915be43b081852f6f376e19ad3da8d32de336161402f31ac7620edd3e8da6c371d07a6a353e4348cc737cf031db7ce29d45e0da8dcca20af0cdf08e5c43df23a2b8e3ac0c1c5c89147f8b5461fa25a0ac0cdd4be00b2a80e2f7fb7ae54473dad2a9f7b727fd862d589dd5e6dc8d29104d6ee03dfe5f2c317cb7808886edf548d4d4fceb02500ed47c247194a5626248bdb25", 0xcd}, {&(0x7f0000001380)="165806d1940e8e6add1cb8e3c2e5876a0dabd12741d8be9e301ba622edd32b12f2435e11cdf5e1c52017ffaa7ab29286b34074066b62c49776ccac63594fa932c7a889f191b6ace6ef1934299d24e58314816deee544fa07318894aeab11e9e03b83f6c5", 0x64}], 0xa, &(0x7f0000003980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4600}}, @ip_retopts={{0x44, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x5e, [@rand_addr=0x64010100]}, @generic={0x4, 0x45, "161ce8987730ac"}, @cipso={0x86, 0x24, 0x2, [{0x2, 0xb, "bf9fbcfb7eead4d4ac"}, {0x5, 0xd, "fc0489c3fa7795feda56b9"}, {0x1, 0x6, "2fdaa86f"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x128, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x3d, 0x1, 0x9, [{@multicast2, 0x8}, {@rand_addr=0x64010100, 0xa}, {@multicast1, 0x7fffffff}, {@private=0xa010101, 0x1}, {@empty, 0x100}]}, @timestamp_prespec={0x44, 0x4c, 0x45, 0x3, 0x9, [{@multicast1, 0x7}, {@remote}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3}, {@broadcast, 0xfb47}, {@multicast2, 0x7ef}, {@remote, 0x8000}, {@multicast1, 0x3}, {@private=0xa010100, 0x7}]}, @lsrr={0x83, 0x2b, 0xb5, [@multicast2, @private=0xa010101, @multicast2, @private=0xa010102, @multicast1, @local, @remote, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x1f, 0x21, [@multicast1, @multicast2, @loopback, @rand_addr=0x64010101, @empty, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x24, 0xf8, 0x1, 0x2, [{@multicast1, 0xfff}, {@multicast1}, {@empty, 0x4}, {@loopback, 0x3}]}, @rr={0x7, 0xb, 0x22, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x24, 0x37, 0x1, 0x0, [{@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x9}, {@loopback, 0x8}, {@private=0xa010102, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x5f, [@local, @multicast1, @rand_addr=0x64010100, @multicast1, @multicast2, @multicast2]}, @cipso={0x86, 0x4b, 0x1, [{0x7, 0x11, '\x00'/15}, {0x2, 0xe, "6ddfa54fdf4b1b24bf081aa9"}, {0x6, 0x8, "373caf51d701"}, {0x6, 0x11, "5df3cf6fd495b3783d89b38bee247f"}, {0x7, 0x5, "4b3fc6"}, {0x7, 0x2}, {0x1, 0x6, "0d542ee6"}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010100}}}], 0x280}}], 0x5, 0x4040) 23.217331388s ago: executing program 2 (id=309): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff189}, 0x94) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) 23.049409457s ago: executing program 3 (id=310): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000002020500000000000000000005090005040002800600074000030000"], 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/file2\x00') r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000700)=ANY=[@ANYBLOB="120101029108b108e704200012730102030109022d0001055bd1030904260002ddf4d10d0921070003012248e9936f0ae497595431ef6b5316e9430609050be16f8e96be55ce44eb6256df471cbf341cfcf5ec38c24224292a6fb89aa127767e89d4f62e934c86e0fb4f"], &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x1, 0x9, 0x0, 0x20, 0x80}, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="010f1000010b10010c6200a000040008890ae3c188bbc8e0b9cc31e2ac02e20cc7f3be82ceb81c76216566524fa7db7308ce1af91fbf6732790a09bbf8c8b0493e8a1b380dad18aa0fda0bf6e381330707bfa81ea09a486d086264360eda63e12d3ea63afbdb0fd0c7e5401c79445f3ee12ff27f6f781c7ec201484a8cd710361d046f70f0094ebe7ddc"], 0x2, [{0xdb, &(0x7f00000004c0)=ANY=[@ANYBLOB="db03595b6f6476819fc55583bf07a15aa3feb8b8ad56b9e23b4a4db22a6f1a59279d5fde9b5dda1ba1e67d0760d705d115b64ed7e1d9124cb30d5415c0bda21625d81d46fd5cb4b8a394c67bcf912a6a6ef3530a5df03327ca072f9a808c42db63608c44863fa78e692e9202643c32be1e96cfe5b27abbe2b52b54c2e5eaef74f05b21ffd9f80c1ba80cca4812c119eda4ef62fed32e458e61ce216dfd54d1d655521ffc5f8008000000000000c1e8aa5be275fadb83bcd363683186d45f3a0700ee7120473c39d92136fbe2e2954c30cf0db480b0350a930891d5"]}, {0x46, &(0x7f00000005c0)=@string={0x46, 0x3, "ec42d0410025f2ca0d23f7863664a492bae26e88bbd89ec19b6712f2f0f7d4ddeba22c691e0a45a603df6cfe3b6f0e6d74d664fa2387b0170098b4ea2b28bb8f53cd540e"}}]}) 22.916531442s ago: executing program 2 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x5ff}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r0}, 0x10) (fail_nth: 1) 22.550979751s ago: executing program 2 (id=313): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001280)=@gettaction={0x24, 0x32, 0x1, 0x70bd2a, 0x5dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}]}, 0x24}}, 0x5) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x1) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000014d879d50a44540f42d381810b7930000000000000000000500004a50000008090a010196321b680100000000000000000a0000040900010073797a30000000000800050a4bc729fdaa0096c440000000020900020073797a310000000008e53540fffffffc0c000980fb000140000000020800084000000600000000000000010000000000000000000900000a94e4c8f4fb81e0f517de24d62ee5c45b65"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) geteuid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r10, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) 22.275993976s ago: executing program 0 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/11], 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)={&(0x7f0000003480)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) creat(&(0x7f0000000300)='./file0\x00', 0x1000000) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) 21.649541953s ago: executing program 1 (id=321): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) 21.614679298s ago: executing program 0 (id=322): r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="300300005a6f5fdf650841b64d3a139e41e737eaa62d9adf832ac61d70f6cc28090f391edfe104663b9d9d3a921242f3a81e58f40ad8ba59bfd6271916c8d4748fc4ba382e1b54d0e4886dc3aa86303266f2e67515c85a6ec0f3da33fca565d56f444d5c1606b697a01f3a081e78ebd5326ea47dfdfe054286df7907d1e6998af7cdac471c0b", @ANYRES16=r4, @ANYBLOB="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"], 0x330}}, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x200, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d"], 0x0) 21.60181372s ago: executing program 4 (id=323): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0xffff0000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 21.513014824s ago: executing program 1 (id=324): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendto$inet_nvme_of_msg(r0, &(0x7f0000000680)={@data_h2c={{0x6, 0xc, 0x18, 0xf, 0x3}, 0xb, 0x6, 0x100, 0x2, "e58e969b"}, @void}, 0x80, 0x0, 0x0, 0x0) 20.328689705s ago: executing program 4 (id=325): fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfff) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x8a, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0xa, 0x6, 0x8000, 0x2, 0xdc2b, 0x6, 0x6c4, 0x401}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) recvfrom$unix(r6, 0x0, 0x0, 0x2000, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x2, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008875}, 0x44) 20.258863493s ago: executing program 1 (id=326): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 20.183321011s ago: executing program 1 (id=327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64) fanotify_init(0x0, 0x400) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) (async, rerun: 32) close(r0) 20.09488138s ago: executing program 1 (id=328): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x0, 0x0, &(0x7f0000000040)}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLL', 0xe, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f000001b000), 0x2000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x648, 0x5a8, 0x168, 0x4d8, 0x0, 0x3e8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x138, 0x170, 0x48000000, {}, [@common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) dup(r6) syz_open_dev$vim2m(0x0, 0x7, 0x2) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x9, {"2a71f0d3fe13be00", "560e00000000023efe56060000002300", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) setreuid(0x0, 0xee00) keyctl$clear(0x5, 0xffffffffffffffff) r8 = inotify_init1(0x800) close(r8) socket$packet(0x11, 0x3, 0x300) ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x541b, 0xfffffffffffffffa) 19.521425953s ago: executing program 1 (id=329): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40), 0x0, 0xc044) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x8001}], 0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/79, 0x4f}], 0x1}, 0x3}], 0x2a, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140c5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0xffffffffffffff09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() setpgid(r2, r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000070, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.464426886s ago: executing program 3 (id=330): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x3000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 19.309711543s ago: executing program 4 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10006, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x40, 0x3, 0x3b0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bind$bt_hci(r2, &(0x7f0000000440)={0x1f, 0x1, 0x2}, 0x6) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0xfffffffffffffffd, {0x7, 0x29, 0x8, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x20, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x200000000, 0x48a, 0xc6, 0x400000000000007, 0xa, 0xfff7fffd, 0x6, 0x8, 0x2000, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listen(r4, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) close(r7) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0xffff2cf9}, &(0x7f0000000040)=0x8) shutdown(0xffffffffffffffff, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 17.867907547s ago: executing program 0 (id=332): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x2, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xda9a2f6f13dffc74}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x24040005) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0xb8680dca8eea3b2b, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x5c}}, 0x4) getpeername(r0, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000440)=0x80) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000500)={&(0x7f0000000480)=[{0x1, 0x0, 0x0, {0x2000, 0xe0f0}}, {0x8000000000000001, 0x2, 0x0, {0x1}}, {0x800, 0x1, 0x0, {0x4, 0x3c66}}, {0x3, 0x2, 0x0, {0x2, 0x1}}], 0x4, 0x20, 0x0, 0x7}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000600)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000640)={r3, 0x2, 0x5}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={0x0, @rand_addr, @multicast2}, &(0x7f0000000780)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0xf7, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000ac0)={'erspan0\x00', 0x0, 0x8, 0x700, 0x6ef5, 0x2, {{0x1d, 0x4, 0x1, 0x3f, 0x74, 0x66, 0x0, 0x2a, 0x29, 0x0, @loopback, @loopback, {[@cipso={0x86, 0x12, 0x3, [{0x2, 0x6, "a11f982f"}, {0x1, 0x6, "f8acf991"}]}, @rr={0x7, 0xf, 0x44, [@local, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xb9, 0x3, 0x5, [{@loopback, 0x4}, {@multicast1, 0x1ff}, {@empty, 0x4}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x9}, {@multicast2, 0x7}, {@local, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000d40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x124, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x40440c1}, 0x8004000) getdents(r0, &(0x7f0000000d80)=""/248, 0xf8) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000f80)={0x59f, 0x7ff, 0x5a1f}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0xffff9c63, 0x4c, 0xbf, 0x20040, r1, 0x7b79, '\x00', r7, r1, 0x4, 0x1, 0x2, 0xc}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009005}, 0x84) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001180), 0x4102, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f00000011c0)={0x5, 0x2, "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"}) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000001300)='^\x00', &(0x7f0000001340)='hash:net,net\x00', 0x0) write$6lowpan_control(r4, &(0x7f0000001380)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1b}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_MARK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x400c005) mount$overlay(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640), 0x1081800, &(0x7f0000001680)={[{@verity_on}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@uuid_off}, {@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@nfs_export_off}], [{@permit_directio}, {@subj_user={'subj_user', 0x3d, 'syz0\x00'}}, {@subj_user={'subj_user', 0x3d, 'erspan0\x00'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) mount$bind(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000001840)=[{}, {}, {}], &(0x7f0000001880)=0x18) 17.789340223s ago: executing program 2 (id=333): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x59, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.474863151s ago: executing program 4 (id=334): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) syz_clone3(0x0, 0x0) syz_open_pts(r0, 0x0) dup3(r0, r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 17.459412248s ago: executing program 0 (id=335): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x8cff}}, 0x24, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1400) 17.425501747s ago: executing program 3 (id=336): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendto$inet_nvme_of_msg(r0, &(0x7f0000000680)={@data_h2c={{0x6, 0xc, 0x18, 0xf, 0x3}, 0xb, 0x6, 0x100, 0x2, "e58e969b"}, @void}, 0x80, 0x0, 0x0, 0x0) 16.133370067s ago: executing program 0 (id=337): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 16.080430371s ago: executing program 0 (id=338): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 16.010866818s ago: executing program 4 (id=339): r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000140)=""/204) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.010908504s ago: executing program 3 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.379730725s ago: executing program 4 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x7, 0x90, 0x0, 0xa}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x1f, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 32 (id=329): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40), 0x0, 0xc044) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x8001}], 0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/79, 0x4f}], 0x1}, 0x3}], 