last executing test programs: 11.190647277s ago: executing program 0 (id=253): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x3b, 0x0, &(0x7f0000000180)) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r2, 0x6, 0x9f}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d6f61657020686173683d636d6163287465612900000000000007050000000000000000000000000000000000000000000700"/63], &(0x7f0000000280)="14840d3cf03d", &(0x7f00000002c0)=""/159) dup2(0xffffffffffffffff, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000004c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x10a}, 0x1c) sendmsg$inet6(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="24fa399207c37b42adefe780bb1068fd6d0e69dc3de1e42f52f82d1cd250609649dc6fbca61af07cb3deff1130a8c02fcf09cd591fe43f0e157d50f1afdf26d9ced04acfaab455635056dba3bee642b6c40fd13053ad06d0a2e60c", 0x5b}, {&(0x7f0000000640)="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", 0x394}, {0x0}], 0x3}, 0x40400d7) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000a00)='veth0_macvtap\x00', 0x10) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) shutdown(r8, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x25dfdbfe, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x74}}}}}, 0x28}}, 0x20000000) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@loopback, @in=@multicast1, 0x8, 0x0, 0x0, 0x1, 0xa}, {}, {}, 0x0, 0x6e6bb3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x5}}, 0xe8) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="020d0000140000000000000000000000030006000000000002004e22ac1414bb0000000000000000030005000000000002004e24e000000200000000000000000800120002000200000000000000000006002bddffffffffffffff0000000000ac1414aa88bdd381c56f494c34db4fb50d9560de7c000000000000000000000000fc0100000000000000000000000000008cc06c84d50b6ee0c26d1e70db0247d004000400"/176], 0xfffffffffffffeff}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000001000)=ANY=[@ANYBLOB="7c0000008170a8721951662987f5f471b689031055412ac207b6d355badd177849b9322b0ddb0c8b76c3d738082f2113ee469d88b33faf9cbab8dd712642f72bcd3c3d191515f3c04a81efff81ffefe37ad53f624b65003d4cf766c53bbcba36fda7cb46550bdcf3eb2e98b5df8076766cb30188456fee4591ff9b0fb9e9406864db004b3ee61b215515d69d448c23bc7a4ddba07ac4671da5", @ANYRES16=r9, @ANYBLOB="00022bbd7000fcdbdf254300000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000000740000000c00580046000000000000000c0058003e000000000000000c0058002b000000000000000c00580052000000000000000c00580076000000000000000c0058000e000000000000000c0058006900000000000000"], 0x7c}}, 0x4000011) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf010000000000000000", @ANYRES32=r5, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x8806}, 0x844) write$UHID_INPUT(r3, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) 11.093923331s ago: executing program 0 (id=254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./ip_vs_conn\x00', 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000000c0), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'\x00', 0x2}) setreuid(0xee01, 0xee01) fsopen(0x0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'bond_slave_1\x00', &(0x7f0000000280)=@ethtool_sset_info={0x37, 0x1000, 0x100000000, [0x9, 0x6, 0x80]}}) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x65, 0x0, 0x80, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 11.023809313s ago: executing program 0 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000000c0)='.\x00', &(0x7f0000000140), 0x8010, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'macsec0\x00', 0x400}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvfrom$unix(r1, &(0x7f00000003c0)=""/197, 0xc5, 0x42, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) close(r0) 10.923552658s ago: executing program 0 (id=256): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080074cf7b22c83a0554e3e4db430000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000fe00008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 10.923055432s ago: executing program 0 (id=257): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='e', 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) wait4(r1, 0x0, 0x8, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000000608000140000000090900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 10.863872692s ago: executing program 0 (id=258): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$9p(r0, &(0x7f0000000040)="73eb9d46d6eecb39f6225b2899", 0xd) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x5) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x80, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x280, 0x9) ioctl$PTP_CLOCK_GETCAPS(r3, 0x80503d01, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x40}, @void, @val={0xc, 0x99, {0x6, 0x57}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4060801}, 0x10) r7 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9fdbfc13f76de36d094ed5457ee69932fe7f046b5e4a616c153613167a2d8d4d702779ed2110761d1243a37a56506269b6efad17e64a963e251ed013f3151a04653c1419bba833b2e22dad44f66216856204e3ceea486ce5d64970383899971017ec85573fbbde2d798fda049cd3a6c5cc727f12b42122a896d0dd8aa7c1644f43049cf8900ec3556b3d88b103fa5e847c3c8b20ade28414d248", 0x9a, r7) inotify_add_watch(r3, &(0x7f0000000500)='./file0\x00', 0x1000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r8, &(0x7f0000000540)=@l2, &(0x7f00000005c0)=0x80) write$P9_RATTACH(r6, &(0x7f0000000600)={0x14, 0x69, 0x1, {0x8, 0x2, 0x5}}, 0x14) r9 = add_key$fscrypt_provisioning(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)={0x3, 0x0, @b}, 0x48, r7) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000740)={@desc={0x1, 0x0, @desc2}, 0x21, 0x0, '\x00', @c}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x57}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x24040054) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) keyctl$setperm(0x5, r9, 0xc000000) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000900)) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="deaa38f4894364f432bc3525a8b4bac1d5036e9f34d1e731904a7ce4", 0x1c, r7) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000a00)={0x1, 0x43, 0x6, 0x100}) accept4$nfc_llcp(r3, &(0x7f0000000a40), &(0x7f0000000ac0)=0x60, 0x80800) r10 = geteuid() r11 = getegid() keyctl$chown(0x4, r9, r10, r11) getdents64(0xffffffffffffff9c, &(0x7f0000000b00)=""/150, 0x96) epoll_create1(0x0) 1.992388999s ago: executing program 2 (id=378): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x2, 0x101, 0x4000, 0x0, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.992080404s ago: executing program 2 (id=379): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080074cf7b22c83a0554e3e4db430000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000018008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.94386785s ago: executing program 2 (id=380): mount(0x0, &(0x7f00000004c0)='./mnt\x00', 0x0, 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000500)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000580)) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r3 = syz_io_uring_setup(0x7408, &(0x7f0000000980)={0x0, 0x2346, 0x10000, 0x0, 0x4e}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000ac0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="120000001c000101"], 0x22) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x41, '\x00', @buffer={"d0c6e8d6a30570c60860d41e9386542453188e35677df501d569fdb5a46f9a19", 0x20}, 0xfffffc01}, {0x39, '\x00', @data, 0x8042006}, {0x6, '\x00', @st={0x4, [{0x0, @uvalue=0x200007}, {0x2, @uvalue=0x7ff}, {0x2, @svalue=0x2}, {0x2, @uvalue=0x23aa}]}, 0x2}, {0x23, '\x00', @data=0x5, 0x4d66}, {0x1b, '\x00', @buffer={"2ae2032696ce4021450d0f560fd487bd6fd05b6665f70b3eda2b06f505aa25c2", 0x20}, 0x40000002}]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, 0xffffffffffffffff) 1.843226796s ago: executing program 2 (id=382): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x1f, 0x10, &(0x7f0000000e80), 0x222}, 0x48) 1.77219459s ago: executing program 2 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x54, r2, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0xab0, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}}, 0x8800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) r7 = fcntl$dupfd(r0, 0x406, r6) sendmsg$NFT_BATCH(r7, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x70, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}, @NFT_MSG_NEWRULE={0x1bc, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xef, 0x7, 0x1, 0x0, "b43bc05f4a3a857c1389f0b49450f61731c6e7f70a573bff18bb77e2f5d4f80316f5a6c5a84d3403e034682767e6807175a4cb82160078a85ebaf52df00e942b50083dae4f8ac509569639f3a3a96bc6dffcc3d79fbafbddf668fea2869dfcd9b5dd78fe891c446b0b2437a4c82937822b2e54a50d671558160de4c5789eb3e32eaa3099cefbf9186b82667ec72b713ced4e91efb5b058e3e05f187265eb196251e460b1199dcc9d1b991e05c7cece41da7bbd8202775c4c81205ea79efddbbb425f39c8678c040943f03dd367ccbdae316d6bf697b4e7706dccaff32f9fe90c1a1fd6fd2e04f16fbc791f"}, @NFTA_RULE_USERDATA={0x7b, 0x7, 0x1, 0x0, "1bf061eefd3beb46ab64907e215e8fc5d4c52a496ef23916ab8f0ce2100b06ce50f89b7b939fac470b65ffd31c7727bb1557f533dd060794181292fea1f83c34ac5f7aa0f31d44b848df3d13eb767caec4446f36bbb7abea96a5a1af8be45d991d964fab3e4b027812b18203b5b84841ee4f198fd5e100"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x3e, 0x2, 0x1, 0x0, 0xb430b0dfae7b0941}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x27c}, 0x1, 0x0, 0x0, 0x4009045}, 0x81) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000880)=[{r8, 0xb17d}], 0x1, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./config\x00', &(0x7f0000000900)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r10 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r10, &(0x7f0000000a00)='1', 0x1) bind(r9, &(0x7f0000000100)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r9, 0x5) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580030008"], 0x4a) 1.682460917s ago: executing program 3 (id=386): syz_usb_connect(0x3, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff000705810240000007058202400000070583024000000705840240000007058502400000070586024000000705870240000007050102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) setfsuid(0x0) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x4c, r1, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='\\d', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @local, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x800000}, r5, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000780)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9fd5}, r5}}, 0x38) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x4, 0x3f0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x468) 702.877691ms ago: executing program 1 (id=388): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080074cf7b22c83a0554e3e4db430000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000019008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 641.341152ms ago: executing program 1 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./binfmt\x00', &(0x7f0000000340)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./binfmt/status\x00', 0x1, 0x0) write$nsim_bool(r0, &(0x7f0000000000)='1', 0x1) 640.914387ms ago: executing program 1 (id=390): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x88a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000e7060a01040000000000000000020000000900020073797a32000000000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) (async) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000700)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000740)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 64) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4c001, &(0x7f0000000fc0)={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001000)={'wg2\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001040)={0x0, @local, @multicast2}, &(0x7f0000001080)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="110027bd7000ffdbdf250b0000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4000018008000300000000000800030001000000140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000180001801400020070696d367265673000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f31000000006c00018014000200697036746e6c30000000000000000000140002007465616d300000000000000000000000080003000100000014000200626f6e6430000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000040000180080003000200000008000300020000001400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="5400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="1400020064766d72703100"/20], 0x1b0}}, 0x4008004) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000780)={0x7, 0xdc}) (async) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl(r8, 0xfffff000, &(0x7f0000000800)) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) (async) setxattr$incfs_metadata(0x0, &(0x7f0000000140), 0x0, 0x0, 0x1) (async) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) (async, rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x6c, 0x30, 0x9, 0x400004, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x3, 0x200}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) (rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, &(0x7f0000000840), &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', r7, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) 640.482488ms ago: executing program 2 (id=391): syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000100), 0x9) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) (async) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000002c0)=0x1, 0x12) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000880), 0x88802) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000880), 0x88802) syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r10, 0x4068aea3, &(0x7f0000000300)) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [{0x400000b0, 0x0, 0x3}, {0x400000b1, 0x0, 0x7f}]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) (async) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) mount$9p_fd(0x0, &(0x7f0000000900)='.