last executing test programs: 11m12.047314941s ago: executing program 3 (id=22): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r7, 0x0, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000000c0)={0x4, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r9}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) 11m8.27928236s ago: executing program 3 (id=36): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 11m8.073191577s ago: executing program 3 (id=38): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x40000000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) 11m6.885747258s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x1}, "301ce6020000"}}}}}}}, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x4002, &(0x7f0000001140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) (async) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x4044095}, 0x804) (async) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 11m6.740208463s ago: executing program 3 (id=44): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000480)={0x3, @pix={0x1000434e, 0x8, 0x584e4f53, 0x4, 0x0, 0x7, 0x8, 0x5, 0x1, 0x4, 0x2, 0x7}}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/101) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000b00)=""/102400, 0x19000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ppoll(&(0x7f0000000380), 0x0, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x7c91c2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) process_vm_readv(0x0, &(0x7f0000000280)=[{0x0}], 0x1, &(0x7f0000000300), 0x0, 0x0) madvise(&(0x7f00003c8000/0x3000)=nil, 0x3000, 0x15) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40030000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000380)="0300f1ba98ca00008586dd064305641205a8530c13b1000dd23d1dc87a760246d15f1ea4d0a2e3", 0x27, 0x2404c080, &(0x7f0000000000)={0x11, 0x5, r4, 0x1, 0xfd, 0x6, @remote}, 0x14) r5 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x116, 0x80, 0x0, 0x85e) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x80000, 0x90) write$sysctl(r6, &(0x7f0000000000)='5\x00', 0x2) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd7) 11m5.027047601s ago: executing program 3 (id=47): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf25030000001400010000000000000001000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfd, 0x9, 0x1000}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) getpid() open(&(0x7f0000000040)='./file1\x00', 0x1a58c2, 0x14c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r7, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00') r8 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x7}) 11m4.69777623s ago: executing program 32 (id=47): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf25030000001400010000000000000001000000000000000001"], 0x28}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfd, 0x9, 0x1000}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) getpid() open(&(0x7f0000000040)='./file1\x00', 0x1a58c2, 0x14c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r7, &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00') r8 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x7}) 10.731665361s ago: executing program 1 (id=3319): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000040), &(0x7f0000000a00)=""/4096, 0x7, 0x0, 0x0, 0x600, &(0x7f0000001a00), &(0x7f0000002a00)="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", 0x4, 0x0, 0x2}, 0x4c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100000000, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd000000}}, 0xe4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000040000000400000022bf000000080000", @ANYRES32, @ANYBLOB="05126355cac4699443906859b16b1c80aff2a8e1d8eb261dbf75483705e211acd5a0f5ca3534eb337a0fb61a347b03872a6f84f7a2a93cd7694c9ac25fe53cf3f6327c25ac309f0c20f75ec1af0606b1f06a0e3c8289014ca08b54e619096ad7a53e3e2ad97371bbce8bd7aef44a9d038d918a5e7915ea0b00d36c1aced1940cf5404c50a628ef881361e036736a1a5a62b96261e0647c8f6016307be0e8b2048b2f861ea69a481dff6a20e0b734f48294648ffaad37c83d7c97f2ff90", @ANYRES32], 0x48) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000008180)={0x2020}, 0x2020) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {0xf000}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x48a1c3, 0x0) 9.104371243s ago: executing program 1 (id=3321): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0xfffffffffffffeb7) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x3, @loopback, 0xfffffffe}, 0x1c) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x78, r3}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r4, 0x0, 0xffffffff004) socket$netlink(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r6 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x76}], 0x1, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_open_dev$dri(0x0, 0x1ff, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000017c0)={&(0x7f0000001700)}) 8.209217182s ago: executing program 1 (id=3325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0xf5ff, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x5}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "2a8e"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 7.579434831s ago: executing program 0 (id=3329): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000002c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) 7.522738839s ago: executing program 1 (id=3330): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000500)={0x40, 0x6, 0x28, "5fb0fab967ec41df1aade53f902466abe88363bfa8d322cd04b625d20ae74277cefc366d9326fa41"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x3a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e) syz_usb_control_io$lan78xx(r0, &(0x7f0000000b00)={0x14, &(0x7f0000000580)={0x40, 0x31, 0x19, {0x19, 0x4, "118c8e3916e83804a9590ad19871dc3deadd5f16e0af12"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "1aa23f5bbab9d60a791bffa8ab8df2d52f47221609104d7574f350da6eaff2c359bfc6a98996b76899e0"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000b40)={0x40, 0xa, 0x8e, "fa502a0c865da8758c169bae0b71cbf57fdccaa4aa83626305f3dd9c845fbba925038159bf28827fc56637bd87051c701461497f2a61fab9930a910a3f85bfe1d3a8390b15f1820f6a382c9735f292e018552cda34c0db25b12692ba44ade1fddfa599b13ae1d2b9253cc558404cb69e5b6f167885c549a792295a149f4a432e5eca765da20c973ef2e9cf964d75"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c80)={0xc0, 0xa1, 0x4}, &(0x7f0000000cc0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000d00)={0xc0, 0xa2, 0x2f, "564fbe83e310acca80735b306789ae63169c76bb87d0d63fc51297a87ad994273c3a083ffbc1160188eef37d9166e8"}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) lsm_set_self_attr(0x68, &(0x7f0000000100)={0x6c, 0x1, 0x20}, 0x20, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001c00010000000000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="000072010a000200df58e5774b4e000006000500fe"], 0x30}}, 0x4) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="001528000000b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r5, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x5a, {0x5a, 0x10, "e947297506a073a94cf12fd58c732718bc50ac82e5029b73018040f0a78f496a89b1d0d58908aba2d94e040b59d8d9fb127254302245637be201caaaccd6bc0ef82401cf11cb68cb31e9281f3cdce43eb2e473dd93df4504"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000f2d000000050f2d000214100405b949e34672eb88d350c8ca99128ae205141004014ee5743bb41804f8d77302421b2dc34f"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x1, 0x9, "4dc05cba", "518b3a95"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0xf, 0x4, 0x53, 0x0, 0x8}}}, &(0x7f0000000940)={0x84, &(0x7f0000000680)={0x40, 0x17, 0xbc, "f2edc65109d28c4097bdf307b9e680db0942b731d72969bb19a9fb429d28ddd993ff20cec28fca5dcb551d610021d8dca4f0e4a9656765855bc5947de0eb1f35403bb476f85e61c9ff2d47a99d779d860529de4924d8d888e5f843969c3bd839c823d4d969d3f4518760a98b2e664583477c792e950ec88a017d06f4e7eb5be16fef2dacae1588cf5ccee4aae650bdde1d3a501323cf3a91ab0fc00724e7a21454f5c73a14b91f5ab32e7a6efe8e39a6a57a4b32e3da88a3d643ffe6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x100, 0x802e8ad987e55431, [0xf00]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9f5d"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0xb}, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000800)={0x40, 0x19, 0x2, '`_'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x1c, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xb8}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x5}}) 7.172136778s ago: executing program 5 (id=3331): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000002c0)=@routing={0x6, 0x0, 0x1, 0x7f}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xb000000}}], 0x6c00, 0x48) 6.088821216s ago: executing program 0 (id=3333): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x6, {{0xa, 0x4e22, 0x0, @mcast1, 0xc}}}, 0xfeb6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000400000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 5.849281711s ago: executing program 0 (id=3335): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40500, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.345858227s ago: executing program 2 (id=3336): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000029000b0027bd709effffff00050000000c000180"], 0x20}}, 0x0) 5.275424124s ago: executing program 0 (id=3337): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x11) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="00000100000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.24603301s ago: executing program 2 (id=3339): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x7e, 0x1000, 0x5c8, 0xa, 0x6}) 5.187711657s ago: executing program 4 (id=3340): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x700a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="002905"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x1, 0xb6cc, 0x7, 0x3b, 0x3, {0x1, 0xfffffffffffffc34, 0x1, 0x3, 0x7fff, 0x100, 0x5, 0xfffffffd, 0x7, 0x4000, 0x0, r2, r3, 0x8001, 0xdfb80000}}, {0x2, 0x4000009, 0x1, 0x4, '*'}}]}, 0x0, 0x0, 0x0}) (async) getdents(r4, &(0x7f0000000000)=""/50, 0x32) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 5.055112276s ago: executing program 5 (id=3341): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x400, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xfffff000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0xffffffff84449a00, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000000)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0xe70265ef78de5a29) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) read(r3, &(0x7f0000000280)=""/149, 0x95) r4 = syz_open_dev$swradio(0x0, 0x0, 0x2) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r4], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.807077621s ago: executing program 4 (id=3342): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 3.869313157s ago: executing program 5 (id=3343): socket$packet(0x11, 0xa, 0x300) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[], 0x0) 3.724831779s ago: executing program 4 (id=3344): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24048180) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a000000a4ff0000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0x190) listen(0xffffffffffffffff, 0x3) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x24) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x2, 0x862b01) 3.667304677s ago: executing program 5 (id=3345): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}}, 0x4048000) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x4002, &(0x7f0000000040)='usrquota') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@delqdisc={0x3c, 0x25, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffe0}, {0x3, 0x14}, {0x10, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_RATE={0x6, 0x5, {0x2}}]}, 0x3c}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) getsockopt$MRT(r5, 0x0, 0xce, 0x0, 0x0) inotify_init() open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001400, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x10000, 0xf, 0x80000006}, 0x0, 0x0) 3.566966533s ago: executing program 2 (id=3346): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x84, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0x7, 0x4, 0x1, 0x5}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) r3 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, 0x0, r2}) (async) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000080)={0x1}) 3.524538704s ago: executing program 2 (id=3347): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x418083, 0xc8) mount$overlay(0x3000000000000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.427525192s ago: executing program 2 (id=3348): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000100e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.425151447s ago: executing program 2 (id=3349): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x1407, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40844) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000020961b0c0000001b000001090224000100002000090400000103000000092100000001220200090581030000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x10, 0x2, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000680)={0x0, [[0x80000000, 0x0, 0x9, 0x1, 0x3, 0x0, 0xf, 0x1], [0x4, 0x100000, 0x0, 0x2], [0x100091, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6f8, 0x7fffffff]], '\x00', [{0x0, 0x1}, {}, {0x4}, {}, {}, {0x8}, {}, {}, {}, {0x8}, {0x2, 0xf7bc}, {0x0, 0x3}], '\x00', 0x300}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x2}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) 2.78858237s ago: executing program 4 (id=3350): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000002000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) 2.730645222s ago: executing program 4 (id=3351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0x1}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2.595424713s ago: executing program 4 (id=3352): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000400)="e71b4bab18047795402e9bd891fa9470218f6ed09e63935e26da58cb2337bff582e1b4514f34fdce2a9fd7992202741a9531335f669b979ae58c9fdb", 0x3c}], 0x2, &(0x7f0000001580)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}], 0xa8, 0x10}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001640)="b09b847844d6067fd142fac48cfd1d3a9b13e32d741389ed331017843595474c8aeb1cc7731d8f8093b96e896eaece65cea1ce539d37212e232ab790f3801a85ea46988f2c3fb9722bf15d14b945e5164ec678d8f707aa692fae637067a0d38e489a3c126f89e6ea070166bc7a20c02a9148718ec70ff7e242eba9eaae0e6ce2306826e735bb5c1ded0c5df5421ace06e654f0c52eb5c49f3edf1ab4faa0c1a4aa428c170d617f73784385f48ce5c9ba8ae3e1834e", 0xb5}, {&(0x7f0000001780)="521abeb680c4c44c003069184466b9e08c4564704545b23c7399887108166401b71169dcd8c5", 0x26}, {&(0x7f00000017c0)="2b5056fa9cf070694966e3483f82a56454cdcf37edc1f11f84671793e0fb07feaa95ecb6cd73b6c47a0fa6", 0x2b}], 0x3, &(0x7f00000019c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8, 0x4}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x2, 0x2, 0x800}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000540)=0xfffffdfc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000459000/0x7000)=nil) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = pidfd_getfd(r3, r3, 0x0) setns(r7, 0x66020000) syz_clone(0x2313544730985e6b, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x80000001) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.569685241s ago: executing program 1 (id=3353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa000000000000000000ff00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001480), 0x121142, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x404}, 0x40000) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00M\x00\x00\x00\x00\x00', @ANYRES32], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) 1.652280501s ago: executing program 0 (id=3354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x700000000000000) 1.347428836s ago: executing program 1 (id=3355): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000a00000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40ffffff7808000c40000000050800034000000010140000001100010000000000000000000300000a00"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) semget(0x3, 0x4, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000200)=0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r5, 