0x2a, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140c5}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0xffffffffffffff09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() setpgid(r2, r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000070, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = fcntl$dupfd(r6, 0x406, r6) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ce: batadv_slave_1 [ 70.836727][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.862666][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.892618][ T5617] hsr_slave_0: entered promiscuous mode [ 70.898826][ T5617] hsr_slave_1: entered promiscuous mode [ 70.969697][ T5603] hsr_slave_0: entered promiscuous mode [ 70.975915][ T5603] hsr_slave_1: entered promiscuous mode [ 70.982076][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 70.987828][ T5603] Cannot create hsr debugfs directory [ 71.040520][ T5605] hsr_slave_0: entered promiscuous mode [ 71.046607][ T5605] hsr_slave_1: entered promiscuous mode [ 71.052814][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 71.058527][ T5605] Cannot create hsr debugfs directory [ 71.076354][ T5604] hsr_slave_0: entered promiscuous mode [ 71.082457][ T5604] hsr_slave_1: entered promiscuous mode [ 71.088446][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 71.094482][ T5604] Cannot create hsr debugfs directory [ 71.108873][ T5602] hsr_slave_0: entered promiscuous mode [ 71.117402][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.117923][ T5602] hsr_slave_1: entered promiscuous mode [ 71.124248][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.130726][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 71.141296][ T5602] Cannot create hsr debugfs directory [ 71.537023][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.551845][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.561122][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.570283][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.578946][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.588582][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.596589][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.606357][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.666672][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.676990][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.687361][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.696662][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.705045][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.714010][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.723496][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.732384][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.805987][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.816208][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.830252][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.839539][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.862591][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.872137][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.879757][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.888883][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.943158][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.962895][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.972472][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.980077][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.988560][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.005788][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.016734][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.026061][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.033702][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.043264][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.072672][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.080184][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.102311][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.109573][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.180620][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.190300][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.198765][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.208205][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.216884][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.225442][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.234151][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.240940][ T5606] Bluetooth: hci4: command tx timeout [ 72.246341][ T5616] Bluetooth: hci1: command tx timeout [ 72.254085][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.293227][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.311569][ T5606] Bluetooth: hci3: command tx timeout [ 72.317203][ T5616] Bluetooth: hci0: command tx timeout [ 72.321689][ T5618] Bluetooth: hci2: command tx timeout [ 72.353586][ T5617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.388043][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.420098][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.427259][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.456816][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.463950][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.491129][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.575715][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.586500][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.635560][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.642696][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.667691][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.694575][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.701712][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.712835][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.719986][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.743023][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.750151][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.795293][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.872186][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.916635][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.923822][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.988820][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.995993][ T1043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.009062][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.188311][ T5617] veth0_vlan: entered promiscuous mode [ 73.234579][ T5617] veth1_vlan: entered promiscuous mode [ 73.366208][ T5617] veth0_macvtap: entered promiscuous mode [ 73.390325][ T5617] veth1_macvtap: entered promiscuous mode [ 73.483902][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.516197][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.560916][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581079][ T1043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.611697][ T1043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.641427][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.657967][ T1043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.824492][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.859677][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.898913][ T5605] veth0_vlan: entered promiscuous mode [ 73.913477][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.936939][ T5605] veth1_vlan: entered promiscuous mode [ 73.941572][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.067696][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.077018][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.099347][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.117778][ T5605] veth0_macvtap: entered promiscuous mode [ 74.137514][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 74.137527][ T29] audit: type=1400 audit(1777364278.948:85): avc: denied { mounton } for pid=5617 comm="syz-executor" path="/root/syzkaller.ImPjia/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.178213][ T29] audit: type=1400 audit(1777364278.988:86): avc: denied { mount } for pid=5617 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.201741][ T5603] veth0_vlan: entered promiscuous mode [ 74.234232][ T5605] veth1_macvtap: entered promiscuous mode [ 74.247392][ T5617] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.261540][ T29] audit: type=1400 audit(1777364278.988:87): avc: denied { mounton } for pid=5617 comm="syz-executor" path="/root/syzkaller.ImPjia/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.264295][ T5602] veth0_vlan: entered promiscuous mode [ 74.292465][ T29] audit: type=1400 audit(1777364278.988:88): avc: denied { mount } for pid=5617 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.315867][ T5618] Bluetooth: hci1: command tx timeout [ 74.321318][ T5618] Bluetooth: hci4: command tx timeout [ 74.327112][ T5603] veth1_vlan: entered promiscuous mode [ 74.348463][ T29] audit: type=1400 audit(1777364278.988:89): avc: denied { mounton } for pid=5617 comm="syz-executor" path="/root/syzkaller.ImPjia/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.382100][ T29] audit: type=1400 audit(1777364278.988:90): avc: denied { mounton } for pid=5617 comm="syz-executor" path="/root/syzkaller.ImPjia/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.385702][ T5602] veth1_vlan: entered promiscuous mode [ 74.409715][ T5606] Bluetooth: hci0: command tx timeout [ 74.420813][ T5606] Bluetooth: hci3: command tx timeout [ 74.421069][ T5618] Bluetooth: hci2: command tx timeout [ 74.426714][ T29] audit: type=1400 audit(1777364279.018:91): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.451455][ T29] audit: type=1400 audit(1777364279.018:92): avc: denied { mounton } for pid=5617 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.509117][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.523102][ T29] audit: type=1400 audit(1777364279.028:93): avc: denied { mount } for pid=5617 comm="syz-executor" name="/" dev="gadgetfs" ino=6568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.557013][ T29] audit: type=1400 audit(1777364279.028:94): avc: denied { mount } for pid=5617 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 74.581782][ T5603] veth0_macvtap: entered promiscuous mode [ 74.596483][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.616445][ T5603] veth1_macvtap: entered promiscuous mode [ 74.729775][ T5604] veth0_vlan: entered promiscuous mode [ 74.746238][ T1043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.755108][ T1043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.771005][ T5604] veth1_vlan: entered promiscuous mode [ 74.934586][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.959770][ T1043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.175876][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.225670][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.256553][ T5604] veth0_macvtap: entered promiscuous mode [ 75.274599][ T1043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.283606][ T1043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.295098][ T5602] veth0_macvtap: entered promiscuous mode [ 75.306149][ T1043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.315379][ T1043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.326018][ T5604] veth1_macvtap: entered promiscuous mode [ 75.348272][ T5602] veth1_macvtap: entered promiscuous mode [ 75.364518][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.376751][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.448583][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.451240][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.460678][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.560646][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.573518][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.607900][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.621718][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.639942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.653108][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.667594][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.710225][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.764579][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.789382][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.801933][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.809929][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.870691][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.956801][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.971179][ T5813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 75.975701][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.064922][ T5707] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.080800][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.100160][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.110954][ T5707] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.158729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.159087][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.167740][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.185761][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.259895][ T5819] tipc: Started in network mode [ 76.260578][ T5607] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.273179][ T5819] tipc: Node identity aa06b09543f4, cluster identity 4711 [ 76.282224][ T5819] tipc: Enabled bearer , priority 0 [ 76.298890][ T5819] tipc: Resetting bearer [ 76.315540][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.361444][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.391091][ T5618] Bluetooth: hci4: command tx timeout [ 76.391093][ T5606] Bluetooth: hci1: command tx timeout [ 76.463533][ T5607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.476236][ T5606] Bluetooth: hci3: command tx timeout [ 76.476268][ T5618] Bluetooth: hci0: command tx timeout [ 76.482476][ T5606] Bluetooth: hci2: command tx timeout [ 76.508785][ T5607] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.530557][ T5607] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 76.574519][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.642628][ T5607] usb 1-1: config 0 descriptor?? [ 76.690233][ T5825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.845310][ T5831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9'. [ 76.880946][ T5728] usb 1-1: USB disconnect, device number 2 [ 78.366230][ T5844] binder: 5841:5844 ioctl c0306201 200000000480 returned -14 [ 79.396572][ T5815] tipc: Disabling bearer [ 79.408654][ T5728] tipc: Node number set to 3924996245 [ 79.535225][ T10] cfg80211: failed to load regulatory.db [ 79.689923][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 79.689941][ T29] audit: type=1400 audit(1777364284.498:159): avc: denied { bind } for pid=5852 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.773715][ T29] audit: type=1400 audit(1777364284.518:160): avc: denied { setopt } for pid=5852 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.848356][ T29] audit: type=1400 audit(1777364284.518:161): avc: denied { ioctl } for pid=5852 comm="syz.0.17" path="socket:[9385]" dev="sockfs" ino=9385 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.878520][ T29] audit: type=1400 audit(1777364284.618:162): avc: denied { write } for pid=5852 comm="syz.0.