\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) 532.721508ms ago: executing program 1 (id=392): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000003704000001507d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1b4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939de5bfce461b42acd7da8842572825d1587795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e10000000000000008c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f010a5e83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d172a9c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec387a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398552694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e000000000000000000000087b97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfb832e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b26477267"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0x1f, 0x10, &(0x7f0000000e80), 0x222}, 0x48) 483.31478ms ago: executing program 1 (id=393): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0) socket$kcm(0x29, 0x7, 0x0) 483.163549ms ago: executing program 1 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./sys\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0xe9, [[0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0x6, 0xffffffff, 0x5, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xb, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffd, 0xffffdfff, 0xfffffffb, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1389, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x7, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ppoll(&(0x7f0000000400)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000ac0)='mA', 0x2) 362.97049ms ago: executing program 3 (id=395): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) r1 = socket(0xa, 0x80000, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x9}}, './config/usb_gadget/g1/functions/hid.usb0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='dummy_udc.0', 0xb) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f00000002c0)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000340)=0x6568, 0x4) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/6, 0x6}, 0x81}], 0x1, 0x102, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x10000000000000, 0x3}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2810}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB="080037000300000005000800"], 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000f88d00000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaacdaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r5], 0x68}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x44060}, 0x20000880) socket(0x10, 0x3, 0x0) 233.702455ms ago: executing program 3 (id=396): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x62a00) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x63ba, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000200)=0x80000a2c, 0x4) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000400)={0x6000004, 0x0, 0x0, 0x9, 0xfd}) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002142, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3fffffd, 0x0, 0x0, 0x0, 0x7f}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x6}, 0x94) ioctl$HIDIOCGVERSION(r0, 0x90044802, 0x0) 143.809551ms ago: executing program 3 (id=397): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000080074cf7b22c83a0554e3e4db430000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000001c008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 142.996721ms ago: executing program 3 (id=398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000005c0)=[@text32={0x20, &(0x7f0000000600)="f30fbdae0d000000cd0fbbcfcf3e0f79df670f01d1650f2ea6846a0000c4c161ef46c8b9810200000f32260f01c30f35", 0x30}], 0x1, 0x43, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=399): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x10, &(0x7f0000000800)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf6100000000000007010000040000008500000080000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6a}, 0x94) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0xb, 0x4}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xeffffffffffffffe) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000008c0)={0xc7, 0x0, 0x1}) (async) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) (async) r8 = io_uring_setup(0x2a6a, &(0x7f0000000340)={0x0, 0xd610, 0x0, 0x1, 0x3c}) (async) r9 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x0) ioctl$I2C_PEC(r9, 0x708, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0xd, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000000440)=[0xffffffffffffffff]}, 0x1) syz_kvm_add_vcpu$x86(r7, &(0x7f00000000c0)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x40000108}}], 0x1a}) (async) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000040), 0x4000000000001f2, 0x0) (async) sendmsg$inet6(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="2ba5c1d059352f5cd087bc0b45cda95fc576206fdd92c9edc9d68bd527b0664599bf3486646257e98191943588a77d12107591bf2eba767641a4b481a60ebb9773fdfdde514a71f1c706788b3346015d51fb6be716e41dbb4cfcae4033af989f11a81927632be902f0f744900a2f1fc208c423d41648e78b9611d7fb9dad125874599f2cfaecc66673a94e1d0516ca2b6e139185336afbd1b67e7a1c14645aa7a7b504e4a3cc39", 0xa7}, {&(0x7f0000000240)="c0fa9ec8427f25f3b8fc75da074e4f94076d40610f7821e8f7746166fad52ebb652bcb791e1a520d6036131be28338087202d615ae9fcd5d53e5dd39ab6e7662584ab84d1c2a9429d2386c40a591", 0x4e}], 0x2}, 0xcc000) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80340, 0x0) write$tun(r11, &(0x7f0000000480)={@void, @val={0x3, 0x1, 0x9, 0x2, 0x0, 0x200}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @broadcast, @void, {@llc={0x4, {@snap={0xaa, 0xaa, '2\b', "9d8631", 0x15, "15991f567b3086280bbaa08d42fd83a0fe205b435ef67ae8e4a2719dd00b0560ddbab6865a0a35bb5bfa154009824af0277e82934212da13f8942175166e71795f2cf96c21c122f6851fb000c006b603c550081ae9b42035ef3e6c8a174ada73dea6a89bda15aed7a7402be8cd95916ecf5a5c6698081488ec7bd6f235cd07e2b83bbd5af80642a2ebb212a2bdcc881e10154076a6c3dda2dd85e4beb837a7d8546072cb7ac89c990899e178efbe17d0b9ca523af7606159ee2f68f73117903f9a9197d4228bb387e3635e96ddc60ddba42dbb25744f93d7de28b026e964117a0dad"}}}}}}, 0x103) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14767' (ED25519) to the list of known hosts. [ 81.997343][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 81.997360][ T42] audit: type=1400 audit(1793825776.017:139): avc: denied { execute } for pid=5779 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 81.999305][ T42] audit: type=1400 audit(1793825776.017:140): avc: denied { execute_no_trans } for pid=5779 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 87.900927][ T42] audit: type=1400 audit(1793825781.917:141): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 87.944523][ T42] audit: type=1400 audit(1793825781.967:142): avc: denied { mount } for pid=5779 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.951377][ T5779] cgroup: Unknown subsys name 'net' [ 87.969370][ T42] audit: type=1400 audit(1793825781.987:143): avc: denied { unmount } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 88.109874][ T5779] cgroup: Unknown subsys name 'cpuset' [ 88.123320][ T5779] cgroup: Unknown subsys name 'rlimit' [ 88.499241][ T42] audit: type=1400 audit(1793825782.517:144): avc: denied { setattr } for pid=5779 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.500883][ T42] audit: type=1400 audit(1793825782.517:145): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.518962][ T42] audit: type=1400 audit(1793825782.517:146): avc: denied { write } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.529068][ T42] audit: type=1400 audit(1793825782.557:147): avc: denied { read } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.587921][ T42] audit: type=1400 audit(1793825782.597:148): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 88.587983][ T42] audit: type=1400 audit(1793825782.597:149): avc: denied { mount } for pid=5779 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 88.697012][ T5786] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 88.708873][ T42] audit: type=1400 audit(1793825782.727:150): avc: denied { relabelto } for pid=5786 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 90.299876][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.420249][ T9] cfg80211: failed to load regulatory.db [ 100.592029][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 100.592048][ T42] audit: type=1400 audit(1793825794.607:154): avc: denied { execmem } for pid=5797 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.087210][ T42] audit: type=1400 audit(1793825795.087:155): avc: denied { create } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.087267][ T42] audit: type=1400 audit(1793825795.087:156): avc: denied { read write } for pid=5801 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 101.087301][ T42] audit: type=1400 audit(1793825795.087:157): avc: denied { open } for pid=5801 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 101.087339][ T42] audit: type=1400 audit(1793825795.097:158): avc: denied { ioctl } for pid=5801 comm="syz-executor" path="socket:[8259]" dev="sockfs" ino=8259 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.137641][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.154107][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.155195][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.176398][ T69] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.177932][ T69] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.178588][ T69] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.178835][ T69] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.179435][ T69] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.180182][ T69] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.182741][ T69] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.187163][ T42] audit: type=1400 audit(1793825795.207:159): avc: denied { read } for pid=5801 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.187780][ T42] audit: type=1400 audit(1793825795.207:160): avc: denied { open } for pid=5801 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.192894][ T42] audit: type=1400 audit(1793825795.217:161): avc: denied { mounton } for pid=5801 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 101.215117][ T42] audit: type=1400 audit(1793825795.237:162): avc: denied { module_request } for pid=5804 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 101.219031][ T69] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.221286][ T42] audit: type=1400 audit(1793825795.237:163): avc: denied { module_request } for pid=5801 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 101.221733][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.222737][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.245071][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.245799][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.359461][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.386995][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.407210][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.415754][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.418872][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.875702][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.877223][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.883798][ T5815] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.888666][ T5801] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 101.889949][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.904548][ T5804] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 102.240428][ T5808] infiniband rxe0: set active [ 102.241721][ T5808] infiniband rxe0: added rxe_eth0 [ 102.281218][ T5808] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 102.281261][ T5808] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 102.281841][ T5808] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 102.294080][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.346038][ T5808] RDS/IB: rxe0: added [ 102.346305][ T5808] smc: adding ib device rxe0 with port count 1 [ 102.346368][ T5808] smc: ib device rxe0 port 1 has no pnetid [ 102.388484][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.391842][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.699580][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.127945][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.213467][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.214567][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.214729][ T5801] bridge_slave_0: entered allmulticast mode [ 103.234677][ T5807] Bluetooth: hci0: command tx timeout [ 103.236947][ T5801] bridge_slave_0: entered promiscuous mode [ 103.238573][ T5803] Bluetooth: hci1: command tx timeout [ 103.295868][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.295941][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.296058][ T5804] bridge_slave_0: entered allmulticast mode [ 103.297491][ T5804] bridge_slave_0: entered promiscuous mode [ 103.309947][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.310081][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.310216][ T5801] bridge_slave_1: entered allmulticast mode [ 103.313049][ T5801] bridge_slave_1: entered promiscuous mode [ 103.326627][ T5807] Bluetooth: hci2: command tx timeout [ 103.404965][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.405042][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.405269][ T5804] bridge_slave_1: entered allmulticast mode [ 103.406641][ T5804] bridge_slave_1: entered promiscuous mode [ 103.449436][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.454195][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.491658][ T5807] Bluetooth: hci3: command tx timeout [ 103.511565][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.511705][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.511844][ T5815] bridge_slave_0: entered allmulticast mode [ 103.513281][ T5815] bridge_slave_0: entered promiscuous mode [ 103.532259][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.535251][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.558600][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.558686][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.558800][ T5815] bridge_slave_1: entered allmulticast mode [ 103.560395][ T5815] bridge_slave_1: entered promiscuous mode [ 103.626372][ T5801] team0: Port device team_slave_0 added [ 103.634215][ T5801] team0: Port device team_slave_1 added [ 103.648776][ T5804] team0: Port device team_slave_0 added [ 103.655906][ T5804] team0: Port device team_slave_1 added [ 103.731806][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.813905][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.813922][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.813952][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.823743][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.823795][ T5808] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.880613][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.880631][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.880653][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.969100][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.969118][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.969139][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.972375][ T5815] team0: Port device team_slave_0 added [ 103.977099][ T5815] team0: Port device team_slave_1 added [ 