0x0, 0x0, 0x800) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)) 1.074776123s ago: executing program 5 (id=3356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800) (async) 412.978027ms ago: executing program 0 (id=3357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @loopback, 0x23}, {0xa, 0x4e24, 0xce, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, r8, 0x7ffffff7}}, 0x48) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000100)={r9}) bind$xdp(r10, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'ipvlan1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x240}, 0x94) 0s ago: executing program 5 (id=3358): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x40000) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) syz_emit_vhci(0x0, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000f5ff0000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) getrusage(0x0, 0x0) kernel console output (not intermixed with test programs): us mode [ 469.192412][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 470.193078][T13082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2087'. [ 470.873473][T13094] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 470.912727][T13094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2091'. [ 470.924842][T13094] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 470.932987][T13094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2091'. [ 471.262075][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 471.770705][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 473.613146][T13144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.318800][T13144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.352073][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 475.393901][ T30] audit: type=1400 audit(1759657533.287:760): avc: denied { read } for pid=13147 comm="syz.0.2107" name="file0" dev="tmpfs" ino=2575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 475.532661][T13158] blktrace: Concurrent blktraces are not allowed on loop10 [ 475.553268][T13159] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.561056][T13159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 475.570020][T13159] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.577908][T13159] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 475.634232][T13153] ipvlan1: entered promiscuous mode [ 475.639541][T13153] ipvlan1: entered allmulticast mode [ 475.647578][T13153] veth0_vlan: entered allmulticast mode [ 475.717807][T13144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.497274][T13144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.631496][T11501] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.901930][T11499] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.910123][T11499] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.969162][T11499] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.097313][T13200] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.107384][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 477.224348][T13206] CIFS: VFS: Malformed UNC in devname [ 477.251249][T13200] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.778833][T13200] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.887572][T13200] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.118575][T13215] 9pnet_fd: Insufficient options for proto=fd [ 478.683593][T13219] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2122'. [ 478.710554][T13219] tc_dump_action: action bad kind [ 479.564805][T13245] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2129'. [ 479.644773][ T30] audit: type=1400 audit(1759657538.307:761): avc: denied { mounton } for pid=13251 comm="syz.4.2131" path="/file0" dev="rootfs" ino=34143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 479.903968][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 480.031004][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 480.054849][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 480.655918][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'. [ 480.910405][T13281] ptrace attach of "./syz-executor exec"[6123] was attempted by ""[13281] [ 481.792184][T11496] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.832559][T11496] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.875418][T11496] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.889087][T11496] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.088126][T13324] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 482.100331][T13324] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 482.112538][T13324] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 482.120566][T13324] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 483.275925][T13349] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2161'. [ 483.742118][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 484.321900][T13366] overlayfs: failed to clone upperpath [ 485.727150][T13389] ipvlan1: entered promiscuous mode [ 485.732608][T13389] ipvlan1: entered allmulticast mode [ 485.737929][T13389] veth0_vlan: entered allmulticast mode [ 486.193482][ T976] kernel write not supported for file bpf-map (pid: 976 comm: kworker/0:2) [ 486.436283][T13399] overlayfs: missing 'lowerdir' [ 486.447099][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2173'. [ 486.522892][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 486.728944][T13410] : entered promiscuous mode [ 486.802642][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2181'. [ 486.813187][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 487.270919][T13428] netlink: 1168 bytes leftover after parsing attributes in process `syz.1.2184'. [ 487.301023][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 487.317090][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 487.895043][T13431] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 487.965294][ T30] audit: type=1800 audit(1759657546.637:762): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2185" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 488.802572][T13454] IPVS: Unknown mcast interface: netpci0 [ 488.907083][T13457] netlink: 732 bytes leftover after parsing attributes in process `syz.5.2193'. [ 489.614761][ T30] audit: type=1400 audit(1759657548.097:763): avc: denied { mount } for pid=13464 comm="syz.5.2197" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 490.038147][ T30] audit: type=1326 audit(1759657548.707:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.5.2200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d38eec9 code=0x0 [ 491.227878][T13491] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[13491] [ 491.244620][T13493] ptrace attach of "./syz-executor exec"[6123] was attempted by ""[13493] [ 491.278692][T13496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.370962][T13502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2207'. [ 491.710125][T13518] blktrace: Concurrent blktraces are not allowed on loop4 [ 492.208057][ T30] audit: type=1326 audit(1759657550.877:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13520 comm="syz.4.2214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7ff38eec9 code=0x0 [ 492.460917][ T30] audit: type=1400 audit(1759657551.117:766): avc: denied { bind } for pid=13523 comm="syz.5.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.262385][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 493.555318][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 494.066826][ T30] audit: type=1326 audit(1759657552.727:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13555 comm="syz.2.2225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a6038eec9 code=0x0 [ 495.846952][ T30] audit: type=1326 audit(1759657554.507:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13567 comm="syz.5.2229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d38eec9 code=0x0 [ 496.111205][T13575] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2230'. [ 497.298866][T13604] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 497.370732][T13604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.645734][T13620] blktrace: Concurrent blktraces are not allowed on loop4 [ 498.611668][T13648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2249'. [ 498.627213][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2249'. [ 499.632694][ T30] audit: type=1400 audit(1759657558.307:769): avc: denied { create } for pid=13679 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 499.642959][T13680] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 499.653211][ T30] audit: type=1400 audit(1759657558.307:770): avc: denied { write } for pid=13679 comm="syz.0.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 499.717805][T13684] blktrace: Concurrent blktraces are not allowed on loop10 [ 500.219179][T13692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2261'. [ 500.225382][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 500.245056][T13686] bond3 (unregistering): Released all slaves [ 500.382069][ C1] Dead loop on virtual device ip6_vti0, fix it urgently! [ 500.427671][T13692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 500.796551][T13726] netlink: 'syz.2.2275': attribute type 5 has an invalid length. [ 500.924376][T13728] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 500.934202][T13728] bridge5: entered promiscuous mode [ 500.939715][T13728] bridge5: entered allmulticast mode [ 501.026066][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.032563][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.235558][T13735] blktrace: Concurrent blktraces are not allowed on loop4 [ 501.900484][T13751] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 501.930614][T13754] overlayfs: missing 'lowerdir' [ 501.940438][T13754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2284'. [ 501.958713][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2279'. [ 501.986737][T13751] macvlan3: entered promiscuous mode [ 501.992188][T13751] macvlan3: entered allmulticast mode [ 501.998723][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 502.603493][T13770] blktrace: Concurrent blktraces are not allowed on loop0 [ 504.283642][ T30] audit: type=1800 audit(1759657562.947:771): pid=13792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2295" name="nullb0" dev="tmpfs" ino=2267 res=0 errno=0 [ 504.331326][T13794] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 504.443529][ T30] audit: type=1800 audit(1759657563.107:772): pid=13794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2294" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 505.555375][T13826] netlink: 'syz.1.2304': attribute type 3 has an invalid length. [ 505.590691][T13827] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 505.600463][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2306'. [ 505.638375][T13828] vxlan0: entered promiscuous mode [ 505.657049][T13828] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 505.711282][ T60] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.725573][ T60] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.320409][ T60] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.338480][T13866] ip_vti0: left promiscuous mode [ 508.514379][T13866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.688622][ T60] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.603200][T13892] netlink: 'syz.5.2324': attribute type 4 has an invalid length. [ 509.627346][T13892] netlink: 'syz.5.2324': attribute type 4 has an invalid length. [ 509.882538][T13893] wlan0 speed is unknown, defaulting to 1000 [ 509.889866][T13893] lo speed is unknown, defaulting to 1000 [ 509.896869][T13893] wg0 speed is unknown, defaulting to 1000 [ 511.275418][T13912] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.2329'. [ 511.284783][T13912] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.2329'. [ 511.563819][ T30] audit: type=1400 audit(1759657570.237:773): avc: denied { create } for pid=13919 comm="syz.4.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 512.225265][T13933] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 512.245443][T13933] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.335151][T13933] ip6erspan0: entered promiscuous mode [ 512.353391][T13933] bond5: (slave ip6erspan0): making interface the new active one [ 512.364013][T13933] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 512.741374][ T30] audit: type=1326 audit(1759657571.407:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.774041][ T30] audit: type=1326 audit(1759657571.437:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.799278][ T30] audit: type=1326 audit(1759657571.467:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.828878][ T30] audit: type=1326 audit(1759657571.467:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.872633][ T30] audit: type=1326 audit(1759657571.467:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.912822][ T30] audit: type=1326 audit(1759657571.497:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.936670][ T30] audit: type=1326 audit(1759657571.497:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 512.983344][ T30] audit: type=1326 audit(1759657571.497:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 513.158060][ T30] audit: type=1326 audit(1759657571.497:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13946 comm="syz.0.2340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f802bd8eec9 code=0x7ffc0000 [ 513.221258][T13962] CIFS: VFS: Malformed UNC in devname [ 513.656923][T13981] syz.4.2350 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 513.718138][T13983] netlink: 'syz.0.2351': attribute type 5 has an invalid length. [ 514.739542][T14012] delete_channel: no stack [ 514.913473][T14010] overlayfs: missing 'lowerdir' [ 514.960279][T14010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2360'. [ 515.005442][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2360'. [ 516.225238][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.443842][T14030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.453475][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.460998][T14030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.469273][T14030] batman_adv: batadv0: Removing interface: ipvlan2 [ 516.666936][T14030] batadv0 (unregistering): left promiscuous mode [ 517.150888][T14041] overlayfs: failed to clone upperpath [ 517.818713][T14059] wlan0 speed is unknown, defaulting to 1000 [ 517.831203][T14059] lo speed is unknown, defaulting to 1000 [ 517.842954][T14059] wg0 speed is unknown, defaulting to 1000 [ 519.110253][T14094] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 519.135580][T14094] team0: Port device dummy0 added [ 519.144578][T14094] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 519.161014][T14094] team0: Port device dummy0 removed [ 519.169790][T14094] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 519.808169][T14103] netlink: 'syz.0.2387': attribute type 30 has an invalid length. [ 521.996078][T14144] netlink: 'syz.0.2399': attribute type 3 has an invalid length. [ 522.626373][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 522.626388][ T30] audit: type=1326 audit(1759657581.297:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14155 comm="syz.4.2402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7ff38eec9 code=0x0 [ 523.670178][T14180] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000007 [ 523.718738][T14184] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2410'. [ 524.150166][T14197] team_slave_0: entered promiscuous mode [ 524.155868][T14197] team_slave_1: entered promiscuous mode [ 524.162692][T14197] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.214204][T14211] netlink: 'syz.0.2415': attribute type 3 has an invalid length. [ 525.552319][ T30] audit: type=1326 audit(1759657584.227:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14213 comm="syz.5.2419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d38eec9 code=0x0 [ 525.679953][T14220] fuse: Bad value for 'rootmode' [ 525.701338][T14222] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2420'. [ 527.915579][T14256] wlan0 speed is unknown, defaulting to 1000 [ 527.922920][T14256] lo speed is unknown, defaulting to 1000 [ 527.929907][T14256] wg0 speed is unknown, defaulting to 1000 [ 528.700876][T14267] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2432'. [ 530.193281][T14306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2445'. [ 