last executing test programs: 1m11.469568006s ago: executing program 3 (id=361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000400)="390000002600034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x0) 1m11.357767884s ago: executing program 3 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) setreuid(0xee00, 0xee00) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000040)="0f22820f01cff26e0f20d86635200000000f22d8f6d7ba4100b8feffef66b97901000066b80c00000066ba000000000f3065d9d0b800008ed0b800018ed0", 0x3e}], 0x1, 0x7, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)='oG'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m11.136408204s ago: executing program 3 (id=367): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000003c0)=0x4) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x25, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8005, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) (async) setuid(r2) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000280)={0x7f, 0xffff, {0xffffffffffffffff}, {0xee00}, 0x72643a2a, 0x7fff}) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r3, 0x0, 0x0) setreuid(r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x1, 0x4) fchdir(r6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x119) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_nofollow}]}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={[{@metacopy_on}, {@uuid_null}, {@metacopy_on}, {@uuid_off}, {@verity_require}, {@nfs_export_off}, {@volatile}, {@xino_off}]}) setresuid(r2, r4, r2) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003900010325a67000fddbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0xee00, 0xee00}}, './file0\x00'}) 1m11.066726841s ago: executing program 3 (id=370): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000300)=@filename='./file0/file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, r1, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0x3, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r1, r2, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000380), &(0x7f0000000400)) lchown(&(0x7f0000000280)='./file1/file0\x00', r1, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x102100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="2e3e0f090fc7980800b8d7008ec82ef30fc7719026f3c0b8fcfd2e0f20c06635200000000f22c066b8010000000f01d90fc7280f01ca660f73db80", 0x3b}], 0x1, 0x12, &(0x7f0000000200)=[@dstype0={0x6, 0xe}], 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80001, 0x0) 1m10.107182533s ago: executing program 3 (id=390): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001580)=""/4108, 0x100c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x101200, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') write$char_usb(r1, &(0x7f0000000440)='E', 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dvmrp1\x00'}, 0x18) mount$cgroup2(0x0, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', &(0x7f0000000180), 0x20, &(0x7f00000001c0)={[{}], [{@flag='nomand'}]}) 1m9.806779664s ago: executing program 3 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="5edac7c6daa6b0d2143f3c3b76ab0f6eda6d4d961af089ee5cabfd908e0d78a2440eb531010e195311924e4d289a85ac6ae5e7b30e98965492752259f3834f8097c562a0d7c2e7c7d377b14d1bb803eb4e9a9156124b13090e968e9d2b9c10bffa65bfc76b96c0d95d1c727ae35fdb6b06732168add49738134bb2ac523b3a3f583e1d3e49d4e846cd372288c31d9ac1", 0x90}, {&(0x7f0000000340)="cacfa26935da6c000e1ffce808aa5f34318c4f75aa07efdd39121f4b4c3c806ba45febbe1eeab4", 0x27}, {&(0x7f0000000380)="ddc144b974841d1e91cc76ce68bb2ba6fa0efdbf489c1a1d8f3e9f0c8bf203bc5b376892c7ad5dad0e0259880ab7d2f996f10b20882dbc623a3654c830ccad21fe4cc8f20b237d0815a9766b59", 0x4d}, {&(0x7f0000000480)="2cb558b26b39c167d334d6268eb5e1f67b419e0e87b7cd03932f21788c7cac225a96c2b63339428cab92e536ae8b4ecf", 0x30}, {&(0x7f00000004c0)="964044507f11a562d28c11f0d346d9f5cb54989e4895bad2554826599e6f4be56d1a7e388a8b1b8ae2d482952e31daedfc7c8d4710f2d3ddd8a0458a27f8a789d99301b53363036c2c9491c3e2d9e9d92c731cc443560dff363d308f4e", 0x5d}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}], 0x18}, 0x20008004) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00a622740000", @ANYRES16=0x0, @ANYBLOB="04012bbd7000ffdbdf25060000000800110000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000640)={0x7, 0x2, 0x1, 0x0, 0xdc}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@overlay={0x0, 0x2, 0x4, 0x0, 0x6, {0x0, 0xea60}, {0x1, 0x0, 0x6, 0x21, 0x1, 0x9, "9937ed08"}, 0x7d, 0x3, {}, 0x7}) socket$netlink(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100050000000004040005000000000010000000000000002000040000000000"], 0x24, 0x3) getxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1m9.705430386s ago: executing program 32 