last executing test programs: 5.916052427s ago: executing program 3 (id=1218): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx6\x00', 0x204001, 0x0) 5.75558549s ago: executing program 3 (id=1221): socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 5.657577663s ago: executing program 3 (id=1224): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69e8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c754f66", 0xaf}], 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) timer_create(0x0, &(0x7f00000004c0)={0x0, 0x5, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)=0x0) timer_settime(r13, 0x1, &(0x7f0000000540)={{0x77359400}}, &(0x7f0000000580)) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000000)={0x18, r2, 0x1, 0x0, &(0x7f00000011c0)=[{0xffffffffffffedca, 0xfffffffffffffff9}]}) close(0x3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x9, 0x0, r0}) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r14, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24000000c9bc097f826a9aadc4c2644c8ca2dbae5fcd72e3deeffb7c1c5eb269ff74c2e1b635a2112f", @ANYRES16=r15, @ANYBLOB="000426bd7000fedbdf250300000005000300020000000500030006000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x15) 5.573699606s ago: executing program 3 (id=1226): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) brk(0x8000000000000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580"], 0x5c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 5.500120398s ago: executing program 3 (id=1227): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000300)={0x0, 0x3, 0x6, 0x0, 0x8, 0x8, 0x652, 0x9c2, 0x8000009657, 0xfffffffffffffffc, 0x4fe, 0x41000, 0x9, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x6, 0x94d6, 0x10000000000001, 0x4, 0x80a, 0x2, 0x42943f8e7, 0x7, 0xfffffffffffffffd}) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x204001, 0x0) clock_adjtime(0x5, &(0x7f0000000140)={0x6, 0x80000000, 0x0, 0x1, 0xffff, 0x6, 0x1, 0xf, 0x8, 0x1, 0x0, 0x540, 0xc, 0xffffffff, 0x3, 0x400, 0x2, 0x80000000, 0x7f, 0x7, 0x8, 0x6, 0xc, 0x1, 0x7fffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000300)={0x0, 0x3, 0x6, 0x0, 0x8, 0x8, 0x652, 0x9c2, 0x8000009657, 0xfffffffffffffffc, 0x4fe, 0x41000, 0x9, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x6, 0x94d6, 0x10000000000001, 0x4, 0x80a, 0x2, 0x42943f8e7, 0x7, 0xfffffffffffffffd}) (async) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x204001, 0x0) (async) clock_adjtime(0x5, &(0x7f0000000140)={0x6, 0x80000000, 0x0, 0x1, 0xffff, 0x6, 0x1, 0xf, 0x8, 0x1, 0x0, 0x540, 0xc, 0xffffffff, 0x3, 0x400, 0x2, 0x80000000, 0x7f, 0x7, 0x8, 0x6, 0xc, 0x1, 0x7fffffff}) (async) 5.446832407s ago: executing program 3 (id=1228): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@loopback, @empty, 0x0}, &(0x7f0000000740)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250400000005000500030000003800018014000400fc01000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0a00060000e8c2ba3d0003fff6000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0x2f00, 0x5, 0xd09d, 0x6988, 0x10001, 0x1, 0x20000004, 0x9, 0xffe, 0x40000009, 0xb, 0x1001, 0x9, 0x1, 0x359d, 0x6, 0x4000008, 0x40000009, 0x828, 0x8, 0xef, 0x2, 0x7fe, 0x7, 0x2, 0x200, 0x7, 0x8, 0x4, 0x9, 0x7]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') syz_emit_ethernet(0x3a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b80)='Q', 0x1}], 0x1, 0x0, 0x0, 0xfeff}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8", 0x1}], 0xef}}], 0x2, 0x4000000) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 5.398129373s ago: executing program 32 (id=1228): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@loopback, @empty, 0x0}, &(0x7f0000000740)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250400000005000500030000003800018014000400fc01000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0a00060000e8c2ba3d0003fff6000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000840}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0x2f00, 0x5, 0xd09d, 0x6988, 0x10001, 0x1, 0x20000004, 0x9, 0xffe, 0x40000009, 0xb, 0x1001, 0x9, 0x1, 0x359d, 0x6, 0x4000008, 0x40000009, 0x828, 0x8, 0xef, 0x2, 0x7fe, 0x7, 0x2, 0x200, 0x7, 0x8, 0x4, 0x9, 0x7]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') syz_emit_ethernet(0x3a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b80)='Q', 0x1}], 0x1, 0x0, 0x0, 0xfeff}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8", 0x1}], 0xef}}], 0x2, 0x4000000) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 2.73938351s ago: executing program 0 (id=1274): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x2c, 0x803, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b40), 0x80c82, 0x0) ioctl$CDROM_NEXT_WRITABLE(r1, 0x2272, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/141) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000002c0), 0x2, 0x7) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) syz_emit_ethernet(0xc4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(0xffffffffffffffff, 0x1a, &(0x7f00000003c0)={0x7fffffff}, 0x1) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0xa9525000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0xfb}]}}}]}, 0x3c}}, 0x804) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r9, 0x1, 0x1000, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xe7, 0x8, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7800, 0x40, 0xaba6, 0xb8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x7c, r9, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000004}, 0xc880) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYRESOCT=0x0], 0x3c}}, 0x0) 2.515282142s ago: executing program 0 (id=1279): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x200) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000280)=""/147) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ffffffe8000000000003000000000000000000000000b15d415f4be8acb292adfa7716bf82ad9bb875adfd2718bf80ae8cdf84"], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x200) (async) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000280)=""/147) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ffffffe8000000000003000000000000000000000000b15d415f4be8acb292adfa7716bf82ad9bb875adfd2718bf80ae8cdf84"], 0x48) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (async) 2.510852824s ago: executing program 0 (id=1281): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x300}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8006, 0x200e3}}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r3, 0x8b20, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) 2.366646502s ago: executing program 0 (id=1285): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) stat(&(0x7f0000000680)='./file0\x00', 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) truncate(&(0x7f0000000280)='./file0\x00', 0x1) 2.281557112s ago: executing program 0 (id=1287): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SLAVE(r4, 0x703, 0x68) (async) close_range(r4, r4, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.100202529s ago: executing program 0 (id=1291): io_uring_setup(0x719b, &(0x7f0000000080)={0x0, 0xbca1, 0x2, 0x2, 0x109}) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) socket$netlink(0x10, 0x3, 0xc) syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x16fb, 0x4c, 0x100004, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r1, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x99, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x4f, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x2, 0x1, 0x9, 0x40, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "832bff"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xafd, 0x70e5, 0x94, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x10}, [@country_functional={0x10, 0x24, 0x7, 0x0, 0xb9ca, [0x6, 0x10, 0xffff, 0xe7, 0x9]}, @dmm={0x7, 0x24, 0x14, 0xfffb, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xb}, @obex={0x5, 0x24, 0x15, 0x4}, @dmm={0x7, 0x24, 0x14, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x81, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xc, 0x63, 0x4}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x2, 0xf7, 0x1, 0x40, 0x8}, 0x50, &(0x7f0000000280)={0x5, 0xf, 0x50, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x2, 0x4}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x0, 0xf000, 0x6, [0xff000f, 0xff3f30, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x5, 0x18, 0x10, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x7, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "386241cb9921c188e308ded9ede3444b"}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x58, &(0x7f0000000340)=@string={0x58, 0x3, "4da3bcbed81abaa591d563f35f5dcb2c58d530447a83a51b42b398bd617678ff58d4aeca7fb86cea7a63d122a000f843710ec2352f8ee09a034549f014e219ac039ddac6833d8924d2ec05db3436fb2b3cffb6b2c3b0"}}, {0xc9, &(0x7f00000003c0)=@string={0xc9, 0x3, "aa392eeb7943269c1f791f37d066f71ee6d2c7b1aad1e25e9f5bfd526f2b9b7a27f842b1dc1c0a6413eec66008e2e0e09cc563953115b3040007fa044961a52ff456fce5013ea775ae120de992a89b9c50ddda8528bcc0eed4177b86c38b287de500da9e29da3109272753b408a0f8cf39c2ae0a5f68d588eea84e4284328b85c73bfa666a9bfc6b96ef3af962745846efcc704c70552d65ad5cccc67e824999155758532ba9915660cfca73b836c6be637b269e522dd76b134c2ceea9c8838a0040d273a2d627"}}]}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x8000000000000003, {}, 0xfd}, 0x18) accept$inet(r7, &(0x7f0000000540)={0x2, 0x0, @local}, &(0x7f0000000600)=0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xc, 0xffff}, {0x6, 0x5}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.938970588s ago: executing program 4 (id=1296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/77, 0x4d) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040000) (async) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040000) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x58, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xd3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xfe}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x81}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x40}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x20040099) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) (async) r8 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) io_uring_enter(r8, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000), 0x8) (async) io_uring_enter(r8, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000), 0x8) process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x14, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 1.599379754s ago: executing program 4 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xdd, 0x5, 0x5}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="67420f01c3dfc165400fc75c8e1066b875000f00d04288346da3e50000f08044cf05000f01dfb9800000c00f3235000100000f30c40164c229ad0f01c4", 0x3d}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xed70}]}}]}, 0x44}}, 0x20000082) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.299738428s ago: executing program 2 (id=1302): r0 = socket(0x1, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'pim6reg1\x00', {0x2, 0x7ff, @empty}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001200010afcf7ffff000000210a000000"], 0x14}}, 0x0) write(r1, &(0x7f0000000100), 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000002c0)={{r0}, "4e4b9a94ea67db8cb59e320edcaf306aac664c38e5a8c0a9f08b6ffe32ccc8069979db8030ee061c5767a994aa511e1cb7aa83c62e6d8e50d7c6d2d9efc443ce47cd207d86b4d5fedd461c46228585412cf4d65d0ed7c69543fe0cc2e841644868e48225803ac964b9805b2b86ecef460fb535cdc44e9d97ee97d6df9cbf8d1cb92ea1193222fe2a530861dde45ab9f36292e26094a5142a74d168816acb845cc99477794262c895b2f1fc4e6b610128818a61aaf16844543d4ceabf03a6267fc24c5672f3c420391371082b967eb43aab6b7a638a1c650847377281734bbd7bc0d93e9245ee44b8a79f6284034506ff41ebf5e07d72121f4e9aac14253c94705ce08de91f0e94332391497f0155ce5fcfb9dbe29719270afca811732dd5098b61ebfaf9803c152797bba69d5000fb4bc6035ddb2a47f09a99e1025a0f86d0007a58f755e3cfaf3f52382c1294a05557081beab1aa0d7b7e4b838f53f39b6a4f10c466ba54467d5bc8e7121f18c87f3e0de32958063c5d16e32b26e2119294b527a9f82014ba79b31e4ce538a07da9ac09082870e7257699a65151d42412f794e5ccd1debb5ac2b91ddd72c48c0383de07f29919bfe96747f637b1a0831083fa30b20b16850de5ff2bb914d03959d7bc0fe8e7298958f54fec3f9625668f961675053654d820c351914f183a66c4637b756edcb509a88604c5cd48d797f9a6d0278ebba86033b18090b7255728a6cd2ff60f215af669ea485e71cc7d4f6b9f3102aa9f91eafa8662e2ab403f2da208b33beb4f3bc63b79b4ea1a17d22efaf4aa24f097fd7ee2e2877e0d90419c2f2bbc84bb2c8a11639d311139069973467da4a2a2b0d4188599311c7d926c02230616b65cfd4c6314f06de738e644ebe1ce19b8e86459470c59b57d8cc0d1342fae4c5fab6f278ea20b517af025d5fce44cf07a2a85af24bc2354dfc298735aa9532489bb2ae0b682f006b729a05b06f04bebc389171a53894d20c85162388d735792af667fd06523a4d3970298b18fc67690ebb1021a4c878249584d1d7a801f82f9a95865cbfaec4b3723fad08206ea202d10ece71e17d13e38f6c21cb4399922275a8838ad11a488efcd7b7728fd4e268f7b4c82151e17a3fdba679d63fb03a64a9d7d0d29ad5002cd9a542db48aeb1ec98d7a7e942a0bf421544c9e1b1835fa369519d1156f900131212a22b57d319f889d11a54b99a696c0c35ab807ee42a64d5d7d8547ed3f8f96da2ef1c0410caf6702b0567d88783c87298dd63745e62c951c15c48fa037a7f29680e6d057043028a4560153f73de25d89a703ba75513b540b64db30bca03b6ed86e168b0fc4f864e9f0757e2733deb9edc949b923852f58cfece21e56b09f304cef3374cb22287e3ca887948bded6c2207c3a392e38737f991321e93fc220289ba922418d77b468c67b362125bca5681596be5d8589c92720a906a7077e19346fa7629fc4bc9353da669fbebaf6a4b4a8e24bb082d50b367863760b6d1466903c508c03f2921a1b50d3d1e54a71a1941db38f9378ee679337692f883db00fb9ee9d243615be0521c451c23249211192e847824a5c4b609597bf6c9bb584eef53190d808738d74a9f7fc0f6f4174a272411a6d1e634ac0ea5252ec1cb9012c27a1416004313a915186b412427283bf250026c183ff83c1b5e4d1e113b6946ff39790407701f2f5def6bb39f4b556d157ec6bdb19af15dbaec1e63cd89317a1c6f2d30e359af29fe7413446292ab0651dbc0cc168a4796e872aacd01537962f51b34551371e7a28edaa1fc246a5621700eb331d7ceae19c3e23f05ceda416c25c92b5f2c44ed1758db137c45930559ee286d2e0ef131b4f43b95a3604e15fca3bb64193da77f865f6e77a7dc293f05ebedd5acb0d23758cc473b69fccd296a8c58fed35957e991c77801f8846597be8057b0a515dd037e65faafdfed3d6d110de0d606f7f9983dadce219d58bb25881a85ccff3d30c19d711260526bcbf44423dc76fcff80a81134d64d0e61627ad238173405c793a2c70266b58c982d274b5e15022dc3fb49f0b5ec7891c7bb94d55334e4f972eb9a73f535c7c03273345ecac86dd2b1c255f7cdd5f1764c551d09ecb53c80a531cc688bcfd05c3e661d2a3fc9da3dc186cd5a213de2bffc75319f4b8f8b600c6885ace3452854f7fe6e0d1f06f02bf2d40e245852e996f832083cfb026dc6e154a7d2a457994551b0ad085ead1b947ab113b9a8bec40eec2e2b822eab7f17ac113eb78ff090863bc85b318f968009b5884d7dd523faad7c58877ffbe5c4d4bbb1f48c13c2186c690c573b058adddaa161a648ac0c649bbb9c97b85b8c15810f154a4b9533f5825439f19e8bef9e9d2e666263528e5f8eb712d61d95ff0560348e671154ab7935824c73766111e987772373f4e35772d8a12a3e3069d28d26d398a1535a21e3425d1ffa74287c326580bbb2e5137506bec449cd6b72ec7f4fc8f66e549cf2f4b341dc77ef7400db4cd3c8dad180e700f48356a20f7a3235f27dc9c2e8b87e4c03eb55cc20d8b49382d01b97e38c5f08c7905d5b838bd5b4a1b6f431c91066c6b72029ac249c28335110907ea656b79bfbd80cb70ed42f79222eb2580c3c537bc5625591109d5300828983c3bd8221ecc4e081f9db4042d867c853a211601429c977cdb4bd492744e12998d95d67373e5e0f7e56455362b8ecdbd3269a7441bfc4d9d1894b63cfa543388e9ba9aa1cdbd1bb833fed8c618c5f6f65cf2eba9de84c4bd08d627684d26eb82e202e895693fdab2a0b03de21c70f547a91e9ff833760061e4b3c214fe975206bc65f117bcf3bfd72a81509e56b7fa6425933f773d7628ab89de137e9e96ec06107a33aea016625ccbeaff6b80692d0768fed3846639921aaa1f0148c5009fdc7ba78d5210013bf703b2f65cdbe167e7a9f9d29541f3b3ad4ac164bf9b876641cec0f9f11ed031c3d3398e9d8a8e892dd08fa662713da61f526e6c8be6d4ab8ec1c793a1f13684a93f4dca028b31cfb1f30a702ba86e4b35e9f08d2306edb4bd6880a6459bb11fb8ffabfcfa6ee3635d17b7da4f07c900eac76b4f27f0723adef9cdf5948509bf30553a7e6e2d7416467361baa4a9307aa06c4cf840c6b31e7bce39442b54b5494d35079584b598e10bcba33e0a1c30cf9f265008eabfc7860fab34de6541ef2fcadc696c836d0f88a6aa76b83170e1365ff0133f4a88299d608b5bbb256f28e8560d623e04d5a1ded27825c4ea42f93b299331fb1e03f7db6547b6334bb1f04c35feb0bd291a323929f1b04aab8635d33a9f4539b98233ec2315fa3122002d37508402f02bb39816cd271890293d52eef842cb799b5157ca16dbe89e1672b972113f4a1190eb0eb147bd4c4e786230ece16c4dd9133ab93289302bd060b7227320ed22ade96d215df7d9fa8612b00db4ba7b486d80307fec6b477c23540fc54acb5ab5ae46ba125e5f5ebc922c50dc2f18425e10af77550d52824c84d970f839993d205025c74339589ce43b87c7eb322599099909d2c8326fa0a117b2effc27b5037c8734798c85b8795379fa628f8c485e92a666d7a0977261451785ef8b99695dc8d9580f7e1ff953760499aa34e6f02c35ca8b2ac023c1d561bb2e291cacdbdad013188ef93f8583e7af67c2b25230e9c0c5bbc16c39f68fe3c8069e460dfdbbf0e490707c9812b755726e9929d9c02e97808ec2a09f27475ac630409faeb9e24137f9057e5f3315af6c055004d41d314093d7908aea2def4a9e5f799d28f09363a9b4f4a2a1dc8302c012536bcfbee252e14971d3622bb8d3eba5e3e1d187f309e5f70eb9adbcfbeddf9491b6e49c39c741951b65a11f26f25e8363d5856f650c609ce04607005df3782c47bb2d2389cb4356137b00a1d84329d638e7a431d0950407ec362649267af01e7cf0e6ef2152a378a6b36b7e856ee7fe0321bfe183dd00d4dbeee70bd41beac1b6692c06b55509a00c2df9ed3397a1584ff4821bf7c1b980240ccbee64136bd75ef9bbd22ce3bbd3df1409ebba624df056f17c2e9a564432cb4a13e46c471439e8d5a5fe10fb3b6cb90edd236d737be297817fe7226c9b5530a173174d0c4408297bc942eade603af1e0e4a7ea49fa1ef59c3ad2cdef6aad09c9b3dbdd3af525954cd8c735cd1c2be8e1c5b6d6b424c1408bbb53c0d37d95e188a1894448fc28f8d1da13536da4374fd9d089a59a04514e04c724e74b572ca3ccad5e6b756ac0b350b6f2bc3f209b5513d0372c2d532f4ebbdc1a4537b4b0787073da9b5f56dae4eda11f7a3d153487d8a26dc64ace00e4c6bb41a5cf995d8a0412ca3a189b38db333a023f938c772ae940695758f55ab9ef026a26067bd0e4458695d26f1e684481191b2591cb8c49577b6c907cc65ad385afbf4eb317346064cd823f335caf80e23adbc140bc1cd262bc752983cd03c5823f02c7ea544aebd9083099710d25167e72ac1dedf8c61653624878083a6e25d656a413fef7ee343166678e99b0bdd147cd249392ab2b1a42c042bfa641946ba24a94b81a5d8da880f37d0c4823bdea1a4beaeb41613f3680afe8e40a783dc8a68abd558a66a9b6af0ce538129f54562221f9647a22e8b78df99ca80ad4e35edb40495566f3153df6ef5439ed40a69b1e79bf6c27802684db9c2bad870439bbb5759529603524ed35959d5ba5df60b6c863f508e665b4c32c2339bc999cff0d60a3a00ea02f6cbe31ea9e5ccf853c16e6128b356a5d8e4ce4e75ed9fb46574fe9b3e9b12998b7c26fa0a2e6819a424aba75d012f12bbde7cbe353f1273260d140c3bdb8c115980ab96d90911344836df188f557d08b6078e4c73bc83aca5c19989a6a6dd66d1dd2e242c75be3df9867e1a88287ced2d7033d1c21c9db8a06af4e76687ad7c476752d272c8ad4df296910a05b90f387179c86a360f0872abb3f69016e57879791e1a998fcf42813a2b892e9759bb5c4588a9a56f72e333095f190f5efe8cf282cb26a69d7d69e2f693037a376167291dcf603adc6085eae803157723992eabd62ae2565e073aab0fc0b95c9c802ce9785fdbdbe3a375ff72d647eec4a4060120881708b8fae26594f50c4535fdf2f3c85808f6816cbb0ffd3f8f30158c3ea1ad5ffbfbf83be2fd52a45f1092e27c75d209064dc67ecb5817f0806fb1aa0ab4fb6c2fa961d6b8c5f0d940b42035145393f814b23c5e9866efe726f5baefbd2a16fa6fe7a99abe7a30fde33b4bffb3962b6744e4ed343213eb31e16a0f7369e03323bd1c05b55268b0be9e92937a937f397d832a350b057d8a5aba8136745e43e72f0a4b73dd2fdad4139b2151f5b4f4dade543f111042e9638780f37fc7493a4f989f101e590dff001ddbfb4888193fb426f72ad297e17329b0c7acb5c9174003a5dea80ba0f2c1c999a7d425d7af42af3e35d0e49ebece878a395521e5269774d340aa3f64cd7b44d50867751c56248ca967a0d3399830ab82b910da9c6d3447a7c6fe3a2040c579bf171b26e7f44109fb09bea6d0ac36991e0ba86338e5deb4b552502370ccb1638486bfb0400056012e3e63352b6078c6d6e37ab51a480b2f8706be980946ec385e485fb91195861ed548e5d5395f13ff3f9921c65e994f0252515f03554de64886d93e7b2e9625cebfe1e24b18388865d4bada7e2f9becffd5146c33464f5db4596339e6b38d145b657b8e07f789d5ac6d9d41c83f6c96d2090280a4cf4e4c7fe192192becb466aa7"}) 