530.229757][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2445'. [ 531.723952][T14333] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2451'. [ 531.743393][T14333] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2451'. [ 531.765771][T14333] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 531.801314][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 531.866449][T14349] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2453'. [ 532.097552][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'. [ 532.167705][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'. [ 532.505994][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 532.531834][ T30] audit: type=1326 audit(1759657590.189:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.5.2462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f713d38eec9 code=0x0 [ 533.119170][T14391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2469'. [ 533.703087][T14400] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.722119][T14400] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.856602][T14400] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.869222][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 533.875801][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 533.882845][T14400] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.038859][T14402] ceph: No mds server is up or the cluster is laggy [ 534.054325][T14406] ceph: No mds server is up or the cluster is laggy [ 534.061325][ T5885] libceph: connect (1)[b::]:6789 error -101 [ 534.070902][ T5885] libceph: mon0 (1)[b::]:6789 connect error [ 534.098799][T14400] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.117313][T14400] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.547356][T14428] 9pnet_fd: Insufficient options for proto=fd [ 534.986370][T14400] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.996443][T14400] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.115865][T11492] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.131963][T11492] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.226964][T11492] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.276188][T11492] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.318076][ T189] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.440973][ T189] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.479439][ T189] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.487917][ T189] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.600311][ T30] audit: type=1326 audit(1759657594.259:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14446 comm="syz.0.2484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f802bd8eec9 code=0x0 [ 536.604449][T14449] overlayfs: failed to clone upperpath [ 537.436748][ T30] audit: type=1326 audit(1759657595.099:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14460 comm="syz.2.2489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a6038eec9 code=0x0 [ 538.475766][ T30] audit: type=1326 audit(1759657596.139:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14467 comm="syz.2.2491" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a6038eec9 code=0x0 [ 538.836855][T14480] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.843700][T14480] batman_adv: batadv0: Interface activated: team0 [ 539.136584][T14480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.501785][T14492] ipvlan1: entered promiscuous mode [ 539.507101][T14492] ipvlan1: entered allmulticast mode [ 539.512518][T14492] veth0_vlan: entered allmulticast mode [ 539.924652][T14499] overlayfs: failed to clone upperpath [ 543.502424][T14597] vlan2: entered allmulticast mode [ 543.507667][T14597] macvlan1: entered allmulticast mode [ 543.515489][T14597] veth1_vlan: entered allmulticast mode [ 544.330447][T14603] overlayfs: failed to clone upperpath [ 545.337324][T14642] fuse: Bad value for 'fd' [ 546.018847][T14648] __nla_validate_parse: 1 callbacks suppressed [ 546.018860][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 547.645371][T14673] wlan0 speed is unknown, defaulting to 1000 [ 547.652694][T14673] lo speed is unknown, defaulting to 1000 [ 547.659706][T14673] wg0 speed is unknown, defaulting to 1000 [ 547.736014][T14673] netlink: 'syz.5.2560': attribute type 4 has an invalid length. [ 547.744243][T14673] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2560'. [ 548.050117][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2564'. [ 548.053277][ T30] audit: type=1400 audit(1759657605.709:811): avc: denied { create } for pid=14682 comm="syz.5.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 548.090920][T14683] ip6gretap0: entered promiscuous mode [ 548.109805][T14683] ip6gretap0: left promiscuous mode [ 555.011794][ T30] audit: type=1400 audit(1759657612.669:812): avc: denied { getopt } for pid=14795 comm="syz.0.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 555.259668][T14800] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2603'. [ 558.690991][ T5836] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 558.980058][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2626'. [ 558.989011][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2626'. [ 559.383400][T14866] wireguard0: entered promiscuous mode [ 559.388872][T14866] wireguard0: entered allmulticast mode [ 559.687287][ T5957] IPVS: starting estimator thread 0... [ 560.235086][T14881] IPVS: using max 37 ests per chain, 88800 per kthread [ 561.609741][ T30] audit: type=1400 audit(1759657619.269:813): avc: denied { shutdown } for pid=14909 comm="syz.5.2641" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.153873][T14921] bridge0: port 1(team0) entered blocking state [ 562.160569][T14921] bridge0: port 1(team0) entered disabled state [ 562.168596][T14921] team0: entered allmulticast mode [ 562.183360][T14921] team0: entered promiscuous mode [ 562.465970][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.472443][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.586480][T14929] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 562.610407][T14929] team0: Device macvtap1 is already an upper device of the team interface [ 562.768348][T14939] : Can't lookup blockdev [ 569.035284][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 571.864619][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 573.211146][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.221859][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.230486][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.239601][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.247482][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.464371][T15092] wlan0 speed is unknown, defaulting to 1000 [ 573.495472][T15092] lo speed is unknown, defaulting to 1000 [ 573.510933][T15092] wg0 speed is unknown, defaulting to 1000 [ 574.131279][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2707'. [ 575.000388][T15092] chnl_net:caif_netlink_parms(): no params data found [ 575.157765][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.166839][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.176602][T15092] bridge_slave_0: entered allmulticast mode [ 575.185381][T15092] bridge_slave_0: entered promiscuous mode [ 575.196852][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.206352][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.213883][T15092] bridge_slave_1: entered allmulticast mode [ 575.223083][T15092] bridge_slave_1: entered promiscuous mode [ 575.347669][ T5834] Bluetooth: hci5: command tx timeout [ 576.057840][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.070020][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.594258][T15092] team0: Port device team_slave_0 added [ 576.622601][T15092] team0: Port device team_slave_1 added [ 576.664180][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.671282][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.698188][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.710173][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.721150][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.789205][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.895391][T15092] hsr_slave_0: entered promiscuous mode [ 576.902562][T15092] hsr_slave_1: entered promiscuous mode [ 577.314962][ T30] audit: type=1400 audit(1759657634.954:814): avc: denied { lock } for pid=15148 comm="syz.5.2723" path="socket:[39989]" dev="sockfs" ino=39989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 577.659101][ T5834] Bluetooth: hci5: command tx timeout [ 578.321660][T15146] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 578.385541][T15145] sch_tbf: burst 14 is lower than device lo mtu (11337746) ! [ 578.707091][T15092] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.920371][T15192] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 579.006470][T15198] erspan0: entered allmulticast mode [ 579.374991][T15195] blktrace: Concurrent blktraces are not allowed on loop2 [ 579.387911][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2737'. [ 579.974460][T15192] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 580.434329][ T5834] Bluetooth: hci5: command tx timeout [ 580.471464][T15092] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.593507][T15092] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.706465][T15092] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.729740][ T30] audit: type=1400 audit(1759657638.394:815): avc: denied { listen } for pid=15210 comm="syz.1.2739" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 581.037803][T15092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 581.051284][T15092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 581.062514][T15092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 581.087915][T15092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 581.275024][T15241] blktrace: Concurrent blktraces are not allowed on loop8 [ 581.283111][T15092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.295750][T15243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2749'. [ 581.306091][T15243] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2749'. [ 581.308421][T15092] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.332089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.339431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.384899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.391996][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.651778][ T5834] Bluetooth: hci5: command tx timeout [ 583.618154][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.813355][T15092] veth0_vlan: entered promiscuous mode [ 583.883598][T15092] veth1_vlan: entered promiscuous mode [ 584.358007][T15092] veth0_macvtap: entered promiscuous mode [ 584.366033][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2761'. [ 584.368820][T15092] veth1_macvtap: entered promiscuous mode [ 584.402825][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.423377][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.441386][T11492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.478875][T11492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.506024][T11492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.515448][T11492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.618682][T11492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.315580][T11492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.350186][T15284] ipvlan1: entered promiscuous mode [ 585.357066][T15284] ipvlan1: entered allmulticast mode [ 585.362391][T15284] veth0_vlan: entered allmulticast mode [ 585.385203][T11505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.393447][T11505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.417659][ T30] audit: type=1400 audit(2000000001.070:816): avc: denied { mounton } for pid=15092 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 585.610942][ T30] audit: type=1400 audit(2000000001.260:817): avc: denied { append } for pid=15296 comm="syz.0.2703" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 585.919085][ T30] audit: type=1400 audit(2000000001.570:818): avc: denied { mount } for pid=15308 comm="syz.4.2768" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 585.934883][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2772'. [ 586.162102][ T30] audit: type=1400 audit(2000000001.800:819): avc: denied { ioctl } for pid=15324 comm="syz.0.2771" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 586.196622][T15336] overlayfs: failed to clone lowerpath [ 588.349096][ T30] audit: type=1400 audit(2000000004.000:820): avc: denied { search } for pid=15356 comm="syz.0.2781" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 588.374543][T15357] FAULT_INJECTION: forcing a failure. [ 588.374543][T15357] name failslab, interval 1, probability 0, space 0, times 1 [ 588.393777][T15357] CPU: 0 UID: 0 PID: 15357 Comm: syz.0.2781 Not tainted syzkaller #0 PREEMPT(full) [ 588.393803][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 588.393813][T15357] Call Trace: [ 588.393818][T15357] [ 588.393826][T15357] dump_stack_lvl+0x16c/0x1f0 [ 588.393850][T15357] should_fail_ex+0x512/0x640 [ 588.393868][T15357] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 588.393896][T15357] should_failslab+0xc2/0x120 [ 588.393917][T15357] kmem_cache_alloc_noprof+0x75/0x6e0 [ 588.393943][T15357] ? getname_flags.part.0+0x4c/0x550 [ 588.393972][T15357] ? getname_flags.part.0+0x4c/0x550 [ 588.393997][T15357] getname_flags.part.0+0x4c/0x550 [ 588.394026][T15357] getname_flags+0x93/0xf0 [ 588.394044][T15357] user_path_at+0x24/0x60 [ 588.394063][T15357] __x64_sys_umount+0x10a/0x1a0 [ 588.394084][T15357] ? __pfx___x64_sys_umount+0x10/0x10 [ 588.394106][T15357] ? rcu_is_watching+0x12/0xc0 [ 588.394134][T15357] do_syscall_64+0xcd/0x4e0 [ 588.394158][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.394176][T15357] RIP: 0033:0x7f19a898eec9 [ 588.394190][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.394207][T15357] RSP: 002b:00007f19a9818038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 588.394224][T15357] RAX: ffffffffffffffda RBX: 00007f19a8be5fa0 RCX: 00007f19a898eec9 [ 588.394235][T15357] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 588.394246][T15357] RBP: 00007f19a9818090 R08: 0000000000000000 R09: 0000000000000000 [ 588.394256][T15357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.394265][T15357] R13: 00007f19a8be6038 R14: 00007f19a8be5fa0 R15: 00007ffe9d69bf78 [ 588.394290][T15357] [ 589.086649][T15368] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.082007][T15392] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 590.161189][T15368] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.244690][T15368] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.259246][T15400] ptrace attach of "./syz-executor exec"[15092] was attempted by "./syz-executor exec"[15400] [ 590.563442][T15368] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.289207][T15417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2799'. [ 591.350722][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.366073][T11505] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.385640][T11505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.409743][T11505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.608346][T15423] fuse: Bad value for 'rootmode' [ 592.326806][T15447] new mount options do not match the existing superblock, will be ignored [ 593.194255][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2813'. [ 593.637558][T15469] loop6: detected capacity change from 0 to 524288000 [ 593.939371][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2819'. [ 594.856766][T15490] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 595.454553][T15498] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2823'. [ 595.520513][T15498] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2823'. [ 595.677169][T15500] netlink: 'syz.0.2825': attribute type 13 has an invalid length. [ 595.687092][T15500] netlink: 'syz.0.2825': attribute type 17 has an invalid length. [ 595.793950][T15500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.818334][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2826'. [ 596.055003][T15510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.063692][T15510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.072815][T15510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.080480][T15510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.121959][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 