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="5edac7c6daa6b0d2143f3c3b76ab0f6eda6d4d961af089ee5cabfd908e0d78a2440eb531010e195311924e4d289a85ac6ae5e7b30e98965492752259f3834f8097c562a0d7c2e7c7d377b14d1bb803eb4e9a9156124b13090e968e9d2b9c10bffa65bfc76b96c0d95d1c727ae35fdb6b06732168add49738134bb2ac523b3a3f583e1d3e49d4e846cd372288c31d9ac1", 0x90}, {&(0x7f0000000340)="cacfa26935da6c000e1ffce808aa5f34318c4f75aa07efdd39121f4b4c3c806ba45febbe1eeab4", 0x27}, {&(0x7f0000000380)="ddc144b974841d1e91cc76ce68bb2ba6fa0efdbf489c1a1d8f3e9f0c8bf203bc5b376892c7ad5dad0e0259880ab7d2f996f10b20882dbc623a3654c830ccad21fe4cc8f20b237d0815a9766b59", 0x4d}, {&(0x7f0000000480)="2cb558b26b39c167d334d6268eb5e1f67b419e0e87b7cd03932f21788c7cac225a96c2b63339428cab92e536ae8b4ecf", 0x30}, {&(0x7f00000004c0)="964044507f11a562d28c11f0d346d9f5cb54989e4895bad2554826599e6f4be56d1a7e388a8b1b8ae2d482952e31daedfc7c8d4710f2d3ddd8a0458a27f8a789d99301b53363036c2c9491c3e2d9e9d92c731cc443560dff363d308f4e", 0x5d}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}], 0x18}, 0x20008004) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x4048000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00a622740000", @ANYRES16=0x0, @ANYBLOB="04012bbd7000ffdbdf25060000000800110000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000640)={0x7, 0x2, 0x1, 0x0, 0xdc}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@overlay={0x0, 0x2, 0x4, 0x0, 0x6, {0x0, 0xea60}, {0x1, 0x0, 0x6, 0x21, 0x1, 0x9, "9937ed08"}, 0x7d, 0x3, {}, 0x7}) socket$netlink(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100050000000004040005000000000010000000000000002000040000000000"], 0x24, 0x3) getxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) 21.076689189s ago: executing program 0 (id=936): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) (rerun: 64) mkdirat(r0, &(0x7f0000000180)='./cgroup\x00', 0x4) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) 21.015973816s ago: executing program 0 (id=937): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) listen(r1, 0x10000005) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000005e910000100100"], 0x28}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) listen(r2, 0x12e) recvmsg(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x40002000) socket$vsock_stream(0x28, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000200)='smaps_rollup\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@code={0xa, 0x64, {"470f01cbf9f60000010f01c10f009000000000430f78c3f3440f09410fc79b000000000f201e430f0766b822000f00d866baf80cb8d55d75f18a8ab9800800d70f3235000400000f30b0f67daceeaceec76b01"}}], 0x64}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000580)={[0x35, 0x6, 0x0, 0x180, 0x5, 0x1, 0xf1, 0x3ff, 0x7c, 0x100000000000002, 0x8, 0x9, 0x0, 0x9, 0x80000000000, 0xbda], 0x7e001, 0x3c4210}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 20.24595829s ago: executing program 0 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 20.196260615s ago: executing program 0 (id=947): stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[r1]) (async) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="b506e3d8076542e173bc25c2dae6d5a0d35175b7a8bdefae8b606f5af0a7a44ecde7967b1685a1bf81230dd25595cad216e11b0afe9f7128d966bc1d59e00fb7d23873bda5abd098423d70e356fa8525d77d01fdd4a8fb96246af14025c237c2ebc9be933bf526c502f7c86d0bfa1db08402ba55d7fea3006bc78ff2b803f7da5755126748f18a6b56f3d5ade30d02685a0f470cda6c65c1deebebd100e8fc5b157ce13ff719297181a31e44492b03408bb9e266714ee2ae86c8ca532417b7", 0xbf, 0xfffffffffffffffc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, r1}}, './file0\x00'}) keyctl$chown(0x4, r3, r5, r1) keyctl$get_security(0x11, r3, &(0x7f0000000280)=""/116, 0x74) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) (rerun: 64) statx(r4, &(0x7f0000000380)='./file0\x00', 0x2000, 0x200, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0xa, &(0x7f00000004c0)=[r7, r6, r2, r1, r1, r6, r6, r6, r9, r1]) (async) lstat(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x4}, [{0x2, 0x1, r8}, {0x2, 0x7, r5}], {}, [{0x8, 0x3, r2}, {0x8, 0x6, r9}, {0x8, 0x1, r10}], {0x10, 0x4}, {0x20, 0xc}}, 0x4c, 0x1) (async) r11 = openat$cgroup_ro(r4, &(0x7f00000006c0)='memory.numa_stat\x00', 0x0, 0x0) utimensat(r11, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)={{0x77359400}, {0x0, 0xea60}}, 0x0) (async) r12 = fsopen(&(0x7f0000000780)='cifs\x00', 0x0) r13 = pidfd_getfd(r11, r12, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x121c0aa, &(0x7f0000000840)={[{@redirect_dir_follow}, {@redirect_dir_nofollow}], [{@subj_role={'subj_role', 0x3d, 'user\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x64, 0x61, 0x38, 0x35, 0x65, 0x34], 0x2d, [0x69, 0x65, 0x34, 0x62], 0x2d, [0x64, 0x2, 0x63, 0x62], 0x2d, [0x62, 0x65, 0x32, 0x35], 0x2d, [0x30, 0x62, 0x35, 0x30, 0x36, 0x32, 0x39, 0x38]}}}]}) (async, rerun: 32) r14 