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.940171][ T29] audit: type=1400 audit(1777364284.748:163): avc: denied { append } for pid=5860 comm="syz.2.18" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.948578][ T5862] dlm: non-version read from control device 134 [ 80.169331][ T29] audit: type=1400 audit(1777364284.978:164): avc: denied { create } for pid=5865 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.355238][ T29] audit: type=1400 audit(1777364284.978:165): avc: denied { read write } for pid=5865 comm="syz.3.21" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.985092][ T29] audit: type=1400 audit(1777364284.978:166): avc: denied { open } for pid=5865 comm="syz.3.21" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 81.016880][ T5870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.037076][ T29] audit: type=1400 audit(1777364285.108:167): avc: denied { read write } for pid=5867 comm="syz.0.23" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.062335][ T5870] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.072818][ T29] audit: type=1400 audit(1777364285.108:168): avc: denied { open } for pid=5867 comm="syz.0.23" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.395611][ T5870] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.438180][ T5870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.459701][ T5870] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.487985][ T5870] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.514205][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.532378][ T5870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.557722][ T5870] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.573368][ T5870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.600868][ T5870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.625134][ T5870] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.661320][ T5870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 81.677474][ T5870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.690076][ T5870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 81.950477][ T5759] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 82.571040][ T5892] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 82.644813][ T5880] syz.1.22 (5880) used greatest stack depth: 18456 bytes left [ 82.800425][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.815077][ T5759] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.836699][ T5759] usb 3-1: not running at top speed; connect to a high speed hub [ 82.858857][ T5759] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 82.861150][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.877879][ T5898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=5898 comm=syz.0.30 [ 82.879245][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.902356][ T5759] usb 3-1: Product: syz [ 82.906550][ T5759] usb 3-1: Manufacturer: syz [ 82.913880][ T5759] usb 3-1: SerialNumber: syz [ 83.120674][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 83.183933][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 83.327496][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.336352][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.363389][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.367184][ T5759] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.382206][ T24] usb 4-1: Product: syz [ 83.391544][ T24] usb 4-1: Manufacturer: syz [ 83.405141][ T5759] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 83.410655][ T24] usb 4-1: SerialNumber: syz [ 83.449942][ T24] usb 4-1: config 0 descriptor?? [ 83.469922][ T24] usbtest 4-1:0.0: FX2 device [ 83.482864][ T24] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 83.518879][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.551041][ T5759] usb 3-1: USB disconnect, device number 2 [ 83.596363][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.602502][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.661625][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.677431][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 83.863076][ T5759] usb 4-1: USB disconnect, device number 2 [ 84.261252][ T5925] netlink: 104 bytes leftover after parsing attributes in process `syz.0.37'. [ 84.870446][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.428999][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 85.429016][ T29] audit: type=1400 audit(1777364290.168:199): avc: denied { create } for pid=5937 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.544754][ T5941] kvm: pic: single mode not supported [ 85.548790][ T5941] kvm: pic: non byte read [ 85.592659][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.621477][ T29] audit: type=1400 audit(1777364290.438:200): avc: denied { write } for pid=5937 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.692501][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.698621][ T5606] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.980566][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.005751][ T29] audit: type=1400 audit(1777364290.458:201): avc: denied { read } for pid=5937 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.033803][ T5947] evm: overlay not supported [ 86.049770][ T29] audit: type=1400 audit(1777364290.848:202): avc: denied { unlink } for pid=5946 comm="syz.0.44" name="#1" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.071986][ T29] audit: type=1400 audit(1777364290.848:203): avc: denied { mount } for pid=5946 comm="syz.0.44" name="/" dev="overlay" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.094927][ T29] audit: type=1400 audit(1777364290.848:204): avc: denied { watch } for pid=5946 comm="syz.0.44" path="/15/bus/file1" dev="overlay" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.124900][ T29] audit: type=1400 audit(1777364290.848:205): avc: denied { watch_sb watch_reads } for pid=5946 comm="syz.0.44" path="/15/bus/file1" dev="overlay" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.304435][ T5759] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.453648][ T29] audit: type=1400 audit(1777364291.268:206): avc: denied { mounton } for pid=5952 comm="syz.1.47" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.483954][ T5954] binder: Bad value for 'max' [ 86.702555][ T5759] usb 1-1: Using ep0 maxpacket: 8 [ 86.760485][ T5707] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 86.774098][ T5759] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 86.786480][ T5759] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 86.793380][ T29] audit: type=1400 audit(1777364291.608:207): avc: denied { read write } for pid=5952 comm="syz.1.47" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.796461][ T5759] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 86.831369][ T5759] usb 1-1: config 1 interface 0 has no altsetting 0 [ 86.850389][ T5759] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 86.880750][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 86.902166][ T5759] usb 1-1: Product: syz [ 86.913766][ T5759] usb 1-1: Manufacturer: syz [ 86.929918][ T5759] usb 1-1: SerialNumber: syz [ 86.952060][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.960562][ T5707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.987188][ T5707] usb 5-1: not running at top speed; connect to a high speed hub [ 87.027583][ T5707] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 87.076002][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.153718][ T5707] usb 5-1: Product: syz [ 87.206784][ T5707] usb 5-1: Manufacturer: syz [ 87.251871][ T5707] usb 5-1: SerialNumber: syz [ 87.268993][ T5960] ======================================================= [ 87.268993][ T5960] WARNING: The mand mount option has been deprecated and [ 87.268993][ T5960] and is ignored by this kernel. Remove the mand [ 87.268993][ T5960] option from the mount to silence this warning. [ 87.268993][ T5960] ======================================================= [ 87.374349][ T29] audit: type=1400 audit(1777364291.608:208): avc: denied { open } for pid=5952 comm="syz.1.47" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.412388][ T5759] usb 1-1: 0:2 : does not exist [ 87.494769][ T5759] usb-storage 1-1:1.1: USB Mass Storage device detected [ 87.557405][ T5967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.49'. [ 87.670526][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.671620][ T5759] usb 1-1: selecting invalid altsetting 1 [ 87.736438][ T5961] capability: warning: `syz.3.48' uses 32-bit capabilities (legacy support in use) [ 87.756973][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.768688][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.841860][ T5759] snd-usb-us122l 1-1:1.1: usb_set_interface error [ 87.970737][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.980147][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.990666][ T5606] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.996009][ T5707] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.997438][ T5960] /dev/nullb0: Can't lookup blockdev [ 88.021719][ T5707] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 88.056039][ T5759] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 88.126468][ T5759] usb 1-1: USB disconnect, device number 3 [ 88.199083][ T5974] Zero length message leads to an empty skb [ 88.218937][ T5976] process 'syz.1.53' launched './file2' with NULL argv: empty string added [ 88.273104][ T5707] usb 5-1: USB disconnect, device number 2 [ 88.462756][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 88.690421][ T5759] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.830436][ T5759] usb 1-1: device descriptor read/64, error -71 [ 89.070433][ T5759] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.100568][ T5988] netlink: 892 bytes leftover after parsing attributes in process `syz.3.56'. [ 89.211596][ T5759] usb 1-1: device descriptor read/64, error -71 [ 89.321395][ T5759] usb usb1-port1: attempt power cycle [ 89.548579][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 89.630407][ T5707] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.672831][ T5759] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 89.685407][ T6006] netlink: 104 bytes leftover after parsing attributes in process `syz.4.63'. [ 89.742119][ T5759] usb 1-1: device descriptor read/8, error -71 [ 90.130719][ T5720] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.340596][ T5707] usb 4-1: Using ep0 maxpacket: 16 [ 90.355243][ T5707] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 90.366381][ T5707] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 90.385627][ T5707] usb 4-1: config 0 has no interface number 0 [ 90.391820][ T5707] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 90.406006][ T5707] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 90.427187][ T5707] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 90.445670][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.460602][ T5759] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.469850][ T5707] usb 4-1: Product: syz [ 90.479173][ T5707] usb 4-1: Manufacturer: syz [ 90.487706][ T5707] usb 4-1: SerialNumber: syz [ 90.501147][ T5707] usb 4-1: config 0 descriptor?? [ 90.511839][ T5720] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 90.513768][ T5759] usb 1-1: device descriptor read/8, error -71 [ 90.530729][ T5720] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 90.539835][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.546797][ T5992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.562329][ T5720] usb 2-1: Product: syz [ 90.564103][ T5992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.573782][ T5720] usb 2-1: Manufacturer: syz [ 90.580411][ T5720] usb 2-1: SerialNumber: syz [ 90.705456][ T5759] usb usb1-port1: unable to enumerate USB device [ 90.944767][ T5992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.944888][ T5992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.988923][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 90.988938][ T29] audit: type=1400 audit(1777364295.798:225): avc: denied { ioctl } for pid=6001 comm="syz.1.61" path="socket:[9651]" dev="sockfs" ino=9651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.041707][ T29] audit: type=1400 audit(1777364295.798:226): avc: denied { bind } for pid=6001 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.165834][ T5992] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 91.210429][ T5727] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 91.319125][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 91.373171][ T5720] comedi comedi5: Wrong number of endpoints [ 91.379865][ T5720] ni6501 2-1:5.0: driver 'ni6501' failed to auto-configure device. [ 91.413917][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.424254][ T5727] usb 3-1: not running at top speed; connect to a high speed hub [ 91.427407][ T6024] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 91.456547][ T5720] usb 2-1: USB disconnect, device number 2 [ 91.511468][ T5707] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 91.544635][ T5707] asix 4-1:0.251: probe with driver asix failed with error -524 [ 91.566726][ T29] audit: type=1400 audit(1777364296.378:227): avc: denied { read append } for pid=6018 comm="syz.4.66" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.567525][ T5727] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 91.606011][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.611324][ T6021] syzkaller1: entered promiscuous mode [ 91.618250][ T5727] usb 3-1: Product: syz [ 91.623958][ T5727] usb 3-1: Manufacturer: syz [ 91.628773][ T5727] usb 3-1: SerialNumber: syz [ 91.659581][ T6021] syzkaller1: entered allmulticast mode [ 91.689956][ T29] audit: type=1400 audit(1777364296.378:228): avc: denied { open } for pid=6018 comm="syz.4.66" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.747285][ T29] audit: type=1400 audit(1777364296.418:229): avc: denied { ioctl } for pid=6018 comm="syz.4.66" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.780446][ T29] audit: type=1400 audit(1777364296.428:230): avc: denied { ioctl } for pid=6018 comm="syz.4.66" path="socket:[9084]" dev="sockfs" ino=9084 