596.273193][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.283702][ T5885] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 596.295849][ T5885] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 596.308318][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.321014][ T5885] usb 1-1: config 0 descriptor?? [ 596.556415][T15510] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 596.565859][T15510] batman_adv: batadv0: Removing interface: ipvlan2 [ 597.505109][T15506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2827'. [ 597.937608][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2833'. [ 597.966456][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2833'. [ 598.761843][ T5885] Bluetooth: Can't get version to change to load ram patch err [ 598.769406][ T5885] Bluetooth: Loading patch file failed [ 598.778866][ T5885] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 599.005586][ T5885] usb 1-1: USB disconnect, device number 11 [ 599.513634][T15529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=15529 comm=syz.1.2834 [ 600.652174][ T976] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 600.878775][ T976] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 600.908445][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.915397][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 600.928090][ T976] usb 1-1: Product: syz [ 600.940104][ T976] usb 1-1: Manufacturer: syz [ 600.945607][ T976] usb 1-1: SerialNumber: syz [ 600.963577][ T976] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 600.979176][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 601.011047][ T30] audit: type=1400 audit(2000000016.660:821): avc: denied { firmware_load } for pid=5957 comm="kworker/0:9" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 601.079153][ T5957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 601.109186][T15588] lo: entered allmulticast mode [ 601.122479][ T30] audit: type=1326 audit(2000000016.750:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.155422][ T30] audit: type=1326 audit(2000000016.750:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.189196][ T30] audit: type=1326 audit(2000000016.750:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.220640][ T30] audit: type=1326 audit(2000000016.750:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.252623][ T30] audit: type=1326 audit(2000000016.750:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.284057][ T30] audit: type=1326 audit(2000000016.750:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.318621][ T30] audit: type=1326 audit(2000000016.750:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.398727][ T30] audit: type=1326 audit(2000000016.750:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ff38eec9 code=0x7ffc0000 [ 601.459415][ T30] audit: type=1326 audit(2000000016.750:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15582 comm="syz.4.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7ff38d710 code=0x7ffc0000 [ 601.532141][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2853'. [ 601.899872][ T5886] usb 1-1: USB disconnect, device number 12 [ 602.141745][ T5957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 602.150280][ T5957] ath9k_htc: Failed to initialize the device [ 602.163008][ T5886] usb 1-1: ath9k_htc: USB layer deinitialized [ 602.280328][T15603] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 603.311037][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.322124][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.338092][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 603.345779][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 603.355018][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 603.392273][T15610] wlan0 speed is unknown, defaulting to 1000 [ 603.398937][T15610] lo speed is unknown, defaulting to 1000 [ 603.405529][T15610] wg0 speed is unknown, defaulting to 1000 [ 603.824091][T15610] chnl_net:caif_netlink_parms(): no params data found [ 604.687747][T15627] blktrace: Concurrent blktraces are not allowed on loop10 [ 604.803882][T15634] overlayfs: failed to clone upperpath [ 604.815779][ T6430] syz_tun (unregistering): left allmulticast mode [ 605.080269][T15610] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.102965][T15610] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.120536][T15610] bridge_slave_0: entered allmulticast mode [ 605.137391][T15610] bridge_slave_0: entered promiscuous mode [ 605.149493][T15610] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.170200][T15610] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.184262][T15610] bridge_slave_1: entered allmulticast mode [ 605.200637][T15610] bridge_slave_1: entered promiscuous mode [ 605.297015][T15610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.314378][T15610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.452992][ T5836] Bluetooth: hci4: command tx timeout [ 605.671132][T15610] team0: Port device team_slave_0 added [ 605.687130][T15610] team0: Port device team_slave_1 added [ 605.723093][T15664] syz_tun: entered promiscuous mode [ 605.731297][T15610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.744997][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.782159][T15610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.801867][T15610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.809146][T15610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.837447][T15610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.922508][T15610] hsr_slave_0: entered promiscuous mode [ 606.009303][T15610] hsr_slave_1: entered promiscuous mode [ 606.015990][T15610] debugfs: 'hsr0' already exists in 'hsr' [ 606.026094][T15610] Cannot create hsr debugfs directory [ 606.253769][T15681] ipvlan1: entered promiscuous mode [ 606.258997][T15681] ipvlan1: entered allmulticast mode [ 606.264379][T15681] veth0_vlan: entered allmulticast mode [ 606.536229][T15610] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.685373][T15610] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.827311][T15610] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.903334][T15610] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.202473][T15610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 607.268451][T15610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 607.389068][T15610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 607.435453][T15610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 607.481232][T15701] blktrace: Concurrent blktraces are not allowed on loop0 [ 607.501769][ T5836] Bluetooth: hci4: command tx timeout [ 607.583077][T15704] binder: 15703:15704 ioctl 40046205 0 returned -22 [ 607.592114][T15704] binder: 15703:15704 ioctl c0306201 200000000380 returned -11 [ 607.648553][T15711] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2881'. [ 607.776164][T15610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.847430][T15610] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.881575][T11499] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.888681][T11499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.952972][T11499] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.960166][T11499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.455245][T15610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.698061][T15610] veth0_vlan: entered promiscuous mode [ 609.611230][T15744] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2896'. [ 609.620366][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2896'. [ 609.630735][ T5836] Bluetooth: hci4: command tx timeout [ 609.749005][T15610] veth1_vlan: entered promiscuous mode [ 609.851599][T15610] veth0_macvtap: entered promiscuous mode [ 609.974788][T15610] veth1_macvtap: entered promiscuous mode [ 610.035358][T15610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.164805][T15610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.208940][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.312769][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.615676][T15728] delete_channel: no stack [ 610.639188][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.658507][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.808461][T11492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.846417][T11492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.998627][T15768] overlayfs: failed to clone lowerpath [ 611.015898][T11499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.024338][T11499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.351821][ T978] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 611.662487][ T5836] Bluetooth: hci4: command tx timeout [ 611.773064][ T978] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 611.785332][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 611.785348][ T30] audit: type=1400 audit(2000000027.440:849): avc: denied { ioctl } for pid=15772 comm="syz.0.2903" path="socket:[42331]" dev="sockfs" ino=42331 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 611.824648][ T978] usb 3-1: config 16 has no interface number 0 [ 611.913120][ T978] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 611.976801][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.997013][ T978] usb 3-1: Product: syz [ 612.001189][ T978] usb 3-1: Manufacturer: syz [ 612.021783][ T978] usb 3-1: SerialNumber: syz [ 612.050704][ T30] audit: type=1326 audit(2000000027.700:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15793 comm="syz.5.2910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713d38eec9 code=0x0 [ 612.933594][T15777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.964331][T15777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.026457][ T978] usb 3-1: USB disconnect, device number 20 [ 613.089300][T15569] udevd[15569]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.786863][T15822] bond0: entered promiscuous mode [ 613.792452][T15822] bond_slave_0: entered promiscuous mode [ 613.798667][T15822] bond_slave_1: entered promiscuous mode [ 613.806910][T15822] batadv0: entered promiscuous mode [ 613.812955][T15822] debugfs: 'hsr1' already exists in 'hsr' [ 613.818742][T15822] Cannot create hsr debugfs directory [ 613.826346][T15822] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 614.052238][T15834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=15834 comm=syz.2.2919 [ 614.157077][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 614.317964][ T30] audit: type=1326 audit(2000000029.960:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15841 comm="syz.0.2926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a898eec9 code=0x0 [ 615.096002][T15854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2928'. [ 615.118411][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 615.171771][ T978] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 615.481770][ T978] usb 3-1: device descriptor read/64, error -71 [ 615.543597][T15869] fuse: Bad value for 'fd' [ 615.744530][T15875] siw: device registration error -23 [ 615.765722][ T978] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 616.109196][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 616.163741][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 616.177413][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 616.230003][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 616.245279][ T978] usb 3-1: device descriptor read/64, error -71 [ 616.267967][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 616.344059][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 616.421421][ T978] usb usb3-port1: attempt power cycle [ 616.684457][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2945'. [ 616.771872][ T978] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 616.957148][T15922] blktrace: Concurrent blktraces are not allowed on loop8 [ 617.140264][ T978] usb 3-1: device descriptor read/8, error -71 [ 617.288287][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 617.315784][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 617.324185][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 617.332014][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 617.339605][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 617.424697][T15924] wlan0 speed is unknown, defaulting to 1000 [ 617.440654][ T30] audit: type=1400 audit(2000000033.070:852): avc: denied { setattr } for pid=15925 comm="syz.2.2948" name="" dev="pipefs" ino=41863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 617.450875][T15924] lo speed is unknown, defaulting to 1000 [ 617.472520][T15924] wg0 speed is unknown, defaulting to 1000 [ 617.794442][T15924] chnl_net:caif_netlink_parms(): no params data found [ 618.981785][ T5820] bond0: (slave syz_tun): Releasing backup interface [ 619.214499][T15945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.352786][T15945] team0: Port device batadv0 added [ 619.366740][T15946] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 619.374242][T15946] team0: Port device batadv1 added [ 619.909371][T15924] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.916845][ T5834] Bluetooth: hci3: command tx timeout [ 619.925568][T15924] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.944443][T15924] bridge_slave_0: entered allmulticast mode [ 619.967821][T15924] bridge_slave_0: entered promiscuous mode [ 620.091879][T15963] netlink: 'syz.5.2956': attribute type 5 has an invalid length. [ 620.162500][T11505] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.275269][T15924] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.292162][T15924] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.308247][T15924] bridge_slave_1: entered allmulticast mode [ 620.833335][T15924] bridge_slave_1: entered promiscuous mode [ 620.870743][T11505] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.131241][T15924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.183534][T11505] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.273117][T15924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.348101][T11505] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.672827][T15924] team0: Port device team_slave_0 added [ 621.690690][T15924] team0: Port device team_slave_1 added [ 621.776037][T15924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.829598][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.857207][T15924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.004360][T15998] siw: device registration error -23 [ 622.032813][ T5834] Bluetooth: hci3: command tx timeout [ 622.439287][T15924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.003701][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.049522][T15924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.139290][T16004] wlan0 speed is unknown, defaulting to 1000 [ 623.313595][T16004] lo speed is unknown, defaulting to 1000 [ 623.320948][T16004] wg0 speed is unknown, defaulting to 1000 [ 623.380916][T15924] hsr_slave_0: entered promiscuous mode [ 623.393081][T15924] hsr_slave_1: entered promiscuous mode [ 623.399381][T15924] debugfs: 'hsr0' already exists in 'hsr' [ 623.405409][T15924] Cannot create hsr debugfs directory [ 623.511896][T11505] bridge_slave_1: left allmulticast mode [ 623.519868][T11505] bridge_slave_1: left promiscuous mode [ 623.527354][T11505] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.555380][T16026] blktrace: Concurrent blktraces are not allowed on loop4 [ 623.574132][T11505] bridge_slave_0: left allmulticast mode [ 623.580224][T11505] bridge_slave_0: left promiscuous mode [ 623.587404][T11505] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.781413][T11505] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 623.915052][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.921390][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.063258][ T5834] Bluetooth: hci3: command tx timeout [ 624.074656][T11505] bond1 (unregistering): (slave geneve2): Releasing active interface [ 624.322612][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2978'. [ 624.343127][T16033] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2978'. [ 624.389733][T16033] libceph: resolve '0..' (ret=-3): failed [ 624.618175][T11505] bond0 (unregistering): left promiscuous mode [ 624.624569][T11505] bond_slave_0: left promiscuous mode [ 624.630333][T11505] bond_slave_1: left promiscuous mode [ 624.635858][T11505] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 