103.988129][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.988161][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.988186][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.114322][ T5804] hsr_slave_0: entered promiscuous mode [ 104.115100][ T5804] hsr_slave_1: entered promiscuous mode [ 104.124151][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.124168][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.124189][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.125651][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.125664][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.125735][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.152315][ T5801] hsr_slave_0: entered promiscuous mode [ 104.153723][ T5801] hsr_slave_1: entered promiscuous mode [ 104.154307][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 104.154322][ T5801] Cannot create hsr debugfs directory [ 104.360922][ T5815] hsr_slave_0: entered promiscuous mode [ 104.362501][ T5815] hsr_slave_1: entered promiscuous mode [ 104.363211][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 104.363226][ T5815] Cannot create hsr debugfs directory [ 105.028527][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.047811][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.048575][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.060880][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.063247][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.086165][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.087090][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.094342][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.317071][ T5807] Bluetooth: hci0: command tx timeout [ 105.321512][ T5807] Bluetooth: hci1: command tx timeout [ 105.391771][ T5807] Bluetooth: hci2: command tx timeout [ 105.409021][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.409110][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.409202][ T5808] bridge_slave_0: entered allmulticast mode [ 105.410195][ T5808] bridge_slave_0: entered promiscuous mode [ 105.413747][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.413828][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.413945][ T5808] bridge_slave_1: entered allmulticast mode [ 105.415978][ T5808] bridge_slave_1: entered promiscuous mode [ 105.448209][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.464598][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.465320][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.478652][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.492868][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.510408][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.511651][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.515988][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.551663][ T5807] Bluetooth: hci3: command tx timeout [ 105.620478][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.628519][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.718961][ T5808] team0: Port device team_slave_0 added [ 105.759810][ T5808] team0: Port device team_slave_1 added [ 105.870476][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.870494][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.870517][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.877768][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.903250][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.913829][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.913846][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.913869][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.925168][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.954309][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.955297][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.958405][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.965700][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.989259][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.995039][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.065503][ T5808] hsr_slave_0: entered promiscuous mode [ 106.066226][ T5808] hsr_slave_1: entered promiscuous mode [ 106.066951][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 106.066977][ T5808] Cannot create hsr debugfs directory [ 106.104644][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.184348][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.184482][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.221674][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.221756][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.231781][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.402356][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.443412][ T228] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.443498][ T228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.459362][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.459385][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.516615][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.516706][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.576427][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.583445][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.589073][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.589840][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 106.589855][ T42] audit: type=1400 audit(1793825800.607:169): avc: denied { sys_module } for pid=5804 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.595024][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.608003][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.620008][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.629217][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.632391][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.645617][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.692299][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.709357][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.709626][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.736755][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.736842][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.868823][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.885750][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.915986][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.916151][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.943093][ T228] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.943165][ T228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.172217][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.249201][ T5804] veth0_vlan: entered promiscuous mode [ 107.265994][ T5804] veth1_vlan: entered promiscuous mode [ 107.304355][ T5804] veth0_macvtap: entered promiscuous mode [ 107.310005][ T5804] veth1_macvtap: entered promiscuous mode [ 107.337241][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.356897][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.364508][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.375649][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.401610][ T5807] Bluetooth: hci1: command tx timeout [ 107.401646][ T5807] Bluetooth: hci0: command tx timeout [ 107.442712][ T5801] veth0_vlan: entered promiscuous mode [ 107.472007][ T5803] Bluetooth: hci2: command tx timeout [ 107.475478][ T5873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.475937][ T5873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.475982][ T5873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.476025][ T5873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.493721][ T5801] veth1_vlan: entered promiscuous mode [ 107.531973][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.547342][ T5815] veth0_vlan: entered promiscuous mode [ 107.554914][ T5815] veth1_vlan: entered promiscuous mode [ 107.564064][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.564080][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.608238][ T228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.608256][ T228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.609617][ T5801] veth0_macvtap: entered promiscuous mode [ 107.624015][ T5801] veth1_macvtap: entered promiscuous mode [ 107.630484][ T42] audit: type=1400 audit(1793825801.647:170): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.630536][ T42] audit: type=1400 audit(1793825801.647:171): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzkaller.7M0jYr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 107.630970][ T42] audit: type=1400 audit(1793825801.647:172): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 107.634228][ T42] audit: type=1400 audit(1793825801.657:173): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzkaller.7M0jYr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 107.635187][ T42] audit: type=1400 audit(1793825801.657:174): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/syzkaller.7M0jYr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 107.639396][ T42] audit: type=1400 audit(1793825801.657:175): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.647188][ T5808] veth0_vlan: entered promiscuous mode [ 107.647727][ T5803] Bluetooth: hci3: command tx timeout [ 107.648116][ T42] audit: type=1400 audit(1793825801.667:176): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2861 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 107.648413][ T42] audit: type=1400 audit(1793825801.667:177): avc: denied { mount } for pid=5804 comm="syz-executor" name="/" dev="gadgetfs" ino=7093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 107.658515][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.670040][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.675427][ T5815] veth0_macvtap: entered promiscuous mode [ 107.681616][ T5808] veth1_vlan: entered promiscuous mode [ 107.702063][ T5815] veth1_macvtap: entered promiscuous mode [ 107.702449][ T42] audit: type=1400 audit(1793825801.717:178): avc: denied { mounton } for pid=5804 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.732644][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.741153][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.741887][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.742023][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.758749][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.760357][ T5804] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.775279][ T5808] veth0_macvtap: entered promiscuous mode [ 107.783820][ T5639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.804666][ T5808] veth1_macvtap: entered promiscuous mode [ 107.847390][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.847411][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.874168][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.908957][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.913692][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.913716][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.989301][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.989351][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.040405][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.040428][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.055624][ T5639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.056893][ T5639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.095481][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.095501][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.159122][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.159144][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.171775][ T5639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172015][ T5639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172213][ T5639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172235][ T5639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172256][ T5639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.172277][ T5639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.248739][ T5966] 9p: Bad value for 'wfdno' [ 108.576212][ T5978] device-mapper: table: 248:0: crypt: Invalid iv_offset sector (-EINVAL) [ 108.576268][ T5978] device-mapper: ioctl: error adding target to table [ 109.289390][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 109.289460][ T6000] openvswitch: netlink: EtherType 520 is less than min 600 [ 109.293535][ T1185] IPVS: starting estimator thread 0... [ 109.391447][ T6002] IPVS: using max 42 ests per chain, 100800 per kthread [ 109.413431][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 109.423188][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.423948][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.425758][ T5912] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 109.429682][ T5912] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 109.471564][ T5803] Bluetooth: hci0: command tx timeout [ 109.471608][ T5803] Bluetooth: hci1: command tx timeout [ 109.489018][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.489274][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.548675][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.549066][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.551937][ T5803] Bluetooth: hci2: command tx timeout [ 109.625911][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.626162][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.666707][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.667317][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.682932][ T4025] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 109.711500][ T5803] Bluetooth: hci3: command tx timeout [ 109.736225][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.736498][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.816611][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.816881][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.876395][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.876651][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.916485][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.916740][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 109.957189][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.957479][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 110.007839][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.008227][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 110.075715][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.075967][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 110.149093][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.149499][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 110.192080][ T4025] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 110.206128][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.206371][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 110.237764][ T6007] ceph: No mds server is up or the cluster is laggy [ 110.242282][ T6008] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.242678][ T6008] team0: Device ipvlan2 is already an upper device of the team interface [ 111.421132][ T5979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.480696][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 111.484724][ T6021] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 111.484743][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 111.490799][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 111.490894][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13'. [ 111.598014][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 111.598032][ T42] audit: type=1400 audit(1793825805.617:242): avc: denied { create } for pid=6033 comm="syz.2.19" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.598066][ T42] audit: type=1400 audit(1793825805.617:243): avc: denied { map } for pid=6033 comm="syz.2.19" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.598098][ T42] audit: type=1400 audit(1793825805.617:244): avc: denied { read write } for pid=6033 comm="syz.2.19" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=8003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.599479][ T42] audit: type=1400 audit(1793825805.617:245): avc: denied { read append } for pid=6033 comm="syz.2.19" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.599695][ T42] audit: type=1400 audit(1793825805.617:246): avc: denied { open } for pid=6033 comm="syz.2.19" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.660318][ T42] audit: type=1400 audit(1793825805.677:247): avc: denied { create } for pid=6035 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.662315][ T42] audit: type=1400 audit(1793825805.687:248): avc: denied { ioctl } for pid=6035 comm="syz.3.22" path="socket:[8009]" dev="sockfs" ino=8009 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.674891][ T6039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.678986][ T42] audit: type=1400 audit(1793825805.697:249): avc: denied { write } for pid=6038 comm="syz.2.21" name="syz0" dev="proc" ino=4026533784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 111.679557][ T6039] xt_recent: Need "+ip", "-ip" or "/" [ 111.690933][ T42] audit: type=1400 audit(1793825805.707:250): avc: denied { connect } for pid=6038 comm="syz.2.21" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.691776][ T42] audit: type=1400 audit(1793825805.717:251): avc: denied { write } for pid=6038 comm="syz.2.21" laddr=fe80::8c24:faff:fe2d:d6a5 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.697796][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 111.739985][ T6040] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20'. [ 111.767880][ T6043] __vm_enough_memory: pid: 6043, comm: syz.2.23, bytes: 4278190080 not enough memory for the allocation [ 111.826084][ T6046] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 111.869896][ T6054] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.916247][ T6056] Zero length message leads to an empty skb [ 112.013960][ T6064] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 112.014067][ T6064] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 112.067657][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.069449][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.259389][ T44] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.331415][ T5912] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.492844][ T5912] usb 5-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 112.492872][ T5912] usb 5-1: too many configurations: 31, using maximum allowed: 8 [ 112.494460][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.494478][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.494496][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.494510][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.494522][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.494533][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.496134][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.496148][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.496167][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.496181][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.496194][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.496206][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.497560][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.497577][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.497603][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.497619][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.497631][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.497642][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.498436][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.498448][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.498466][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.498479][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.498491][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.498502][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.499893][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.499906][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.499922][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.499935][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.499947][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.499958][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.501212][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.501225][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.501241][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.501254][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.501266][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.501277][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.580780][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.580798][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.580817][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.580831][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.580843][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.580854][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.602922][ T5912] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 112.602938][ T5912] usb 5-1: config 1 has no interface number 0 [ 112.602961][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 112.602980][ T5912] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 112.602993][ T5912] usb 5-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.603004][ T5912] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 112.646078][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.646094][ T5912] usb 5-1: Product: syz [ 112.646102][ T5912] usb 5-1: Manufacturer: syz [ 112.646110][ T5912] usb 5-1: SerialNumber: syz [ 112.670795][ T6069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.673221][ T5912] usb 5-1: Expected 3 endpoints, found: 2 [ 112.791198][ T6085] device-mapper: table: 248:1: mirror: Invalid number of mirrors (-EINVAL) [ 112.791224][ T6085] device-mapper: ioctl: error adding target to table [ 112.944588][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 113.111937][ T6105] netlink: 64 bytes leftover after parsing attributes in process `syz.1.43'. [ 113.121864][ T6105] syzkaller1: entered promiscuous mode [ 113.121886][ T6105] syzkaller1: entered allmulticast mode [ 113.217965][ T6107] fscrypt (sda1, inode 1262): Mutually exclusive encryption flags (0x0d) [ 113.290844][ T6069] kAFS: Invalid Command on /proc/fs/afs/cells file [ 113.299605][ T1629] usb 5-1: USB disconnect, device number 2 [ 113.367669][ T6127] Bluetooth: MGMT ver 1.23 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 113.796693][ T6158] bond0: (slave bond_slave_0): Releasing backup interface [ 113.874641][ T6158] bond_slave_0: entered promiscuous mode [ 113.874656][ T6158] bond_slave_0: entered allmulticast mode [ 114.022139][ T6164] loop7: detected capacity change from 0 to 7 [ 114.065175][ T6164] Dev loop7: unable to read RDB block 7 [ 114.065213][ T6164] loop7: unable to read partition table [ 114.065373][ T6164] loop7: partition table beyond EOD, truncated [ 114.065423][ T6164] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 114.068830][ T5803] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 255 [ 114.151894][ T5195] Dev loop7: unable to read RDB block 7 [ 114.151925][ T5195] loop7: unable to read partition table [ 114.152018][ T5195] loop7: partition table beyond EOD, truncated [ 114.382544][ T6199] ucma_write: process 72 (syz.3.69) changed security contexts after opening file descriptor, this is not allowed. [ 114.638021][ T6227] vhci_hcd: not connected 4 [ 114.868450][ T6255] 9pnet_fd: p9_fd_create_unix (6255): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 114.869363][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.869492][ T6255] batadv_slave_0: entered promiscuous mode [ 114.869508][ T6255] batadv_slave_0: entered allmulticast mode [ 114.873819][ T6255] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 115.000944][ T6261] __nla_validate_parse: 2 callbacks suppressed [ 115.000959][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'. [ 115.106443][ T6267] mac80211_hwsim hwsim6 c@0Ù: renamed from wlan0 (while UP) [ 115.131407][ T5912] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 115.166002][ T6276] ======================================================= [ 115.166002][ T6276] WARNING: The mand mount option has been deprecated and [ 115.166002][ T6276] and is ignored by this kernel. Remove the mand [ 115.166002][ T6276] option from the mount to silence this warning. [ 115.166002][ T6276] ======================================================= [ 115.248758][ T6284] syzkaller0: entered promiscuous mode [ 115.248775][ T6284] syzkaller0: entered allmulticast mode [ 115.254127][ T6284] tipc: Started in network mode [ 115.254151][ T6284] tipc: Node identity 16aa7c2a5c62, cluster identity 4711 [ 115.255891][ T6284] tipc: Enabled bearer , priority 0 [ 115.261500][ T6284] tipc: Resetting bearer [ 115.262138][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.262158][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.262169][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.262177][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.262186][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.262998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.289656][ T6281] tipc: Resetting bearer [ 115.306311][ T6281] tipc: Disabling bearer [ 115.306480][ T5912] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.307799][ T5912] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.307819][ T5912] usb 6-1: config 0 has no interface number 0 [ 115.307846][ T5912] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.307875][ T5912] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 115.307896][ T5912] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 115.307916][ T5912] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 115.307958][ T5912] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 115.307982][ T5912] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.308014][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.314094][ T5912] usb 6-1: config 0 descriptor?? [ 115.315816][ T6255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.315958][ T6255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.342829][ T5912] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 115.380658][ T6298] Cannot find set identified by id 4 to match [ 115.518712][ T5912] usb 6-1: USB disconnect, device number 2 [ 115.522407][ T6308] CIFS: Invalid mount helper version specified [ 115.529020][ T5912] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 115.627073][ T5803] Bluetooth: hci1: unexpected cc 0x0c47 length: 2 > 1 [ 115.711592][ T5783] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 115.861672][ T6322] trusted_key: encrypted_key: keyword '.ew' not recognized [ 115.861939][ T5783] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.862930][ T5783] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.862947][ T5783] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 115.862961][ T5783] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.866693][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.866707][ T5783] usb 5-1: Product: syz [ 115.866715][ T5783] usb 5-1: Manufacturer: syz [ 115.866722][ T5783] usb 5-1: SerialNumber: syz [ 115.867984][ T5783] usb 5-1: config 0 descriptor?? [ 115.876873][ T5783] usb 5-1: selecting invalid altsetting 0 [ 115.951671][ T6324] ªªªªª»: renamed from vlan0 (while UP) [ 116.027891][ T6327] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 116.056235][ T6324] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.060988][ T6324] bond1: (slave lo): Enslaving as an active interface with an up link [ 116.072174][ T6324] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 116.078733][ T10] usb 5-1: USB disconnect, device number 3 [ 116.367851][ T6340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.451043][ T6343] svc: failed to register lockdv1 RPC service (errno 5). [ 116.451156][ T6343] lockd_up: makesock failed, error=-5 [ 116.739114][ T6343] svc: failed to register nfsdv3 RPC service (errno 5). [ 116.739130][ T6343] failed to unregister tcp with rpcbind [ 116.744908][ T6354] syzkaller0: entered promiscuous mode [ 116.744933][ T6354] syzkaller0: entered allmulticast mode [ 116.753286][ T6354] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 116.753321][ T6354] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 116.753360][ T6354] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 116.818040][ T34] infiniband syz2: ib_query_port failed (-19) [ 116.829729][ T130] smbdirect: ib_dev[syz2] removed [ 116.837818][ T42] kauditd_printk_skb: 153 callbacks suppressed [ 116.837836][ T42] audit: type=1400 audit(1793825810.857:403): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 116.853577][ T42] audit: type=1400 audit(1793825810.877:404): avc: denied { read } for pid=5801 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.853624][ T42] audit: type=1400 audit(1793825810.877:405): avc: denied { open } for pid=5801 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.853946][ T42] audit: type=1400 audit(1793825810.877:406): avc: denied { ioctl } for pid=5801 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.992653][ T42] audit: type=1400 audit(1793825811.017:407): avc: denied { read } for pid=6362 comm="syz.0.117" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.992700][ T42] audit: type=1400 audit(1793825811.017:408): avc: denied { open } for pid=6362 comm="syz.0.117" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 116.992736][ T42] audit: type=1400 audit(1793825811.017:409): avc: denied { ioctl } for pid=6362 comm="syz.0.117" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0xc0189373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.033500][ T42] audit: type=1400 audit(1793825811.057:410): avc: denied { bind } for pid=6366 comm="syz.3.118" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.033796][ T42] audit: type=1400 audit(1793825811.057:411): avc: denied { node_bind } for pid=6366 comm="syz.3.118" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 117.067156][ T42] audit: type=1400 audit(1793825811.087:412): avc: denied { allowed } for pid=6364 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.108795][ T6381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 117.117382][ T6381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 117.190952][ T6389] exFAT-fs (nbd0): unable to read boot sector [ 117.190965][ T6389] exFAT-fs (nbd0): failed to read boot sector [ 117.191004][ T6389] exFAT-fs (nbd0): failed to recognize exfat type [ 117.276023][ T6394] netlink: 232 bytes leftover after parsing attributes in process `syz.3.126'. [ 117.305418][ T6396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.395641][ T6394] xt_recent: Unsupported userspace flags (000000b2) [ 117.507649][ T6415] ±ÿ: renamed from lo (while UP) [ 117.521534][ T6415] macvtap1: entered promiscuous mode [ 117.521671][ T6415] macvtap1: entered allmulticast mode [ 117.521680][ T6415] veth1_vlan: entered allmulticast mode [ 117.774268][ T6433] mmap: syz.3.138 (6433) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.802140][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 117.832505][ T6440] xt_hashlimit: max too large, truncated to 1048576 [ 117.832540][ T6440] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 117.847118][ T6443] netlink: 168 bytes leftover after parsing attributes in process `syz.0.140'. [ 117.847952][ T6442] netlink: 45 bytes leftover after parsing attributes in process `syz.0.140'. [ 117.850581][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 117.884905][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 117.886562][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 117.890343][ T6448] zram0: detected capacity change from 0 to 8 [ 117.890761][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 117.937392][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 117.993328][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.034339][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.073047][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.098390][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.132854][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.155787][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.181645][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.212862][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.232666][ T6476] netlink: 144 bytes leftover after parsing attributes in process `syz.0.147'. [ 118.237798][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.268096][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.292337][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.316892][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.345529][ T6481] virtio-pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 118.346782][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.376434][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.405269][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.429014][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.458570][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.492318][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.532368][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.568300][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.614854][ T6435] nvme nvme0: rdma connection establishment failed (-512) [ 118.702489][ T6502] netlink: 56 bytes leftover after parsing attributes in process `syz.2.153'. [ 118.746641][ T5803] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 118.866766][ T6514] jffs2: notice: (6514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.271561][ T5899] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 119.444480][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 119.444919][ T5899] usb 7-1: not running at top speed; connect to a high speed hub [ 119.444935][ T5899] usb 7-1: New USB device found: idVendor=06cd, idProduct=f845, bcdDevice=7.e1 [ 119.444954][ T5899] usb 7-1: too many configurations: 207, using maximum allowed: 8 [ 119.446532][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 119.446549][ T5899] usb 7-1: can't read configurations, error -61 [ 119.571479][ T5899] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 119.620607][ T6533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.620734][ T6533] block device autoloading is deprecated and will be removed. [ 119.674058][ T6532] md: array md1 already has disks! [ 119.711448][ T6532] md: array md1 already has disks! [ 119.723470][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 119.723933][ T5899] usb 7-1: not running at top speed; connect to a high speed hub [ 119.723985][ T5899] usb 7-1: New USB device found: idVendor=06cd, idProduct=f845, bcdDevice=7.e1 [ 119.724016][ T5899] usb 7-1: too many configurations: 207, using maximum allowed: 8 [ 119.725352][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 119.725380][ T5899] usb 7-1: can't read configurations, error -61 [ 119.725766][ T5899] usb usb7-port1: attempt power cycle [ 119.751404][ T6532] md: array md1 already has disks! [ 119.794748][ T6532] md: array md1 already has disks! [ 119.831403][ T6532] md: array md1 already has disks! [ 119.871779][ T6532] md: array md1 already has disks! [ 119.911528][ T6532] md: array md1 already has disks! [ 119.937686][ T6538] overlayfs: missing 'workdir' [ 119.971438][ T6532] md: array md1 already has disks! [ 120.031764][ T6532] md: array md1 already has disks! [ 120.061436][ T5899] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 120.071658][ T6532] md: array md1 already has disks! [ 120.083666][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 120.084055][ T5899] usb 7-1: not running at top speed; connect to a high speed hub [ 120.084071][ T5899] usb 7-1: New USB device found: idVendor=06cd, idProduct=f845, bcdDevice=7.e1 [ 120.084094][ T5899] usb 7-1: too many configurations: 207, using maximum allowed: 8 [ 120.085178][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 120.085195][ T5899] usb 7-1: can't read configurations, error -61 [ 120.121482][ T6532] md: array md1 already has disks! [ 120.182727][ T6532] md: array md1 already has disks! [ 120.211933][ T5899] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 120.233673][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 120.234080][ T5899] usb 7-1: not running at top speed; connect to a high speed hub [ 120.234096][ T5899] usb 7-1: New USB device found: idVendor=06cd, idProduct=f845, bcdDevice=7.e1 [ 120.234115][ T5899] usb 7-1: too many configurations: 207, using maximum allowed: 8 [ 120.238302][ T5899] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 120.238322][ T5899] usb 7-1: can't read configurations, error -61 [ 120.238456][ T5899] usb usb7-port1: unable to enumerate USB device [ 120.252525][ T6532] md: array md1 already has disks! [ 120.276819][ T6562] __nla_validate_parse: 2 callbacks suppressed [ 120.276833][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 120.301648][ T6532] md: array md1 already has disks! [ 120.341393][ T6532] md: array md1 already has disks! [ 120.371552][ T6532] md: array md1 already has disks! [ 120.512428][ T6569] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 120.677226][ T6581] e1000e 0000:00:02.0 eth1: removed PHC [ 120.786048][ T6581] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 120.817337][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 120.817356][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 120.817365][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 121.108542][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 121.224587][ T6606] overlayfs: conflicting lowerdir path [ 121.227389][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 121.241216][ T6606] bond0: (slave bond_slave_0): Releasing backup interface [ 121.334191][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 121.381150][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 121.381166][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 121.473340][ T6634] tmpfs: Bad value for 'mpol' [ 121.544986][ T6640] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 121.599357][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 121.621500][ T6648] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 121.820985][ T6667] trusted_key: encrypted_key: insufficient parameters specified [ 121.976431][ T6672] capability: warning: `syz.1.195' uses 32-bit capabilities (legacy support in use) [ 122.072542][ T42] kauditd_printk_skb: 50 callbacks suppressed [ 122.072555][ T42] audit: type=1400 audit(1793825816.097:463): avc: denied { read write } for pid=6718 comm="syz.0.201" name="sg3" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.072580][ T42] audit: type=1400 audit(1793825816.097:464): avc: denied { open } for pid=6718 comm="syz.0.201" path="/dev/sg3" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 122.122972][ T6726] xt_ecn: cannot match TCP bits for non-tcp packets [ 122.128222][ T42] audit: type=1400 audit(1793825816.147:465): avc: denied { create } for pid=6728 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.128250][ T42] audit: type=1400 audit(1793825816.147:466): avc: denied { bind } for pid=6728 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.128270][ T42] audit: type=1400 audit(1793825816.147:468): avc: denied { setopt } for pid=6728 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.128289][ T42] audit: type=1400 audit(1793825816.147:467): avc: denied { block_suspend } for pid=6724 comm="syz.3.204" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.128310][ T42] audit: type=1400 audit(1793825816.147:469): avc: denied { ioctl } for pid=6728 comm="syz.0.206" path="socket:[16452]" dev="sockfs" ino=16452 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.165272][ T6729] program syz.0.206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.195372][ T6735] netlink: 'syz.1.208': attribute type 4 has an invalid length. [ 122.242282][ T6740] xt_hashlimit: size too large, truncated to 1048576 [ 122.254073][ T6744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6744 comm=syz.1.210 [ 122.269921][ T6752] ip_tables: iptables: counters copy to user failed while replacing table [ 122.297496][ T42] audit: type=1400 audit(1793825816.317:470): avc: denied { mount } for pid=6754 comm="syz.0.214" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 122.315497][ T42] audit: type=1400 audit(1793825816.337:471): avc: denied { bind } for pid=6754 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.316011][ T42] audit: type=1400 audit(1793825816.337:472): avc: denied { accept } for pid=6754 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.462557][ T5899] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 122.611935][ T5899] usb 7-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 122.612931][ T5899] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.612960][ T5899] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 122.612973][ T5899] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.614261][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 122.614273][ T5899] usb 7-1: Product: syz [ 122.614281][ T5899] usb 7-1: Manufacturer: syz [ 122.627595][ T6723] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 122.629309][ T5899] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected [ 122.642440][ T5899] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 122.863159][ T24] usb 7-1: USB disconnect, device number 6 [ 122.880328][ T24] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 122.886277][ T24] garmin_gps 7-1:1.0: device disconnected [ 123.326920][ T6791] FAULT_INJECTION: forcing a failure. [ 123.326920][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 123.326959][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) [ 123.326980][ T6791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.326991][ T6791] Call Trace: [ 123.327009][ T6791] [ 123.327014][ T6791] dump_stack_lvl+0x100/0x190 [ 123.327127][ T6791] should_fail_ex.cold+0x5/0xa [ 123.327154][ T6791] should_failslab+0xc2/0x120 [ 123.327186][ T6791] __kmalloc_cache_noprof+0x91/0x6d0 [ 123.327203][ T6791] ? lockdep_init_map_type+0x5c/0x250 [ 123.327230][ T6791] ? tcf_block_get_ext+0x158/0x1950 [ 123.327284][ T6791] tcf_block_get_ext+0x158/0x1950 [ 123.327299][ T6791] ? qdisc_create+0x73/0x1430 [ 123.327316][ T6791] ? netlink_unicast+0x668/0x950 [ 123.327332][ T6791] ? netlink_sendmsg+0x9ac/0x10c0 [ 123.327349][ T6791] tcf_block_get+0xa8/0x100 [ 123.327362][ T6791] ? __pfx_tcf_block_get+0x10/0x10 [ 123.327376][ T6791] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 123.327399][ T6791] prio_init+0x3b/0x80 [ 123.327414][ T6791] ? __pfx_prio_init+0x10/0x10 [ 123.327426][ T6791] qdisc_create+0x47d/0x1430 [ 123.327446][ T6791] tc_modify_qdisc+0xdcf/0x2120 [ 123.327465][ T6791] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 123.327493][ T6791] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 123.327509][ T6791] rtnetlink_rcv_msg+0x3c9/0xe90 [ 123.327532][ T6791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.327556][ T6791] netlink_rcv_skb+0x159/0x420 [ 123.327572][ T6791] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.327590][ T6791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.327605][ T6791] ? __asan_memcpy+0x3c/0x60 [ 123.327628][ T6791] ? netlink_deliver_tap+0x1ae/0xb50 [ 123.327645][ T6791] netlink_unicast+0x668/0x950 [ 123.327663][ T6791] ? __pfx_netlink_unicast+0x10/0x10 [ 123.327683][ T6791] netlink_sendmsg+0x9ac/0x10c0 [ 123.327702][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.327722][ T6791] ? selinux_socket_sendmsg+0x198/0x2f0 [ 123.327762][ T6791] ? ____sys_sendmsg+0xa99/0xc30 [ 123.327780][ T6791] ____sys_sendmsg+0xa99/0xc30 [ 123.327797][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.327814][ T6791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.327839][ T6791] ___sys_sendmsg+0x190/0x1e0 [ 123.327859][ T6791] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.327885][ T6791] ? futex_wait+0x11e/0x370 [ 123.327936][ T6791] ? find_held_lock+0x2b/0x80 [ 123.327975][ T6791] __sys_sendmsg+0x160/0x210 [ 123.328001][ T6791] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.328036][ T6791] do_syscall_64+0x123/0x790 [ 123.328115][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.328129][ T6791] RIP: 0033:0x7f4351f9fb19 [ 123.328141][ T6791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.328153][ T6791] RSP: 002b:00007f4352e5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.328182][ T6791] RAX: ffffffffffffffda RBX: 00007f4352225fa0 RCX: 00007f4351f9fb19 [ 123.328190][ T6791] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 123.328197][ T6791] RBP: 00007f4352037b70 R08: 0000000000000000 R09: 0000000000000000 [ 123.328205][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.328212][ T6791] R13: 00007f4352226038 R14: 00007f4352225fa0 R15: 00007ffdaa44c528 [ 123.328243][ T6791] [ 123.338724][ T6791] veth2: entered promiscuous mode [ 123.338737][ T6791] veth2: entered allmulticast mode [ 123.361710][ T24] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 123.502341][ T24] usb 8-1: device descriptor read/64, error -71 [ 123.652267][ T6821] qnx6: unable to set blocksize [ 123.684842][ T6825] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 123.696081][ T6827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.741488][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 123.741537][ T6827] md: array md1 already has disks! [ 123.771488][ T5783] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 123.821520][ T6827] md: could not open device unknown-block(1,2). [ 123.821697][ T6827] md: error, md_import_device() returned -16 [ 123.871835][ T6827] md: could not open device unknown-block(1,3). [ 123.871885][ T6827] md: error, md_import_device() returned -16 [ 123.885191][ T24] usb 8-1: device descriptor read/64, error -71 [ 123.916221][ T6827] md/raid:md1: not enough operational devices (3/3 failed) [ 123.951828][ T5783] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.952633][ T5783] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.952647][ T5783] usb 5-1: config 0 has no interface number 0 [ 123.952668][ T5783] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.952680][ T5783] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 123.952693][ T5783] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 123.952706][ T5783] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 123.952719][ T5783] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 123.952732][ T5783] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.952752][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.956872][ T5783] usb 5-1: config 0 descriptor?? [ 123.957401][ T6809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.957491][ T6809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.964162][ T5783] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 123.995034][ T24] usb usb8-port1: attempt power cycle [ 124.083301][ T6827] md/raid:md1: failed to run raid set. [ 124.083316][ T6827] md: pers->run() failed ... [ 124.083397][ T6837] md: md1 stopped. [ 124.266395][ T6810] Set syz1 is full, maxelem 6117 reached [ 124.268906][ T34] usb 5-1: USB disconnect, device number 4 [ 124.271968][ T34] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 124.331441][ T24] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 124.351935][ T24] usb 8-1: device descriptor read/8, error -71 [ 124.592850][ T24] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 124.616848][ T6849] nbd: couldn't find a device at index 61 [ 124.621972][ T24] usb 8-1: device descriptor read/8, error -71 [ 124.644712][ T6851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.644725][ T6851] IPv6: NLM_F_CREATE should be set when creating new route [ 124.647035][ T6851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.741716][ T24] usb usb8-port1: unable to enumerate USB device [ 124.760657][ T6865] capability: warning: `syz.2.243' uses deprecated v2 capabilities in a way that may be insecure [ 124.827966][ T6873] ip6t_REJECT: ECHOREPLY is not supported [ 124.882557][ T6877] nvme nvme0: failed to connect socket: -111 [ 124.883794][ T6881] FAULT_INJECTION: forcing a failure. [ 124.883794][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 124.883829][ T6881] CPU: 2 UID: 0 PID: 6881 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(full) [ 124.883843][ T6881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.883851][ T6881] Call Trace: [ 124.883859][ T6881] [ 124.883864][ T6881] dump_stack_lvl+0x100/0x190 [ 124.883949][ T6881] should_fail_ex.cold+0x5/0xa [ 124.883975][ T6881] should_failslab+0xc2/0x120 [ 124.884006][ T6881] kmem_cache_alloc_noprof+0x92/0x6a0 [ 124.884027][ T6881] ? lock_acquire+0x1d1/0x380 [ 124.884055][ T6881] ? dst_alloc+0x99/0x1a0 [ 124.884101][ T6881] ? __pfx_ip6_dst_gc+0x10/0x10 [ 124.884151][ T6881] dst_alloc+0x99/0x1a0 [ 124.884166][ T6881] ip6_pol_route+0x9fd/0x1310 [ 124.884182][ T6881] ? __pfx_ip6_pol_route+0x10/0x10 [ 124.884201][ T6881] ? lock_acquire+0x1d1/0x380 [ 124.884218][ T6881] ? fib_rules_lookup+0x9a/0x1060 [ 124.884233][ T6881] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.884246][ T6881] fib6_rule_action+0x2e9/0x910 [ 124.884265][ T6881] ? __pfx_fib6_rule_action+0x10/0x10 [ 124.884283][ T6881] fib_rules_lookup+0x418/0x1060 [ 124.884297][ T6881] ? __pfx_fib_rules_lookup+0x10/0x10 [ 124.884310][ T6881] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.884326][ T6881] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.884338][ T6881] fib6_rule_lookup+0x18b/0x720 [ 124.884357][ T6881] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 124.884378][ T6881] ? lock_acquire+0x1d1/0x380 [ 124.884393][ T6881] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 124.884408][ T6881] ? lock_acquire+0x1d1/0x380 [ 124.884424][ T6881] ? is_bpf_text_address+0x25/0x1a0 [ 124.884449][ T6881] ip6_route_output_flags+0x1d0/0x650 [ 124.884469][ T6881] ip6_dst_lookup_tail.constprop.0+0xa11/0x21f0 [ 124.884486][ T6881] ? __kernel_text_address+0xd/0x30 [ 124.884503][ T6881] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 124.884519][ T6881] ? lock_acquire+0x1d1/0x380 [ 124.884541][ T6881] ? get_random_u32+0xe7/0x7d0 [ 124.884602][ T6881] ip6_dst_lookup_flow+0x122/0x240 [ 124.884616][ T6881] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 124.884629][ T6881] ? kasan_save_stack+0x30/0x50 [ 124.884642][ T6881] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 124.884662][ T6881] tcp_v6_connect+0x11a6/0x2770 [ 124.884685][ T6881] ? __pfx_tcp_v6_connect+0x10/0x10 [ 124.884711][ T6881] __inet_stream_connect+0x208/0xff0 [ 124.884730][ T6881] ? __pfx___inet_stream_connect+0x10/0x10 [ 124.884744][ T6881] ? kasan_save_track+0x14/0x30 [ 124.884755][ T6881] ? __kasan_kmalloc+0xaa/0xb0 [ 124.884766][ T6881] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 124.884782][ T6881] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 124.884803][ T6881] tcp_sendmsg_fastopen+0x3ed/0x750 [ 124.884822][ T6881] tcp_sendmsg_locked+0x28ba/0x46b0 [ 124.884838][ T6881] ? __lock_acquire+0x5c0/0x1f40 [ 124.884856][ T6881] ? __lock_acquire+0x5c0/0x1f40 [ 124.884875][ T6881] ? reacquire_held_locks+0xdd/0x1f0 [ 124.884891][ T6881] ? release_sock+0x21/0x280 [ 124.884907][ T6881] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 124.884929][ T6881] ? lock_acquire+0x1d1/0x380 [ 124.884952][ T6881] ? do_raw_spin_lock+0x128/0x260 [ 124.884969][ T6881] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 124.884992][ T6881] ? __local_bh_enable_ip+0xa5/0x120 [ 124.885038][ T6881] tcp_sendmsg+0x2e/0x50 [ 124.885053][ T6881] ? __pfx_tcp_sendmsg+0x10/0x10 [ 124.885069][ T6881] inet6_sendmsg+0xb9/0x140 [ 124.885088][ T6881] __sys_sendto+0x36d/0x4e0 [ 124.885102][ T6881] ? __pfx___sys_sendto+0x10/0x10 [ 124.885119][ T6881] ? rcu_is_watching+0x13/0xc0 [ 124.885133][ T6881] ? do_sock_setsockopt+0x101/0x1d0 [ 124.885147][ T6881] ? kfree+0x1e5/0x6d0 [ 124.885167][ T6881] ? xfd_validate_state+0x129/0x190 [ 124.885186][ T6881] __x64_sys_sendto+0xe0/0x1c0 [ 124.885198][ T6881] ? do_syscall_64+0xae/0x790 [ 124.885234][ T6881] ? lockdep_hardirqs_on+0x7d/0x110 [ 124.885248][ T6881] do_syscall_64+0x123/0x790 [ 124.885263][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.885276][ T6881] RIP: 0033:0x7fa4c239fb19 [ 124.885288][ T6881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.885299][ T6881] RSP: 002b:00007fa4c31d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.885322][ T6881] RAX: ffffffffffffffda RBX: 00007fa4c2626090 RCX: 00007fa4c239fb19 [ 124.885330][ T6881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 124.885337][ T6881] RBP: 00007fa4c2437b70 R08: 0000200000000900 R09: 000000000000001c [ 124.885345][ T6881] R10: 0000000020000075 R11: 0000000000000246 R12: 0000000000000000 [ 124.885353][ T6881] R13: 00007fa4c2626128 R14: 00007fa4c2626090 R15: 00007ffd9a9bd588 [ 124.885370][ T6881] [ 125.233719][ T6905] 9pnet_fd: p9_fd_create_tcp (6905): problem connecting socket to 127.0.0.1 [ 125.234885][ T6905] netlink: 'syz.0.255': attribute type 12 has an invalid length. [ 125.234897][ T6905] netlink: 'syz.0.255': attribute type 29 has an invalid length. [ 125.820310][ T6920] Bluetooth: MGMT ver 1.23 [ 125.820827][ T6920] __nla_validate_parse: 17 callbacks suppressed [ 125.820838][ T6920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.262'. [ 125.820847][ T6920] netlink: 43 bytes leftover after parsing attributes in process `syz.2.262'. [ 125.820856][ T6920] netlink: 'syz.2.262': attribute type 5 has an invalid length. [ 125.820863][ T6920] netlink: 43 bytes leftover after parsing attributes in process `syz.2.262'. [ 126.075879][ T6934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6934 comm=syz.2.265 [ 126.076374][ T6934] netlink: 112 bytes leftover after parsing attributes in process `syz.2.265'. [ 126.285794][ T6958] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 126.307309][ T6956] netlink: 52 bytes leftover after parsing attributes in process `syz.2.273'. [ 126.451181][ T6973] 9p: Unknown Cache mode or invalid value f [ 126.557684][ T6984] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 126.557749][ T6984] CPU: 3 UID: 0 PID: 6984 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 126.557763][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.557770][ T6984] Call Trace: [ 126.557785][ T6984] [ 126.557796][ T6984] dump_stack_lvl+0x100/0x190 [ 126.557914][ T6984] sysfs_warn_dup.cold+0x1c/0x28 [ 126.557941][ T6984] sysfs_create_dir_ns+0x24b/0x2b0 [ 126.557980][ T6984] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 126.557996][ T6984] ? find_held_lock+0x2b/0x80 [ 126.558021][ T6984] ? kobject_add_internal+0x25f/0x930 [ 126.558086][ T6984] ? kobject_add_internal+0x25f/0x930 [ 126.558104][ T6984] ? class_dir_child_ns_type+0xd/0x60 [ 126.558154][ T6984] kobject_add_internal+0x2c8/0x930 [ 126.558173][ T6984] kobject_add+0x16a/0x1e0 [ 126.558189][ T6984] ? __pfx_kobject_add+0x10/0x10 [ 126.558207][ T6984] ? get_device_parent+0x1b3/0x4c0 [ 126.558221][ T6984] ? kobject_put+0xb9/0x640 [ 126.558240][ T6984] device_add+0x294/0x1970 [ 126.558256][ T6984] ? lockdep_init_map_type+0x5c/0x250 [ 126.558273][ T6984] ? __pfx_device_add+0x10/0x10 [ 126.558287][ T6984] ? lockdep_init_map_type+0x5c/0x250 [ 126.558304][ T6984] ? __init_waitqueue_head+0xca/0x150 [ 126.558330][ T6984] tty_register_device_attr+0x388/0x810 [ 126.558358][ T6984] ? lockdep_init_map_type+0x5c/0x250 [ 126.558375][ T6984] ? __pfx_tty_register_device_attr+0x10/0x10 [ 126.558397][ T6984] ? tty_port_init+0x156/0x1c0 [ 126.558412][ T6984] gsm_activate_mux+0x155/0x2a0 [ 126.558425][ T6984] gsmld_ioctl+0x346/0x15c0 [ 126.558441][ T6984] ? kasan_quarantine_put+0x104/0x240 [ 126.558467][ T6984] ? __pfx_gsmld_ioctl+0x10/0x10 [ 126.558491][ T6984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.558518][ T6984] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 126.558536][ T6984] ? __pfx_gsmld_ioctl+0x10/0x10 [ 126.558549][ T6984] tty_ioctl+0x12f4/0x1870 [ 126.558561][ T6984] ? __pfx_tty_ioctl+0x10/0x10 [ 126.558571][ T6984] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 126.558605][ T6984] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.558626][ T6984] ? __fget_files+0x34/0x3d0 [ 126.558647][ T6984] ? selinux_file_ioctl+0x1e0/0x290 [ 126.558665][ T6984] ? selinux_file_ioctl+0x1e7/0x290 [ 126.558683][ T6984] ? __pfx_tty_ioctl+0x10/0x10 [ 126.558695][ T6984] __x64_sys_ioctl+0x18e/0x210 [ 126.558708][ T6984] do_syscall_64+0x123/0x790 [ 126.558736][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.558751][ T6984] RIP: 0033:0x7fa4c239fb19 [ 126.558761][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.558772][ T6984] RSP: 002b:00007fa4c31f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.558815][ T6984] RAX: ffffffffffffffda RBX: 00007fa4c2625fa0 RCX: 00007fa4c239fb19 [ 126.558825][ T6984] RDX: 0000200000000300 RSI: 0000000040204706 RDI: 0000000000000004 [ 126.558832][ T6984] RBP: 00007fa4c2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 126.558839][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.558845][ T6984] R13: 00007fa4c2626038 R14: 00007fa4c2625fa0 R15: 00007ffd9a9bd588 [ 126.558861][ T6984] [ 126.559105][ T6984] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 126.612182][ T6984] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 126.612199][ T6984] CPU: 3 UID: 0 PID: 6984 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT(full) [ 126.612212][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.612220][ T6984] Call Trace: [ 126.612224][ T6984] [ 126.612229][ T6984] dump_stack_lvl+0x100/0x190 [ 126.612253][ T6984] sysfs_warn_dup.cold+0x1c/0x28 [ 126.612272][ T6984] sysfs_create_dir_ns+0x24b/0x2b0 [ 126.612290][ T6984] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 126.612306][ T6984] ? find_held_lock+0x2b/0x80 [ 126.612318][ T6984] ? kobject_add_internal+0x25f/0x930 [ 126.612335][ T6984] ? kobject_add_internal+0x25f/0x930 [ 126.612353][ T6984] ? class_dir_child_ns_type+0xd/0x60 [ 126.612376][ T6984] kobject_add_internal+0x2c8/0x930 [ 126.612395][ T6984] kobject_add+0x16a/0x1e0 [ 126.612411][ T6984] ? __pfx_kobject_add+0x10/0x10 [ 126.612428][ T6984] ? get_device_parent+0x1b3/0x4c0 [ 126.612442][ T6984] ? kobject_put+0xb9/0x640 [ 126.612461][ T6984] device_add+0x294/0x1970 [ 126.612477][ T6984] ? lockdep_init_map_type+0x5c/0x250 [ 126.612494][ T6984] ? __pfx_device_add+0x10/0x10 [ 126.612509][ T6984] ? lockdep_init_map_type+0x5c/0x250 [ 126.612526][ T6984] ? __init_waitqueue_head+0xca/0x150 [ 126.612547][ T6984] tty_register_device_attr+0x388/0x810 [ 126.612568][ T6984] ? lockdep_init_map_type+0x5c/0x250 [ 126.612585][ T6984] ? __pfx_tty_register_device_attr+0x10/0x10 [ 126.612607][ T6984] ? tty_port_init+0x156/0x1c0 [ 126.612621][ T6984] gsm_activate_mux+0x155/0x2a0 [ 126.612634][ T6984] gsmld_ioctl+0xbbc/0x15c0 [ 126.612650][ T6984] ? kasan_quarantine_put+0x104/0x240 [ 126.612670][ T6984] ? __pfx_gsmld_ioctl+0x10/0x10 [ 126.612694][ T6984] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.612714][ T6984] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 126.612732][ T6984] ? __pfx_gsmld_ioctl+0x10/0x10 [ 126.612745][ T6984] tty_ioctl+0x12f4/0x1870 [ 126.612757][ T6984] ? __pfx_tty_ioctl+0x10/0x10 [ 126.612767][ T6984] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 126.612787][ T6984] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 126.612808][ T6984] ? __fget_files+0x34/0x3d0 [ 126.612829][ T6984] ? selinux_file_ioctl+0x1e0/0x290 [ 