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.933241][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.941912][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.965983][ T5727] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 92.000234][ T5727] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.012257][ T5720] usb 4-1: USB disconnect, device number 3 [ 92.203533][ T29] audit: type=1400 audit(1777364296.958:231): avc: denied { append } for pid=6029 comm="syz.1.68" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.300146][ T6032] loop5: detected capacity change from 0 to 7 [ 92.625790][ T6032] Dev loop5: unable to read RDB block 7 [ 92.631734][ T6032] loop5: AHDI p1 [ 92.635876][ T6032] loop5: partition table partially beyond EOD, truncated [ 92.752066][ T5727] usb 3-1: USB disconnect, device number 3 [ 92.816256][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.051014][ T29] audit: type=1400 audit(1777364297.858:232): avc: denied { create } for pid=6038 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.060439][ T6039] 9p: Bad value for 'rfdno' [ 93.126875][ T6035] syzkaller0: entered promiscuous mode [ 93.141957][ T29] audit: type=1400 audit(1777364297.868:233): avc: denied { mounton } for pid=6038 comm="syz.3.71" path="/17/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.164233][ T6035] syzkaller0: entered allmulticast mode [ 93.177033][ T29] audit: type=1400 audit(1777364297.928:234): avc: denied { create } for pid=6034 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.393214][ T5759] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 93.642853][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.653625][ T5727] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 93.661193][ T5759] usb 2-1: not running at top speed; connect to a high speed hub [ 93.669732][ T5759] usb 2-1: language id specifier not provided by device, defaulting to English [ 93.705631][ T5759] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 93.715859][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.738558][ T5759] usb 2-1: Product: 賃 郓 [ 93.834874][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.879756][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.919502][ T5727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.940837][ T5727] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.950073][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.983595][ T5759] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 93.991401][ T5727] usb 3-1: config 0 descriptor?? [ 93.999937][ T6055] netlink: 104 bytes leftover after parsing attributes in process `syz.4.74'. [ 94.237269][ T5759] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 94.322687][ T5759] usb 2-1: USB disconnect, device number 3 [ 94.572028][ T5727] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 94.625450][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.667179][ T5727] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 94.747600][ T5727] usb 3-1: USB disconnect, device number 4 [ 94.935543][ T6065] fido_id[6065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 94.972381][ T6076] netlink: 'syz.0.78': attribute type 3 has an invalid length. [ 95.279581][ T989] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.305845][ T6084] loop5: detected capacity change from 0 to 7 [ 95.429665][ T6084] Dev loop5: unable to read RDB block 7 [ 95.435410][ T6084] loop5: AHDI p1 [ 95.439223][ T6084] loop5: partition table partially beyond EOD, truncated [ 95.573569][ T989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.807441][ T989] usb 2-1: not running at top speed; connect to a high speed hub [ 95.874436][ T989] usb 2-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 95.946870][ T989] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 46344, setting to 64 [ 96.023166][ T989] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 96.155496][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.304181][ T989] usb 2-1: Product: syz [ 96.370710][ T989] usb 2-1: Manufacturer: syz [ 96.391794][ T802] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 96.430296][ T989] usb 2-1: SerialNumber: syz [ 96.439107][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 96.475701][ T6071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.580406][ T802] usb 4-1: device descriptor read/64, error -32 [ 96.770085][ T989] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 96.782558][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 96.782573][ T29] audit: type=1400 audit(1777364301.598:254): avc: denied { mount } for pid=6103 comm="syz.0.84" name="/" dev="autofs" ino=9805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 96.870735][ T802] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 96.917695][ T29] audit: type=1400 audit(1777364301.718:255): avc: denied { bind } for pid=6103 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.079358][ T989] usb 2-1: USB disconnect, device number 4 [ 97.087545][ T802] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.116852][ T802] usb 4-1: not running at top speed; connect to a high speed hub [ 97.163538][ T802] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 97.200036][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.224312][ T802] usb 4-1: Product: syz [ 97.233185][ T802] usb 4-1: Manufacturer: syz [ 97.242770][ T802] usb 4-1: SerialNumber: syz [ 97.280507][ T5759] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.450023][ T6118] syzkaller0: entered promiscuous mode [ 97.455537][ T6118] syzkaller0: entered allmulticast mode [ 97.462189][ T5759] usb 5-1: Using ep0 maxpacket: 16 [ 97.515130][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.523955][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.536387][ T5759] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.559492][ T802] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 97.576626][ T5759] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.599946][ T802] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 97.614370][ T5759] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.644321][ T5759] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.692135][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.728644][ T5759] usb 5-1: Product: syz [ 97.745491][ T802] usb 4-1: USB disconnect, device number 5 [ 97.753207][ T5759] usb 5-1: Manufacturer: syz [ 97.785144][ T29] audit: type=1400 audit(1777364302.598:256): avc: denied { setopt } for pid=6120 comm="syz.2.87" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.811102][ T5759] usb 5-1: SerialNumber: syz [ 97.841574][ T5759] usb 5-1: 0:2 : does not exist [ 97.857079][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.879828][ T29] audit: type=1400 audit(1777364302.598:257): avc: denied { connect } for pid=6120 comm="syz.2.87" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.879858][ T29] audit: type=1400 audit(1777364302.598:258): avc: denied { write } for pid=6120 comm="syz.2.87" laddr=fe80::12 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.178168][ T5759] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 98.256891][ T29] audit: type=1400 audit(1777364303.068:259): avc: denied { getopt } for pid=6103 comm="syz.0.84" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.367196][ T5759] usb 5-1: USB disconnect, device number 3 [ 98.459996][ T29] audit: type=1400 audit(1777364303.268:260): avc: denied { read append } for pid=6133 comm="syz.3.93" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.509391][ T6141] loop5: detected capacity change from 0 to 7 [ 98.897112][ T6141] Dev loop5: unable to read RDB block 7 [ 98.903868][ T6141] loop5: AHDI p1 [ 98.907501][ T6141] loop5: partition table partially beyond EOD, truncated [ 98.967718][ T29] audit: type=1400 audit(1777364303.268:261): avc: denied { open } for pid=6133 comm="syz.3.93" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.992274][ T29] audit: type=1400 audit(1777364303.268:262): avc: denied { ioctl } for pid=6133 comm="syz.3.93" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.019632][ T29] audit: type=1400 audit(1777364303.738:263): avc: denied { write } for pid=5603 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.720499][ T5606] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 100.729272][ T5606] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 101.480564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 102.005659][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 102.005699][ T29] audit: type=1400 audit(1777364306.818:270): avc: denied { map } for pid=6168 comm="syz.3.103" path="socket:[10323]" dev="sockfs" ino=10323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.203059][ T29] audit: type=1400 audit(1777364306.818:271): avc: denied { accept } for pid=6168 comm="syz.3.103" path="socket:[10323]" dev="sockfs" ino=10323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.021469][ T5706] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.213326][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 103.234181][ T5706] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 103.262693][ T5706] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.294257][ T5706] usb 1-1: config 1 interface 0 has no altsetting 0 [ 103.296165][ T29] audit: type=1400 audit(1777364308.108:272): avc: denied { write } for pid=6190 comm="syz.4.108" path="socket:[10341]" dev="sockfs" ino=10341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.329859][ T5706] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 103.380890][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.399268][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.409551][ T5706] usb 1-1: Product: syz [ 103.422289][ T5706] usb 1-1: Manufacturer: syz [ 103.453796][ T5706] usb 1-1: SerialNumber: syz [ 103.478431][ T6185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.485863][ T6185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.604880][ T6197] bridge0: port 3(netdevsim0) entered blocking state [ 103.612370][ T6197] bridge0: port 3(netdevsim0) entered disabled state [ 103.620024][ T6197] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 103.649326][ T6197] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 104.180740][ T6197] bridge0: port 3(netdevsim0) entered blocking state [ 104.188083][ T6197] bridge0: port 3(netdevsim0) entered forwarding state [ 104.792846][ T5606] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.802421][ T5606] Bluetooth: hci0: Injecting HCI hardware error event [ 104.812161][ T5606] Bluetooth: hci0: hardware error 0x00 [ 104.864457][ T29] audit: type=1400 audit(1777364309.678:273): avc: denied { write } for pid=6210 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.886608][ T29] audit: type=1400 audit(1777364309.698:274): avc: denied { bind } for pid=6210 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.990428][ T5720] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 105.003269][ T5759] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.130436][ T5720] usb 5-1: device descriptor read/64, error -71 [ 105.170428][ T5759] usb 4-1: device descriptor read/64, error -71 [ 105.390537][ T5720] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 105.424737][ T5759] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.540630][ T5720] usb 5-1: device descriptor read/64, error -71 [ 105.570411][ T5759] usb 4-1: device descriptor read/64, error -71 [ 105.604563][ T5706] usb 1-1: USB disconnect, device number 8 [ 105.672976][ T5720] usb usb5-port1: attempt power cycle [ 105.740716][ T5759] usb usb4-port1: attempt power cycle [ 106.852035][ T5720] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 106.870596][ T5606] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.903611][ T5759] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 106.921412][ T5720] usb 5-1: device descriptor read/8, error -71 [ 106.982992][ T5759] usb 4-1: device descriptor read/8, error -71 [ 107.170422][ T5720] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 107.210837][ T5720] usb 5-1: device descriptor read/8, error -71 [ 107.241507][ T5759] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.271295][ T5759] usb 4-1: device descriptor read/8, error -71 [ 107.303146][ T5707] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.312293][ T29] audit: type=1400 audit(1777364312.118:275): avc: denied { read } for pid=6238 comm="syz.0.121" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.355148][ T5720] usb usb5-port1: unable to enumerate USB device [ 107.367295][ T29] audit: type=1400 audit(1777364312.118:276): avc: denied { ioctl } for pid=6238 comm="syz.0.121" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 107.394769][ T5759] usb usb4-port1: unable to enumerate USB device [ 107.502193][ T5707] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.511027][ T5707] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.521551][ T5707] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.537320][ T5707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 107.550658][ T5707] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 107.563908][ T5707] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.573324][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.581531][ T5707] usb 2-1: Product: syz [ 107.585862][ T5707] usb 2-1: Manufacturer: syz [ 107.601443][ T5707] cdc_wdm 2-1:1.0: skipping garbage [ 107.607140][ T5707] cdc_wdm 2-1:1.0: skipping garbage [ 107.618791][ T5707] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 107.624930][ T5707] cdc_wdm 2-1:1.0: Unknown control protocol [ 107.631417][ T5720] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.886291][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.908160][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.920090][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.930065][ T5720] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 107.940016][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.089621][ T5720] usb 1-1: config 0 descriptor?? [ 108.209309][ T29] audit: type=1400 audit(1777364313.018:277): avc: denied { read write } for pid=6232 comm="syz.1.118" name="cdc-wdm0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 108.245287][ T29] audit: type=1400 audit(1777364313.048:278): avc: denied { open } for pid=6232 comm="syz.1.118" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 108.523261][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.122'. [ 108.530418][ T5759] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.556455][ T5720] wacom 0003:056A:0010.0003: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 108.584449][ T5720] wacom 0003:056A:0010.0003: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 108.682810][ T5720] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0003/input/input6 [ 108.776922][ T5759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.829591][ T5759] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 108.875541][ T29] audit: type=1400 audit(1777364313.678:279): avc: denied { watch watch_reads } for pid=6260 comm="syz.3.127" path="/27" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.907068][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.937604][ T5759] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 108.948603][ T5720] usb 1-1: USB disconnect, device number 9 [ 108.991032][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 109.021148][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 109.049604][ T5759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.063386][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.084820][ T5759] usb 3-1: Product: syz [ 109.093500][ T5759] usb 3-1: Manufacturer: syz [ 109.123293][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 109.129053][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 109.142222][ T5759] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 109.608963][ T5720] usb 3-1: USB disconnect, device number 5 [ 110.244237][ T29] audit: type=1400 audit(1777364315.058:280): avc: denied { ioctl } for pid=6258 comm="syz.4.128" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.626872][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.633598][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.640050][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.646633][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.653614][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.660193][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.666414][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.672983][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.679188][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.685756][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.691981][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.698548][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.704766][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.711338][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.718791][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.725379][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.733149][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.739724][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.747217][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 110.753793][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 110.786070][ T5759] usb 2-1: USB disconnect, device number 5 [ 110.786132][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 110.859625][ T6280] netlink: 'syz.3.133': attribute type 3 has an invalid length. [ 110.875957][ T6278] syz.1.131 uses obsolete (PF_INET,SOCK_PACKET) [ 110.898087][ T29] audit: type=1400 audit(1777364315.708:281): avc: denied { ioctl } for pid=6276 comm="syz.1.131" path="socket:[10532]" dev="sockfs" ino=10532 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.373949][ T6312] overlay: ./file0 is not a directory [ 112.713879][ T29] audit: type=1400 audit(1777364317.528:282): avc: denied { create } for pid=6316 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.741651][ T6321] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 113.447938][ T6325] Bluetooth: MGMT ver 1.23 [ 113.453022][ T6325] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 113.940105][ T29] audit: type=1400 audit(1777364317.568:283): avc: denied { map } for pid=6320 comm="syz.2.146" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.017596][ T29] audit: type=1400 audit(1777364317.568:284): avc: denied { execute } for pid=6320 comm="syz.2.146" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.061585][ T5706] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.092848][ T29] audit: type=1400 audit(1777364318.248:285): avc: denied { bind } for pid=6317 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.203131][ T29] audit: type=1400 audit(1777364318.258:286): avc: denied { write } for pid=6317 comm="syz.0.144" path="socket:[10614]" dev="sockfs" ino=10614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.270013][ T29] audit: type=1400 audit(1777364318.328:287): avc: denied { mount } for pid=6317 comm="syz.0.144" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 114.309525][ T5706] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 114.318375][ T5706] usb 2-1: config 1 has no interface number 0 [ 114.324788][ T5706] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 114.338162][ T29] audit: type=1400 audit(1777364318.998:288): avc: denied { setopt } for pid=6331 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.435535][ T5706] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 114.455067][ T5706] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.469942][ T5706] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 114.566848][ T29] audit: type=1400 audit(1777364319.368:289): avc: denied { create } for pid=6334 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.648109][ T6344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.700527][ T6344] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 114.882822][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.892003][ T5706] usb 2-1: Product: syz [ 114.896527][ T5706] usb 2-1: Manufacturer: syz [ 114.901505][ T5706] usb 2-1: SerialNumber: syz [ 114.921757][ T6319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.942501][ T29] audit: type=1400 audit(1777364319.378:290): avc: denied { write } for pid=6334 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.177031][ T6319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.160361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.380363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.667306][ T29] audit: type=1400 audit(1777364320.498:291): avc: denied { connect } for pid=6351 comm="syz.4.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.724377][ T5706] usb 2-1: Incompatible driver and firmware versions [ 116.740324][ T5706] usb 2-1: USB disconnect, device number 6 [ 116.894107][ T6362] syz.3.154 (6362): /proc/6350/oom_adj is deprecated, please use /proc/6350/oom_score_adj instead. [ 117.645645][ T6365] macvlan0: entered promiscuous mode [ 117.943187][ T6365] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 118.073638][ T6365] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 118.591082][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 118.591098][ T29] audit: type=1400 audit(1777364323.408:297): avc: denied { read write } for pid=6370 comm="syz.0.158" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.638170][ T6371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 118.696830][ T29] audit: type=1400 audit(1777364323.408:298): avc: denied { open } for pid=6370 comm="syz.0.158" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.724238][ T5618] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.812591][ T29] audit: type=1400 audit(1777364323.448:299): avc: denied { ioctl } for pid=6370 comm="syz.0.158" path="/newroot/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.866739][ T29] audit: type=1400 audit(1777364323.678:300): avc: denied { create } for pid=6378 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 118.927044][ T29] audit: type=1400 audit(1777364323.708:301): avc: denied { sys_admin } for pid=6378 comm="syz.1.162" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 119.052630][ T29] audit: type=1400 audit(1777364323.728:302): avc: denied { append } for pid=6376 comm="syz.2.161" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 119.127288][ T29] audit: type=1400 audit(1777364323.828:303): avc: denied { mount } for pid=6378 comm="syz.1.162" name="/" dev="rpc_pipefs" ino=10702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 119.286875][ T6394] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 119.329304][ T6394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.165'. [ 119.577891][ T29] audit: type=1400 audit(1777364324.368:304): avc: denied { mounton } for pid=6393 comm="syz.1.165" path="/32/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 120.478900][ T29] audit: type=1326 audit(1777364325.258:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74e19cdd9 code=0x7ffc0000 [ 120.875287][ T29] audit: type=1326 audit(1777364325.258:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74e19cdd9 code=0x7ffc0000 [ 121.486582][ T6411] kvm: kvm [6410]: vcpu3, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 121.583940][ T5606] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 121.591966][ T5606] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 121.901944][ T6419] hpfs: Bad magic ... probably not HPFS [ 122.966484][ T5727] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.065749][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 123.141122][ T5727] usb 5-1: Using ep0 maxpacket: 32 [ 123.248581][ T5727] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 124.046701][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.047394][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 124.047408][ T29] audit: type=1400 audit(1777364328.858:497): avc: denied { append } for pid=6431 comm="syz.2.176" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.088704][ T5727] usb 5-1: config 0 descriptor?? [ 124.359413][ T5727] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 124.450810][ T5727] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.478404][ T5727] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 124.496605][ T5727] usb 5-1: media controller created [ 124.557102][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.201023][ T5720] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.058040][ T5606] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 126.068125][ T5606] Bluetooth: hci2: Injecting HCI hardware error event [ 126.076736][ T5618] Bluetooth: hci2: hardware error 0x00 [ 126.271516][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 126.315959][ T5720] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 126.325206][ T5606] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 126.333684][ T5606] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 126.365871][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.391871][ T5720] usb 3-1: config 0 descriptor?? [ 126.398815][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 126.415548][ T5727] az6027: usb out operation failed. (-71) [ 126.424118][ T5727] stb0899_attach: Driver disabled by Kconfig [ 126.432130][ T5727] az6027: no front-end attached [ 126.432130][ T5727] [ 126.446210][ T5727] az6027: usb out operation failed. (-71) [ 126.452548][ T5727] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 126.476892][ T5727] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 126.712110][ T5727] dvb-usb: schedule remote query interval to 400 msecs. [ 126.905546][ T5706] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.923300][ T5727] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 126.923557][ T5720] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 126.953333][ T5727] usb 5-1: USB disconnect, device number 8 [ 126.992329][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.048537][ T5720] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.074496][ T29] audit: type=1400 audit(1777364331.888:498): avc: denied { ioctl } for pid=6471 comm="syz.0.187" path="socket:[11696]" dev="sockfs" ino=11696 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.108515][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 127.162207][ T5706] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 127.188795][ T5720] usb 3-1: media controller created [ 127.191542][ T5706] usb 2-1: config 127 has no interface number 0 [ 127.210453][ T29] audit: type=1400 audit(1777364331.998:499): avc: denied { write } for pid=6471 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.246099][ T5706] usb 2-1: config 127 interface 124 has no altsetting 0 [ 127.301028][ T5706] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 127.334722][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.346729][ T29] audit: type=1400 audit(1777364332.078:500): avc: denied { connect } for pid=6471 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.384889][ T5706] usb 2-1: Product: syz [ 127.391796][ T5706] usb 2-1: Manufacturer: syz [ 127.398304][ T5706] usb 2-1: SerialNumber: syz [ 127.403723][ T29] audit: type=1400 audit(1777364332.198:501): avc: denied { read } for pid=6471 comm="syz.0.187" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.437430][ T5727] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 127.534184][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.810492][ T5759] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 127.972355][ T29] audit: type=1400 audit(1777364332.768:502): avc: denied { ioctl } for pid=6488 comm="syz.4.189" path="socket:[10955]" dev="sockfs" ino=10955 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.134376][ T5759] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 128.174826][ T5618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 128.292691][ T5759] usb 4-1: config 0 has no interface number 0 [ 128.301570][ T5759] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 128.319983][ T5759] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 128.338937][ T5759] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 128.372682][ T5759] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 128.381700][ T5759] usb 4-1: Product: syz [ 128.390062][ T5759] usb 4-1: Manufacturer: syz [ 128.395211][ T5759] usb 4-1: SerialNumber: syz [ 128.405480][ T5759] usb 4-1: config 0 descriptor?? [ 128.414661][ T5759] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 128.429275][ T5759] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 128.449849][ T5759] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 128.601839][ T5759] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 128.632269][ T5759] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 128.644280][ T5759] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 128.661365][ T5706] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 128.682432][ T5759] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 128.696794][ T5759] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 128.731990][ T5759] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 128.767005][ T6501] netlink: 84 bytes leftover after parsing attributes in process `syz.4.192'. [ 128.820759][ T5759] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 128.861023][ T29] audit: type=1800 