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f00000008c0), &(0x7f0000000900)={'fscrypt:', @desc1}, &(0x7f0000000940)={0x0, "b6fcff5bde7cb27022325532306421548f2935b3c95cbcb3c96d8581c5185c3887da4fcfff423abcfd04d5ac391d09d657974e0a562ff0170df6cf98a69198f5", 0x17}, 0x48, r14) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0/file0\x00'}) syz_create_resource$binfmt(&(0x7f0000000a80)='./file0\x00') (async, rerun: 64) recvfrom$inet(r4, &(0x7f0000000ac0)=""/23, 0x17, 0x43, &(0x7f0000000b00)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) ioctl$MEMGETREGIONCOUNT(r11, 0x80044d07, &(0x7f0000000b40)) (async) ioctl$KVM_GET_DIRTY_LOG(r15, 0x4010ae42, &(0x7f0000000b80)={0x2710, 0x0, &(0x7f0000ffa000/0x3000)=nil}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r13, 0x4122, 0x0) (async) ioctl$CEC_TRANSMIT(r15, 0xc0386105, &(0x7f0000000bc0)={0x4, 0xfffffffffffffffb, 0x35, 0xf9, 0x9, 0x2f, "78be015efb97d2bb09c367348ceab41a", 0x7, 0x2, 0x8, 0xc, 0x2, 0x35, 0x80}) (async) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r13) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000cc0)={'tunl0\x00', 0x0, 0x20, 0x1, 0xfac, 0x7, {{0x40, 0x4, 0x1, 0x15, 0x100, 0x65, 0x0, 0xff, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x1b, 0x3a, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x1c, 0x62, 0x3, 0xe, [{@multicast1, 0xb}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x1d, 0x1, 0x6, [{@loopback, 0x9}, {@empty, 0x800}, {@multicast1, 0x5}, {@local, 0xffffff05}]}, @ssrr={0x89, 0xf, 0x6d, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x5, 0xa, "ec5b6800a24252ac"}]}, @noop, @ssrr={0x89, 0x2b, 0x61, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @local, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast]}, @noop, @timestamp_addr={0x44, 0x44, 0x52, 0x1, 0x8, [{@empty, 0x6}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0xffffffff}, {@local, 0x456}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@private=0xa010102, 0x100}, {@multicast1, 0x2}]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e40)={'gre0\x00', 0x0, 0x7, 0x8, 0x40, 0x5, {{0x1e, 0x4, 0x1, 0x2, 0x78, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0x1, [{@rand_addr=0x64010101, 0x8}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x30}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x7}, {@remote, 0x5}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffff}, {@rand_addr=0x64010102, 0xe}, {@broadcast, 0x101}]}, @lsrr={0x83, 0xf, 0xe7, [@broadcast, @empty, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r13, &(0x7f00000011c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x10c, r16, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x44004840) 20.126657301s ago: executing program 0 (id=948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="76389e147583ddd0569ba56a890255", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) umount2(&(0x7f0000000000)='./file0\x00', 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @any, 0x0, 0x2}, 0xe) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x80, 0x148, 0x1}, 0x18) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd}]}, 0x78}}, 0x4040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000080)={0xb, 0x73}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000300), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 19.95676436s ago: executing program 0 (id=952): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) 4.438862893s ago: executing program 33 (id=952): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000100)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) 3.636221733s ago: executing program 4 (id=1104): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001) setns(0xc9, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) close(0x3) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204041, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x195a20) syz_usb_disconnect(r2) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket(0x2d, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x11d, 0x1, 0x0, 0x4) ioctl$EVIOCRMFF(r2, 0xc0085508, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001) (async) setns(0xc9, 0x0) (async) pipe2(&(0x7f00000000c0), 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) close(0x3) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204041, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x195a20) (async) syz_usb_disconnect(r2) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) (async) socket(0x2d, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x11d, 0x1, 0x0, 0x4) (async) ioctl$EVIOCRMFF(r2, 0xc0085508, 0x0) (async) 1.846527016s ago: executing program 1 (id=1134): ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x6, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0x3, {0x7, 0x2, 0x8, 0x1}, {0x9, 0x9, 0x0, 0x3}, {0x3, 0x4}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xb7, 