126.612846][ T6984] ? selinux_file_ioctl+0x1e7/0x290 [ 126.612865][ T6984] ? __pfx_tty_ioctl+0x10/0x10 [ 126.612876][ T6984] __x64_sys_ioctl+0x18e/0x210 [ 126.612889][ T6984] do_syscall_64+0x123/0x790 [ 126.612902][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.612914][ T6984] RIP: 0033:0x7fa4c239fb19 [ 126.612924][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.612935][ T6984] RSP: 002b:00007fa4c31f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.612947][ T6984] RAX: ffffffffffffffda RBX: 00007fa4c2625fa0 RCX: 00007fa4c239fb19 [ 126.612954][ T6984] RDX: 0000200000000340 RSI: 00000000404c4701 RDI: 0000000000000004 [ 126.612961][ T6984] RBP: 00007fa4c2437b70 R08: 0000000000000000 R09: 0000000000000000 [ 126.612968][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.612974][ T6984] R13: 00007fa4c2626038 R14: 00007fa4c2625fa0 R15: 00007ffd9a9bd588 [ 126.612989][ T6984] [ 126.612999][ T6984] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 126.675817][ T5871] bond0: (slave bond_slave_1): interface is now down [ 126.677486][ T6987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=6987 comm=syz.2.281 [ 126.691965][ T5871] bond0: (slave bond_slave_1): interface is now down [ 126.713792][ T5871] bond0: now running without any active interface! [ 126.814086][ T6996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.883510][ T6996] rxe_eth0 speed is unknown, defaulting to 1000 [ 127.081393][ T7005] process 'syz.2.288' launched './file0' with NULL argv: empty string added [ 127.085233][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 127.085245][ T42] audit: type=1400 audit(1793825821.107:522): avc: denied { execute_no_trans } for pid=7004 comm="syz.2.288" path="/78/file0" dev="tmpfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.102290][ T42] audit: type=1400 audit(1793825821.127:523): avc: denied { mount } for pid=7004 comm="syz.2.288" name="/" dev="hugetlbfs" ino=16018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 127.129938][ T7012] device-mapper: table: 248:3: ram7 too small for target: start=8, len=13336, dev_size=8192 [ 127.129966][ T7012] device-mapper: core: Cannot calculate initial queue limits [ 127.129971][ T7012] device-mapper: ioctl: unable to set up device queue for new table. [ 127.140517][ T42] audit: type=1400 audit(1793825821.157:524): avc: denied { watch } for pid=7021 comm="syz.2.292" path="/79/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 127.142908][ T42] audit: type=1400 audit(1793825821.167:525): avc: denied { mount } for pid=7021 comm="syz.2.292" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 127.259633][ T42] audit: type=1400 audit(1793825821.277:526): avc: denied { append } for pid=7025 comm="syz.2.293" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.814983][ T7037] FAULT_INJECTION: forcing a failure. [ 127.814983][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 127.815006][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.3.294 Not tainted syzkaller #0 PREEMPT(full) [ 127.815020][ T7037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.815028][ T7037] Call Trace: [ 127.815033][ T7037] [ 127.815038][ T7037] dump_stack_lvl+0x100/0x190 [ 127.815063][ T7037] should_fail_ex.cold+0x5/0xa [ 127.815083][ T7037] should_failslab+0xc2/0x120 [ 127.815099][ T7037] kmem_cache_alloc_noprof+0x92/0x6a0 [ 127.815120][ T7037] ? d_instantiate+0x8a/0xb0 [ 127.815138][ T7037] ? alloc_empty_file+0x5b/0x1c0 [ 127.815156][ T7037] alloc_empty_file+0x5b/0x1c0 [ 127.815173][ T7037] alloc_file_pseudo+0x17e/0x290 [ 127.815191][ T7037] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 127.815207][ T7037] ? alloc_fd+0x471/0x7a0 [ 127.815240][ T7037] ? do_raw_spin_unlock+0x145/0x1e0 [ 127.815255][ T7037] __anon_inode_getfile+0xe8/0x280 [ 127.815272][ T7037] anon_inode_getfile_fmode+0x37/0xa0 [ 127.815287][ T7037] __do_sys_fanotify_init+0xa70/0xe10 [ 127.815308][ T7037] do_syscall_64+0x123/0x790 [ 127.815329][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.815344][ T7037] RIP: 0033:0x7f68b099fb19 [ 127.815354][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.815367][ T7037] RSP: 002b:00007f68b17fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 127.815381][ T7037] RAX: ffffffffffffffda RBX: 00007f68b0c25fa0 RCX: 00007f68b099fb19 [ 127.815391][ T7037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 127.815398][ T7037] RBP: 00007f68b0a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 127.815407][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.815415][ T7037] R13: 00007f68b0c26038 R14: 00007f68b0c25fa0 R15: 00007ffc5befb928 [ 127.815431][ T7037] [ 127.967511][ T42] audit: type=1400 audit(1793825821.987:527): avc: denied { name_bind } for pid=7043 comm="syz.2.297" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 127.982477][ T7047] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.983880][ T7049] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 127.988282][ T42] audit: type=1400 audit(1793825822.007:528): avc: denied { associate } for pid=7043 comm="syz.2.297" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 127.990529][ T42] audit: type=1400 audit(1793825822.007:529): avc: denied { append } for pid=7043 comm="syz.2.297" name="pfkey" dev="proc" ino=4026533167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 127.994927][ T42] audit: type=1400 audit(1793825822.017:530): avc: denied { create } for pid=7038 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.995848][ T42] audit: type=1400 audit(1793825822.017:531): avc: denied { connect } for pid=7038 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.997481][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 128.403852][ T1187] IPVS: starting estimator thread 0... [ 128.430613][ T7066] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 128.430672][ T7068] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 128.511426][ T7064] IPVS: using max 42 ests per chain, 100800 per kthread [ 128.711456][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 128.848343][ T7077] overlayfs: failed to resolve './file0/file1': -2 [ 128.872269][ T34] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 128.873380][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.873423][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 128.873445][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 128.873465][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 128.873504][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.879321][ T7070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.879480][ T7070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.883602][ T34] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 128.892904][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 128.892981][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 128.898048][ T34] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 128.898913][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 128.898949][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 128.902839][ T34] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 129.091812][ T7070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'. [ 129.123362][ T7081] netlink: 'syz.3.309': attribute type 2 has an invalid length. [ 129.124486][ T7081] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 129.132889][ T7081] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 129.213410][ T7085] device-mapper: table: 248:1: ram3 too small for target: start=0, len=10384, dev_size=8192 [ 129.213429][ T7085] device-mapper: core: Cannot calculate initial queue limits [ 129.213434][ T7085] device-mapper: ioctl: unable to set up device queue for new table. [ 129.218969][ T29] usb 7-1: USB disconnect, device number 7 [ 129.234594][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 129.240002][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 129.240403][ T29] keyspan 7-1:1.0: device disconnected [ 129.273205][ T7096] fuse: Unknown parameter 'dont_appraise' [ 129.303956][ T7098] nftables ruleset with unbound chain [ 129.473428][ T7115] ªªªªª): renamed from hsr0 (while UP) [ 129.597623][ T7122] loop8: detected capacity change from 0 to 72 [ 129.607730][ T7124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3884 sclass=netlink_route_socket pid=7124 comm=syz.3.321 [ 129.609341][ T7122] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 129.609359][ T7122] loop8: partition table partially beyond EOD, truncated [ 129.625069][ T7122] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 129.626516][ T7122] loop8: p2 start 121280928 is beyond EOD, truncated [ 129.778705][ T5639] tipc: Subscription rejected, illegal request [ 129.782448][ T7128] xfrm1: entered allmulticast mode [ 129.836278][ T7121] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.890145][ T5783] libceph: connect (1)[c::]:6789 error -101 [ 129.890306][ T5783] libceph: mon0 (1)[c::]:6789 connect error [ 129.918136][ T7135] ceph: No mds server is up or the cluster is laggy [ 130.077709][ T7164] bonding: b is being created... [ 130.150540][ T7173] IPVS: ip_vs_add_dest(): server weight less than zero [ 130.173591][ T7179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.332'. [ 131.251239][ T7213] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 131.251266][ T7213] EXT4-fs warning (device sda1): ext4_resize_fs:2021: can't read last block, resize aborted [ 131.461425][ T5899] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 131.507018][ T7219] comedi comedi1: Minor 4096 is invalid! [ 131.507978][ T7219] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 131.507993][ T7219] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 131.508072][ T7219] overlayfs: failed to set uuid (103/file2, err=-13); falling back to uuid=null. [ 131.549589][ T7221] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.550101][ T7221] batman_adv: batadv0: Adding interface: gretap1 [ 131.550115][ T7221] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.550144][ T7221] batman_adv: batadv0: Interface activated: gretap1 [ 131.612468][ T5899] usb 7-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 131.613617][ T5899] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.613665][ T5899] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.613703][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.613739][ T5899] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.613771][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.619593][ T7211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.619663][ T7211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.624846][ T5899] pl2303 7-1:1.0: pl2303 converter detected [ 131.627066][ T5899] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 131.663058][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 131.663319][ T7229] kvm: user requested TSC rate below hardware speed [ 131.927940][ T7235] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 131.927940][ T7235] [ 131.928096][ T7235] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 131.928206][ T7235] CIFS: Attempting to mount //172.20.20.170/share [ 131.981215][ T7235] CIFS: VFS: cifs_mount failed w/return code = -112 [ 132.096233][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 132.096251][ T42] audit: type=1400 audit(1793825826.117:553): avc: denied { name_connect } for pid=7246 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.153060][ T42] audit: type=1400 audit(1793825826.167:554): avc: denied { shutdown } for pid=7246 comm="syz.1.354" lport=54606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.157566][ T42] audit: type=1400 audit(1793825826.177:555): avc: denied { read } for pid=7246 comm="syz.1.354" lport=54606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.431809][ T5783] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 132.604713][ T5783] usb 6-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 132.607572][ T5783] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.607597][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 132.607610][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 132.607623][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 132.607636][ T5783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.607647][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 132.607659][ T5783] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 132.611478][ T5783] usb 6-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 132.611503][ T5783] usb 6-1: Product: syz [ 132.611517][ T5783] usb 6-1: Manufacturer: syz [ 132.611532][ T5783] usb 6-1: SerialNumber: syz [ 132.616672][ T7247] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.616754][ T7247] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.616833][ T7247] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.621364][ T5783] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 132.621601][ T5783] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 132.622141][ T5783] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 132.622189][ T5783] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 132.623248][ T5783] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 132.868174][ T7254] syz.3.357 (7254): drop_caches: 2 [ 132.933569][ T7247] pl2303 ttyUSB0: pl2303_set_line_request - failed: -110 [ 132.934026][ T7247] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 132.934054][ T7247] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 132.937852][ T5899] usb 6-1: USB disconnect, device number 3 [ 132.944978][ T5899] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 132.945366][ T5899] keyspan 6-1:1.0: device disconnected [ 132.988112][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 133.021256][ T7259] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 133.028590][ T44] usb 7-1: USB disconnect, device number 8 [ 133.037688][ T44] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 133.038000][ T44] pl2303 7-1:1.0: device disconnected [ 133.212172][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 133.301758][ T42] audit: type=1400 audit(1793825827.317:556): avc: denied { relabelfrom } for pid=7262 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.301974][ T42] audit: type=1400 audit(1793825827.327:557): avc: denied { relabelto } for pid=7262 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 133.528713][ T7270] iommufd_mock iommufd_mock0: Adding to iommu group 2 [ 133.569747][ T42] audit: type=1400 audit(1793825827.587:558): avc: denied { setopt } for pid=7271 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.624526][ T42] audit: type=1400 audit(1793825827.647:559): avc: denied { getopt } for pid=7278 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.656729][ T42] audit: type=1400 audit(1793825827.677:560): avc: denied { write } for pid=7280 comm="syz.3.365" lport=47252 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 133.659854][ T42] audit: type=1400 audit(1793825827.677:561): avc: denied { setopt } for pid=7280 comm="syz.3.365" lport=47252 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 133.669074][ T42] audit: type=1400 audit(1793825827.687:562): avc: denied { getopt } for pid=7280 comm="syz.3.365" lport=47252 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 133.800073][ T5804] svc: failed to register nfsdv3 RPC service (errno 5). [ 133.800091][ T5804] failed to unregister tcp with rpcbind [ 133.830869][ T7297] comedi comedi4: commands at RT priority not supported in this driver [ 133.869983][ T7301] nbd: must specify a size in bytes for the device [ 133.940957][ T7311] netlink: 'syz.3.376': attribute type 11 has an invalid length. [ 134.090202][ T7317] tipc: Started in network mode [ 134.090229][ T7317] tipc: Node identity 4, cluster identity 4711 [ 134.090255][ T7317] tipc: Node number set to 4 [ 134.108308][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 134.109721][ T7316] JFS: discard option not supported on device [ 134.110402][ T7316] Mount JFS Failure: -5 [ 134.110410][ T7316] jfs_mount failed w/return code = -5 [ 134.462338][ T7333] netlink: 'syz.1.383': attribute type 2 has an invalid length. [ 134.553192][ T7337] program syz.1.