624.654646][T11505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.666994][T11505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.677434][T11505] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 624.690240][T11505] bond0 (unregistering): Released all slaves [ 624.702302][T11505] bond1 (unregistering): Released all slaves [ 624.713617][T11505] bond2 (unregistering): Released all slaves [ 624.826627][T11505] bond3 (unregistering): Released all slaves [ 624.841020][T11505] bond4 (unregistering): Released all slaves [ 624.969621][T11505] bond5 (unregistering): Released all slaves [ 625.386437][T15924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.408525][T15924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 625.428392][T15924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 625.438760][T15924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 625.481012][T11505] hsr_slave_0: left promiscuous mode [ 625.486972][T11505] hsr_slave_1: left promiscuous mode [ 625.503907][T11505] team_slave_0: left promiscuous mode [ 625.509536][T11505] team_slave_1: left promiscuous mode [ 625.516105][T11505] veth1_macvtap: left promiscuous mode [ 625.521625][T11505] veth0_macvtap: left promiscuous mode [ 625.527381][T11505] veth1_vlan: left promiscuous mode [ 625.532854][T11505] veth0_vlan: left promiscuous mode [ 625.833368][T11505] team0 (unregistering): Port device team_slave_1 removed [ 625.862115][T11505] team0 (unregistering): Port device team_slave_0 removed [ 626.143319][ T5834] Bluetooth: hci3: command tx timeout [ 626.153414][T15924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.189499][T15924] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.200416][T11499] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.207545][T11499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.221215][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.228339][T11496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.367072][T11505] IPVS: stop unused estimator thread 0... [ 626.371075][T15924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.413214][T15924] veth0_vlan: entered promiscuous mode [ 626.423589][T15924] veth1_vlan: entered promiscuous mode [ 626.465955][T15924] veth0_macvtap: entered promiscuous mode [ 626.476579][T15924] veth1_macvtap: entered promiscuous mode [ 626.505518][T15924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.518956][T15924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.533805][T11502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.546965][T11502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.557002][T11502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.566429][T11502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.628760][T11496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.638065][T11496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.661153][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.669080][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.631313][ T60] team0: left allmulticast mode [ 654.636302][ T60] team0: left promiscuous mode [ 654.641194][ T60] bridge0: port 1(team0) entered disabled state [ 654.845818][ T60] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 655.154602][ T60] bond0 (unregistering): Released all slaves [ 655.165524][ T60] bond1 (unregistering): Released all slaves [ 655.239506][ T60] bond2 (unregistering): Released all slaves [ 655.312884][ T60] bond3 (unregistering): Released all slaves [ 655.324323][ T5954] wg0 speed is unknown, defaulting to 1000 [ 655.330125][ T5954] : Port: 1 Link DOWN [ 655.384355][ T60] : left promiscuous mode [ 655.447730][ T60] tipc: Left network mode [ 655.464183][ T60] IPVS: stopping backup sync thread 9439 ... [ 655.605432][ T5954] wlan0 speed is unknown, defaulting to 1000 [ 655.611448][ T5954] syz2: Port: 1 Link DOWN [ 655.672129][ T60] veth1_macvtap: left promiscuous mode [ 655.677769][ T60] veth0_macvtap: left promiscuous mode [ 655.684725][ T60] veth1_vlan: left promiscuous mode [ 655.689970][ T60] veth0_vlan: left promiscuous mode [ 656.569574][ T60] IPVS: stop unused estimator thread 0... [ 667.279183][ T24] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 667.433381][ T24] usb 1-1: device descriptor read/64, error -71 [ 667.457079][T16081] netlink: 'syz.2.2988': attribute type 10 has an invalid length. [ 667.599937][T16081] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 667.785499][T16081] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 667.831867][ T24] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 669.411609][ T24] usb 1-1: device descriptor read/64, error -71 [ 669.525803][ T24] usb usb1-port1: attempt power cycle [ 669.870797][T16101] blktrace: Concurrent blktraces are not allowed on loop8 [ 670.289582][T16113] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2996'. [ 670.753030][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3002'. [ 671.514934][T16153] FAULT_INJECTION: forcing a failure. [ 671.514934][T16153] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 671.529519][T16153] CPU: 0 UID: 0 PID: 16153 Comm: syz.2.3008 Not tainted syzkaller #0 PREEMPT(full) [ 671.529543][T16153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.529554][T16153] Call Trace: [ 671.529560][T16153] [ 671.529566][T16153] dump_stack_lvl+0x16c/0x1f0 [ 671.529595][T16153] should_fail_ex+0x512/0x640 [ 671.529621][T16153] _copy_from_user+0x2e/0xd0 [ 671.529645][T16153] copy_msghdr_from_user+0x98/0x160 [ 671.529669][T16153] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 671.529703][T16153] ___sys_sendmsg+0xfe/0x1d0 [ 671.529727][T16153] ? __pfx____sys_sendmsg+0x10/0x10 [ 671.529780][T16153] __sys_sendmsg+0x16d/0x220 [ 671.529810][T16153] ? __pfx___sys_sendmsg+0x10/0x10 [ 671.529848][T16153] do_syscall_64+0xcd/0x4e0 [ 671.529873][T16153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.529892][T16153] RIP: 0033:0x7ffaba38eec9 [ 671.529906][T16153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.529923][T16153] RSP: 002b:00007ffabb294038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.529941][T16153] RAX: ffffffffffffffda RBX: 00007ffaba5e5fa0 RCX: 00007ffaba38eec9 [ 671.529952][T16153] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 671.529962][T16153] RBP: 00007ffabb294090 R08: 0000000000000000 R09: 0000000000000000 [ 671.529972][T16153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.529983][T16153] R13: 00007ffaba5e6038 R14: 00007ffaba5e5fa0 R15: 00007ffe72260438 [ 671.530007][T16153] [ 671.686979][ C0] vkms_vblank_simulate: vblank timer overrun [ 672.465025][T16168] loop6: detected capacity change from 0 to 524288000 [ 672.526100][T16166] batman_adv: batadv0: Adding interface: ipvlan2 [ 672.533089][T16166] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.559039][T16166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.569984][T16166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.580006][T16166] batman_adv: batadv0: Interface activated: ipvlan2 [ 672.907748][ T30] audit: type=1400 audit(2000000088.560:853): avc: denied { ioctl } for pid=16186 comm="syz.2.3020" path="socket:[43965]" dev="sockfs" ino=43965 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 673.722091][T16202] blktrace: Concurrent blktraces are not allowed on loop2 [ 673.983241][T16205] mkiss: ax0: crc mode is auto. [ 674.005292][T16207] binder: 16206:16207 ioctl c0306201 2000000001c0 returned -22 [ 674.422117][T16211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 674.847636][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 674.859517][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 674.868445][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 674.882644][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 674.926956][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.015998][T16213] lo speed is unknown, defaulting to 1000 [ 675.762977][T16213] chnl_net:caif_netlink_parms(): no params data found [ 676.101727][ T5954] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 676.122784][T16213] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.153410][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.201893][T16213] bridge_slave_0: entered allmulticast mode [ 676.232036][T16213] bridge_slave_0: entered promiscuous mode [ 676.268158][ T5954] usb 1-1: config 0 has no interfaces? [ 676.282766][T16213] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.343082][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.380440][T16213] bridge_slave_1: entered allmulticast mode [ 676.409924][T16213] bridge_slave_1: entered promiscuous mode [ 676.741220][ T5954] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 676.759164][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.770368][ T5954] usb 1-1: Product: syz [ 676.775351][ T5954] usb 1-1: Manufacturer: syz [ 676.780050][ T5954] usb 1-1: SerialNumber: syz [ 676.795420][ T5954] usb 1-1: config 0 descriptor?? [ 676.824456][T16213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.889597][T16213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.006233][T16259] evm: overlay not supported [ 677.013653][ T30] audit: type=1800 audit(2000000092.660:854): pid=16260 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3035" name="bus" dev="overlay" ino=139 res=0 errno=0 [ 677.042319][ T5836] Bluetooth: hci0: command tx timeout [ 677.061759][ T30] audit: type=1800 audit(2000000092.660:855): pid=16259 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3035" name="bus" dev="overlay" ino=139 res=0 errno=0 [ 677.088659][T16213] team0: Port device team_slave_0 added [ 677.114561][T16213] team0: Port device team_slave_1 added [ 677.178102][T16213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.214288][ T30] audit: type=1400 audit(2000000092.870:856): avc: denied { read write } for pid=16271 comm="syz.1.3040" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.249115][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.275646][ T30] audit: type=1400 audit(2000000092.870:857): avc: denied { open } for pid=16271 comm="syz.1.3040" path="/9/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 677.304769][T16213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.330391][T16213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.338533][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.370808][T16213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.564178][T16213] hsr_slave_0: entered promiscuous mode [ 677.570417][T16213] hsr_slave_1: entered promiscuous mode [ 677.576667][T16213] debugfs: 'hsr0' already exists in 'hsr' [ 677.582754][T16213] Cannot create hsr debugfs directory [ 677.588510][T16277] syzkaller1: entered promiscuous mode [ 677.594090][T16277] syzkaller1: entered allmulticast mode [ 677.767879][T16278] netlink: 'syz.1.3041': attribute type 15 has an invalid length. [ 677.775928][T16278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 677.935189][T16213] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.952608][T16213] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.080187][T16213] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.095344][T16213] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.176630][T16213] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.208185][T16213] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.372668][T16213] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.385959][T16213] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.748041][T16213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.758933][T16213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.770291][T16213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 678.792151][T15803] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 678.931884][T15803] usb 3-1: device descriptor read/64, error -71 [ 679.111707][ T5836] Bluetooth: hci0: command tx timeout [ 679.201825][T16213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 679.251173][T16213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.266391][T16213] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.296859][ T5886] usb 1-1: USB disconnect, device number 16 [ 679.309502][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.316659][T11502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.362189][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.369324][T11496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.421980][T15803] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 679.486039][T16213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.599061][T15803] usb 3-1: device descriptor read/64, error -71 [ 679.722344][T15803] usb usb3-port1: attempt power cycle [ 679.977966][T16213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.091924][ T8136] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 680.121696][T15803] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 680.152272][T15803] usb 3-1: device descriptor read/8, error -71 [ 680.257317][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'. [ 680.285196][ T8136] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 680.302029][ T8136] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 680.332741][ T8136] usb 1-1: New USB device found, idVendor=1405, idProduct=474c, bcdDevice= 0.00 [ 680.351954][ T8136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.376109][ T8136] usb 1-1: config 0 descriptor?? [ 680.414688][T15803] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 680.468928][T15803] usb 3-1: device descriptor read/8, error -71 [ 680.478089][T16213] veth0_vlan: entered promiscuous mode [ 680.505301][T16213] veth1_vlan: entered promiscuous mode [ 680.578700][T16213] veth0_macvtap: entered promiscuous mode [ 680.585851][T15803] usb usb3-port1: unable to enumerate USB device [ 680.598936][T16213] veth1_macvtap: entered promiscuous mode [ 680.656681][T16213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.675359][T16213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.695415][T11505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.814971][ T30] audit: type=1400 audit(2000000096.470:858): avc: denied { watch } for pid=16316 comm="syz.0.3050" path="/56/bus/file1" dev="overlay" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 680.868681][ T30] audit: type=1400 audit(2000000096.490:859): avc: denied { watch_sb watch_reads } for pid=16316 comm="syz.0.3050" path="/56/bus/file1" dev="overlay" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 680.903437][T11505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.027766][T16341] ipvlan1: entered promiscuous mode [ 681.033030][T16341] ipvlan1: entered allmulticast mode [ 681.038400][T16341] veth0_vlan: entered allmulticast mode [ 681.070879][T11505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.103967][T11505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.182168][ T5836] Bluetooth: hci0: command tx timeout [ 681.428024][T11502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.449213][T11502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.593821][T11502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.667775][T11502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.983154][T16356] netlink: 'syz.1.3058': attribute type 4 has an invalid length. [ 682.625796][T16362] pty pty25: ldisc open failed (-12), clearing slot 25 [ 682.662332][T16363] pty pty25: ldisc open failed (-12), clearing slot 25 [ 682.729325][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.738441][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.747803][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.756884][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.765772][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.774669][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.784182][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.793077][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.801941][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.810911][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.819844][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.828723][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.837613][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.847099][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.856003][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 682.864990][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'. [ 683.266833][ T5836] Bluetooth: hci0: command tx timeout [ 684.754445][T16399] vivid-004: disconnect [ 684.780910][ T8136] usb 1-1: string descriptor 0 read error: -71 [ 684.793880][ T30] audit: type=1400 audit(2000000100.410:860): avc: denied { map } for pid=16398 comm="syz.0.3074" path="socket:[46102]" dev="sockfs" ino=46102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 684.833409][ T8136] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 684.866528][ T8136] usb 1-1: USB disconnect, device number 17 [ 684.896315][ T30] audit: type=1400 audit(2000000100.410:861): avc: denied { read accept } for pid=16398 comm="syz.0.3074" path="socket:[46102]" dev="sockfs" ino=46102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 685.011893][ T5954] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 685.265481][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 685.334437][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.347822][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.354360][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.368154][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.388768][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 685.404480][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 685.414914][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.428118][ T5954] usb 3-1: config 0 descriptor?? [ 685.436553][ T5836] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 685.981080][ T5954] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input12 [ 686.198974][ T5954] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 686.364159][T16424] siw: device registration error -23 [ 687.641160][ T5954] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 687.759400][T16441] netlink: 'syz.1.3084': attribute type 3 has an invalid length. [ 688.205477][T16395] vivid-004: reconnect [ 688.212172][ T5886] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 689.222445][T16446] __nla_validate_parse: 36 callbacks suppressed [ 689.222464][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'. [ 689.553891][ T5886] usb 1-1: device descriptor read/64, error -71 [ 689.782035][T15280] usb 3-1: USB disconnect, device number 29 [ 689.882226][ T5886] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 690.045652][T16466] lo speed is unknown, defaulting to 1000 [ 690.429815][ T5886] usb 1-1: device descriptor read/64, error -71 [ 690.554209][ T5886] usb usb1-port1: attempt power cycle [ 690.770957][T11496] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 690.806160][T11496] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - da:e1:7e:e6:16:25 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 691.446938][ T30] audit: type=1400 audit(2000000107.100:862): avc: denied { mounton } for pid=16479 comm="syz.0.3096" path="/file0" dev="hugetlbfs" ino=46261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 691.446965][T16483] fuse: Unknown parameter '0x000000000000000a' [ 691.734042][T11496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.750352][T11496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.769896][T11496] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 691.797569][T11496] bond0 (unregistering): Released all slaves [ 691.908726][T11496] bond1 (unregistering): Released all slaves [ 692.007065][T11496] bond2 (unregistering): (slave veth3): Releasing active interface [ 692.016824][T11496] bond2 (unregistering): Released all slaves [ 692.040775][T11496] bond3 (unregistering): Released all slaves [ 692.079573][T16478] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3095'. [ 692.090684][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3097'. [ 692.124159][T16482] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3097'. [ 692.150710][T16482] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 692.213428][T11496] : left promiscuous mode [ 693.072296][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804719c800: rx timeout, send abort [ 693.082327][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804719c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 693.183066][T16498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.466307][T16498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.119201][T16498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.282712][ T5909] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 694.452686][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 694.477769][ T5909] usb 3-1: config 0 has an invalid interface number: 248 but max is 2 [ 694.503328][ T5909] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 694.521842][T16498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.532922][ T5909] usb 3-1: config 0 has an invalid interface number: 70 but max is 2 [ 694.550718][ T5909] usb 3-1: config 0 has an invalid interface number: 192 but max is 2 [ 694.582878][T16518] overlayfs: failed to clone upperpath [ 694.604921][ T5909] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 694.618114][ T5909] usb 3-1: config 0 has no interface number 0 [ 694.625222][ T5909] usb 3-1: config 0 has no interface number 1 [ 694.632642][ T5909] usb 3-1: config 0 has no interface number 2 [ 694.655508][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 694.728851][ T5909] usb 3-1: config 0 interface 248 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 694.766776][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 694.779786][ T5909] usb 3-1: config 0 interface 248 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 8 [ 694.780929][T11496] team_slave_0: left promiscuous mode [ 694.789943][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0x83, skipping [ 694.795100][T11496] team_slave_1: left promiscuous mode [ 694.822158][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 694.848996][T11496] veth1_macvtap: left promiscuous mode [ 694.854681][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has an endpoint descriptor with address 0x62, changing to 0x2 [ 694.860224][T11496] veth0_macvtap: left promiscuous mode [ 694.874895][T11496] veth1_vlan: left promiscuous mode [ 694.880943][ T5909] usb 3-1: config 0 interface 248 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 1024 [ 694.880956][T11496] veth0_vlan: left promiscuous mode [ 694.938413][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 694.960578][ T30] audit: type=1800 audit(2000000110.610:863): pid=16526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3108" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 695.027283][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 695.042655][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 695.055520][ T5909] usb 3-1: config 0 interface 248 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 695.067469][ T5909] usb 3-1: config 0 interface 70 altsetting 242 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 695.078785][ T5909] usb 3-1: config 0 interface 70 altsetting 242 has a duplicate endpoint with address 0x6, skipping [ 695.089628][ T5909] usb 3-1: config 0 interface 70 altsetting 242 has a duplicate endpoint with address 0x2, skipping [ 695.100474][ T5909] usb 3-1: config 0 interface 70 altsetting 242 has an invalid descriptor for endpoint zero, skipping [ 695.122163][ T5909] usb 3-1: config 0 interface 70 altsetting 242 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 695.156291][ T5909] usb 3-1: config 0 interface 70 altsetting 242 has a duplicate endpoint with address 0xB, skipping [ 695.171084][ T5909] usb 3-1: config 0 interface 70 altsetting 242 has a duplicate endpoint with address 0x2, skipping [ 695.182054][ T5909] usb 3-1: config 0 interface 70 altsetting 242 has a duplicate endpoint with address 0xE, skipping [ 695.192990][ T5909] usb 3-1: config 0 interface 70 altsetting 242 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 695.204158][ T5909] usb 3-1: config 0 interface 70 altsetting 242 bulk endpoint 0x9 has invalid maxpacket 64 [ 695.214306][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 695.225131][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 695.236623][ T5909] usb 3-1: config 0 interface 192 altsetting 3 endpoint 0x5 has an invalid bInterval 106, changing to 7 [ 695.247952][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 695.264091][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 695.275208][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 695.286552][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 695.297772][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 695.308841][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 695.320023][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 695.331502][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 695.354519][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 695.373299][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 695.385089][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 695.542154][T16533] siw: device registration error -23 [ 695.842279][ T5909] usb 3-1: config 0 interface 192 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 695.853934][ T5909] usb 3-1: config 0 interface 248 has no altsetting 0 [ 695.860716][ T5909] usb 3-1: config 0 interface 70 has no altsetting 0 [ 695.869550][ T5909] usb 3-1: config 0 interface 192 has no altsetting 0 [ 695.878772][ T5909] usb 3-1: New USB device found, idVendor=0856, idProduct=bc02, bcdDevice=68.22 [ 695.888061][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.896176][ T5909] usb 3-1: Product: syz [ 695.900347][ T5909] usb 3-1: Manufacturer: syz [ 695.905137][ T5909] usb 3-1: SerialNumber: syz [ 695.911833][ T5909] usb 3-1: config 0 descriptor?? [ 695.920901][T16506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 695.934931][T16506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 695.942499][T16506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 696.193474][ T5909] mos7840 3-1:0.248: required endpoints missing [ 696.219419][ T5909] hub 3-1:0.70: Invalid hub with more than one config or interface [ 696.229144][ T5909] hub 3-1:0.70: probe with driver hub failed with error -22 [ 696.240232][ T5909] mos7840 3-1:0.70: required endpoints missing [ 696.256605][ T5909] mos7840 3-1:0.192: required endpoints missing [ 696.269602][ T5909] usb 3-1: USB disconnect, device number 30 [ 696.322791][T11496] team0 (unregistering): Port device team_slave_1 removed [ 696.355609][T11496] team0 (unregistering): Port device team_slave_0 removed [ 696.558022][T11496] dummy0 (unregistering): left allmulticast mode [ 696.690827][T16524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.721326][ T5954] lo speed is unknown, defaulting to 1000 [ 696.727445][ T5954] infiniband syz0: ib_query_port failed (-19) [ 696.831063][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.849766][T16540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3116'. [ 696.863158][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.875462][ T30] audit: type=1400 audit(2000000111.532:864): avc: denied { setopt } for pid=16541 comm="syz.1.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 696.919881][T16524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.008125][T11502] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.077489][T16524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.201227][T11502] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.597861][T16553] binder: 16552:16553 unknown command 0 [ 697.689530][T16553] binder: 16552:16553 ioctl c0306201 200000000080 returned -22 [ 697.729651][T16524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.780089][T16555] binder: 16552:16555 ioctl c0306201 2000000003c0 returned -14 [ 697.791302][T16561] netlink: 'syz.2.3125': attribute type 5 has an invalid length. [ 697.844453][T11499] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.902146][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 698.269890][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.302643][T16569] binder: 16568:16569 ioctl c0306201 200000000080 returned -14 [ 698.325891][ T30] audit: type=1326 audit(2000000112.982:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 698.349632][T16569] futex_wake_op: syz.0.3128 tries to shift op by 32; fix this program [ 698.371817][ T30] audit: type=1326 audit(2000000113.002:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 698.440349][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.891812][ T30] audit: type=1326 audit(2000000113.012:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 698.915300][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.950167][ T30] audit: type=1326 audit(2000000113.012:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 698.977064][ T30] audit: type=1326 audit(2000000113.012:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 699.001547][ T30] audit: type=1326 audit(2000000113.012:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 699.070284][ T30] audit: type=1326 audit(2000000113.012:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 699.191714][ T30] audit: type=1326 audit(2000000113.012:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 699.249990][ T30] audit: type=1326 audit(2000000113.012:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.0.3128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a898eec9 code=0x7ffc0000 [ 699.766525][ T5954] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 699.792088][T16596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3135'. [ 700.381400][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 700.416037][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short [ 700.466397][ T5954] usb 3-1: config 15 has an invalid interface number: 174 but max is 0 [ 700.492894][ T5954] usb 3-1: config 15 has no interface number 0 [ 700.499123][ T5954] usb 3-1: config 15 interface 174 has no altsetting 0 [ 700.519009][ T5954] usb 3-1: language id specifier not provided by device, defaulting to English [ 700.529960][ T5954] usb 3-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 700.539539][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=254, SerialNumber=43 [ 700.548026][ T5954] usb 3-1: Product: syz [ 700.560862][ T5954] usb 3-1: Manufacturer: syz [ 700.577664][ T5954] usb 3-1: SerialNumber: syz [ 700.824697][T16578] binder: 16576:16578 ioctl 40046205 0 returned -22 [ 700.895268][ T5954] sierra 3-1:15.174: Sierra USB modem converter detected [ 700.920541][ T5954] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 700.975861][ T5954] usb 3-1: USB disconnect, device number 31 [ 701.017110][ T5954] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 701.047029][ T5954] sierra 3-1:15.174: device disconnected [ 701.941921][T16636] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 702.006189][T16636] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3146'. [ 702.010106][T16645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3149'. [ 702.082880][T16636] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 702.730385][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3159'. [ 702.771702][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 702.888376][T16675] tipc: Started in network mode [ 702.893457][T16675] tipc: Node identity c, cluster identity 4711 [ 702.899663][T16675] tipc: Node number set to 12 [ 703.970417][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 704.031193][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.186072][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.289962][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 704.362156][ T5885] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 704.490792][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.509770][ T5885] usb 1-1: config 0 descriptor?? [ 704.940236][T16702] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 704.953678][T16702] bridge1: entered promiscuous mode [ 704.958908][T16702] bridge1: entered allmulticast mode [ 705.156866][ T5885] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 705.169354][ T5885] microsoft 0003:045E:07DA.0007: no inputs found [ 705.175928][ T5885] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 705.662030][ T5957] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 705.760085][T15280] usb 1-1: USB disconnect, device number 21 [ 705.921783][ T5957] usb 2-1: device descriptor read/64, error -71 [ 705.981736][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'. [ 705.993263][T16722] siw: device registration error -23 [ 706.631372][ T5957] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 706.791822][T15280] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 