1.247767459s ago: executing program 2 (id=1303): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf250800010000000000080044"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2070, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x105c, 0xe5, 0x0, 0x1, [@generic="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", @typed={0x4, 0x13a}, @nested={0x52, 0xc5, 0x0, 0x1, [@generic="8fc78dbd5d84222c48bf000cb754526bf65e63841398609f0037c5b136cad7a3111ea6c40c020a6f36e6c5c40404a02bb154c19b871ffacfb5681189d444a0ac5a21164e3d5ea7367a5fd82dd7fe"]}]}, @generic="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"]}, 0x2070}, 0x1, 0x0, 0x0, 0x48815}, 0x4000) 1.247291487s ago: executing program 2 (id=1304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x120, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x104, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1bac}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6269}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x92f2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2b58}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x11}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000000040)=[0x3, 0xa]) 480.251686ms ago: executing program 4 (id=1306): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') getdents64(r0, &(0x7f0000000240)=""/44, 0x7a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e24, 0x3, @remote, 0x100}, {0xa, 0x4e20, 0x1d, @remote, 0x9}, 0x0, {[0x0, 0x4, 0x6, 0x8, 0xb9, 0x6, 0x4]}}, 0x5c) socket$kcm(0x29, 0x4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r6, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) write$binfmt_script(r0, &(0x7f0000001040)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "8ab7882b9d5113b1fe4ca37ca850619694ec2624807e86684d17303e4cc1f42976fd7f11d834bb90cc6039f4b534db2e97d37b8d077436e8f73ebf43425489f4da91b2c2e4225a10eb1c445e6db0e5321d2e26c173a6666ea8d0e1931473b45e0745a83ffb9263d517c806a17d2cd6ba587119fb1424c4f0b6e34413328f9fc3b9bad337ddd63c896291cf153a50fd28730fb269bec081cc691090588ae74a3eec5cdadf755827f404ce9bf7"}, 0xb9) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 405.931526ms ago: executing program 1 (id=1308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000e40), &(0x7f0000000100)=@udp, 0x8}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r1, &(0x7f0000000040)=""/30, 0x44) getdents64(r1, &(0x7f0000000840)=""/217, 0xd9) 405.654729ms ago: executing program 1 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x2}, 0x10) write(r1, &(0x7f00000000c0)="1b0000001e005f025145e9676a2cbf0dffffffff01000000000000", 0x1b) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x5}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x26040090) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x2}) (async) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000002"], 0x24}}, 0x0) (async, rerun: 32) r7 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB='4'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) (async) r11 = eventfd(0x0) read$eventfd(r11, &(0x7f0000000040), 0x8) (async, rerun: 64) write$eventfd(r11, &(0x7f0000000000)=0x8, 0x8) (async, rerun: 64) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000400)=0x9) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 320.583723ms ago: executing program 1 (id=1310): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) madvise(&(0x7f0000a8a000/0x3000)=nil, 0x3000, 0x12) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x0) mmap$usbmon(&(0x7f0000589000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r3, 0xfdef) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 320.090156ms ago: executing program 2 (id=1311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "000400000000"}]}}}}}}, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x10, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r0, r2, 0x32, 0x0, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) (async) syz_emit_ethernet(0x66, &(0x7f00000008c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "000400000000"}]}}}}}}, 0x0) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x10, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r0, r2, 0x32, 0x0, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) (async) 224.46303ms ago: executing program 4 (id=1312): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000180)=[r2], 0x1, 0x80000}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000040)) (rerun: 32) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r6, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x10000000000001bf) 224.251073ms ago: executing program 4 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r2 = syz_clone(0x20000000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000300)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7d) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYBLOB="038000000000000008000a00", @ANYBLOB="5af8a9d527f568e2828d6b34d6e1c269bbd2d6aadae301a0822e03e1a1f0800bf4df017accab498713f0e7bdc957e8742b6d1c807b788b4757196c6e2d6a8b", @ANYBLOB="1c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB="f8004cba593c9962d252704100"/22], 0x4c}, 0x1, 0x0, 0x0, 0x24000840}, 0x50) 64.514247ms ago: executing program 1 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008000300", @ANYRES32=r2, @ANYBLOB="5110ede660354e428e79f98a3169c0ea3fdb471512b52df7d2be867e68b7fcc4353a897d56b333bedbe79a97109a88ab870651e9f2c2b66cc2052cfa63795fca667c998c86b5c6620a0914be50da7ae261a698677e5737113a230c7722249ac689df09d686b7e609e7a13323c9c4860e03b55f11d94f4df35949d40ad253af1fc0a548e443bde528c2c4b760448ca5d0904f271eac0b45cfc4cd4f837b2c529f17877d60e4d469a9698877e74228b9048fab2261e6e9ebbd21a4fe"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x2d, 0x10, 0x40, 0x10001, 0xe, @private2, @mcast1, 0x7, 0x8000, 0xd750}}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0xb}, {0x3, 0xb}, {0xa, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x880) 62.981027ms ago: executing program 2 (id=1315): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000100)=""/106) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x5ad2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}}, 0x408d1) setxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000540)=@v2={0x0, 0x0, 0x3, 0x0, 0x1000, "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"}, 0x1009, 0x1) 62.857972ms ago: executing program 1 (id=1316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x1}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) 62.541686ms ago: executing program 2 (id=1317): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x46}}, 0x24000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)="bd", 0x1}], 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r6, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000480)={0xc054, [[0x2, 0x40, 0x8, 0x51, 0x3, 0x668, 0x0, 0xfffffffb], [0x91, 0x0, 0x400, 0x1ff, 0x6, 0x8001, 0x5, 0x7fff], [0xbbd, 0x8, 0x3c, 0x3, 0xffffffff, 0x5, 0x208, 0xfffffffe]], '\x00', [{0x7, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x64, 0x1, 0x1, 0x1}, {0x80000000, 0xfff, 0x1, 0x0, 0x1}, {0x401, 0x40, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x1, 0x1}, {0xa, 0x3, 0x0, 0x0, 0x1}, {0x101, 0x3, 0x1, 0x0, 0x1}, {0x3, 0x90000, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x1}], '\x00', 0x3}) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8}]}}]}, 0x3c}}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010071537000000f0000140000070000000001000000050018000100000005001900000000006bb56b5a7cf6fb0c1b8f"], 0x2c}, 0x1, 0x0, 0x0, 0x104}, 0x0) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000080)="072149d4b280303203e65334546a4a263f64b98ae5f7786f4373a6e1b83e6be6b07e768d18e28ea60b86a7e2be0987096b6ca76c0d7788ebaed4cb85a0ef370872b57797e7d66b66d070da04deaead780ad81e91412cdf78f3d8d960779ee9c8c679e6c4f9007eebabe7318c7e7cc710ed6ad4ab1efb66b96dce102e37503cdf179ba253c0bb1338b0dfbb25d6efb2a02361ab994963462c5ca0d218315174f55d8e7a0c7fbfb9dad031236853d583315cca") r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0xc0844123, &(0x7f0000000000)=0x400000000008002) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x8}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 204.743µs ago: executing program 1 (id=1318): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0xfffffffc, 0x1, 0x0, 0x49, "c4a84b7fa0bf2cca6beb936aa680b652a88ccf56a1b9ca5386103a5ccbe47b7b9aa6d8d7fca2ba00000000b97800001022f987617c318545790d2200", 0x19}, 0x60) 0s ago: executing program 4 (id=1319): r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0xff, 0xfffffffffffffffd, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xa000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x1, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x5, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) close(r4) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1320): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f00000006c0)=[{0x30, '\x00', @st={0x4, [{0x3, @uvalue=0x7}, {0x2, @svalue=0x10001}, {0x1, @svalue=0x9ab}, {0x2, @uvalue=0xf59}]}, 0xd}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x0) kernel console output (not intermixed with test programs): 122.274838][ T8078] bridge_slave_1: entered allmulticast mode [ 122.277853][ T8078] bridge_slave_1: entered promiscuous mode [ 122.301118][ T8090] __nla_validate_parse: 8 callbacks suppressed [ 122.301135][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'. [ 122.323961][ T8090] gtp0: entered promiscuous mode [ 122.329310][ T7314] bridge_slave_1: left allmulticast mode [ 122.332073][ T7314] bridge_slave_1: left promiscuous mode [ 122.336035][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.344801][ T7314] bridge_slave_0: left allmulticast mode [ 122.345955][ T8090] No source specified [ 122.348874][ T8093] No source specified [ 122.351300][ T7314] bridge_slave_0: left promiscuous mode [ 122.353881][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.407701][ T8097] hugetlbfs: Bad value for 'uid' [ 122.409931][ T8097] hugetlbfs: Bad value for 'uid' [ 122.534455][ T7314] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 122.538754][ T7314] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 122.679154][ T7314] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 122.682582][ T7314] bridge2 (unregistering): left promiscuous mode [ 122.685229][ T7314] bridge2 (unregistering): left allmulticast mode [ 122.818438][ T7314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.823588][ T7314] bond0 (unregistering): Released all slaves [ 122.831303][ T7314] bond1 (unregistering): Released all slaves [ 122.844958][ T7314] bond2 (unregistering): Released all slaves [ 122.855576][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.860719][ T8090] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 122.863295][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.871224][ T8093] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 122.871761][ T8142] validate_nla: 1 callbacks suppressed [ 122.871775][ T8142] netlink: 'syz.3.596': attribute type 12 has an invalid length. [ 122.899334][ T8148] program syz.1.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.900964][ T8078] team0: Port device team_slave_0 added [ 122.920383][ T8148] pimreg: entered allmulticast mode [ 122.925791][ T8078] team0: Port device team_slave_1 added [ 122.940150][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.943560][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.954117][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.958701][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.961246][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.995634][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.042314][ T8078] hsr_slave_0: entered promiscuous mode [ 123.049422][ T8078] hsr_slave_1: entered promiscuous mode [ 123.051765][ T8078] debugfs: 'hsr0' already exists in 'hsr' [ 123.053726][ T8078] Cannot create hsr debugfs directory [ 123.178272][ T5928] Bluetooth: hci0: ISO packet too small [ 123.179540][ T8172] binder: BC_ACQUIRE_RESULT not supported [ 123.183145][ T8172] binder: 8170:8172 ioctl c0306201 2000000001c0 returned -22 [ 123.183860][ T8171] lo speed is unknown, defaulting to 1000 [ 123.186825][ T8172] binder: 8170:8172 ioctl 4010640d 200000000000 returned -22 [ 123.283680][ T2296] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 123.291096][ T7314] hsr_slave_0: left promiscuous mode [ 123.293415][ T7314] hsr_slave_1: left promiscuous mode [ 123.300732][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.303498][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.308775][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.311328][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.335936][ T7314] veth1_macvtap: left allmulticast mode [ 123.339877][ T7314] veth1_macvtap: left promiscuous mode [ 123.342347][ T7314] veth0_macvtap: left promiscuous mode [ 123.346422][ T7314] veth1_vlan: left promiscuous mode [ 123.355701][ T7314] veth0_vlan: left promiscuous mode [ 123.463326][ T8187] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 123.469845][ T2296] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 123.496660][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.500452][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.505131][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.519312][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.522262][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.526715][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.545521][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.550682][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.555254][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.559169][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.563158][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.567782][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.571664][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.575377][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.579968][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.583960][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.587967][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.592873][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.596745][ T7314] team0 (unregistering): Port device team_slave_1 removed [ 123.596946][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.603979][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.608781][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.609201][ T7314] team0 (unregistering): Port device team_slave_0 removed [ 123.612868][ T2296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.618857][ T2296] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.623698][ T2296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.628721][ T2296] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.633046][ T2296] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.636792][ T2296] usb 5-1: Product: syz [ 123.638775][ T2296] usb 5-1: Manufacturer: syz [ 123.640906][ T2296] usb 5-1: SerialNumber: syz [ 123.646389][ T2296] usb 5-1: config 0 descriptor?? [ 123.656690][ T2296] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.765584][ T29] lo speed is unknown, defaulting to 1000 [ 123.768067][ T29] infiniband syz2: ib_query_port failed (-19) [ 123.791915][ T8189] ªªªªªª: renamed from wg2 (while UP) [ 123.881992][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 123.884869][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'. [ 124.044102][ T830] usb 5-1: USB disconnect, device number 9 [ 124.047960][ T830] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 124.147103][ T8211] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.155404][ T8211] CIFS mount error: No usable UNC path provided in device string! [ 124.155404][ T8211] [ 124.158765][ T5928] Bluetooth: hci2: command tx timeout [ 124.161757][ T8211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.197335][ T8216] 9p: Bad value for 'rfdno' [ 124.206971][ T8078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.214218][ T8078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.221291][ T8078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.234368][ T8078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.295602][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.308869][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.320454][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.322802][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.333951][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.336280][ T7299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.448072][ T8237] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 124.454600][ T8237] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 124.487087][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.521011][ T8078] veth0_vlan: entered promiscuous mode [ 124.527442][ T8078] veth1_vlan: entered promiscuous mode [ 124.545809][ T8078] veth0_macvtap: entered promiscuous mode [ 124.551718][ T8078] veth1_macvtap: entered promiscuous mode [ 124.565913][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.572036][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.579032][ T7299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.582089][ T7299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.587600][ T7299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.590648][ T7299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.642857][ T8138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.647290][ T8138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.663420][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.666383][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.828927][ T8202] orangefs_mount: mount request failed with -4 [ 124.864597][ T8253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.615'. [ 125.086000][ T5928] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 125.089566][ T5928] Bluetooth: hci1: Injecting HCI hardware error event [ 125.092608][ T5928] Bluetooth: hci1: hardware error 0x00 [ 125.196486][ T8265] input: syz0 as /devices/virtual/input/input16 [ 125.277001][ T6189] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 125.482735][ T6189] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 125.485679][ T6189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.488248][ T6189] usb 7-1: Product: syz [ 125.489677][ T6189] usb 7-1: Manufacturer: syz [ 125.491382][ T6189] usb 7-1: SerialNumber: syz [ 125.494532][ T6189] usb 7-1: config 0 descriptor?? [ 125.498490][ T6189] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 125.715861][ T60] usb 7-1: USB disconnect, device number 9 [ 125.832572][ T8310] netlink: 224 bytes leftover after parsing attributes in process `syz.1.632'. [ 126.138732][ T8327] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.142502][ T8327] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.197681][ T8329] gretap0: entered promiscuous mode [ 126.199815][ T8329] macsec2: entered promiscuous mode [ 126.215453][ T8329] gretap0: left promiscuous mode [ 126.338378][ T8333] sctp: [Deprecated]: syz.0.641 (pid 8333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.338378][ T8333] Use struct sctp_sack_info instead [ 126.363832][ T63] Bluetooth: hci2: command tx timeout [ 126.460744][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 126.460756][ T40] audit: type=1400 audit(1773233949.350:537): avc: denied { mounton } for pid=8346 comm="syz.0.648" path="/143/file0" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 126.558747][ T40] audit: type=1400 audit(1773233949.443:538): avc: denied { read } for pid=8355 comm="syz.2.650" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.568252][ T40] audit: type=1400 audit(1773233949.443:539): avc: denied { open } for pid=8355 comm="syz.2.650" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.570871][ T8358] xt_nfacct: accounting object `syz0' does not exist [ 126.578183][ T40] audit: type=1400 audit(1773233949.453:540): avc: denied { ioctl } for pid=8355 comm="syz.2.650" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 126.585309][ T8356] nftables ruleset with unbound chain [ 126.668902][ T40] audit: type=1400 audit(1773233949.547:541): avc: denied { read } for pid=8363 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 126.679666][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 126.682590][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'. [ 126.724129][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.657'. [ 126.728263][ T8371] tmpfs: Too few inodes for current use [ 126.731382][ T40] audit: type=1400 audit(1773233949.603:542): avc: denied { remount } for pid=8363 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.783079][ T40] audit: type=1400 audit(1773233949.650:543): avc: denied { remove_name } for pid=8372 comm="syz.1.659" name="file2" dev="9p" ino=74448983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.791409][ T40] audit: type=1400 audit(1773233949.650:544): avc: denied { rmdir } for pid=8372 comm="syz.1.659" name="file2" dev="9p" ino=74448983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.840098][ T40] audit: type=1400 audit(1773233949.706:545): avc: denied { link } for pid=8377 comm="syz.3.660" name="#d" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.849693][ T40] audit: type=1400 audit(1773233949.706:546): avc: denied { rename } for pid=8377 comm="syz.3.660" name="#e" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.932884][ T8382] (syz.3.663,8382,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 126.936041][ T8382] (syz.3.663,8382,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 126.938457][ T8382] (syz.3.663,8382,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 126.941469][ T8382] (syz.3.663,8382,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 126.983102][ T8384] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.162283][ T8399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 127.302194][ T5928] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 127.375089][ T8405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8405 comm=syz.1.668 [ 127.508292][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 127.581908][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 127.654000][ T6189] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 127.824233][ T6189] usb 8-1: Using ep0 maxpacket: 8 [ 127.827390][ T6189] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.831566][ T6189] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.836050][ T6189] usb 8-1: config 0 interface 0 has no altsetting 0 [ 127.838957][ T6189] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 127.842970][ T6189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.848046][ T6189] usb 8-1: config 0 descriptor?? [ 128.515652][ T8432] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.544698][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.550195][ T8430] pimreg: left allmulticast mode [ 128.555183][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.580984][ T5928] Bluetooth: hci2: command tx timeout [ 130.637973][ T6189] usbhid 8-1:0.0: can't add hid device: -71 [ 130.640296][ T6189] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 130.643818][ T6189] usb 8-1: USB disconnect, device number 5 [ 130.799000][ T5928] Bluetooth: hci2: command tx timeout [ 130.893502][ T8471] netlink: 170204 bytes leftover after parsing attributes in process `syz.0.687'. [ 130.908786][ T8482] random: crng reseeded on system resumption [ 130.919586][ T10] hid (null): unknown global tag 0xe [ 130.921513][ T10] hid (null): unknown global tag 0x6c [ 130.923296][ T10] hid (null): unknown global tag 0xdd [ 130.925089][ T10] hid (null): unknown global tag 0xc [ 130.933813][ T10] hid (null): unknown global tag 0x76 [ 130.935626][ T10] hid (null): unknown global tag 0xc [ 130.937755][ T10] hid (null): unknown global tag 0xe [ 130.939537][ T10] hid (null): unknown global tag 0x81 [ 130.941302][ T10] hid (null): unknown global tag 0xc [ 130.943037][ T10] hid (null): invalid report_count -1803744018 [ 130.947209][ T10] hid (null): unknown global tag 0xd [ 130.949255][ T10] hid (null): report_id 0 is invalid [ 130.957304][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.960778][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.963229][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.965736][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.970293][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.972974][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.974881][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.694'. [ 130.975345][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.981943][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.694'. [ 130.982784][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.987838][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'. [ 130.988685][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 130.992827][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.694'. [ 130.995268][ T10] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 131.003690][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.694'. [ 131.006235][ T10] hid-generic 0005:00B6:0009.0002: reserved main item tag 0xd [ 131.007774][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'. [ 131.010137][ T10] hid-generic 0005:00B6:0009.0002: reserved main item tag 0xd [ 131.016905][ T10] hid-generic 0005:00B6:0009.0002: unexpected long global item [ 131.017068][ T8499] macvtap0: entered allmulticast mode [ 131.018840][ T8500] program syz.2.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.018882][ T8500] ata1.00: invalid service action 31 [ 131.019035][ T8493] program syz.2.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.019056][ T8493] ata1.00: invalid service action 31 [ 131.019408][ T8491] /dev/sg0: Can't lookup blockdev [ 131.019639][ T10] hid-generic 0005:00B6:0009.0002: probe with driver hid-generic failed with error -22 [ 131.021651][ T8499] veth0_macvtap: entered allmulticast mode [ 131.038656][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.694'. [ 131.987970][ T8504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.990481][ T8504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.993082][ T8504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.995205][ T8504] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.006625][ T8504] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 132.078821][ T8525] IPv6: addrconf: prefix option has invalid lifetime [ 132.097780][ T8521] 9p: Bad value for 'rfdno' [ 132.102019][ T8521] loop6: detected capacity change from 0 to 7 [ 132.106454][ T8521] Dev loop6: unable to read RDB block 7 [ 132.108316][ T8521] loop6: unable to read partition table [ 132.110875][ T8521] loop6: partition table beyond EOD, truncated [ 132.112998][ T8521] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.142630][ T8532] ./cgroup: Can't lookup blockdev [ 132.163678][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 132.166527][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 132.218578][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 132.271988][ T8553] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 132.285410][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 132.285425][ T40] audit: type=1400 audit(1773233954.810:557): avc: denied { append } for pid=8554 comm="syz.3.715" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.290626][ T10] hid (null): report_id 0 is invalid [ 132.307869][ T10] hid-generic 0004:0040:0005.0003: reserved main item tag 0xd [ 132.310648][ T40] audit: type=1400 audit(1773233954.810:558): avc: denied { map } for pid=8554 comm="syz.3.715" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.310920][ T10] hid-generic 0004:0040:0005.0003: report_id 0 is invalid [ 132.321887][ T10] hid-generic 0004:0040:0005.0003: item 0 0 1 8 parsing failed [ 132.325203][ T10] hid-generic 0004:0040:0005.0003: probe with driver hid-generic failed with error -22 [ 132.360569][ T40] audit: type=1400 audit(1773233954.885:559): avc: denied { bind } for pid=8561 comm="syz.3.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 132.370009][ T8561] delete_channel: no stack [ 132.413501][ T8565] block device autoloading is deprecated and will be removed. [ 132.469233][ T8570] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 132.472222][ T40] audit: type=1400 audit(1773233954.979:560): avc: denied { mounton } for pid=8569 comm="syz.3.720" path="/bus" dev="ramfs" ino=24456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 132.479165][ T8570] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.484968][ T8570] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 132.487244][ T8570] overlayfs: failed to set xattr on upper [ 132.489100][ T8570] overlayfs: ...falling back to redirect_dir=nofollow. [ 132.491246][ T8570] overlayfs: ...falling back to index=off. [ 132.493133][ T8570] overlayfs: ...falling back to uuid=null. [ 132.510080][ T40] audit: type=1800 audit(1773233955.026:561): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.721" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 132.567926][ T40] audit: type=1400 audit(1773233955.082:562): avc: denied { ioctl } for pid=8573 comm="syz.1.718" path="socket:[25879]" dev="sockfs" ino=25879 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.675278][ T8593] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 132.692728][ T8593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.775888][ T5928] Bluetooth: hci0: unexpected event for opcode 0x080f [ 132.780342][ T40] audit: type=1400 audit(1773233955.270:563): avc: denied { mount } for pid=8605 comm="syz.1.730" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 132.894537][ T40] audit: type=1401 audit(1773233955.382:564): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 132.895395][ T40] audit: type=1400 audit(1773233955.382:565): avc: denied { name_bind } for pid=8624 comm="syz.3.737" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 132.935992][ T40] audit: type=1400 audit(1773233955.392:566): avc: denied { accept } for pid=8624 comm="syz.3.737" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.943282][ T8633] program syz.1.738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.996451][ T8637] netlink: 'syz.2.739': attribute type 20 has an invalid length. [ 133.230491][ T8667] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 133.249455][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 133.308793][ T8672] ip6gre1: entered promiscuous mode [ 133.311147][ T8672] ip6gre1: entered allmulticast mode [ 133.328141][ T8672] Bluetooth: hci4: Frame reassembly failed (-84) [ 133.441904][ T34] usb 8-1: device descriptor read/64, error -71 [ 133.466663][ T8685] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 133.471192][ T8685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.529785][ T8687] misc userio: Begin command sent, but we're already running [ 133.698324][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 133.835769][ T34] usb 8-1: device descriptor read/64, error -71 [ 133.955837][ T34] usb usb8-port1: attempt power cycle [ 134.124335][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.208698][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.262543][ T10] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 134.326065][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 134.347619][ T34] usb 8-1: device descriptor read/8, error -71 [ 134.423705][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.428315][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.432328][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 134.438401][ T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 