audit(1777364333.668:503): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.192" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 129.428175][ T5727] usb 4-1: USB disconnect, device number 10 [ 129.504934][ T5727] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 129.575125][ T5727] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 129.628898][ T5720] az6027: usb out operation failed. (-71) [ 129.652814][ T5727] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 129.677530][ T5720] stb0899_attach: Driver disabled by Kconfig [ 129.705088][ T5720] az6027: no front-end attached [ 129.705088][ T5720] [ 129.758717][ T5720] az6027: usb out operation failed. (-71) [ 129.790197][ T5727] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 129.802246][ T5720] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 129.837961][ T5720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 129.854680][ T5727] keyspan 4-1:0.107: device disconnected [ 129.970459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 130.010365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.093030][ T5720] dvb-usb: schedule remote query interval to 400 msecs. [ 130.102419][ T5720] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 130.179849][ T6520] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 130.195505][ T5720] usb 3-1: USB disconnect, device number 6 [ 130.393483][ T5618] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 130.404146][ T5618] Bluetooth: hci4: Injecting HCI hardware error event [ 130.412043][ T5606] Bluetooth: hci4: hardware error 0x00 [ 130.633897][ T5727] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 130.653135][ T5720] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 130.738709][ T29] audit: type=1326 audit(1777364335.548:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 130.821472][ T5727] usb 1-1: device descriptor read/64, error -71 [ 131.077279][ T29] audit: type=1326 audit(1777364335.548:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 131.220704][ T6536] can0: slcan on ttyS3. [ 131.647811][ T29] audit: type=1326 audit(1777364335.578:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 131.703451][ T29] audit: type=1326 audit(1777364335.578:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 131.730422][ T5727] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 131.808374][ T29] audit: type=1326 audit(1777364335.588:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 131.877593][ T29] audit: type=1326 audit(1777364335.588:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 131.901228][ T5727] usb 1-1: device descriptor read/64, error -71 [ 131.976520][ T29] audit: type=1326 audit(1777364335.588:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 132.009159][ T29] audit: type=1326 audit(1777364335.618:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 132.037329][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.037363][ T5727] usb usb1-port1: attempt power cycle [ 132.054316][ T29] audit: type=1326 audit(1777364335.628:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 132.078744][ T5706] usb 2-1: device firmware changed [ 132.112680][ T29] audit: type=1326 audit(1777364335.628:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f96f279cdd9 code=0x7ffc0000 [ 132.134850][ T5706] usb 2-1: USB disconnect, device number 7 [ 132.319088][ T6547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6547 comm=syz.1.201 [ 132.400792][ T5727] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 132.472329][ T5606] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 132.560897][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.570065][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.826555][ T5727] usb 1-1: device descriptor read/8, error -71 [ 133.070422][ T5727] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 133.178444][ T6547] overlayfs: failed to resolve '/ [ 141.280447][ T6683] dump_stack_lvl+0x100/0x190 [ 141.280486][ T6683] should_fail_ex.cold+0x5/0xa [ 141.280504][ T6683] _copy_from_user+0x2e/0xd0 [ 141.280521][ T6683] __sys_bpf+0x243/0x4b90 [ 141.280542][ T6683] ? __pfx___sys_bpf+0x10/0x10 [ 141.280558][ T6683] ? proc_fail_nth_write+0x9f/0x220 [ 141.280570][ T6683] ? find_held_lock+0x2b/0x80 [ 141.280583][ T6683] ? find_held_lock+0x2b/0x80 [ 141.280593][ T6683] ? ksys_write+0x190/0x250 [ 141.280605][ T6683] ? ksys_write+0x190/0x250 [ 141.280619][ T6683] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 141.280632][ T6683] ? kernel_write+0x5e3/0x6c0 [ 141.280643][ T6683] ? __fget_files+0x215/0x3d0 [ 141.280665][ T6683] ? fput+0x79/0x100 [ 141.280679][ T6683] ? ksys_write+0x1ac/0x250 [ 141.280690][ T6683] ? __pfx_ksys_write+0x10/0x10 [ 141.280705][ T6683] __x64_sys_bpf+0x7b/0xc0 [ 141.280715][ T6683] ? lockdep_hardirqs_on+0x78/0x100 [ 141.280730][ T6683] do_syscall_64+0x10b/0xf80 [ 141.280742][ T6683] ? clear_bhb_loop+0x40/0x90 [ 141.280755][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.280766][ T6683] RIP: 0033:0x7ff63159cdd9 [ 141.280779][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.280791][ T6683] RSP: 002b:00007ff632529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.280807][ T6683] RAX: ffffffffffffffda RBX: 00007ff631815fa0 RCX: 00007ff63159cdd9 [ 141.280814][ T6683] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 141.280820][ T6683] RBP: 00007ff632529090 R08: 0000000000000000 R09: 0000000000000000 [ 141.280827][ T6683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.280833][ T6683] R13: 00007ff631816038 R14: 00007ff631815fa0 R15: 00007ffeb64c6578 [ 141.280848][ T6683] [ 141.491630][ T5727] rc_core: IR keymap rc-dvico-portable not found [ 141.501069][ T5727] Registered IR keymap rc-empty [ 141.508664][ T5727] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 141.522075][ T5727] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 141.549541][ T5727] dvb-usb: schedule remote query interval to 100 msecs. [ 141.556953][ T5727] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 141.584429][ T5727] usb 1-1: USB disconnect, device number 14 [ 141.727459][ T5727] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 142.257927][ T29] audit: type=1400 audit(1777364347.078:534): avc: denied { create } for pid=6687 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.287565][ T5727] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.295479][ T29] audit: type=1400 audit(1777364347.098:535): avc: denied { write } for pid=6687 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.342696][ T6688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.464590][ T5727] usb 1-1: Using ep0 maxpacket: 16 [ 142.528796][ T5727] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 142.551389][ T5727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.562209][ T5727] usb 1-1: Product: syz [ 142.590389][ T5727] usb 1-1: Manufacturer: syz [ 142.595015][ T5727] usb 1-1: SerialNumber: syz [ 142.838041][ T5727] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 142.870228][ T5727] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.900697][ T5727] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 142.919245][ T5727] usb 1-1: media controller created [ 142.947207][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.221777][ T5727] zl10353_read_register: readreg error (reg=127, ret==-110) [ 143.427138][ T29] audit: type=1400 audit(1777364348.238:536): avc: denied { setopt } for pid=6706 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.674086][ T6707] batadv_slave_1: entered promiscuous mode [ 143.684197][ T5727] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 143.706871][ T6706] batadv_slave_1: left promiscuous mode [ 143.748821][ T5727] usb 1-1: USB disconnect, device number 15 [ 144.552092][ T6726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.573309][ T6726] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 146.167904][ T6736] mmap: syz.0.243 (6736) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.350453][ T5727] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 146.577719][ T5727] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.607848][ T5727] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.630800][ T5727] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.650706][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 146.689819][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 146.739479][ T5727] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.770433][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.810265][ T5727] usb 4-1: Product: syz [ 146.815282][ T5727] usb 4-1: Manufacturer: syz [ 146.839971][ T5727] cdc_wdm 4-1:1.0: skipping garbage [ 146.850370][ T5727] cdc_wdm 4-1:1.0: skipping garbage [ 146.864886][ T5727] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 146.880644][ T5727] cdc_wdm 4-1:1.0: Unknown control protocol [ 147.178143][ T6768] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 147.189588][ C1] wdm_int_callback: 152 callbacks suppressed [ 147.189609][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 147.202165][ C1] wdm_int_callback: 152 callbacks suppressed [ 147.202186][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 147.220583][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 147.222368][ T10] usb 4-1: USB disconnect, device number 12 [ 147.227184][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 147.227206][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 147.234085][ T6768] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 147.400409][ T5759] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 147.883527][ T6776] ptrace attach of "./syz-executor exec"[6782] was attempted by "./syz-executor exec"[6776] [ 147.896712][ T6776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.001547][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 148.022609][ T5759] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 148.057631][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.100927][ T5759] usb 5-1: config 0 descriptor?? [ 148.335692][ T5759] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 148.360425][ T5706] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.415666][ T5759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.766474][ T5759] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 149.040458][ T6796] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 149.047134][ T6796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.060435][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 149.074322][ T6796] vhci_hcd vhci_hcd.0: Device attached [ 149.081381][ T5759] usb 5-1: media controller created [ 149.094676][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.143053][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.160107][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.168935][ T5706] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 149.195801][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.220212][ T5706] usb 3-1: config 0 descriptor?? [ 149.351979][ T802] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 149.534429][ T802] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 149.550425][ T802] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.576365][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.604478][ T802] usb 4-1: config 0 descriptor?? [ 149.604483][ T5812] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 149.606227][ T5727] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.790485][ T5727] usb 2-1: Using ep0 maxpacket: 32 [ 149.858317][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.911611][ T5727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.115541][ T5727] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 150.145400][ T5706] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 150.175232][ T5759] az6027: usb out operation failed. (-71) [ 150.182841][ T5706] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 150.198644][ T5759] stb0899_attach: Driver disabled by Kconfig [ 150.211708][ T5706] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 150.222204][ T5759] az6027: no front-end attached [ 150.222204][ T5759] [ 150.238406][ T5706] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 150.249162][ T5759] az6027: usb out operation failed. (-71) [ 150.252589][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.270136][ T29] audit: type=1400 audit(1777364355.088:537): avc: denied { write } for pid=6794 comm="syz.3.254" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 150.293864][ T6820] vivid-001: ================= START STATUS ================= [ 150.301762][ T6820] vivid-001: Radio HW Seek Mode: Bounded [ 150.307564][ T6820] vivid-001: Radio Programmable HW Seek: false [ 150.313832][ T6820] vivid-001: RDS Rx I/O Mode: Block I/O [ 150.319379][ T6820] vivid-001: Generate RBDS Instead of RDS: false [ 150.325729][ T6820] vivid-001: RDS Reception: true [ 150.330697][ T6820] vivid-001: RDS Program Type: 0 inactive [ 150.336419][ T6820] vivid-001: RDS PS Name: inactive [ 150.341627][ T6820] vivid-001: RDS Radio Text: inactive [ 150.347085][ T6820] vivid-001: RDS Traffic Announcement: false inactive [ 150.354616][ T6820] vivid-001: RDS Traffic Program: false inactive [ 150.361003][ T6820] vivid-001: RDS Music: false inactive [ 150.366500][ T6820] vivid-001: ================== END STATUS ================== [ 150.379051][ T5759] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 150.386346][ T5706] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 150.395039][ T5759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 150.416930][ T5706] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 150.449682][ T5759] dvb-usb: schedule remote query interval to 400 msecs. [ 150.472788][ T5727] usb 2-1: config 0 descriptor?? [ 150.474371][ T5759] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 150.532088][ T5759] usb 5-1: USB disconnect, device number 9 [ 150.567415][ T5613] udevd[5613]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 150.611855][ T5613] udevd[5613]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 150.684117][ T5759] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 151.017114][ T5727] nintendo 0003:057E:200E.0005: unknown main item tag 0x0 [ 151.050084][ T5727] nintendo 0003:057E:200E.0005: unknown main item tag 0x0 [ 151.072625][ T5727] nintendo 0003:057E:200E.0005: unknown main item tag 0x0 [ 151.092012][ T5727] nintendo 0003:057E:200E.0005: unknown main item tag 0x0 [ 151.107519][ T5727] nintendo 0003:057E:200E.0005: unknown main item tag 0x0 [ 151.200405][ T5727] nintendo 0003:057E:200E.0005: hidraw1: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 151.220486][ T29] audit: type=1400 audit(1777364356.008:538): avc: denied { write } for pid=6788 comm="syz.2.253" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.260509][ T6789] random: crng