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.566274][ T7337] netlink: 'syz.1.385': attribute type 30 has an invalid length. [ 134.721483][ T1629] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 134.819984][ T5498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.871751][ T44] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 134.884039][ T1629] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 134.885068][ T1629] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.885089][ T1629] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.885104][ T1629] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.885152][ T1629] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.885173][ T1629] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.886722][ T1629] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.886741][ T1629] usb 7-1: Product: syz [ 134.886753][ T1629] usb 7-1: Manufacturer: syz [ 134.898013][ T1629] cdc_wdm 7-1:1.0: skipping garbage [ 134.898029][ T1629] cdc_wdm 7-1:1.0: skipping garbage [ 134.903594][ T1629] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 134.903612][ T1629] cdc_wdm 7-1:1.0: Unknown control protocol [ 135.021813][ T44] usb 8-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 135.022649][ T44] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.022703][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 135.022724][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 135.022743][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 135.022783][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 135.022801][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 135.022820][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 135.022835][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 135.022848][ T44] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.022859][ T44] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.022871][ T44] usb 8-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 135.024344][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.024357][ T44] usb 8-1: Product: syz [ 135.024365][ T44] usb 8-1: Manufacturer: syz [ 135.024373][ T44] usb 8-1: SerialNumber: syz [ 135.026173][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.026256][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.026430][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.026492][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.026584][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.026632][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.026718][ T7340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 135.028074][ T44] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 135.030518][ T44] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 135.033840][ T44] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 135.033894][ T44] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 5 [ 135.034910][ T44] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 135.036435][ T44] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 3 [ 135.036488][ T44] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 4 [ 135.036554][ T44] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 135.038336][ T44] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 135.112340][ T5783] usb 7-1: USB disconnect, device number 9 [ 135.341449][ T5943] usb 8-1: USB disconnect, device number 6 [ 135.352579][ T5943] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 135.354694][ T5943] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 135.355511][ T5943] keyspan 8-1:1.0: device disconnected [ 136.182204][ T5943] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.333904][ T5943] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdD ** replaying previous printk message ** [ 136.333904][ T5943] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 136.334527][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.334543][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.334560][ T5943] usb 5-1: Dual-Role OTG device on HNP port [ 136.334799][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.343942][ C3] ------------[ cut here ]------------ [ 136.343954][ C3] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 136.343970][ C3] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#3: swapper/3/0 [ 136.376544][ C3] Modules linked in: [ 136.378589][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 136.382225][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.385374][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 136.387171][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d fa 94 84 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 00 b2 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 a0 a4 fb 8c [ 136.393574][ C3] RSP: 0018:ffffc900006f8a10 EFLAGS: 00010046 [ 136.395522][ C3] RAX: dffffc0000000000 RBX: ffff88802dae00e0 RCX: ffffffff8cfbe900 [ 136.398027][ C3] RDX: 0000000000000081 RSI: ffffffff8cfbb200 RDI: ffffffff9277f8b0 [ 136.400512][ C3] RBP: 0000000000000081 R08: ffffffff8cfba4e0 R09: 0000000000000000 [ 136.402979][ C3] R10: ffffffff926a9d5f R11: 0000000000000003 R12: ffffffff8cfba4e0 [ 136.405505][ C3] R13: 0000000000000000 R14: ffff88802dae00e0 R15: ffff888059bfe0a0 [ 136.409148][ C3] FS: 0000000000000000(0000) GS:ffff8880d477c000(0000) knlGS:0000000000000000 [ 136.411977][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.414056][ C3] CR2: 00007f68b179ad58 CR3: 0000000060722000 CR4: 0000000000352ef0 [ 136.416672][ C3] Call Trace: [ 136.418188][ C3] [ 136.419443][ C3] hidg_set_alt+0x190/0xa10 [ 136.421420][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.423729][ C3] ? rcu_is_watching+0x13/0xc0 [ 136.425826][ C3] composite_setup+0x2ccf/0x9290 [ 136.427958][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 136.430072][ C3] ? __pfx_composite_setup+0x10/0x10 [ 136.432136][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.434072][ C3] ? do_raw_spin_lock+0x128/0x260 [ 136.435868][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.438022][ C3] ? configfs_composite_setup+0xfb/0x130 [ 136.440449][ C3] configfs_composite_setup+0xfb/0x130 [ 136.442806][ C3] dummy_timer+0x20a0/0x3840 [ 136.444599][ C3] ? do_raw_spin_lock+0x128/0x260 [ 136.446203][ C3] ? find_held_lock+0x2b/0x80 [ 136.447733][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.449525][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.451348][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.453884][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.456296][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 136.458878][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 136.461023][ C3] ? rcu_is_watching+0x13/0xc0 [ 136.463105][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.465571][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 136.467701][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 136.469885][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 136.472058][ C3] handle_softirqs+0x216/0xa20 [ 136.474084][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 136.476299][ C3] ? _raw_spin_unlock+0x28/0x50 [ 136.478402][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 136.480732][ C3] __irq_exit_rcu+0x178/0x220 [ 136.482697][ C3] irq_exit_rcu+0x9/0x30 [ 136.484181][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 136.485946][ C3] [ 136.486989][ C3] [ 136.488224][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.490791][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 136.493163][ C3] Code: 67 a1 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 7d 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 136.501126][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 136.503684][ C3] RAX: 000000000007265b RBX: ffff888020aa2580 RCX: ffffffff8bee4325 [ 136.506169][ C3] RDX: 0000000000000001 RSI: ffffffff8e628221 RDI: ffffffff8c835380 [ 136.508695][ C3] RBP: ffffed10041544b0 R08: 0000000000000001 R09: ffffed100d466825 [ 136.511192][ C3] R10: ffff88806a33412b R11: 0000000000000001 R12: 0000000000000000 [ 136.513645][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 136.516128][ C3] ? ct_kernel_exit+0x125/0x180 [ 136.517725][ C3] default_idle+0x9/0x10 [ 136.519106][ C3] default_idle_call+0x6c/0xb0 [ 136.520619][ C3] do_idle+0x3ae/0x5b0 [ 136.521912][ C3] ? __pfx_do_idle+0x10/0x10 [ 136.523370][ C3] ? rcu_is_watching+0x13/0xc0 [ 136.525204][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.527784][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.530006][ C3] cpu_startup_entry+0x4f/0x60 [ 136.532050][ C3] start_secondary+0x21d/0x2d0 [ 136.534102][ C3] ? __pfx_start_secondary+0x10/0x10 [ 136.536352][ C3] common_startup_64+0x13e/0x158 [ 136.538533][ C3] [ 136.540055][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.543100][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 136.546863][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.551084][ C3] Call Trace: [ 136.552533][ C3] [ 136.553765][ C3] dump_stack_lvl+0x100/0x190 [ 136.555742][ C3] vpanic+0x2dc/0x6f8 [ 136.557448][ C3] panic+0xd1/0xe0 [ 136.559070][ C3] ? __pfx_panic+0x10/0x10 [ 136.560977][ C3] check_panic_on_warn.cold+0x19/0x34 [ 136.563254][ C3] ? usb_ep_enable+0x3e6/0x490 [ 136.565296][ C3] __warn.cold+0x191/0x321 [ 136.567296][ C3] __report_bug+0x30f/0x440 [ 136.568829][ C3] ? usb_ep_enable+0x3e6/0x490 [ 136.570369][ C3] ? __pfx___report_bug+0x10/0x10 [ 136.572035][ C3] ? try_to_wake_up+0x158/0x1ca0 [ 136.573613][ C3] report_bug_entry+0xe2/0x290 [ 136.575133][ C3] ? usb_ep_enable+0x3f8/0x490 [ 136.576642][ C3] handle_bug+0x1cd/0x2a0 [ 136.578035][ C3] exc_invalid_op+0x17/0x50 [ 136.579518][ C3] asm_exc_invalid_op+0x1a/0x20 [ 136.581066][ C3] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 136.582839][ C3] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d fa 94 84 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 00 b2 fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 a0 a4 fb 8c [ 136.588822][ C3] RSP: 0018:ffffc900006f8a10 EFLAGS: 00010046 [ 136.590708][ C3] RAX: dffffc0000000000 RBX: ffff88802dae00e0 RCX: ffffffff8cfbe900 [ 136.593175][ C3] RDX: 0000000000000081 RSI: ffffffff8cfbb200 RDI: ffffffff9277f8b0 [ 136.595663][ C3] RBP: 0000000000000081 R08: ffffffff8cfba4e0 R09: 0000000000000000 [ 136.598155][ C3] R10: ffffffff926a9d5f R11: 0000000000000003 R12: ffffffff8cfba4e0 [ 136.600610][ C3] R13: 0000000000000000 R14: ffff88802dae00e0 R15: ffff888059bfe0a0 [ 136.603080][ C3] hidg_set_alt+0x190/0xa10 [ 136.604522][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.606150][ C3] ? rcu_is_watching+0x13/0xc0 [ 136.607673][ C3] composite_setup+0x2ccf/0x9290 [ 136.609288][ C3] ? __lock_acquire+0x5c0/0x1f40 [ 136.610939][ C3] ? __pfx_composite_setup+0x10/0x10 [ 136.612634][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.614310][ C3] ? do_raw_spin_lock+0x128/0x260 [ 136.615889][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 136.617556][ C3] ? configfs_composite_setup+0xfb/0x130 [ 136.619343][ C3] configfs_composite_setup+0xfb/0x130 [ 136.621084][ C3] dummy_timer+0x20a0/0x3840 [ 136.622738][ C3] ? do_raw_spin_lock+0x128/0x260 [ 136.624354][ C3] ? find_held_lock+0x2b/0x80 [ 136.625866][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.627641][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.629446][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.631320][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 136.633077][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 136.634953][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 136.636571][ C3] ? rcu_is_watching+0x13/0xc0 [ 136.638140][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.640009][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 136.641604][ C3] __hrtimer_run_queues+0x448/0x9a0 [ 136.643265][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 136.644871][ C3] handle_softirqs+0x216/0xa20 [ 136.646393][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 136.648055][ C3] ? _raw_spin_unlock+0x28/0x50 [ 136.649629][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 136.651422][ C3] __irq_exit_rcu+0x178/0x220 [ 136.652904][ C3] irq_exit_rcu+0x9/0x30 [ 136.654248][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 136.656038][ C3] [ 136.656987][ C3] [ 136.657929][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.659850][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 136.661606][ C3] Code: 67 a1 02 e9 43 61 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d c3 7d 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 136.667590][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 136.669507][ C3] RAX: 000000000007265b RBX: ffff888020aa2580 RCX: ffffffff8bee4325 [ 136.671970][ C3] RDX: 0000000000000001 RSI: ffffffff8e628221 RDI: ffffffff8c835380 [ 136.674402][ C3] RBP: ffffed10041544b0 R08: 0000000000000001 R09: ffffed100d466825 [ 136.676891][ C3] R10: ffff88806a33412b R11: 0000000000000001 R12: 0000000000000000 [ 136.679398][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 136.681889][ C3] ? ct_kernel_exit+0x125/0x180 [ 136.683431][ C3] default_idle+0x9/0x10 [ 136.684761][ C3] default_idle_call+0x6c/0xb0 [ 136.686258][ C3] do_idle+0x3ae/0x5b0 [ 136.687549][ C3] ? __pfx_do_idle+0x10/0x10 [ 136.689060][ C3] ? rcu_is_watching+0x13/0xc0 [ 136.690558][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 136.692454][ C3] ? lockdep_hardirqs_on+0x7d/0x110 [ 136.694918][ C3] cpu_startup_entry+0x4f/0x60 [ 136.696736][ C3] start_secondary+0x21d/0x2d0 [ 136.698253][ C3] ? __pfx_start_secondary+0x10/0x10 [ 136.699910][ C3] common_startup_64+0x13e/0x158 [ 136.701482][ C3] [ 136.703220][ C3] Kernel Offset: disabled [ 136.704613][ C3] Rebooting in 86400 seconds..