134.442460][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.455045][ T8698] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 134.462429][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 134.465601][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 134.469533][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 134.472023][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 134.477461][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 134.480099][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 134.616291][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 134.658153][ T34] usb 8-1: device descriptor read/8, error -71 [ 134.781505][ T34] usb usb8-port1: unable to enumerate USB device [ 135.291962][ T8695] cdc_wdm 7-1:1.0: Error autopm - -16 [ 135.292148][ T29] usb 7-1: USB disconnect, device number 10 [ 135.435051][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 135.498506][ T5928] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 135.594645][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 135.598486][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.602559][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.606743][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 135.611239][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 135.618986][ T29] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.621931][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.631324][ T29] hub 7-1:1.0: bad descriptor, ignoring hub [ 135.633645][ T29] hub 7-1:1.0: probe with driver hub failed with error -5 [ 135.636166][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 135.638807][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 135.638912][ T8731] netlink: 'syz.0.766': attribute type 10 has an invalid length. [ 135.641426][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 135.644493][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 135.644623][ T8731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8731 comm=syz.0.766 [ 135.692817][ T8735] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 135.700416][ T8737] Mount JFS Failure: -22 [ 135.703524][ T8738] Mount JFS Failure: -22 [ 135.780685][ T8742] kvm: pic: single mode not supported [ 135.780752][ T8742] kvm: pic: level sensitive irq not supported [ 135.783198][ T8742] kvm: pic: non byte read [ 135.788005][ T8742] kvm: pic: non byte read [ 135.790557][ T8742] kvm: pic: non byte read [ 135.793062][ T8742] kvm: pic: non byte read [ 135.795350][ T8742] kvm: pic: single mode not supported [ 135.795590][ T8742] kvm: pic: non byte read [ 135.801579][ T8742] kvm: pic: non byte read [ 135.804137][ T8742] kvm: pic: non byte read [ 135.806617][ T8742] kvm: pic: non byte read [ 135.809796][ T8742] kvm: pic: non byte read [ 135.963015][ T29] usb 7-1: USB disconnect, device number 11 [ 135.992436][ T8746] hfs: unable to load iocharset "io#harset" [ 136.001094][ T8751] tmpfs: Bad value for 'mpol' [ 136.021720][ T8746] hfs: unable to load iocharset "io#harset" [ 136.058913][ T8746] hfs: unable to load iocharset "io#harset" [ 136.086054][ T8746] hfs: unable to load iocharset "io#harset" [ 136.103749][ T8746] hfs: unable to load iocharset "io#harset" [ 136.131832][ T8746] hfs: unable to load iocharset "io#harset" [ 136.158379][ T8746] hfs: unable to load iocharset "io#harset" [ 136.188830][ T8746] hfs: unable to load iocharset "io#harset" [ 136.208034][ T8746] hfs: unable to load iocharset "io#harset" [ 136.225083][ T8746] hfs: unable to load iocharset "io#harset" [ 136.244952][ T8746] hfs: unable to load iocharset "io#harset" [ 136.263579][ T8746] hfs: unable to load iocharset "io#harset" [ 136.282527][ T8746] hfs: unable to load iocharset "io#harset" [ 136.303304][ T8746] hfs: unable to load iocharset "io#harset" [ 136.323399][ T8746] hfs: unable to load iocharset "io#harset" [ 136.329598][ T8779] input: syz1 as /devices/virtual/input/input18 [ 136.347066][ T8746] hfs: unable to load iocharset "io#harset" [ 136.347245][ T8774] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 136.351961][ T8774] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.359450][ T8774] vhci_hcd vhci_hcd.0: Device attached [ 136.370107][ T8782] vhci_hcd: connection closed [ 136.371078][ T8138] vhci_hcd vhci_hcd.3: stop threads [ 136.374699][ T8138] vhci_hcd vhci_hcd.3: release socket [ 136.376547][ T8138] vhci_hcd vhci_hcd.3: disconnect device [ 136.378244][ T8746] hfs: unable to load iocharset "io#harset" [ 136.410192][ T8746] hfs: unable to load iocharset "io#harset" [ 136.432804][ T8746] hfs: unable to load iocharset "io#harset" [ 136.438140][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.479065][ T8746] hfs: unable to load iocharset "io#harset" [ 136.512621][ T8746] hfs: unable to load iocharset "io#harset" [ 136.525783][ T8788] kvm: pic: non byte write [ 136.537569][ T8746] hfs: unable to load iocharset "io#harset" [ 136.565418][ T8746] hfs: unable to load iocharset "io#harset" [ 136.598420][ T8746] hfs: unable to load iocharset "io#harset" [ 136.612644][ T8801] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 136.616109][ T8801] UDF-fs: Scanning with blocksize 2048 failed [ 136.622327][ T8801] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 136.625570][ T8801] UDF-fs: Scanning with blocksize 4096 failed [ 136.634511][ T8746] hfs: unable to load iocharset "io#harset" [ 136.654868][ T8746] hfs: unable to load iocharset "io#harset" [ 136.673411][ T8746] hfs: unable to load iocharset "io#harset" [ 136.702561][ T8746] hfs: unable to load iocharset "io#harset" [ 136.729428][ T8746] hfs: unable to load iocharset "io#harset" [ 136.753206][ T8746] hfs: unable to load iocharset "io#harset" [ 136.775232][ T8746] hfs: unable to load iocharset "io#harset" [ 136.802873][ T8746] hfs: unable to load iocharset "io#harset" [ 136.820318][ T8746] hfs: unable to load iocharset "io#harset" [ 137.060277][ T8827] overlay: filesystem on ./file0 not supported as upperdir [ 137.451461][ T8837] kAFS: unable to lookup cell '1' [ 137.495303][ T8840] cgroup: Invalid name [ 137.604442][ T8846] binder: 8845:8846 ioctl 3b89 200000000240 returned -22 [ 137.620077][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 137.620094][ T40] audit: type=1400 audit(1773233959.820:608): avc: denied { write } for pid=8843 comm="syz.0.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.729030][ T40] audit: type=1400 audit(1773233959.923:609): avc: denied { write } for pid=8852 comm="syz.0.797" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.737538][ T40] audit: type=1400 audit(1773233959.923:610): avc: denied { open } for pid=8852 comm="syz.0.797" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.745047][ T40] audit: type=1400 audit(1773233959.923:611): avc: denied { ioctl } for pid=8852 comm="syz.0.797" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 137.773942][ T10] IPVS: starting estimator thread 0... [ 137.777727][ T8857] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 137.875565][ T8858] IPVS: using max 47 ests per chain, 112800 per kthread [ 137.929442][ T8860] bridge0: port 3(batadv0) entered disabled state [ 137.932302][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.935417][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.008364][ T8860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.040858][ T8860] veth0_macvtap: left allmulticast mode [ 138.042381][ T7299] Bluetooth: hci4: Frame reassembly failed (-84) [ 138.047951][ T8869] Bluetooth: hci4: Frame reassembly failed (-84) [ 138.053040][ T8869] Bluetooth: hci4: Frame reassembly failed (-84) [ 138.059541][ T8869] Bluetooth: hci4: Frame reassembly failed (-84) [ 138.066072][ T8869] Bluetooth: hci4: Frame reassembly failed (-84) [ 138.091121][ T82] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.095140][ T82] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.101096][ T82] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.107330][ T82] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.428058][ T40] audit: type=1400 audit(1773233960.570:612): avc: denied { name_bind } for pid=8879 comm="syz.1.804" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 138.443931][ T8877] overlayfs: failed to set uuid (177/file0, err=-1); falling back to uuid=null. [ 138.447015][ T8877] overlayfs: failed to verify upper root origin [ 138.453604][ T8877] __nla_validate_parse: 14 callbacks suppressed [ 138.453617][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 138.458811][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'. [ 138.471003][ T8880] geneve3: entered promiscuous mode [ 138.473604][ T8880] geneve3: entered allmulticast mode [ 138.501364][ T8876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.642758][ T5928] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.689330][ T40] audit: type=1400 audit(1773233960.824:613): avc: denied { setopt } for pid=8889 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.698184][ T40] audit: type=1400 audit(1773233960.824:614): avc: denied { map } for pid=8889 comm="syz.1.807" path="socket:[28030]" dev="sockfs" ino=28030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.708475][ T40] audit: type=1400 audit(1773233960.824:615): avc: denied { read } for pid=8889 comm="syz.1.807" path="socket:[28030]" dev="sockfs" ino=28030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.722261][ T40] audit: type=1400 audit(1773233960.824:616): avc: denied { getopt } for pid=8889 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.955497][ T5928] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 139.037247][ T40] audit: type=1400 audit(1773233961.143:617): avc: denied { checkpoint_restore } for pid=8910 comm="syz.1.815" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.146282][ T8926] Device name not specified. [ 139.146282][ T8926] [ 139.195357][ T8932] netlink: 9 bytes leftover after parsing attributes in process `syz.1.819'. [ 139.198576][ T8932] 0·: renamed from hsr0 (while UP) [ 139.201668][ T8932] 0·: entered allmulticast mode [ 139.203448][ T8932] hsr_slave_0: entered allmulticast mode [ 139.205376][ T8932] hsr_slave_1: entered allmulticast mode [ 139.207926][ T8932] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 139.241281][ T8936] xt_l2tp: unknown flags: 51 [ 139.357476][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 139.360464][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 139.366312][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 139.371682][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 139.697893][ T1327] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 139.859596][ T1327] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.867189][ T1327] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 139.872084][ T1327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 139.875700][ T1327] usb 8-1: Product: syz [ 139.877607][ T1327] usb 8-1: Manufacturer: syz [ 139.881574][ T1327] usb 8-1: SerialNumber: syz [ 139.891512][ T8985] netlink: 'syz.1.833': attribute type 1 has an invalid length. [ 139.915794][ T8985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.954413][ T8985] bond5: (slave veth3): Enslaving as an active interface with a down link [ 139.972079][ T8985] bond5: (slave dummy0): making interface the new active one [ 139.976503][ T8985] dummy0: entered promiscuous mode [ 139.979349][ T8985] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 140.107141][ T1327] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 140.177586][ T5928] Bluetooth: hci4: command 0x1003 tx timeout [ 140.177649][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 140.265187][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.267321][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.322863][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.839'. [ 140.326239][ T9003] openvswitch: netlink: Flow key attr not present in new flow. [ 140.672196][ T9039] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 140.692825][ T9039] bond1 (unregistering): Released all slaves [ 140.787209][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'. [ 140.794805][ T9039] erofs (device loop2): cannot find valid erofs superblock [ 141.182399][ T9055] xt_l2tp: unknown flags: 51 [ 141.191684][ T9055] xt_l2tp: unknown flags: 51 [ 141.510900][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.862'. [ 141.893978][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.954663][ T9106] netlink: 'syz.2.868': attribute type 1 has an invalid length. [ 141.955061][ T9107] netlink: 'syz.2.868': attribute type 39 has an invalid length. [ 142.065798][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.070416][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.074659][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.080556][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.084448][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.090614][ T10] usb 5-1: config 0 descriptor?? [ 142.180097][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.245324][ T2296] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 142.417484][ T2296] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.421955][ T2296] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.426236][ T2296] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.430947][ T2296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.437447][ T9109] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 142.447659][ T2296] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 142.594391][ T9118] ipvlan2: entered allmulticast mode [ 142.596802][ T9118] batadv_slave_1: entered allmulticast mode [ 142.600430][ T9118] batman_adv: batadv0: Adding interface: ipvlan2 [ 142.603150][ T9118] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.605716][ T9116] program syz.1.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.613834][ T9118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.613855][ T9118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.613867][ T9118] batman_adv: batadv0: Interface activated: ipvlan2 [ 142.641348][ T5992] usb 8-1: USB disconnect, device number 10 [ 142.647201][ T5992] usblp0: removed [ 142.655375][ T1327] usb 7-1: USB disconnect, device number 12 [ 142.754514][ T9122] hub 2-0:1.0: USB hub found [ 142.757246][ T9122] hub 2-0:1.0: 2 ports detected [ 142.876239][ T9129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.891677][ T9129] netlink: 'syz.3.877': attribute type 4 has an invalid length. [ 142.896197][ T9129] .`: renamed from bond0 [ 143.159619][ T1327] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 143.249750][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 143.249796][ T40] audit: type=1400 audit(1773233965.102:626): avc: denied { read append } for pid=9140 comm="syz.3.881" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.332562][ T1327] usb 7-1: Using ep0 maxpacket: 16 [ 143.344679][ T1327] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 143.355220][ T1327] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.358144][ T1327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.360675][ T1327] usb 7-1: Product: 望ã¯è¤¥ï¿ºï¿¿ï¿¿ï¿¿Ô¸ [ 143.362686][ T1327] usb 7-1: Manufacturer: ш [ 143.364193][ T1327] usb 7-1: SerialNumber: ꊽ頛漎á„⢿㡰î¯ã¨‹î•¾â˜¥â…Œå©Œá¼“å¨è­ä¶ªä†µåž…鮓ᰱኪ賋籼팳갾áˆâ·Žæœ³ä‘–ê†á©¶ã¿¶ä´¾í—…뷤旋㕟æ¨áž˜â·®Ö¬á´¡ë¦šï­äá¼æ©—壕蒥儛ヨエ呈틬귅蛗岉禓㨀牡æ’á£î‹Œé‘“è²ë¯·é‚ªë°£î¢«éºƒê¾å¦¬é«¡ã‡›ã“ªîƒ±é‚»â°É…窼á‡ë‹¸í”洞틟뢒훆鋚ۦꇨᇴ [ 143.475224][ T9150] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 143.478485][ T9150] netlink: 'syz.1.885': attribute type 10 has an invalid length. [ 143.606183][ T9160] binder: BINDER_SET_CONTEXT_MGR already set [ 143.609194][ T9160] binder: 9157:9160 ioctl 4018620d 200000000100 returned -16 [ 143.615992][ T40] audit: type=1400 audit(1773233965.440:627): avc: denied { audit_control } for pid=9108 comm="syz.2.869" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 143.630005][ T1327] cdc_ncm 7-1:1.0: bind() failure [ 143.634738][ T1327] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 143.636974][ T1327] cdc_ncm 7-1:1.1: bind() failure [ 143.647448][ T1327] usb 7-1: USB disconnect, device number 13 [ 143.722396][ T40] audit: type=1400 audit(1773233965.543:628): avc: denied { ioctl } for pid=9161 comm="syz.1.889" path="socket:[28979]" dev="sockfs" ino=28979 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 144.362975][ T40] audit: type=1400 audit(1773233966.143:629): avc: denied { read } for pid=9168 comm="syz.3.892" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.371837][ T40] audit: type=1400 audit(1773233966.143:630): avc: denied { open } for pid=9168 comm="syz.3.892" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.381589][ T40] audit: type=1400 audit(1773233966.143:631): avc: denied { getattr } for pid=9168 comm="syz.3.