reseeded on system resumption [ 151.296456][ T29] audit: type=1400 audit(1777364356.008:539): avc: denied { open } for pid=6788 comm="syz.2.253" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 151.342998][ T5727] nintendo 0003:057E:200E.0005: Failed charging grip handshake [ 151.367685][ T5727] nintendo 0003:057E:200E.0005: Failed to initialize controller; ret=-110 [ 151.379181][ T5706] koneplus 0003:1E7D:2D51.0004: couldn't init struct koneplus_device [ 151.400436][ T5727] nintendo 0003:057E:200E.0005: probe - fail = -110 [ 151.425948][ T5706] koneplus 0003:1E7D:2D51.0004: couldn't install mouse [ 151.480189][ T5706] koneplus 0003:1E7D:2D51.0004: probe with driver koneplus failed with error -5 [ 151.482981][ T5727] nintendo 0003:057E:200E.0005: probe with driver nintendo failed with error -110 [ 151.545351][ T29] audit: type=1400 audit(1777364356.358:540): avc: denied { connect } for pid=6821 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.623840][ T5727] usb 2-1: USB disconnect, device number 8 [ 151.866424][ T6842] netlink: 104 bytes leftover after parsing attributes in process `syz.0.259'. [ 152.010312][ T29] audit: type=1400 audit(1777364356.818:541): avc: denied { map } for pid=6843 comm="syz.4.260" path="socket:[13344]" dev="sockfs" ino=13344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.235687][ T29] audit: type=1400 audit(1777364356.848:542): avc: denied { read } for pid=6843 comm="syz.4.260" path="socket:[13344]" dev="sockfs" ino=13344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.331648][ T29] audit: type=1400 audit(1777364356.878:543): avc: denied { map } for pid=6843 comm="syz.4.260" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.682983][ T5727] usb 3-1: USB disconnect, device number 8 [ 152.952741][ T802] usb 4-1: string descriptor 0 read error: -71 [ 152.959952][ T6797] vhci_hcd: connection reset by peer [ 152.999857][ T134] vhci_hcd vhci_hcd.3: stop threads [ 153.142089][ T802] usb 4-1: USB disconnect, device number 13 [ 153.148838][ T134] vhci_hcd vhci_hcd.3: release socket [ 153.438649][ T6858] syzkaller0: entered promiscuous mode [ 153.474618][ T134] vhci_hcd vhci_hcd.3: disconnect device [ 153.486976][ T6858] syzkaller0: entered allmulticast mode [ 153.519233][ T6865] netlink: 608 bytes leftover after parsing attributes in process `syz.3.265'. [ 153.630223][ T6870] vivid-001: ================= START STATUS ================= [ 153.637944][ T6870] vivid-001: Radio HW Seek Mode: Bounded [ 153.643662][ T6870] vivid-001: Radio Programmable HW Seek: false [ 153.650994][ T6870] vivid-001: RDS Rx I/O Mode: Block I/O [ 153.656575][ T6870] vivid-001: Generate RBDS Instead of RDS: false [ 153.662939][ T6870] vivid-001: RDS Reception: true [ 153.667884][ T6870] vivid-001: RDS Program Type: 0 inactive [ 153.673728][ T6870] vivid-001: RDS PS Name: inactive [ 153.678941][ T6870] vivid-001: RDS Radio Text: inactive [ 153.684499][ T6870] vivid-001: RDS Traffic Announcement: false inactive [ 153.691599][ T6870] vivid-001: RDS Traffic Program: false inactive [ 153.698006][ T6870] vivid-001: RDS Music: false inactive [ 153.703516][ T6870] vivid-001: ================== END STATUS ================== [ 153.879914][ T6872] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.569301][ T6881] fuse: Bad value for 'rootmode' [ 154.637755][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.269'. [ 154.705190][ T5812] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 154.740470][ T802] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.904129][ T802] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 154.913364][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.921491][ T5759] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 154.933003][ T802] usb 4-1: config 0 descriptor?? [ 155.092543][ T5759] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 155.101093][ T5759] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 155.112544][ T5759] usb 1-1: config 220 has no interface number 2 [ 155.119097][ T5759] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.132444][ T5759] usb 1-1: config 220 interface 0 has no altsetting 0 [ 155.139265][ T5759] usb 1-1: config 220 interface 76 has no altsetting 0 [ 155.146362][ T5759] usb 1-1: config 220 interface 1 has no altsetting 0 [ 155.157255][ T5759] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.176211][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.184372][ T5759] usb 1-1: Product: syz [ 155.188567][ T5759] usb 1-1: Manufacturer: syz [ 155.199326][ T5759] usb 1-1: SerialNumber: syz [ 155.583576][ T29] audit: type=1400 audit(1777364360.368:544): avc: denied { write } for pid=6884 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.638071][ T29] audit: type=1400 audit(1777364360.398:545): avc: denied { getopt } for pid=6876 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.703401][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.776138][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.802268][ T5706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.993546][ T5706] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.013513][ T5706] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 158.000320][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.066919][ T5706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 158.096280][ T5759] usb 1-1: selecting invalid altsetting 0 [ 158.104291][ T5706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 158.115874][ T5759] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 158.139994][ T5759] uvcvideo 1-1:220.0: No valid video chain found. [ 158.171844][ T5706] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.201218][ T5759] usb 1-1: selecting invalid altsetting 0 [ 158.209036][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.228884][ T5759] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 158.250619][ T5706] usb 3-1: Product: syz [ 158.254863][ T5706] usb 3-1: Manufacturer: syz [ 158.366991][ T6925] loop5: detected capacity change from 0 to 7 [ 158.936360][ T6925] Dev loop5: unable to read RDB block 7 [ 158.942013][ T6925] loop5: AHDI p1 [ 158.945705][ T6925] loop5: partition table partially beyond EOD, truncated [ 158.963954][ T5759] usb 1-1: USB disconnect, device number 16 [ 158.973898][ T5706] cdc_wdm 3-1:1.0: skipping garbage [ 158.997721][ T5706] cdc_wdm 3-1:1.0: skipping garbage [ 159.540578][ T6932] warning: `syz.0.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.162582][ T802] usb 4-1: Cannot set autoneg [ 160.190170][ T5706] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 160.210194][ T802] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 160.247619][ T5706] cdc_wdm 3-1:1.0: Unknown control protocol [ 160.579709][ T5706] usb 3-1: USB disconnect, device number 9 [ 160.601767][ T802] usb 4-1: USB disconnect, device number 14 [ 161.415769][ T6948] overlayfs: missing 'lowerdir' [ 161.440871][ T29] audit: type=1400 audit(1777364366.258:546): avc: denied { read } for pid=6947 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.475935][ T29] audit: type=1400 audit(1777364366.288:547): avc: denied { relabelfrom } for pid=6950 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 161.607238][ T29] audit: type=1400 audit(1777364366.288:548): avc: denied { relabelto } for pid=6950 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 162.024604][ T6958] netlink: 'syz.0.284': attribute type 12 has an invalid length. [ 162.300435][ T5706] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.500434][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 162.532864][ T5706] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 162.565470][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.287625][ T29] audit: type=1400 audit(1777364368.098:549): avc: denied { read write } for pid=6975 comm="syz.4.280" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.474810][ T29] audit: type=1400 audit(1777364368.138:550): avc: denied { open } for pid=6975 comm="syz.4.280" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.531133][ T5706] usb 4-1: Product: syz [ 163.535348][ T5706] usb 4-1: Manufacturer: syz [ 163.539946][ T5706] usb 4-1: SerialNumber: syz [ 163.547465][ T5706] usb 4-1: config 0 descriptor?? [ 163.557087][ T5706] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 163.596967][ T29] audit: type=1400 audit(1777364368.178:551): avc: denied { map } for pid=6975 comm="syz.4.280" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 163.747612][ T29] audit: type=1400 audit(1777364368.558:552): avc: denied { map } for pid=6981 comm="syz.4.290" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 163.776877][ T5706] dvb-usb: bulk message failed: -22 (2/0) [ 163.788977][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.801874][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.810166][ T29] audit: type=1400 audit(1777364368.618:553): avc: denied { ioctl } for pid=6981 comm="syz.4.290" path="socket:[13592]" dev="sockfs" ino=13592 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.820961][ T5706] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 163.851898][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.868205][ T6960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.883418][ T5706] usb 4-1: media controller created [ 163.889201][ T6960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.923430][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.943890][ T5706] usb 4-1: selecting invalid altsetting 7 [ 163.949746][ T5706] cxusb: set interface failed [ 163.954893][ T5706] dvb-usb: bulk message failed: -22 (1/0) [ 164.042967][ T5706] DVB: Unable to find symbol lgdt330x_attach() [ 164.049467][ T5706] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 164.156177][ T6988] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 164.183755][ T6988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.540413][ T5706] rc_core: IR keymap rc-dvico-portable not found [ 164.560683][ T5706] Registered IR keymap rc-empty [ 164.570505][ T5706] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 164.580157][ T5759] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.698926][ T5706] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 164.734926][ T5706] dvb-usb: schedule remote query interval to 100 msecs. [ 164.752769][ T5706] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 164.784600][ T5706] usb 4-1: USB disconnect, device number 15 [ 164.853300][ T5759] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.869447][ T5759] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.896700][ T5759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.912380][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.965701][ T5759] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 165.638905][ T29] audit: type=1400 audit(1777364370.448:554): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 165.857162][ T7002] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 165.909032][ T29] audit: type=1400 audit(1777364370.718:555): avc: denied { getopt } for pid=7001 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.929381][ T5759] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.938574][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.946624][ T5759] usb 3-1: Product: syz [ 165.950832][ T5759] usb 3-1: Manufacturer: syz [ 166.280128][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 166.297750][ T5706] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 166.314607][ T5759] cdc_wdm 3-1:1.0: skipping garbage [ 166.353739][ T5759] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 166.364529][ T5759] cdc_wdm 3-1:1.0: Unknown control protocol [ 166.423062][ T7017] netlink: 'syz.1.296': attribute type 1 has an invalid length. [ 166.445602][ T5606] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 166.455745][ T5606] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 166.493653][ T5759] usb 3-1: USB disconnect, device number 10 [ 167.230996][ T5727] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 167.816440][ T5727] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 168.024145][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.296906][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.379620][ T5727] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.469445][ T5727] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.524362][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.548042][ T5727] usb 1-1: config 0 descriptor?? [ 168.616968][ T7044] overlayfs: missing 'lowerdir' [ 168.817690][ T5759] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.055166][ T5759] usb 5-1: Using ep0 maxpacket: 8 [ 169.243047][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.250790][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.258273][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.261387][ T5759] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 169.267698][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.285158][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.294145][ T7046] netlink: 348 bytes leftover after parsing attributes in process `syz.3.306'. [ 169.312816][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.327669][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.338157][ T5759] usb 5-1: config 0 descriptor?? [ 169.348595][ T5759] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 169.354723][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.363882][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 169.363903][ T29] audit: type=1400 audit(1777364374.168:558): avc: denied { create } for pid=7052 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.393175][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.402605][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.410282][ T5727] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 169.417986][ T29] audit: type=1400 audit(1777364374.238:559): avc: denied { bind } for pid=7052 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.441026][ T5759] usb 5-1: Detected SIO [ 169.447338][ T29] audit: type=1400 audit(1777364374.258:560): avc: denied { write } for pid=7052 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.469488][ T5727] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 169.543197][ T5727] usb 1-1: USB disconnect, device number 17 [ 169.552996][ T5759] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 169.633737][ T5759] usb 5-1: USB disconnect, device number 10 [ 169.723556][ T5759] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.723627][ T7057] fido_id[7057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 169.744275][ T5759] ftdi_sio 5-1:0.0: device disconnected [ 169.866149][ T7062] bond1 (unregistering): Released all slaves [ 169.951379][ T7066] FAULT_INJECTION: forcing a failure. [ 