706.799394][ T5957] usb 2-1: device descriptor read/64, error -71 [ 706.922481][ T5957] usb usb2-port1: attempt power cycle [ 707.014378][T15280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 707.023328][T15280] usb 3-1: config 127 has an invalid interface number: 106 but max is 0 [ 707.125691][T15280] usb 3-1: config 127 has no interface number 0 [ 707.135980][T15280] usb 3-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 707.146032][T15280] usb 3-1: config 127 interface 106 has no altsetting 0 [ 707.158540][T15280] usb 3-1: string descriptor 0 read error: -22 [ 707.165277][T15280] usb 3-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 707.174492][T15280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.205988][T15280] ftdi_sio 3-1:127.106: FTDI USB Serial Device converter detected [ 707.224979][T15280] usb 3-1: Detected SIO [ 707.229134][T15280] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 707.252954][T15280] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 707.281707][ T5957] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 707.339310][ T5957] usb 2-1: device descriptor read/8, error -71 [ 707.581950][ T5957] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 708.093962][ T5957] usb 2-1: device descriptor read/8, error -71 [ 708.334473][ T5957] usb usb2-port1: unable to enumerate USB device [ 708.636285][T16783] lo speed is unknown, defaulting to 1000 [ 708.642505][T16783] lo speed is unknown, defaulting to 1000 [ 708.652456][T16783] lo speed is unknown, defaulting to 1000 [ 708.714235][T16783] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 709.423073][T16783] lo speed is unknown, defaulting to 1000 [ 709.430131][T16783] lo speed is unknown, defaulting to 1000 [ 709.436698][T16783] lo speed is unknown, defaulting to 1000 [ 709.443258][T16783] lo speed is unknown, defaulting to 1000 [ 709.449636][T16783] lo speed is unknown, defaulting to 1000 [ 709.456085][T16783] lo speed is unknown, defaulting to 1000 [ 709.826557][ T24] usb 3-1: USB disconnect, device number 32 [ 709.836861][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 709.848406][ T24] ftdi_sio 3-1:127.106: device disconnected [ 709.882624][T16798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.890025][T16798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.912436][T16798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.920418][T16798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.022949][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3200'. [ 710.147211][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'. [ 712.424162][T16858] netlink: 'syz.5.3215': attribute type 1 has an invalid length. [ 712.533053][T16858] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3215'. [ 714.244709][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3224'. [ 714.423545][ T5957] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 714.593490][ T5957] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 714.619885][ T5957] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 714.646126][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 714.674494][ T5957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 714.702644][ T5957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 714.917266][T16918] new mount options do not match the existing superblock, will be ignored [ 715.241397][ T5957] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 715.262332][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 715.274698][ T5957] usb 3-1: Product: syz [ 715.278915][ T5957] usb 3-1: Manufacturer: syz [ 715.295368][ T5957] cdc_wdm 3-1:1.0: skipping garbage [ 715.305664][ T5957] cdc_wdm 3-1:1.0: skipping garbage [ 715.317381][ T5957] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 715.382426][ T5957] cdc_wdm 3-1:1.0: Unknown control protocol [ 715.510343][T16894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.525397][T16894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.740635][T16931] mkiss: ax0: crc mode is auto. [ 715.956325][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 715.991707][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 716.009286][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 716.024978][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 716.105250][T16940] netlink: 'syz.0.3232': attribute type 3 has an invalid length. [ 716.741947][T16951] CUSE: info not properly terminated [ 716.751397][T16953] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3235'. [ 717.298471][T16951] xt_limit: Overflow, try lower: 271964/0 [ 717.587680][ T976] usb 3-1: USB disconnect, device number 33 [ 717.720026][T16963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.727599][T16963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.823972][T16963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.831725][T16963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.959557][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 718.004011][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3240'. [ 718.402454][T16975] bond0: entered promiscuous mode [ 718.447709][T16975] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 718.503163][T16975] batadv0: entered promiscuous mode [ 718.553477][T16975] batadv0: left promiscuous mode [ 718.569884][T16975] bond0: left promiscuous mode [ 718.589250][T16981] binder: 16980:16981 ioctl c0046209 0 returned -22 [ 718.604450][T16975] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 721.428413][T17034] ipvlan1: entered promiscuous mode [ 721.428436][T17034] ipvlan1: entered allmulticast mode [ 721.428451][T17034] veth0_vlan: entered allmulticast mode [ 722.789366][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3267'. [ 722.858690][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3267'. [ 723.955248][T17065] loop4: detected capacity change from 0 to 2560 [ 723.980266][T16402] Buffer I/O error on dev loop4, logical block 0, async page read [ 724.013117][T16402] Buffer I/O error on dev loop4, logical block 0, async page read [ 724.041914][T16402] Buffer I/O error on dev loop4, logical block 0, async page read [ 724.050209][T16402] Buffer I/O error on dev loop4, logical block 0, async page read [ 724.092376][T16402] Buffer I/O error on dev loop4, logical block 0, async page read [ 724.282896][T17069] blktrace: Concurrent blktraces are not allowed on loop8 [ 724.531854][T17073] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 725.453764][T17085] netlink: 'syz.5.3279': attribute type 10 has an invalid length. [ 726.626537][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 726.626552][ T30] audit: type=1400 audit(2000000141.282:883): avc: denied { write } for pid=17115 comm="syz.0.3290" name="nvram" dev="devtmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 726.663988][T17117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 726.693498][ T976] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 726.760188][T17117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 726.774678][T17117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 726.785670][T17117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 726.793573][T17117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.813407][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.826858][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.980290][ T976] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 727.020384][ T976] usb 2-1: can't read configurations, error -61 [ 727.206002][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.219665][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.248936][T17113] lo speed is unknown, defaulting to 1000 [ 727.308754][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.330957][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.342129][ T976] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 727.458417][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.474395][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.561735][ T976] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 727.569336][ T976] usb 2-1: can't read configurations, error -61 [ 727.593788][ T976] usb usb2-port1: attempt power cycle [ 727.629637][T17124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 727.975062][ T976] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 728.003891][ T976] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 728.022629][ T976] usb 2-1: can't read configurations, error -61 [ 728.082433][ T12] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 728.105805][T17133] blktrace: Concurrent blktraces are not allowed on loop8 [ 728.155914][ T976] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 728.237286][ T976] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 728.245749][ T976] usb 2-1: can't read configurations, error -61 [ 728.262993][ T976] usb usb2-port1: unable to enumerate USB device [ 728.392078][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 728.689673][T17023] Set syz1 is full, maxelem 65536 reached [ 728.747481][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 728.761345][ T12] bond0 (unregistering): Released all slaves [ 728.776348][ T12] bond1 (unregistering): Released all slaves [ 728.792281][ T12] bond2 (unregistering): Released all slaves [ 728.942001][ T5836] Bluetooth: hci1: command tx timeout [ 729.412720][ T12] bond3 (unregistering): Released all slaves [ 729.428543][T17113] chnl_net:caif_netlink_parms(): no params data found [ 729.578669][ T30] audit: type=1326 audit(2000000144.212:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.3298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a898eec9 code=0x0 [ 729.934442][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.968659][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.003038][T17113] bridge_slave_0: entered allmulticast mode [ 730.030025][T17113] bridge_slave_0: entered promiscuous mode [ 730.070505][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.140914][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.228336][T17113] bridge_slave_1: entered allmulticast mode [ 730.258861][T17113] bridge_slave_1: entered promiscuous mode [ 730.338489][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3302'. [ 730.577998][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'. [ 730.591477][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.628732][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'. [ 730.645831][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.751705][T17171] bridge_slave_1: left allmulticast mode [ 730.787951][T17171] bridge_slave_1: left promiscuous mode [ 730.828563][T17171] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.979890][T17171] bridge_slave_0: left allmulticast mode [ 731.021741][ T5836] Bluetooth: hci1: command tx timeout [ 731.042917][T17171] bridge_slave_0: left promiscuous mode [ 731.200709][T17171] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.251365][T17113] team0: Port device team_slave_0 added [ 732.273219][T17113] team0: Port device team_slave_1 added [ 732.362144][ T12] hsr_slave_0: left promiscuous mode [ 732.368037][ T12] hsr_slave_1: left promiscuous mode [ 732.431452][ T12] veth1_macvtap: left promiscuous mode [ 732.451562][ T12] veth0_macvtap: left promiscuous mode [ 732.458383][ T12] veth1_vlan: left allmulticast mode [ 732.471713][ T12] veth1_vlan: left promiscuous mode [ 732.481718][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 732.489713][ T12] veth0_vlan: left promiscuous mode [ 732.566293][ T12] team0 (unregistering): Port device batadv1 removed [ 732.585757][ T12] team0 (unregistering): Port device batadv0 removed [ 732.618399][ T12] pimreg3 (unregistering): left allmulticast mode [ 732.631680][ T24] usb 3-1: device descriptor read/64, error -71 [ 732.881693][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 733.021739][ T24] usb 3-1: device descriptor read/64, error -71 [ 733.102003][ T5836] Bluetooth: hci1: command tx timeout [ 733.132066][ T24] usb usb3-port1: attempt power cycle [ 733.283407][T16716] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 733.422139][T16716] usb 1-1: device descriptor read/64, error -71 [ 733.448759][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.455888][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.482862][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.497543][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.501940][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 733.506559][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.538393][ C0] vkms_vblank_simulate: vblank timer overrun [ 733.546841][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.559128][ T24] usb 3-1: device descriptor read/8, error -71 [ 733.596282][T17113] hsr_slave_0: entered promiscuous mode [ 733.602911][T17113] hsr_slave_1: entered promiscuous mode [ 733.608881][T17113] debugfs: 'hsr0' already exists in 'hsr' [ 733.615230][T17113] Cannot create hsr debugfs directory [ 733.622112][T17201] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.672365][T16716] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 733.706288][T17201] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.808289][T17201] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.818388][T16716] usb 1-1: device descriptor read/64, error -71 [ 733.819959][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 733.864678][ T24] usb 3-1: device descriptor read/8, error -71 [ 734.111865][T16716] usb usb1-port1: attempt power cycle [ 734.124163][ T24] usb usb3-port1: unable to enumerate USB device [ 734.148877][T17201] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.281695][T11502] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.301509][T16919] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.600792][T16716] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 734.643764][T16716] usb 1-1: device descriptor read/8, error -71 [ 734.663554][T17210] mkiss: ax0: crc mode is auto. [ 734.669534][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.708953][T11505] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.814418][T17215] ip6gretap0: entered promiscuous mode [ 734.881697][T16716] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 734.922958][T16716] usb 1-1: device descriptor read/8, error -71 [ 734.931486][T17113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.014639][T17113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.024709][T17113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 735.034983][T17113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 735.233237][ T5836] Bluetooth: hci1: command tx timeout [ 735.469036][T16716] usb usb1-port1: unable to enumerate USB device [ 735.528765][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.554910][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.569658][T11496] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.576782][T11496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.610775][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.617871][T16919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.416845][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.759214][ T30] audit: type=1326 audit(2000000152.402:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.1.3321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcac9f8eec9 code=0x0 [ 738.075140][T17264] blktrace: Concurrent blktraces are not allowed on loop0 [ 738.334046][T17113] veth0_vlan: entered promiscuous mode [ 738.373707][T17113] veth1_vlan: entered promiscuous mode [ 738.433354][T17113] veth0_macvtap: entered promiscuous mode [ 738.453339][T17113] veth1_macvtap: entered promiscuous mode [ 738.497996][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.530292][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.553182][T11501] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.579735][T11501] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.623990][T11501] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.686121][T11501] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.716815][T11496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.726864][T11496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.828206][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.843826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.294627][T17285] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3328'. [ 739.814038][T17298] blktrace: Concurrent blktraces are not allowed on loop0 [ 740.079666][T16716] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 740.751712][T16716] usb 2-1: Using ep0 maxpacket: 32 [ 740.771228][T16716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 740.826789][T16716] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 740.900110][T16716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.088010][ T30] audit: type=1400 audit(2000000155.742:886): avc: denied { read append } for pid=17307 comm="syz.0.3335" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 741.149680][ T30] audit: type=1400 audit(2000000155.772:887): avc: denied { open } for pid=17307 comm="syz.0.3335" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 741.333877][T16716] usb 2-1: Product: syz [ 741.339006][T16716] usb 2-1: Manufacturer: syz [ 741.344011][T16716] usb 2-1: SerialNumber: syz [ 741.372887][T16716] usb 2-1: config 0 descriptor?? [ 741.398422][T17317] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 741.561980][T17323] fuse: Bad value for 'fd' [ 741.666486][ T5957] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 741.738173][T17329] SQUASHFS error: Failed to read block 0x0: -5 [ 741.746327][T17329] unable to read squashfs_super_block [ 741.982832][T16716] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 742.153397][T17335] blktrace: Concurrent blktraces are not allowed on loop4 [ 742.704834][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 742.739177][ T5957] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 742.748869][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.759891][ T5957] usb 1-1: config 0 descriptor?? [ 743.012677][ T30] audit: type=1400 audit(2000000157.662:888): avc: denied { bind } for pid=17343 comm="syz.5.