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.440022][ T9174] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 144.573557][ T9179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.576763][ T9179] block device autoloading is deprecated and will be removed. [ 144.610587][ T9181] __nla_validate_parse: 8 callbacks suppressed [ 144.610605][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 144.617633][ T9181] netlink: 'syz.3.895': attribute type 1 has an invalid length. [ 144.633937][ T9181] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.637866][ T9181] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 144.677193][ T9191] netlink: 4100 bytes leftover after parsing attributes in process `syz.3.898'. [ 144.830407][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 144.832583][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.844555][ T10] usb 5-1: USB disconnect, device number 10 [ 144.849302][ T9200] /dev/sr0: Can't open blockdev [ 144.869726][ T40] audit: type=1400 audit(1773233966.622:632): avc: denied { call } for pid=9208 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.887596][ T40] audit: type=1400 audit(1773233966.622:633): avc: denied { transfer } for pid=9208 comm="syz.2.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.981940][ T9221] netlink: 'syz.0.909': attribute type 2 has an invalid length. [ 144.984793][ T60] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 144.987580][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.909'. [ 144.992648][ T9221] overlayfs: upper fs does not support file handles, falling back to index=off. [ 145.023427][ T40] audit: type=1400 audit(1773233966.763:634): avc: denied { getopt } for pid=9223 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.029246][ T9224] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 145.087815][ T40] audit: type=1400 audit(1773233966.819:635): avc: denied { listen } for pid=9216 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 145.146416][ T60] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 145.149697][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.153517][ T60] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.177190][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.181826][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 145.201648][ T60] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 145.204999][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.214287][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.914'. [ 145.217226][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 145.224515][ T60] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.229571][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.251034][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 145.269190][ T60] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 145.272644][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.277214][ T60] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.282069][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.288933][ T60] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 145.295682][ T60] usb 6-1: string descriptor 0 read error: -22 [ 145.297857][ T60] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.300742][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.312329][ T60] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 145.331795][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 145.624313][ T1929] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.707258][ T60] usb 6-1: USB disconnect, device number 6 [ 145.801105][ T1929] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 145.804345][ T1929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 145.808762][ T1929] usb 5-1: Product: syz [ 145.810444][ T1929] usb 5-1: Manufacturer: syz [ 145.815983][ T1929] usb 5-1: SerialNumber: syz [ 145.822122][ T1929] usb 5-1: config 0 descriptor?? [ 145.828549][ T1929] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 145.831286][ T1929] dvb-usb: bulk message failed: -22 (2/0) [ 145.836786][ T1929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.841373][ T1929] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 145.843975][ T1929] usb 5-1: media controller created [ 145.854318][ T1929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.052634][ T9248] cxusb: i2c rd: len=83 is too big! [ 146.052634][ T9248] [ 146.058182][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.915'. [ 146.062652][ T1929] cxusb: set interface failed [ 146.064233][ T1929] dvb-usb: bulk message failed: -22 (1/0) [ 146.088885][ T1929] DVB: Unable to find symbol mt352_attach() [ 146.090945][ T1929] dvb-usb: bulk message failed: -22 (5/0) [ 146.094270][ T1929] zl10353_read_register: readreg error (reg=127, ret==-121) [ 146.096680][ T1929] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 146.157086][ T1929] rc_core: IR keymap rc-dvico-mce not found [ 146.159753][ T1929] Registered IR keymap rc-empty [ 146.163223][ T1929] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 146.169309][ T1929] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input19 [ 146.174903][ T1929] dvb-usb: schedule remote query interval to 100 msecs. [ 146.177975][ T1929] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 146.184464][ T1929] usb 5-1: USB disconnect, device number 11 [ 146.423260][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 146.757503][ T1929] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 146.867168][ T9296] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 146.870462][ T9296] netlink: 'syz.3.926': attribute type 2 has an invalid length. [ 146.912798][ T9300] CIFS mount error: No usable UNC path provided in device string! [ 146.912798][ T9300] [ 146.916706][ T9300] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.924512][ T9300] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 146.994142][ T9304] 9pnet_virtio: no channels available for device 127.0.0.1 [ 147.018462][ T9301] netlink: 'syz.3.927': attribute type 4 has an invalid length. [ 147.028790][ T9301] netlink: 'syz.3.927': attribute type 4 has an invalid length. [ 147.098596][ T9313] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 147.109140][ T9316] netlink: 120 bytes leftover after parsing attributes in process `syz.1.933'. [ 147.110206][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.135512][ T9317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.216910][ T9317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.315019][ T9317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.373984][ T9317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.471607][ T7313] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.479703][ T7299] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.501189][ T7313] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.503988][ T7313] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.583579][ T9326] EXT4-fs (nbd1): unable to read superblock [ 147.693942][ T9342] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 147.711725][ T9340] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.938: iget: checksum invalid [ 147.718877][ T9340] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 147.722694][ T9340] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 147.726505][ T9340] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 148.289610][ T9379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.653908][ T9387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.953399][ T9397] CUSE: info not properly terminated [ 149.038690][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 149.038702][ T40] audit: type=1400 audit(1773233970.534:650): avc: denied { create } for pid=9404 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.070658][ T40] audit: type=1400 audit(1773233970.562:651): avc: denied { append } for pid=9406 comm="syz.0.956" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 149.105111][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 149.110508][ T40] audit: type=1400 audit(1773233970.600:652): avc: denied { connect } for pid=9408 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 149.158545][ T9414] block nbd0: NBD_DISCONNECT [ 149.164394][ T9406] block nbd0: Disconnected due to user request. [ 149.166568][ T9406] block nbd0: shutting down sockets [ 149.196956][ T9416] IPVS: length: 120 != 24 [ 149.408203][ T6189] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 149.567992][ T6189] usb 8-1: Using ep0 maxpacket: 32 [ 149.571443][ T6189] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.574323][ T6189] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.577163][ T6189] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.580225][ T6189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.583654][ T6189] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.586697][ T6189] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.590014][ T6189] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 149.593035][ T6189] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.597082][ T6189] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.600345][ T6189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.604599][ T6189] usb 8-1: config 0 descriptor?? [ 149.827939][ T6189] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 150.060151][ T9429] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 150.061471][ T40] audit: type=1400 audit(1773233971.491:653): avc: denied { setopt } for pid=9432 comm="syz.0.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.062983][ T9429] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.074279][ T9429] vhci_hcd vhci_hcd.0: Device attached [ 150.077477][ T40] audit: type=1400 audit(1773233971.500:654): avc: denied { read } for pid=9432 comm="syz.0.964" path="socket:[30729]" dev="sockfs" ino=30729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 150.078264][ T9433] vhci_hcd: connection closed [ 150.090230][ T8137] vhci_hcd vhci_hcd.2: stop threads [ 150.097090][ T8137] vhci_hcd vhci_hcd.2: release socket [ 150.099933][ T8137] vhci_hcd vhci_hcd.2: disconnect device [ 150.146849][ T40] audit: type=1400 audit(1773233971.576:655): avc: denied { getopt } for pid=9438 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.155257][ T40] audit: type=1400 audit(1773233971.576:656): avc: denied { setopt } for pid=9438 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 150.954637][ T9452] syzkaller0: entered promiscuous mode [ 150.956473][ T9452] syzkaller0: entered allmulticast mode [ 151.064131][ T9464] Bluetooth: MGMT ver 1.23 [ 151.115100][ T9464] geneve2: entered promiscuous mode [ 151.116864][ T9464] geneve2: entered allmulticast mode [ 151.119403][ T7299] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.123137][ T7299] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.127910][ T7299] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.131711][ T7299] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 151.389351][ T40] audit: type=1400 audit(1773233972.729:657): avc: denied { write } for pid=9482 comm="syz.0.979" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.396922][ T40] audit: type=1400 audit(1773233972.729:658): avc: denied { open } for pid=9482 comm="syz.0.979" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.404929][ T40] audit: type=1400 audit(1773233972.748:659): avc: denied { ioctl } for pid=9482 comm="syz.0.979" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.486923][ T5992] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 151.517889][ T9491] netlink: 'syz.0.981': attribute type 2 has an invalid length. [ 151.520624][ T9491] netlink: 'syz.0.981': attribute type 1 has an invalid length. [ 151.671654][ T5992] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 151.676072][ T5992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.689012][ T5992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.693167][ T5992] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 151.703986][ T5992] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 151.707880][ T5992] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 151.711957][ T5992] usb 7-1: Manufacturer: syz [ 151.716074][ T5992] usb 7-1: config 0 descriptor?? [ 151.801878][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 151.805270][ T9504] netlink: 'syz.0.985': attribute type 21 has an invalid length. [ 151.913306][ T8137] dummy0: left promiscuous mode [ 151.957684][ T9507] netlink: 180 bytes leftover after parsing attributes in process `syz.0.986'. [ 152.148215][ T5992] hid_parser_main: 1912 callbacks suppressed [ 152.148228][ T5992] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 152.160709][ T5992] appleir 0003:05AC:8243.0004: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 152.355854][ T5992] usb 8-1: USB disconnect, device number 11 [ 152.382392][ T5992] usblp0: removed [ 152.399810][ T9515] sch_tbf: burst 4095 is lower than device lo mtu (65550) ! [ 152.549399][ T9520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.989'. [ 152.746196][ T9475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.750710][ T9475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.970183][ T9475] overlay: ./file0 is not a directory [ 152.970242][ T9521] overlay: ./file0 is not a directory [ 153.084261][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 153.152056][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 153.675578][ T9542] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 153.702381][ T9549] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 154.453036][ T5992] usb 7-1: USB disconnect, device number 15 [ 154.496529][ T9588] tmpfs: Bad value for 'mpol' [ 154.620557][ T9596] veth1_macvtap: left promiscuous mode [ 154.829610][ T9607] binder: 9605:9607 unknown command 0 [ 154.831487][ T9607] binder: 9605:9607 ioctl c0306201 200000000640 returned -22 [ 154.943497][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 154.943508][ T40] audit: type=1400 audit(1773233976.069:662): avc: denied { bind } for pid=9619 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 154.997615][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1008'. [ 155.157784][ T9635] binder: BINDER_SET_CONTEXT_MGR already set [ 155.160766][ T9635] binder: 9633:9635 ioctl 4018620d 200000004a80 returned -16 [ 155.161421][ T40] audit: type=1400 audit(1773233976.276:663): avc: denied { bind } for pid=9629 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.202700][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1012'. [ 155.284039][ T9643] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 155.290701][ T40] audit: type=1400 audit(1773233976.388:664): avc: denied { name_bind } for pid=9642 comm="syz.1.1013" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 155.596980][ T9658] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 155.599377][ T9658] UDF-fs: Scanning with blocksize 2048 failed [ 155.602172][ T9658] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 155.604783][ T9658] UDF-fs: Scanning with blocksize 4096 failed [ 155.646433][ T9658] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.709774][ T9658] kvm: pic: non byte read [ 155.712980][ T9658] kvm: pic: non byte read [ 155.715740][ T9658] kvm: pic: non byte read [ 155.718180][ T9658] kvm: pic: single mode not supported [ 155.718472][ T9658] kvm: pic: non byte read [ 155.723646][ T9658] kvm: pic: non byte read [ 155.926579][ T9675] syz.2.1021: vmalloc error: size 4127592448, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.934361][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.2.1021 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.934391][ T9675] Tainted: [L]=SOFTLOCKUP [ 155.934397][ T9675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.934407][ T9675] Call Trace: [ 155.934414][ T9675] [ 155.934420][ T9675] dump_stack_lvl+0x100/0x190 [ 155.934462][ T9675] warn_alloc.cold+0x95/0x1c1 [ 155.934491][ T9675] ? __pfx_warn_alloc+0x10/0x10 [ 155.934513][ T9675] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 155.934539][ T9675] ? lockdep_hardirqs_on+0x78/0x100 [ 155.934558][ T9675] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.934584][ T9675] ? kasan_save_stack+0x3f/0x50 [ 155.934608][ T9675] ? kasan_save_stack+0x30/0x50 [ 155.934631][ T9675] ? kasan_save_track+0x14/0x30 [ 155.934660][ T9675] ? vb2_vmalloc_alloc+0x135/0x410 [ 155.934692][ T9675] __vmalloc_node_range_noprof+0x1252/0x1530 [ 155.934715][ T9675] ? do_syscall_64+0x106/0xf80 [ 155.934731][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.934756][ T9675] ? vb2_vmalloc_alloc+0x135/0x410 [ 155.934789][ T9675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.934823][ T9675] ? vb2_vmalloc_alloc+0x135/0x410 [ 155.934847][ T9675] vmalloc_user_noprof+0x9e/0xe0 [ 155.934868][ T9675] ? vb2_vmalloc_alloc+0x135/0x410 [ 155.934893][ T9675] vb2_vmalloc_alloc+0x135/0x410 [ 155.934923][ T9675] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 155.934950][ T9675] __vb2_queue_alloc+0x8d5/0x1160 [ 155.934984][ T9675] vb2_core_create_bufs+0x5fa/0xa30 [ 155.935041][ T9675] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 155.935070][ T9675] ? rcu_is_watching+0x12/0xc0 [ 155.935094][ T9675] vb2_create_bufs+0x40c/0x830 [ 155.935121][ T9675] ? __pfx_vb2_create_bufs+0x10/0x10 [ 155.935145][ T9675] ? v4l_sanitize_format+0x18d/0x430 [ 155.935177][ T9675] vb2_ioctl_create_bufs+0x244/0x3e0 [ 155.935198][ T9675] ? check_fmt+0x230/0x900 [ 155.935227][ T9675] v4l_create_bufs+0x17d/0x270 [ 155.935254][ T9675] __video_do_ioctl+0xaf8/0xdc0 [ 155.935277][ T9675] ? __might_fault+0xc5/0x140 [ 155.935301][ T9675] ? __pfx___video_do_ioctl+0x10/0x10 [ 155.935346][ T9675] video_usercopy+0x47a/0x1740 [ 155.935371][ T9675] ? __pfx___video_do_ioctl+0x10/0x10 [ 155.935392][ T9675] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 155.935419][ T9675] ? __pfx_video_usercopy+0x10/0x10 [ 155.935455][ T9675] v4l2_ioctl+0x1bd/0x250 [ 155.935475][ T9675] ? __pfx_v4l2_ioctl+0x10/0x10 [ 155.935497][ T9675] __x64_sys_ioctl+0x18e/0x210 [ 155.935528][ T9675] do_syscall_64+0x106/0xf80 [ 155.935547][ T9675] ? clear_bhb_loop+0x40/0x90 [ 155.935571][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.935592][ T9675] RIP: 0033:0x7facf3b9c799 [ 155.935608][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.935625][ T9675] RSP: 002b:00007facf496e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.935642][ T9675] RAX: ffffffffffffffda RBX: 00007facf3e15fa0 RCX: 00007facf3b9c799 [ 155.935653][ T9675] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 155.935663][ T9675] RBP: 00007facf3c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 155.935673][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.935684][ T9675] R13: 00007facf3e16038 R14: 00007facf3e15fa0 R15: 00007ffc4811e808 [ 155.935708][ T9675] [ 155.935763][ T9675] Mem-Info: [ 156.055564][ T9675] active_anon:24981 inactive_anon:5 isolated_anon:0 [ 156.055564][ T9675] active_file:15335 inactive_file:13880 isolated_file:0 [ 156.055564][ T9675] unevictable:1768 dirty:47 writeback:0 [ 156.055564][ T9675] slab_reclaimable:9742 slab_unreclaimable:69015 [ 156.055564][ T9675] mapped:24915 shmem:14671 pagetables:3860 [ 156.055564][ T9675] sec_pagetables:303 bounce:0 [ 156.055564][ T9675] kernel_misc_reclaimable:0 [ 156.055564][ T9675] free:455529 free_pcp:22746 free_cma:0 [ 156.070941][ T9675] Node 0 active_anon:98280kB inactive_anon:20kB active_file:61148kB inactive_file:55316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99660kB dirty:184kB writeback:0kB shmem:55148kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15200kB pagetables:10160kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB [ 156.082145][ T9675] Node 1 active_anon:1644kB inactive_anon:0kB active_file:192kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:5280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 156.092028][ T9675] Node 0 DMA free:12860kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 156.102598][ T9675] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 156.104525][ T9675] Node 0 DMA32 free:191888kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98280kB inactive_anon:20kB active_file:61148kB inactive_file:55316kB unevictable:3536kB writepending:184kB zspages:0kB present:2080628kB managed:1260952kB mlocked:0kB bounce:0kB free_pcp:70300kB local_pcp:14164kB free_cma:0kB [ 156.116161][ T9675] lowmem_reserve[]: 0 0 0 0 0 [ 156.117783][ T9675] Node 1 Normal free:1617864kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1644kB inactive_anon:0kB active_file:192kB inactive_file:204kB unevictable:3536kB writepending:4kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:21292kB local_pcp:3640kB free_cma:0kB [ 156.128509][ T9675] lowmem_reserve[]: 0 0 0 0 0 [ 156.130115][ T9675] Node 0 DMA: 7*4kB (U) 8*8kB (U) 12*16kB (U) 19*32kB (U) 17*64kB (U) 11*128kB (U) 5*256kB (U) 4*512kB (U) 4*1024kB (U) 1*2048kB (M) 0*4096kB = 12860kB [ 156.135245][ T9675] Node 0 DMA32: 963*4kB (UM) 817*8kB (UE) 621*16kB (UE) 236*32kB (UE) 318*64kB (UE) 209*128kB (UME) 113*256kB (UME) 79*512kB (U) 42*1024kB (UM) 3*2048kB (M) 0*4096kB = 193508kB [ 156.140949][ T9675] Node 1 Normal: 216*4kB (UM) 303*8kB (UME) 253*16kB (UME) 301*32kB (UME) 298*64kB (UME) 268*128kB (UME) 222*256kB (UME) 186*512kB (U) 131*1024kB (UME) 10*2048kB (UME) 303*4096kB (UM) = 1618120kB [ 156.147609][ T9675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.150728][ T9675] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 156.153709][ T9675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.157293][ T9675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.160302][ T9675] 43896 total pagecache pages [ 156.161826][ T9675] 0 pages in swap cache [ 156.163195][ T9675] Free swap = 124996kB [ 156.164550][ T9675] Total swap = 124996kB [ 156.166237][ T9675] 1048443 pages RAM [ 156.167511][ T9675] 0 pages HighMem/MovableOnly [ 156.169052][ T9675] 283894 pages reserved [ 156.170432][ T9675] 0 pages cma reserved [ 156.324620][ T9701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9701 comm=syz.2.1030 [ 156.327667][ T9703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.369775][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 156.379977][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 156.539618][ T9727] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.542217][ T9727] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 156.578696][ T9736] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 156.776798][ T40] audit: type=1400 audit(1773233977.796:665): avc: denied { read } for pid=9770 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.842949][ T9756] syz.0.1046 (9756): drop_caches: 2 [ 156.871175][ T9778] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 156.879952][ T40] audit: type=1400 audit(1773233977.880:666): avc: denied { relabelto } for pid=9777 comm="syz.3.1052" name="255" dev="tmpfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 156.888311][ T40] audit: type=1400 audit(1773233977.880:667): avc: denied { associate } for pid=9777 comm="syz.3.1052" name="255" dev="tmpfs" ino=1382 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 156.897640][ T40] audit: type=1400 audit(1773233977.880:668): avc: denied { create } for pid=9777 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.906245][ T40] audit: type=1400 audit(1773233977.880:669): avc: denied { getopt } for pid=9777 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.913828][ T40] audit: type=1400 audit(1773233977.890:670): avc: denied { remove_name } for pid=5932 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 156.922926][ T9780] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 156.926289][ T40] audit: type=1400 audit(1773233977.899:671): avc: denied { rmdir } for pid=5932 comm="syz-executor" name="255" dev="tmpfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 156.928119][ T9780] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1053'. [ 156.942057][ T9780] NCSI netlink: No device for ifindex 0 [ 157.071597][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 157.234452][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 157.239749][ T29] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.243149][ T29] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.246060][ T29] usb 7-1: Product: syz [ 157.247868][ T29] usb 7-1: Manufacturer: syz [ 157.249537][ T29] usb 7-1: SerialNumber: syz [ 157.252932][ T29] usb 7-1: config 0 descriptor?? [ 157.258111][ T29] usb 7-1: selecting invalid altsetting 0 [ 157.303870][ T9801] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 157.355835][ T9804] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 157.371243][ T63] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 157.404134][ T9806] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 157.406556][ T9809] binder: 9808:9809 ioctl 400c620e 2000000001c0 returned -22 [ 157.421014][ T9806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.425721][ T9809] netlink: '\%@': attribute type 39 has an invalid length. [ 157.428760][ T9806] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9806 comm=syz.1.1061 [ 157.435403][ T9806] binder: 9805:9806 ioctl c0306201 200000000080 returned -14 [ 157.438367][ T9806] binder: 9805:9806 ioctl c0306201 2000000004c0 returned -14 [ 157.440957][ T9806] binder: 9805:9806 ioctl 8004f50c 200000000240 returned -22 [ 157.475421][ T1327] usb 7-1: USB disconnect, device number 16 [ 157.533806][ T9816] exFAT-fs (nullb0): invalid boot record signature [ 157.536122][ T9816] exFAT-fs (nullb0): failed to read boot sector [ 157.538261][ T9816] exFAT-fs (nullb0): failed to recognize exfat type [ 157.542640][ T9817] exFAT-fs (nullb0): invalid boot record signature [ 157.544843][ T9817] exFAT-fs (nullb0): failed to read boot sector [ 157.546935][ T9817] exFAT-fs (nullb0): failed to recognize exfat type [ 157.837118][ T9833] __nla_validate_parse: 1 callbacks suppressed [ 157.837130][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'. [ 157.950867][ T9841] netlink: 'syz.1.1074': attribute type 12 has an invalid length. [ 158.093144][ T9851] cgroup: Unknown subsys name 'cpuset' [ 158.104468][ T9851] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1079'. [ 158.372145][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 158.375066][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 158.559590][ T9885] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 158.562199][ T9885] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 158.566071][ T9885] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1092'. [ 158.616217][ T9890] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 158.620082][ T9890] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 158.708625][ T9899] netlink: 'syz.3.1097': attribute type 8 has an invalid length. [ 158.711396][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 159.182006][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.186372][ T9923] bridge_slave_1: left allmulticast mode [ 159.188636][ T9923] bridge_slave_1: left promiscuous mode [ 159.190601][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.196434][ T9923] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 159.202341][ T9923] ubi0: attaching mtd0 [ 159.206572][ T9923] ubi0: scanning is finished [ 159.208141][ T9923] ubi0: empty MTD device detected [ 159.246713][ T9928] Cannot find add_set index 0 as target [ 159.249956][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.252517][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.257176][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.257361][ T9932] Invalid ELF header magic: != ELF [ 159.259707][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.268100][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.270539][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.273126][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.276217][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.285292][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.299320][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.302775][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.305262][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.308162][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 159.311439][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.311450][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.311911][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.318483][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.323823][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.326171][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.328585][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.330964][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.336535][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.338897][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.341328][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.343960][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.346005][ T9881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.348094][ T9881] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 159.354792][ T9881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.356758][ T9881] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 159.361859][ T9881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.365055][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.367392][ T9881] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 159.367799][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.372855][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.375594][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.380877][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.387771][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.390663][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.392882][ T9923] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 159.392917][ T9923] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 159.392931][ T9923] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 159.392945][ T9923] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 159.392959][ T9923] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 159.392971][ T9923] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 159.392986][ T9923] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4257088230 [ 159.393003][ T9923] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 159.393345][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.396049][ T9934] ubi0: background thread "ubi_bgt0d" started, PID 9934 [ 159.401920][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.424779][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.429907][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.432307][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.437965][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.440827][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.441729][ T9939] binder: BC_ACQUIRE_RESULT not supported [ 159.444794][ T9939] binder: 9938:9939 ioctl c0306201 2000000001c0 returned -22 [ 159.445284][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.451062][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.457000][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.459892][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.462398][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.464829][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.471696][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.474136][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.476630][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.479070][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.484619][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.487064][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.489586][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.492266][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.497691][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.500181][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.503305][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.505732][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.511264][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.514052][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.516677][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.519113][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.525734][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.528272][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.530796][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.533227][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.538880][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.541961][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.544647][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.547057][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.553130][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.554049][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 159.556286][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.561039][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.563463][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.569482][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.571930][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.573145][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 159.577594][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.580084][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.585590][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.588506][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.588592][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 159.591155][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.596437][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.605685][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.608666][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.612304][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.615085][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.622215][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.624878][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.627408][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.630125][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.636643][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.638954][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.641407][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.644095][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.649275][ T9961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 159.650131][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.654310][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.657077][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.660077][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.666228][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.668748][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.671248][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.673813][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.679458][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.682008][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.684848][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.687383][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.693335][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.696040][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.698659][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.701200][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.708119][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.710522][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.712991][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.715726][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.721356][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.723744][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.726403][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.728936][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.734175][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.737030][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.739462][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.741755][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.747061][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.749403][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.751775][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.754121][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.760281][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.762639][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.765001][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.767475][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.773328][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.775685][ T9926] UDF-fs: Scanning with blocksize 2048 failed [ 159.778139][ T9926] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.780856][ T9926] UDF-fs: Scanning with blocksize 4096 failed [ 159.820350][ T9975] openvswitch: netlink: IP tunnel dst address not specified [ 159.990473][ T10] IPVS: starting estimator thread 0... [ 159.991244][ T9998] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 159.993589][ T9996] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 160.100626][ T9997] IPVS: using max 47 ests per chain, 112800 per kthread [ 160.168533][T10011] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 160.192341][T10017] netlink: 'syz.2.1132': attribute type 1 has an invalid length. [ 160.205559][T10017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.214634][T10017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10017 comm=syz.2.1132 [ 160.388810][T10043] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 160.392177][T10043] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 160.442744][T10045] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 160.639830][T10063] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 160.642386][T10063] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 160.710230][T10069] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 160.780796][ T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 160.849291][T10073] xt_hashlimit: invalid rate [ 160.853952][T10073] x_tables: duplicate underflow at hook 1 [ 160.897547][T10075] nvme_fabrics: missing parameter 'transport=%s' [ 160.900076][T10075] nvme_fabrics: missing parameter 'nqn=%s' [ 160.904515][T10075] overlay: ./file0 is not a directory [ 160.940665][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 160.940676][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 160.946257][ T29] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 160.948925][ T29] usb 7-1: config 179 has no interface number 0 [ 160.951014][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 160.954642][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 160.958414][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 128, changing to 11 [ 160.962521][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 160.966307][ T29] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.970635][ T29] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 160.973662][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.977966][T10045] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.993988][ T5992] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 161.100604][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 161.103655][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.107220][ T10] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.110404][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 161.112868][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.115789][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.119875][ T10] usb 8-1: config 0 descriptor?? [ 161.166429][ T5992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 161.169631][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.174034][ T5992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.179103][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.183659][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.189298][ T5992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 161.191706][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.195438][ T5992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.199428][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.201780][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input23 [ 161.203396][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.204709][ T5992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 161.214622][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.218071][ T5992] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.221749][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.225827][ T5992] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.232426][ T5992] usb 5-1: string descriptor 0 read error: -22 [ 161.234879][ T5992] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.237738][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.248272][ T5992] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.348722][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 161.350775][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 161.357349][ T10] usb 8-1: USB disconnect, device number 12 [ 161.409244][ T6189] usb 7-1: USB disconnect, device number 17 [ 161.409295][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 161.414191][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 161.478662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.597079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 161.600076][ T2296] usb 5-1: USB disconnect, device number 12 [ 161.600160][T10090] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 161.703276][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 161.703288][ T40] audit: type=1400 audit(1773233982.412:684): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 161.796115][T10103] misc userio: No port type given on /dev/userio [ 161.958434][ T40] audit: type=1400 audit(1773233982.656:685): avc: denied { create } for pid=10119 comm="syz.3.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 161.964180][T10118] kernel read not supported for file /policy (pid: 10118 comm: syz.1.1162) [ 161.967361][ T40] audit: type=1400 audit(1773233982.656:686): avc: denied { write } for pid=10119 comm="syz.3.1163" path="socket:[32715]" dev="sockfs" ino=32715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 162.003755][ T40] audit: type=1400 audit(1773233982.693:687): avc: denied { connect } for pid=10121 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 162.016839][T10124] No source specified [ 162.052008][T10133] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 162.069080][T10144] block nbd1: NBD_DISCONNECT [ 162.369528][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 162.377761][ T40] audit: type=1400 audit(1773233983.040:688): avc: denied { connect } for pid=10167 comm="syz.2.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 162.384217][ T40] audit: type=1400 audit(1773233983.040:689): avc: denied { mount } for pid=10167 comm="syz.2.1176" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.392837][ T40] audit: type=1400 audit(1773233983.059:690): avc: denied { unmount } for pid=8078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.518387][ T6189] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 162.550436][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 162.553831][ T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.557425][ T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.560809][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 162.563431][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 162.566319][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.572690][ T10] usb 6-1: config 0 descriptor?? [ 162.678202][ T5299] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 162.682890][ T6189] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.686818][ T6189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.691465][ T6189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.694657][ T6189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.699653][ T6189] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.702714][ T6189] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.705387][ T6189] usb 5-1: Manufacturer: syz [ 162.708776][ T6189] usb 5-1: config 0 descriptor?? [ 162.816700][ T5299] usb 8-1: device descriptor read/64, error -71 [ 162.853359][T10183] No buffer was provided with the request [ 162.856070][ T40] audit: type=1400 audit(1773233983.491:691): avc: denied { setattr } for pid=10181 comm="syz.2.1180" name="nbd2" dev="devtmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.007254][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 163.010014][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 163.012345][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 163.014548][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 163.016799][ T10] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 163.021899][ T10] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 163.072500][ T5299] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 163.146267][ T6189] usbhid 5-1:0.0: can't add hid device: -71 [ 163.149404][ T6189] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.154430][ T6189] usb 5-1: USB disconnect, device number 13 [ 163.213560][ T5299] usb 8-1: device descriptor read/64, error -71 [ 163.220966][T10148] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.1.1170: iget: checksum invalid [ 163.224780][T10148] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 163.228346][T10148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 163.231653][T10148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 163.328528][ T5299] usb usb8-port1: attempt power cycle [ 163.690851][ T5299] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 163.712773][ T5299] usb 8-1: device descriptor read/8, error -71 [ 163.968459][ T5299] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 163.989803][ T5299] usb 8-1: device descriptor read/8, error -71 [ 164.096447][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 164.117120][ T5299] usb usb8-port1: unable to enumerate USB device [ 164.267630][ T10] usb 5-1: config 0 has no interfaces? [ 164.271763][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 164.275702][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.282506][ T10] usb 5-1: Product: syz [ 164.284371][ T10] usb 5-1: Manufacturer: syz [ 164.286568][ T10] usb 5-1: SerialNumber: syz [ 164.291112][ T10] usb 5-1: config 0 descriptor?? [ 164.353098][ T5299] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 164.355801][ T40] audit: type=1326 audit(1773233984.889:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.2.1190" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facf3b9c799 code=0x7ffc0000 [ 164.368700][ T40] audit: type=1326 audit(1773233984.907:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.2.1190" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7facf3b9c799 code=0x7ffc0000 [ 164.510981][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.515979][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.521094][ T10] usb 5-1: USB disconnect, device number 14 [ 164.577053][T10230] jfs: Unknown parameter 'grpquotaM/SW Transmitter' [ 165.294362][T10242] __nla_validate_parse: 74 callbacks suppressed [ 165.294380][T10242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1197'. [ 165.362249][T10245] validate_nla: 5 callbacks suppressed [ 165.362261][T10245] netlink: 'syz.0.1198': attribute type 4 has an invalid length. [ 165.408943][T10252] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 165.420147][T10252] bond4: entered promiscuous mode [ 165.422245][T10252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.430398][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 165.439288][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 165.454927][T10252] macvtap1: entered allmulticast mode [ 165.459305][T10255] EXT4-fs error (device sda1): ext4_lookup:1785: inode #448: comm syz.2.1202: iget: checksum invalid [ 165.464532][T10255] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 165.468609][T10255] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 165.470425][T10252] bond4: (slave bridge2): making interface the new active one [ 165.472436][T10255] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 165.474990][T10252] bridge2: entered promiscuous mode [ 165.483047][T10252] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 165.515357][T10264] hfsplus: unable to find HFS+ superblock [ 165.531999][T10266] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 165.563781][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1206'. [ 165.600853][T10273] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 165.603943][T10273] UDF-fs: Scanning with blocksize 2048 failed [ 165.607202][T10273] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 165.611524][T10273] UDF-fs: Scanning with blocksize 4096 failed [ 165.697113][T10292] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 165.703655][T10292] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 165.784948][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1214'. [ 165.969950][T10308] qnx6: unable to set blocksize [ 165.978518][T10313] binder: 10312:10313 ioctl c018937d 200000000280 returned -22 [ 165.981280][T10313] binder: 10312:10313 ioctl c0306201 200000000180 returned -14 [ 166.157034][ T6189] usb 6-1: USB disconnect, device number 7 [ 166.201663][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1226'. [ 166.204767][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'. [ 166.283699][ T7313] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.288031][ T7313] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.403904][T10341] netlink: 'syz.1.1230': attribute type 21 has an invalid length. [ 166.404695][ T7313] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.411064][ T7313] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.417746][T10341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1230'. [ 166.453929][ T5928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.458188][ T5928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.461717][ T5928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.470439][ T5928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.475986][ T5928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.486186][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.499540][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.502487][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.506010][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.508152][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 166.508681][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.511299][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 166.533782][ T7313] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.536516][T10361] xt_hashlimit: max too large, truncated to 1048576 [ 166.539224][ T7313] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.656817][ T7313] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.660978][ T7313] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.668541][T10383] SET target dimension over the limit! [ 166.682870][T10383] tmpfs: Group quota inode hardlimit too large. [ 166.726357][T10348] chnl_net:caif_netlink_parms(): no params data found [ 166.750900][T10396] netlink: 'syz.2.1245': attribute type 7 has an invalid length. [ 166.783372][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.786416][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.789325][T10348] bridge_slave_0: entered allmulticast mode [ 166.792970][T10348] bridge_slave_0: entered promiscuous mode [ 166.797198][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.800265][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.802847][T10348] bridge_slave_1: entered allmulticast mode [ 166.809616][ T5928] block nbd0: Receive control failed (result -1) [ 166.815205][T10348] bridge_slave_1: entered promiscuous mode [ 166.846827][T10401] program syz.1.1246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.854191][T10348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.854987][T10405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=10405 comm=syz.0.1247 [ 166.892776][T10348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.930452][T10348] team0: Port device team_slave_0 added [ 166.935046][ T7313] bridge_slave_1: left allmulticast mode [ 166.937589][ T7313] bridge_slave_1: left promiscuous mode [ 166.941241][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.953386][ T7313] bridge_slave_0: left allmulticast mode [ 166.955771][ T7313] bridge_slave_0: left promiscuous mode [ 166.958185][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.979545][T10408] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.121515][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 167.121528][ T40] audit: type=1400 audit(1773233987.497:706): avc: denied { view } for pid=10417 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 167.201686][ T7313] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.211097][ T7313] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.217149][ T7313] .