169.951379][ T7066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.965698][ T7066] CPU: 1 UID: 0 PID: 7066 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 169.965726][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.965738][ T7066] Call Trace: [ 169.965745][ T7066] [ 169.965753][ T7066] dump_stack_lvl+0x100/0x190 [ 169.965781][ T7066] should_fail_ex.cold+0x5/0xa [ 169.965810][ T7066] _copy_from_user+0x2e/0xd0 [ 169.965838][ T7066] __sys_bpf+0x243/0x4b90 [ 169.965872][ T7066] ? __pfx___sys_bpf+0x10/0x10 [ 169.965900][ T7066] ? proc_fail_nth_write+0x9f/0x220 [ 169.965922][ T7066] ? find_held_lock+0x2b/0x80 [ 169.965948][ T7066] ? find_held_lock+0x2b/0x80 [ 169.965967][ T7066] ? ksys_write+0x190/0x250 [ 169.965988][ T7066] ? ksys_write+0x190/0x250 [ 169.966015][ T7066] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 169.966039][ T7066] ? kernel_write+0x5e3/0x6c0 [ 169.966058][ T7066] ? __fget_files+0x215/0x3d0 [ 169.966103][ T7066] ? fput+0x79/0x100 [ 169.966128][ T7066] ? ksys_write+0x1ac/0x250 [ 169.966149][ T7066] ? __pfx_ksys_write+0x10/0x10 [ 169.966176][ T7066] __x64_sys_bpf+0x7b/0xc0 [ 169.966194][ T7066] ? lockdep_hardirqs_on+0x78/0x100 [ 169.966217][ T7066] do_syscall_64+0x10b/0xf80 [ 169.966239][ T7066] ? clear_bhb_loop+0x40/0x90 [ 169.966264][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.966285][ T7066] RIP: 0033:0x7ff63159cdd9 [ 169.966302][ T7066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.966321][ T7066] RSP: 002b:00007ff632529028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.966341][ T7066] RAX: ffffffffffffffda RBX: 00007ff631815fa0 RCX: 00007ff63159cdd9 [ 169.966355][ T7066] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000001d [ 169.966368][ T7066] RBP: 00007ff632529090 R08: 0000000000000000 R09: 0000000000000000 [ 169.966383][ T7066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.966395][ T7066] R13: 00007ff631816038 R14: 00007ff631815fa0 R15: 00007ffeb64c6578 [ 169.966423][ T7066] [ 170.312537][ T5759] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 170.330151][ T7073] netlink: 'syz.4.312': attribute type 3 has an invalid length. [ 170.376787][ T5606] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 170.385007][ T5606] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 170.471922][ T5606] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 170.481755][ T5606] Bluetooth: hci1: Injecting HCI hardware error event [ 170.490174][ T5618] Bluetooth: hci1: hardware error 0x00 [ 170.499295][ T5759] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 170.500440][ T5812] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 170.532872][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.553924][ T5759] usb 4-1: config 0 descriptor?? [ 170.575006][ T5759] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 170.700539][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 170.720383][ T7085] capability: warning: `syz.0.318' uses deprecated v2 capabilities in a way that may be insecure [ 170.751548][ T5812] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.752901][ T7085] binder: 7081:7085 ioctl 8100587e 200000000340 returned -22 [ 170.773429][ T5812] usb 3-1: config 0 has no interface number 0 [ 170.871160][ T5812] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 170.912360][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.987500][ T5812] usb 3-1: Product: syz [ 171.019567][ T5812] usb 3-1: Manufacturer: syz [ 171.059868][ T5812] usb 3-1: SerialNumber: syz [ 171.095659][ T5812] usb 3-1: config 0 descriptor?? [ 171.123102][ T5812] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.269778][ T29] audit: type=1400 audit(1777364376.078:561): avc: denied { ioctl } for pid=7090 comm="syz.0.322" path="socket:[12885]" dev="sockfs" ino=12885 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.397129][ T7097] lo speed is unknown, defaulting to 1000 [ 171.405438][ T7097] lo speed is unknown, defaulting to 1000 [ 171.427661][ T5759] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 171.477687][ T7097] lo speed is unknown, defaulting to 1000 [ 171.496671][ T7097] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 171.511343][ T7097] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 171.528424][ T7097] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 171.577109][ T7097] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 171.653386][ T7097] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 171.871800][ T7097] lo speed is unknown, defaulting to 1000 [ 171.899186][ T7097] lo speed is unknown, defaulting to 1000 [ 171.924762][ T7097] lo speed is unknown, defaulting to 1000 [ 171.946632][ T7097] lo speed is unknown, defaulting to 1000 [ 171.970258][ T7097] lo speed is unknown, defaulting to 1000 [ 172.295639][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.327628][ T29] audit: type=1400 audit(1777364377.018:562): avc: denied { create } for pid=7068 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 172.514326][ T5812] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 172.525165][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.560737][ T5618] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 172.597209][ T7106] netlink: 'syz.1.326': attribute type 3 has an invalid length. [ 172.696799][ T5759] gspca_cpia1: usb_control_msg 02, error -71 [ 172.706931][ T5759] gspca_cpia1: usb_control_msg 05, error -71 [ 172.723684][ T5759] cpia1 4-1:0.0: unexpected systemstate: 00 [ 172.746743][ T5759] usb 4-1: USB disconnect, device number 16 [ 172.808387][ T5812] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 172.924121][ T29] audit: type=1400 audit(1777364377.708:563): avc: denied { write } for pid=7103 comm="syz.4.325" name="protocols" dev="proc" ino=4026532861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 173.311862][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 173.312161][ T5607] usb 3-1: USB disconnect, device number 11 [ 173.377714][ T5607] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 173.529360][ T5607] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 173.584173][ T5607] quatech2 3-1:0.51: device disconnected [ 173.802055][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 175.159729][ T29] audit: type=1400 audit(1777364379.968:564): avc: denied { read write } for pid=7133 comm="syz.0.332" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 175.396347][ T29] audit: type=1400 audit(1777364379.968:565): avc: denied { open } for pid=7133 comm="syz.0.332" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.223611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 178.263612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 178.285050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 178.564371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 178.586480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 187.929650][ C1] sched: DL replenish lagged too much [ 195.446000][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.465714][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.654676][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848279][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.846086][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.864695][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.500323][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 398.507311][ C0] rcu: (detected by 0, t=10502 jiffies, g=23257, q=3135 ncpus=2) [ 398.515090][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 5714 (4294976996-4294971282), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 398.528353][ C0] rcu: rcu_preempt kthread starved for 5715 jiffies! g23257 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 398.539438][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 398.549393][ C0] rcu: RCU grace-period kthread stack dump: [ 398.555251][ C0] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 398.568707][ C0] Call Trace: [ 398.571961][ C0] [ 398.574868][ C0] __schedule+0x10e9/0x6820 [ 398.579362][ C0] ? __pfx___schedule+0x10/0x10 [ 398.584201][ C0] ? find_held_lock+0x2b/0x80 [ 398.588852][ C0] ? schedule+0x2bf/0x390 [ 398.593155][ C0] schedule+0xdd/0x390 [ 398.597196][ C0] schedule_timeout+0x127/0x280 [ 398.602026][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 398.607378][ C0] ? __pfx_process_timeout+0x10/0x10 [ 398.612638][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 398.618431][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 398.623872][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 398.628610][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 398.633887][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 398.639326][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 398.644241][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 398.649415][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.655193][ C0] rcu_gp_kthread+0x179/0x230 [ 398.659844][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 398.665018][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 398.670811][ C0] ? __kthread_parkme+0x18c/0x230 [ 398.675819][ C0] ? kthread+0x13a/0x450 [ 398.680035][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 398.685215][ C0] kthread+0x370/0x450 [ 398.689260][ C0] ? __pfx_kthread+0x10/0x10 [ 398.693833][ C0] ret_from_fork+0x72b/0xd50 [ 398.698403][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 398.703489][ C0] ? __switch_to+0x800/0x1100 [ 398.708145][ C0] ? __pfx_kthread+0x10/0x10 [ 398.712710][ C0] ret_from_fork_asm+0x1a/0x30 [ 398.717461][ C0] [ 398.720456][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 398.726753][ C0] Sending NMI from CPU 0 to CPUs 1: [ 398.731948][ C1] NMI backtrace for cpu 1 [ 398.731967][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 398.731989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.732002][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 398.732025][ C1] Code: 96 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 398.732044][ C1] RSP: 0018:ffffc90000a085b8 EFLAGS: 00000242 [ 398.732063][ C1] RAX: 000000000163dc02 RBX: 0000000000000003 RCX: 0000000000000004 [ 398.732075][ C1] RDX: 0000000000000000 RSI: ffffffff8df1e844 RDI: ffffffff8c1c3480 [ 398.732087][ C1] RBP: ffff88807cf11940 R08: 0000000000000001 R09: 0000000000000000 [ 398.732100][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 398.732111][ C1] R13: 0000000000000003 R14: ffff8880b853c200 R15: 0000000000000000 [ 398.732124][ C1] FS: 0000000000000000(0000) GS:ffff888124479000(0000) knlGS:0000000000000000 [ 398.732143][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.732155][ C1] CR2: 0000200000021000 CR3: 000000005578d000 CR4: 00000000003526f0 [ 398.732168][ C1] Call Trace: [ 398.732175][ C1] [ 398.732181][ C1] kvm_wait+0x124/0x160 [ 398.732211][ C1] __pv_queued_spin_lock_slowpath+0x4b0/0xc00 [ 398.732234][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.732259][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 398.732282][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 398.732306][ C1] ? validate_xmit_xfrm+0x44f/0x1360 [ 398.732337][ C1] do_raw_spin_lock+0x1e0/0x260 [ 398.732365][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 398.732396][ C1] __dev_queue_xmit+0x19c4/0x4950 [ 398.732420][ C1] ? __napi_poll.constprop.0+0xaf/0x450 [ 398.732444][ C1] ? net_rx_action+0xa40/0xf20 [ 398.732466][ C1] ? handle_softirqs+0x1ea/0xa00 [ 398.732493][ C1] ? __irq_exit_rcu+0x162/0x210 [ 398.732518][ C1] ? irq_exit_rcu+0x9/0x30 [ 398.732544][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 398.732564][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.732586][ C1] ? default_idle_call+0x6c/0xb0 [ 398.732609][ C1] ? do_idle+0x464/0x590 [ 398.732626][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 398.732661][ C1] ? rcu_is_watching+0x12/0xc0 [ 398.732689][ C1] ? trace_kmem_cache_alloc+0xd5/0x100 [ 398.732710][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 398.732731][ C1] can_send+0x5d7/0xbd0 [ 398.732753][ C1] ? __pfx_can_send+0x10/0x10 [ 398.732771][ C1] ? __skb_clone+0x570/0x760 [ 398.732804][ C1] can_can_gw_rcv+0x820/0xca0 [ 398.732835][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 398.732863][ C1] can_rcv_filter+0x153/0x890 [ 398.732885][ C1] can_receive+0x2cb/0x500 [ 398.732906][ C1] ? __pfx_can_rcv+0x10/0x10 [ 398.732925][ C1] can_rcv+0x29e/0x300 [ 398.732944][ C1] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 398.732970][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 398.732996][ C1] ? lock_acquire+0x1b1/0x370 [ 398.733019][ C1] ? process_backlog+0x32a/0x1580 [ 398.733043][ C1] ? process_backlog+0x32a/0x1580 [ 398.733066][ C1] __netif_receive_skb+0x1f/0x120 [ 398.733090][ C1] process_backlog+0x37a/0x1580 [ 398.733117][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 398.733142][ C1] net_rx_action+0xa40/0xf20 [ 398.733170][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 398.733196][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 398.733217][ C1] ? tmigr_handle_remote+0x132/0x380 [ 398.733242][ C1] ? run_timer_base+0x121/0x190 [ 398.733264][ C1] ? rcu_is_watching+0x12/0xc0 [ 398.733294][ C1] handle_softirqs+0x1ea/0xa00 [ 398.733323][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 398.733350][ C1] ? _raw_spin_unlock+0x28/0x50 [ 398.733367][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 398.733387][ C1] __irq_exit_rcu+0x162/0x210 [ 398.733414][ C1] irq_exit_rcu+0x9/0x30 [ 398.733439][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 398.733460][ C1] [ 398.733466][ C1] [ 398.733472][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.733494][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 398.733514][ C1] Code: 96 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 e0 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 398.733533][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 398.733547][ C1] RAX: 000000000163d467 RBX: ffff88801e2c2500 RCX: ffffffff8b89b045 [ 398.733561][ C1] RDX: 0000000000000000 RSI: ffffffff8df1e844 RDI: ffffffff8c1c3480 [ 398.733573][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 398.733585][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 398.733597][ C1] R13: ffffed1003c584a0 R14: 0000000000000001 R15: ffffffff90d78850 [ 398.733614][ C1] ? ct_kernel_exit+0x125/0x180 [ 398.733637][ C1] default_idle+0x9/0x10 [ 398.733659][ C1] default_idle_call+0x6c/0xb0 [ 398.733682][ C1] do_idle+0x464/0x590 [ 398.733700][ C1] ? __pfx_do_idle+0x10/0x10 [ 398.733716][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 398.733740][ C1] cpu_startup_entry+0x4f/0x60 [ 398.733759][ C1] start_secondary+0x21d/0x2d0 [ 398.733781][ C1] ? __pfx_start_secondary+0x10/0x10 [ 398.733809][ C1] common_startup_64+0x13e/0x148 [ 398.733843][ C1]