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 743.225194][T17354] netlink: 'syz.2.3348': attribute type 10 has an invalid length. [ 743.652280][T16680] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 743.692085][ T5957] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 743.733214][ T5957] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 743.754818][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 743.773379][ T5957] asix 1-1:0.0: probe with driver asix failed with error -71 [ 743.788351][ T5957] usb 1-1: USB disconnect, device number 26 [ 743.828043][T16680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 743.896944][T16680] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 743.911881][T16680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 743.925087][T16680] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 743.950631][T16680] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 743.963925][T16680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.974843][T16680] usb 6-1: config 0 descriptor?? [ 744.041818][ T5885] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 744.074175][ T978] usb 2-1: USB disconnect, device number 16 [ 744.251748][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 744.259608][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.272045][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.383141][ T30] audit: type=1400 audit(2000000159.002:889): avc: denied { read write } for pid=17367 comm="syz.1.3353" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 744.834117][ T5885] usb 3-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 744.843691][ T5885] usb 3-1: New USB device strings: Mfr=27, Product=0, SerialNumber=0 [ 744.862600][ T5885] usb 3-1: Manufacturer: syz [ 745.039278][ T5885] usb 3-1: config 0 descriptor?? [ 745.373225][ T30] audit: type=1400 audit(2000000159.012:890): avc: denied { open } for pid=17367 comm="syz.1.3353" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 745.587616][T16680] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 745.614276][ T30] audit: type=1400 audit(2000000159.012:891): avc: denied { ioctl } for pid=17367 comm="syz.1.3353" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 746.134355][T16680] hdpvr 6-1:0.0: device init failed [ 746.152160][T16680] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 746.596705][T17395] geneve2: entered promiscuous mode [ 746.606775][T17395] geneve2: entered allmulticast mode [ 746.613887][T11496] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.625745][T11496] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.650130][T11496] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.689761][T11496] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 746.787031][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.793405][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.831750][T17400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 747.100102][T17361] ================================================================== [ 747.108201][T17361] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 747.115386][T17361] Read of size 8 at addr ffff88806389d488 by task syz.2.3349/17361 [ 747.123247][T17361] [ 747.125566][T17361] CPU: 0 UID: 0 PID: 17361 Comm: syz.2.3349 Not tainted syzkaller #0 PREEMPT(full) [ 747.125590][T17361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 747.125602][T17361] Call Trace: [ 747.125609][T17361] [ 747.125616][T17361] dump_stack_lvl+0x116/0x1f0 [ 747.125642][T17361] print_report+0xcd/0x630 [ 747.125666][T17361] ? __virt_addr_valid+0x81/0x610 [ 747.125692][T17361] ? __phys_addr+0xe8/0x180 [ 747.125721][T17361] ? __cpa_addr+0x1d3/0x220 [ 747.125739][T17361] kasan_report+0xe0/0x110 [ 747.125760][T17361] ? __cpa_addr+0x1d3/0x220 [ 747.125783][T17361] __cpa_addr+0x1d3/0x220 [ 747.125801][T17361] cpa_flush+0x28b/0x8a0 [ 747.125821][T17361] ? __pfx_cpa_flush+0x10/0x10 [ 747.125840][T17361] ? pgprot2cachemode+0x9a/0x130 [ 747.125866][T17361] ? __pfx_pgprot2cachemode+0x10/0x10 [ 747.125891][T17361] ? drm_gem_get_pages+0x6a0/0xa10 [ 747.125913][T17361] change_page_attr_set_clr+0x34e/0x4a0 [ 747.125938][T17361] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 747.125972][T17361] _set_pages_array+0x1ab/0x2c0 [ 747.125997][T17361] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 747.126018][T17361] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 747.126037][T17361] ? __pfx___might_resched+0x10/0x10 [ 747.126066][T17361] drm_gem_shmem_mmap+0xc9/0x550 [ 747.126083][T17361] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 747.126101][T17361] drm_gem_mmap_obj+0x1b5/0x560 [ 747.126120][T17361] drm_gem_mmap+0x40b/0x620 [ 747.126133][T17361] ? __pfx_drm_gem_mmap+0x10/0x10 [ 747.126145][T17361] ? vm_area_alloc+0x1f/0x160 [ 747.126162][T17361] ? lockdep_init_map_type+0x5c/0x280 [ 747.126175][T17361] __mmap_region+0x1306/0x27a0 [ 747.126186][T17361] ? __pfx___mmap_region+0x10/0x10 [ 747.126197][T17361] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 747.126213][T17361] ? audit_log_end+0x1f/0x30 [ 747.126225][T17361] ? audit_log_end+0x1f/0x30 [ 747.126236][T17361] ? common_lsm_audit+0x260/0x300 [ 747.126263][T17361] ? __lock_acquire+0xb97/0x1ce0 [ 747.126275][T17361] mmap_region+0x32b/0x3f0 [ 747.126286][T17361] do_mmap+0xa3e/0x1210 [ 747.126300][T17361] ? __pfx_do_mmap+0x10/0x10 [ 747.126313][T17361] ? __pfx_down_write_killable+0x10/0x10 [ 747.126330][T17361] vm_mmap_pgoff+0x29e/0x470 [ 747.126349][T17361] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 747.126363][T17361] ? __fget_files+0x20e/0x3c0 [ 747.126377][T17361] ksys_mmap_pgoff+0x32c/0x5c0 [ 747.126391][T17361] __x64_sys_mmap+0x125/0x190 [ 747.126405][T17361] do_syscall_64+0xcd/0x4e0 [ 747.126422][T17361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.126434][T17361] RIP: 0033:0x7ffaba38eec9 [ 747.126444][T17361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.126455][T17361] RSP: 002b:00007ffabb231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 747.126468][T17361] RAX: ffffffffffffffda RBX: 00007ffaba5e6270 RCX: 00007ffaba38eec9 [ 747.126475][T17361] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 747.126485][T17361] RBP: 00007ffaba411f91 R08: 0000000000000008 R09: 0000000100000000 [ 747.126492][T17361] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 747.126499][T17361] R13: 00007ffaba5e6308 R14: 00007ffaba5e6270 R15: 00007ffe72260438 [ 747.126509][T17361] [ 747.126513][T17361] [ 747.151675][ T30] audit: type=1400 audit(2000000161.742:892): avc: denied { map } for pid=17356 comm="syz.2.3349" path="/dev/dri/card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 747.152033][T17361] Allocated by task 17361: [ 747.474921][T17361] kasan_save_stack+0x33/0x60 [ 747.479576][T17361] kasan_save_track+0x14/0x30 [ 747.484231][T17361] __kasan_kmalloc+0xaa/0xb0 [ 747.488790][T17361] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 747.494144][T17361] drm_gem_get_pages+0x144/0xa10 [ 747.499053][T17361] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 747.505091][T17361] drm_gem_shmem_mmap+0xc9/0x550 [ 747.509998][T17361] drm_gem_mmap_obj+0x1b5/0x560 [ 747.514823][T17361] drm_gem_mmap+0x40b/0x620 [ 747.519297][T17361] __mmap_region+0x1306/0x27a0 [ 747.524030][T17361] mmap_region+0x32b/0x3f0 [ 747.528423][T17361] do_mmap+0xa3e/0x1210 [ 747.532553][T17361] vm_mmap_pgoff+0x29e/0x470 [ 747.537120][T17361] ksys_mmap_pgoff+0x32c/0x5c0 [ 747.541857][T17361] __x64_sys_mmap+0x125/0x190 [ 747.546504][T17361] do_syscall_64+0xcd/0x4e0 [ 747.550979][T17361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.556841][T17361] [ 747.559141][T17361] The buggy address belongs to the object at ffff88806389d400 [ 747.559141][T17361] which belongs to the cache kmalloc-192 of size 192 [ 747.573177][T17361] The buggy address is located 0 bytes to the right of [ 747.573177][T17361] allocated 136-byte region [ffff88806389d400, ffff88806389d488) [ 747.587636][T17361] [ 747.589936][T17361] The buggy address belongs to the physical page: [ 747.596314][T17361] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6389d [ 747.605039][T17361] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 747.612560][T17361] page_type: f5(slab) [ 747.616551][T17361] raw: 00fff00000000000 ffff88801b0263c0 0000000000000000 dead000000000001 [ 747.625119][T17361] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 747.633684][T17361] page dumped because: kasan: bad access detected [ 747.640073][T17361] page_owner tracks the page as allocated [ 747.645767][T17361] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 9835, tgid 9834 (syz.1.1128), ts 304786259001, free_ts 304786234618 [ 747.665285][T17361] post_alloc_hook+0x1c0/0x230 [ 747.670040][T17361] get_page_from_freelist+0x10a3/0x3a30 [ 747.675637][T17361] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 747.681533][T17361] new_slab+0xa5/0x360 [ 747.685619][T17361] ___slab_alloc+0xdc4/0x1ae0 [ 747.690290][T17361] __slab_alloc.constprop.0+0x63/0x110 [ 747.695767][T17361] __kmalloc_node_noprof+0x4dd/0x8a0 [ 747.701048][T17361] alloc_slab_obj_exts+0x3a/0xd0 [ 747.705971][T17361] __memcg_slab_post_alloc_hook+0x251/0x940 [ 747.711847][T17361] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 747.717719][T17361] __d_alloc+0x32/0xae0 [ 747.721848][T17361] d_alloc_parallel+0x111/0x1480 [ 747.726761][T17361] __lookup_slow+0x193/0x460 [ 747.731324][T17361] lookup_noperm+0xe1/0x110 [ 747.735800][T17361] simple_start_creating+0xd1/0x1b0 [ 747.740970][T17361] debugfs_start_creating.part.0+0x82/0x190 [ 747.746838][T17361] page last free pid 9835 tgid 9834 stack trace: [ 747.753131][T17361] __free_frozen_pages+0x7df/0x1160 [ 747.758304][T17361] inode_doinit_with_dentry+0xacb/0x12e0 [ 747.763911][T17361] selinux_d_instantiate+0x26/0x30 [ 747.769010][T17361] security_d_instantiate+0x142/0x1a0 [ 747.774359][T17361] d_instantiate+0x5c/0x90 [ 747.778752][T17361] __debugfs_create_file+0x286/0x6b0 [ 747.784010][T17361] debugfs_create_file_unsafe+0x3c/0x50 [ 747.789615][T17361] debugfs_create_bool+0x70/0xa0 [ 747.794527][T17361] nsim_ethtool_init+0x3cf/0x5c0 [ 747.799442][T17361] nsim_create+0x26c/0x1260 [ 747.803919][T17361] __nsim_dev_port_add+0x435/0x7d0 [ 747.809000][T17361] nsim_dev_reload_up+0x5b8/0x860 [ 747.813994][T17361] devlink_reload+0x322/0x7c0 [ 747.818648][T17361] devlink_nl_reload_doit+0xe31/0x1410 [ 747.824078][T17361] genl_family_rcv_msg_doit+0x206/0x2f0 [ 747.829601][T17361] genl_rcv_msg+0x55c/0x800 [ 747.834088][T17361] [ 747.836382][T17361] Memory state around the buggy address: [ 747.841989][T17361] ffff88806389d380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 747.850022][T17361] ffff88806389d400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 747.858057][T17361] >ffff88806389d480: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 747.866086][T17361] ^ [ 747.870385][T17361] ffff88806389d500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 747.878428][T17361] ffff88806389d580: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 747.886465][T17361] ================================================================== [ 747.896376][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'. [ 747.906004][T17361] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 747.913206][T17361] CPU: 0 UID: 0 PID: 17361 Comm: syz.2.3349 Not tainted syzkaller #0 PREEMPT(full) [ 747.922581][T17361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 747.932633][T17361] Call Trace: [ 747.935890][T17361] [ 747.938799][T17361] dump_stack_lvl+0x3d/0x1f0 [ 747.943377][T17361] vpanic+0x640/0x6f0 [ 747.947343][T17361] panic+0xca/0xd0 [ 747.951045][T17361] ? __pfx_panic+0x10/0x10 [ 747.955440][T17361] ? __cpa_addr+0x1d3/0x220 [ 747.959931][T17361] ? preempt_schedule_common+0x44/0xc0 [ 747.965372][T17361] ? preempt_schedule_thunk+0x16/0x30 [ 747.970735][T17361] check_panic_on_warn+0xab/0xb0 [ 747.975653][T17361] end_report+0x107/0x170 [ 747.979965][T17361] kasan_report+0xee/0x110 [ 747.984362][T17361] ? __cpa_addr+0x1d3/0x220 [ 747.988848][T17361] __cpa_addr+0x1d3/0x220 [ 747.993159][T17361] cpa_flush+0x28b/0x8a0 [ 747.997386][T17361] ? __pfx_cpa_flush+0x10/0x10 [ 748.002131][T17361] ? pgprot2cachemode+0x9a/0x130 [ 748.007055][T17361] ? __pfx_pgprot2cachemode+0x10/0x10 [ 748.012414][T17361] ? drm_gem_get_pages+0x6a0/0xa10 [ 748.017510][T17361] change_page_attr_set_clr+0x34e/0x4a0 [ 748.023039][T17361] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 748.029098][T17361] _set_pages_array+0x1ab/0x2c0 [ 748.033932][T17361] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 748.039980][T17361] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 748.046545][T17361] ? __pfx___might_resched+0x10/0x10 [ 748.051841][T17361] drm_gem_shmem_mmap+0xc9/0x550 [ 748.056766][T17361] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 748.062904][T17361] drm_gem_mmap_obj+0x1b5/0x560 [ 748.067743][T17361] drm_gem_mmap+0x40b/0x620 [ 748.072233][T17361] ? __pfx_drm_gem_mmap+0x10/0x10 [ 748.077243][T17361] ? vm_area_alloc+0x1f/0x160 [ 748.081911][T17361] ? lockdep_init_map_type+0x5c/0x280 [ 748.087279][T17361] __mmap_region+0x1306/0x27a0 [ 748.092029][T17361] ? __pfx___mmap_region+0x10/0x10 [ 748.097122][T17361] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 748.103088][T17361] ? audit_log_end+0x1f/0x30 [ 748.107663][T17361] ? audit_log_end+0x1f/0x30 [ 748.112238][T17361] ? common_lsm_audit+0x260/0x300 [ 748.117269][T17361] ? __lock_acquire+0xb97/0x1ce0 [ 748.122189][T17361] mmap_region+0x32b/0x3f0 [ 748.126586][T17361] do_mmap+0xa3e/0x1210 [ 748.130823][T17361] ? __pfx_do_mmap+0x10/0x10 [ 748.135399][T17361] ? __pfx_down_write_killable+0x10/0x10 [ 748.141039][T17361] vm_mmap_pgoff+0x29e/0x470 [ 748.145619][T17361] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 748.150724][T17361] ? __fget_files+0x20e/0x3c0 [ 748.155395][T17361] ksys_mmap_pgoff+0x32c/0x5c0 [ 748.160146][T17361] __x64_sys_mmap+0x125/0x190 [ 748.165420][T17361] do_syscall_64+0xcd/0x4e0 [ 748.170000][T17361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.176224][T17361] RIP: 0033:0x7ffaba38eec9 [ 748.180622][T17361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.200224][T17361] RSP: 002b:00007ffabb231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 748.208621][T17361] RAX: ffffffffffffffda RBX: 00007ffaba5e6270 RCX: 00007ffaba38eec9 [ 748.216592][T17361] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 748.224555][T17361] RBP: 00007ffaba411f91 R08: 0000000000000008 R09: 0000000100000000 [ 748.232507][T17361] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 748.240458][T17361] R13: 00007ffaba5e6308 R14: 00007ffaba5e6270 R15: 00007ffe72260438 [ 748.248512][T17361] [ 748.251726][T17361] Kernel Offset: disabled [ 748.256027][T17361] Rebooting in 86400 seconds..