` (unregistering): Released all slaves [ 167.222400][ T7313] bond1 (unregistering): Released all slaves [ 167.229440][ T7313] bond2 (unregistering): Released all slaves [ 167.236521][ T7313] bond0 (unregistering): Released all slaves [ 167.245029][T10348] team0: Port device team_slave_1 added [ 167.286733][T10348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.289191][ T40] audit: type=1400 audit(1773233987.656:707): avc: denied { name_bind } for pid=10425 comm="syz.0.1252" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 167.290215][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.306975][T10348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.311486][T10348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.313735][T10348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.322286][T10348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.326012][T10426] ªªªªª5gæ¹Q[Ô: renamed from lo [ 167.360972][T10348] hsr_slave_0: entered promiscuous mode [ 167.363272][T10348] hsr_slave_1: entered promiscuous mode [ 167.436993][ T40] audit: type=1400 audit(1773233987.797:708): avc: denied { create } for pid=10436 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.454229][ T40] audit: type=1400 audit(1773233987.806:709): avc: denied { connect } for pid=10436 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.513241][T10348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.522092][T10348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.529518][T10348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.538031][T10348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.584892][ T40] audit: type=1400 audit(1773233987.928:710): avc: denied { create } for pid=10443 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.596296][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.599476][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.602916][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.606095][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.606448][ T40] audit: type=1400 audit(1773233987.947:711): avc: denied { getopt } for pid=10443 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.618937][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.622783][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.693712][T10450] x_tables: duplicate underflow at hook 2 [ 167.709058][ T7313] hsr_slave_0: left promiscuous mode [ 167.730977][ T7313] hsr_slave_1: left promiscuous mode [ 167.734665][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.737778][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.760669][ T7313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.764117][ T7313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.780656][ T7313] veth1_macvtap: left promiscuous mode [ 167.783106][ T7313] veth0_macvtap: left promiscuous mode [ 167.785810][ T7313] veth1_vlan: left promiscuous mode [ 167.788237][ T7313] veth0_vlan: left promiscuous mode [ 167.789772][ T40] audit: type=1400 audit(1773233988.125:712): avc: denied { bind } for pid=10461 comm="syz.2.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.233236][ T7313] team0 (unregistering): Port device team_slave_1 removed [ 168.240481][ T7313] team0 (unregistering): Port device team_slave_0 removed [ 168.329901][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.337372][T10348] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.350642][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.353092][ T7299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.356353][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.358673][ T7299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.369338][T10473] ptrace attach of "/syz-executor exec"[10475] was attempted by "/syz-executor exec"[10473] [ 168.373278][ T40] audit: type=1400 audit(1773233988.670:713): avc: denied { write } for pid=10470 comm="syz.2.1261" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 168.420988][T10476] nbd: must specify at least one socket [ 168.554827][T10348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.658364][ T5928] Bluetooth: hci3: command tx timeout [ 168.699871][ T7313] IPVS: stop unused estimator thread 0... [ 168.709159][T10348] veth0_vlan: entered promiscuous mode [ 168.718699][T10348] veth1_vlan: entered promiscuous mode [ 168.737371][T10348] veth0_macvtap: entered promiscuous mode [ 168.742584][T10348] veth1_macvtap: entered promiscuous mode [ 168.776354][T10348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.789966][T10348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.792308][ T7299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.806005][ T7299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.806037][ T7299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.806055][ T7299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.838249][T10512] x_tables: duplicate underflow at hook 2 [ 168.852513][ T7314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.852526][ T7314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.865244][ T8137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.865257][ T8137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.876348][ T40] audit: type=1400 audit(1773233989.148:714): avc: denied { mounton } for pid=10348 comm="syz-executor" path="/syzkaller.SUBIDo/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 168.922547][T10517] overlayfs: failed lookup in lower (newroot/343, name='file1', err=-40): overlapping layers [ 168.926817][T10524] overlayfs: failed lookup in lower (newroot/343, name='file1', err=-40): overlapping layers [ 169.003821][ T40] audit: type=1400 audit(1773233989.261:715): avc: denied { write } for pid=10538 comm="syz.0.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.232196][T10552] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 169.237348][T10553] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 169.291267][T10564] QAT: failed to copy from user cfg_data. [ 169.340600][ T5299] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 169.417839][T10579] overlay: ./file0 is not a directory [ 169.520932][ T5299] usb 7-1: Using ep0 maxpacket: 16 [ 169.538049][ T5299] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.542602][ T5299] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.549048][ T5299] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 169.553177][ T5299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.556142][ T5299] usb 7-1: Product: syz [ 169.557634][ T5299] usb 7-1: Manufacturer: syz [ 169.559704][ T5299] usb 7-1: SerialNumber: syz [ 169.572594][ T5299] r8152-cfgselector 7-1: Unknown version 0x0000 [ 169.577563][ T5299] r8152-cfgselector 7-1: config 0 descriptor?? [ 169.612921][T10591] bridge1: entered promiscuous mode [ 169.735123][T10607] netlink: 'syz.4.1294': attribute type 8 has an invalid length. [ 169.750756][T10607] openvswitch: netlink: IP tunnel TTL not specified. [ 169.907856][T10620] 9pnet: Found fid 0 not clunked [ 169.936838][ T1327] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.085844][ T1327] usb 5-1: device descriptor read/64, error -71 [ 170.233474][T10628] tmpfs: Bad value for 'mpol' [ 170.297170][ T5299] r8152-cfgselector 7-1: USB disconnect, device number 18 [ 170.374036][ T1327] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 170.498942][T10639] openvswitch: netlink: Flow key attr not present in new flow. [ 170.522888][ T1327] usb 5-1: device descriptor read/64, error -71 [ 170.640456][ T1327] usb usb5-port1: attempt power cycle [ 171.024015][ T1327] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 171.057937][ T1327] usb 5-1: device descriptor read/8, error -71 [ 171.298190][T10653] binder_alloc: binder_alloc_mmap_handler: 10652 200000ffe000-200001000000 already mapped failed -16 [ 171.333108][ T1327] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 171.350390][T10651] __nla_validate_parse: 5 callbacks suppressed [ 171.350405][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 171.357105][T10651] netlink: 'syz.4.1306': attribute type 30 has an invalid length. [ 171.365308][ T1327] usb 5-1: device descriptor read/8, error -71 [ 171.365568][T10658] geneve1: entered allmulticast mode [ 171.368708][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 171.373011][ T8137] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.373303][T10651] netlink: 'syz.4.1306': attribute type 30 has an invalid length. [ 171.377821][ T8137] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.406449][ T8137] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.416463][ T8137] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.453421][T10663] program syz.1.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.471536][ T5928] Bluetooth: hci3: command tx timeout [ 171.482346][ T1327] usb usb5-port1: unable to enumerate USB device [ 171.494456][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 171.503422][ T1113] ata1.00: irq_stat 0x40000000 [ 171.505106][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 171.507081][ T1113] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 9 [ 171.507081][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 171.512433][ T1113] ata1.00: status: { DRDY ERR } [ 171.515128][ T1113] ata1.00: error: { ABRT } [ 171.516878][ T1113] ata1.00: device reported invalid CHS sector 0 [ 171.600845][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 171.603211][ T1113] ata1: failed to read log page 10h (errno=-5) [ 171.605536][ T1113] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 171.608250][ T1113] ata1.00: irq_stat 0x40000000 [ 171.610454][ T1113] ata1.00: failed command: WRITE FPDMA QUEUED [ 171.621883][ T1113] ata1.00: cmd 61/60:70:c6:08:10/00:00:00:00:00/40 tag 14 ncq dma 49152 out [ 171.621883][ T1113] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 171.628187][ T1113] ata1.00: status: { DRDY } [ 171.638299][ T1113] ata1.00: configured for UDMA/100 [ 171.640581][ T1113] ata1: EH complete [ 171.686572][T10682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.731020][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 171.787066][T10692] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 171.891059][T10700] Oops: general protection fault, probably for non-canonical address 0xe7cd88adce4cad67: 0000 [#1] SMP KASAN NOPTI [ 171.892259][T10695] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 171.895376][T10700] KASAN: maybe wild-memory-access in range [0x3e6c656e72656b38-0x3e6c656e72656b3f] [ 171.895403][T10700] CPU: 3 UID: 0 PID: 10700 Comm: syz.1.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.899536][T10695] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 171.901982][T10700] Tainted: [L]=SOFTLOCKUP [ 171.907283][T10695] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 171.909332][T10700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.909349][T10700] RIP: 0010:try_module_get+0x23/0xd0 [ 171.909390][T10700] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 171.925177][T10695] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 171.929050][T10700] RSP: 0018:ffffc9000c64f8b8 EFLAGS: 00010203 [ 171.929074][T10700] RAX: dffffc0000000000 RBX: 3e6c656e72656b3c RCX: ffffc900076d2000 [ 171.934424][T10695] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 171.937129][T10700] RDX: 07cd8cadce4cad67 RSI: ffffffff87ec2580 RDI: 3e6c656e72656b3c [ 171.937146][T10700] RBP: ffff88802faa3800 R08: 0000000000000001 R09: fffffbfff1fd9b9d [ 171.937159][T10700] R10: ffffffff8fecdcef R11: 0000000000000000 R12: ffff88803ccdac40 [ 171.937171][T10700] R13: ffff88802faa3828 R14: ffff88802f97e900 R15: ffff88803ccdac88 [ 171.942083][T10695] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 171.942731][T10700] FS: 00007f643b25b6c0(0000) GS:ffff8880d6645000(0000) knlGS:0000000000000000 [ 171.942758][T10700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.959300][T10700] CR2: 00007f643a385dc0 CR3: 000000003833e000 CR4: 0000000000352ef0 [ 171.962179][T10700] Call Trace: [ 171.963324][T10700] [ 171.964318][T10700] dvb_device_open+0x124/0x3b0 [ 171.965812][T10700] ? __pfx_dvb_device_open+0x10/0x10 [ 171.967862][T10700] chrdev_open+0x234/0x6a0 [ 171.969661][T10700] ? __pfx_chrdev_open+0x10/0x10 [ 171.970231][T10695] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 171.971277][T10700] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 171.971298][T10700] do_dentry_open+0x6d8/0x1660 [ 171.975518][T10695] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 171.976720][T10700] ? __pfx_chrdev_open+0x10/0x10 [ 171.976746][T10700] vfs_open+0x82/0x3f0 [ 171.985030][T10700] path_openat+0x208c/0x31a0 [ 171.987006][T10700] ? __pfx_path_openat+0x10/0x10 [ 171.989041][T10700] do_file_open+0x20e/0x430 [ 171.990847][T10700] ? __pfx_do_file_open+0x10/0x10 [ 171.992602][T10700] ? alloc_fd+0x476/0x790 [ 171.994134][T10700] ? do_getname+0x191/0x390 [ 171.995957][T10700] do_sys_openat2+0x10d/0x1e0 [ 171.997794][T10700] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.999809][T10700] __x64_sys_openat+0x12d/0x210 [ 172.001405][T10700] ? __pfx___x64_sys_openat+0x10/0x10 [ 172.003161][T10700] ? do_user_addr_fault+0x8d6/0x12f0 [ 172.004924][T10700] do_syscall_64+0x106/0xf80 [ 172.006480][T10700] ? clear_bhb_loop+0x40/0x90 [ 172.008173][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.010354][T10700] RIP: 0033:0x7f643a35cfce [ 172.011830][T10700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.018012][T10700] RSP: 002b:00007f643b25ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.020785][T10700] RAX: ffffffffffffffda RBX: 00007f643b25b6c0 RCX: 00007f643a35cfce [ 172.024074][T10700] RDX: 0000000000000400 RSI: 00007f643b25ac00 RDI: ffffffffffffff9c [ 172.027431][T10700] RBP: 00007f643b25ac00 R08: 0000000000000000 R09: 0000000000000000 [ 172.030753][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 172.034107][T10700] R13: 00007f643a616038 R14: 00007f643a615fa0 R15: 00007ffe94742878 [ 172.037421][T10700] [ 172.038804][T10700] Modules linked in: [ 172.041029][T10700] ---[ end trace 0000000000000000 ]--- [ 172.043513][T10700] RIP: 0010:try_module_get+0x23/0xd0 [ 172.045259][T10700] Code: 90 90 90 90 90 90 90 f3 0f 1e fa 48 85 ff 0f 84 9b 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 55 48 c1 ea 03 53 48 89 fb <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 89 00 00 00 83 3b 02 74 67 48 [ 172.065242][T10700] RSP: 0018:ffffc9000c64f8b8 EFLAGS: 00010203 [ 172.067478][T10700] RAX: dffffc0000000000 RBX: 3e6c656e72656b3c RCX: ffffc900076d2000 [ 172.070648][T10700] RDX: 07cd8cadce4cad67 RSI: ffffffff87ec2580 RDI: 3e6c656e72656b3c [ 172.073340][T10700] RBP: ffff88802faa3800 R08: 0000000000000001 R09: fffffbfff1fd9b9d [ 172.076489][T10700] R10: ffffffff8fecdcef R11: 0000000000000000 R12: ffff88803ccdac40 [ 172.079651][T10700] R13: ffff88802faa3828 R14: ffff88802f97e900 R15: ffff88803ccdac88 [ 172.082107][T10700] FS: 00007f643b25b6c0(0000) GS:ffff8880d6545000(0000) knlGS:0000000000000000 [ 172.084884][T10700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.086961][T10700] CR2: 00007f643a3e9e80 CR3: 000000003833e000 CR4: 0000000000352ef0 [ 172.089870][T10700] Kernel panic - not syncing: Fatal exception [ 172.092734][T10700] Kernel Offset: disabled [ 172.094137][T10700] Rebooting in 86400 seconds..