0x3e}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000051) read(r3, &(0x7f0000000240)=""/73, 0x49) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000002c0)={0x9, 0x2, "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"}) socketpair(0x9, 0x6, 0x5, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x1d, r6}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x27, 0x1, 0x0, 0x0, "eb70d37836d67a12a4e86c68ba4f36967f547ab8150f61727598c19b63f30c2cfdfe8ec8a654f2663783d9def9809e98d2b98cd48331ad37c7a943f552dd7358"}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r7 = socket$inet6(0xa, 0x80000, 0x7fff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r6, 0x25, 0x8, @val=@kprobe_multi=@addrs={0x0, 0x7, 0x0, &(0x7f00000005c0)=[0x1, 0x6, 0x8, 0x8, 0x0, 0xffffffff, 0x7], 0xff}}, 0x30) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000006c0)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={r8, &(0x7f00000007c0)="b786acadd246d16e3c9a3d788b3fb180b9be7494026cc5c49091e192e1717a87052610334b88b5e5211e22d35acbd08c968f13dcca5409e04bd9dac9b97224969327452fd158f175b6213b5f24d6367cf945e85349680203483851c2924096687ce7dc2123d1d9d61405f791672f198dfb8f1a7ddef1fcdf48e020ce1249e3edcb60de6cd0afda93fdff213ef52357b380e1017d287adb2e2afde96042dd184e18b7b15a231c7f", &(0x7f0000000880)=""/74, 0x4}, 0x20) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x220000, 0x0) ioctl$DVD_AUTH(r9, 0x5390, &(0x7f0000000980)=@lrpcs={0x2, 0x7, 0x6, 0x4, 0x2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff}}, './file0\x00'}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000009c0)=@sr0, r10, &(0x7f0000000a40)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r9, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@map=r11, r9, 0x5, 0x24, 0x0, @void, @void, @void, @value=r12}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000e40)={0x4, &(0x7f0000000e00)=[{0x4, 0x2, 0xd, 0x1000}, {0x4, 0x1, 0xff, 0xfffffffa}, {0x6, 0x9, 0x1a, 0x775}, {0x1, 0x0, 0x50, 0xe0c1}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000e80)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r13, 0x40086424, &(0x7f0000000f00)={0x0, 0x3}) 967.242407ms ago: executing program 1 (id=1141): set_mempolicy(0x8000, &(0x7f0000000080)=0x8, 0x6) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, &(0x7f0000000180)="13"}) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) (async) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) set_mempolicy(0x8000, &(0x7f0000000140)=0x7, 0x2) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4}}}}}}}}, 0x36) 916.506948ms ago: executing program 1 (id=1144): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c0001"], 0x28}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) (async) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c0001"], 0x28}], 0x1}, 0x0) (async) 855.938983ms ago: executing program 1 (id=1145): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, 0x0) 855.279187ms ago: executing program 1 (id=1146): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x2}, 0xe) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xa, 0x3, 0x4, 0x3145, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x9) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x802) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000040)=0x4) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000410007012cbd7000fadbdf25037c00000400c2809c0001801800108014000c000000000001000000000000000000000113d4e2a53f094ef36ac81c0dc57c"], 0x34}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 592.910194ms ago: executing program 4 (id=1150): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000002980)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x35) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = memfd_secret(0x80000) write$P9_RREADDIR(r5, &(0x7f0000000600)={0x103, 0x29, 0x2, {0x0, [{{0x10, 0x0, 0x1}, 0x2, 0x40, 0x7, './file0'}, {{0x2, 0x0, 0x1}, 0xfff, 0x3, 0x7, './file0'}, {{0x10, 0x0, 0x7}, 0x1, 0x9, 0x7, './file0'}, {{0x40, 0x3, 0x8}, 0xe306, 0x4, 0x7, './file0'}, {{0x1, 0x0, 0x2}, 0x5, 0x7, 0x7, './file0'}, {{0x40, 0x1, 0x4}, 0x5, 0x4, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x1, 0xc, 0x7, './file0'}, {{0x8, 0x1, 0x7}, 0x7fffffffffffffff, 0xfc, 0x7, './file0'}]}}, 0x103) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x89e1, &(0x7f00000000c0)='lapb0') (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xec}) (async, rerun: 32) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="89de09ebb2b629627f1e32867cb9a4323c394ce77db9d80124e8e1738072493907ca02a10057d68c7ef4968c29a94e2e3a993b1ad3a333ddf4dff1eaaa33cc0fd89786c6a9197cf8280a02ab4fbccf9075e9c4917707cbb545544b8e0c39e715f99900da439c8c0708a8900080a792006c8ee5", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) 455.925407ms ago: executing program 4 (id=1152): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/191, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = eventfd(0xf7b2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x22, 0x13, 0x1, 0xd, 0x7, 0x8, 0x3, 0x23, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x20040000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x41c0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) 454.183367ms ago: executing program 4 (id=1154): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00003ad000/0x400000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 384.434323ms ago: executing program 2 (id=1155): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 379.667661ms ago: executing program 2 (id=1156): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r2, 0x0, r4, 0x8, 0x1, 0x88, 0x4, 0x74b1532f, 0x6, 0x3, 0x1, 0x3ff}) 377.788686ms ago: executing program 5 (id=1157): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x1, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x5, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 317.583901ms ago: executing program 2 (id=1158): close(0x3) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x5, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5], [0x0, 0x5, 0x0, 0x1, 0xfffffffe, 0xffffffff, 0x2]], '\x00', [{}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5f08, 0x6}, {}, {}, {}, {0x5}, {0x4, 0x8}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000280)) 316.4525ms ago: executing program 4 (id=1159): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xfffffffffffffffd) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/164, 0xa4, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/192, 0xc0, 0x1, 0x17}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$int_in(r0, 0x40000000af01, 0x0) 315.032324ms ago: executing program 5 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f00000000c0)="2dcd622bf2b3f6714c7db7ac88038c84981267add0115b8165e2e48c6d4f278ca5ceda00a8866ea9f16567f5864d9a3aa70a43dd06e451409596f0103e7da70e0834bed8ef894458", &(0x7f0000000140)=""/163, &(0x7f0000000200)="57c54221b6b5ee560d37cc78220f4066b8b91833755e63c97e606ce70090d50508148a2bdcecbb15482411c4606d6b13e2d2b221001161976bebc31034bc8e7f6fe972d91edef15007f92ca6ab780226d2bb424beef001", &(0x7f0000000280)="f8facbebcd1578ee45c78de893463ebe8713f28908c9337fb0a7538e921c57e4ff801c55576748212e54be1531817e4e3a29a1bd36670e2429fb7dd4b60494e22578fbc4142146c6e96410c30b15a202f96a67a468529a346905be0842136c87bbf91346d7602a333cb837ee839eb67a1e6fe81386d62e30b209a9d8f76dff24fe0b8f6bc77fe726052bfdc12639c92f6aed395e3fcf0b2ef7", 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x5}}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) 314.901752ms ago: executing program 2 (id=1161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 267.022796ms ago: executing program 5 (id=1162): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x3d, '\x00', @data=0xf, 0x9465}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000040)='\x00', 0x800, &(0x7f0000000180)={@align=0x5e40963, {0x5, 0x0, 0xdd, 0x7}}, 0xa, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xbf49}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r1, 0x42d05000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='oom_score_adj < 1&', 0x12) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000007c0)={0xd26, 0x9, 0x5, 0x3, 0xffffff8e, 0x8}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "048f9e5384f6eb5e03c3caa57100f78a"}, 0x20) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000280), 0x4200, 0x0) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f00000002c0)=0x40, 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r10, &(0x7f0000000500)='0x0', 0x3) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000300000000000000883b9f5683b82db355b300000000000000006ac3d80038809df99ae0fab08dca0876b93c13477fae5b10f47e65ff1fda0a93ce83e229609700368109c474c715b4264504b8e2595a2b135bf1e1605d19aa4e72eb3452a5b53cb370edf9000000"], 0x50) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x109000, 0x0) r14 = gettid() syz_open_procfs(r14, &(0x7f0000000300)='cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1b, &(0x7f0000000800)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000181900001f667f49ee3811c39d33aa", @ANYRES32=r3, @ANYBLOB="0000000000000000183a00000100000000000000000000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009a560c0001000000"], &(0x7f0000000380)='syzkaller\x00', 0xa, 0xc9, &(0x7f00000003c0)=""/201, 0x41100, 0x40, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1, 0x59}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x1, r8, r10, r11, r12, r13], 0x0, 0x10, 0x4}, 0x94) 265.38275ms ago: executing program 2 (id=1163): listen(0xffffffffffffffff, 0xfffffffe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040041) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000017000d0025bd7080fddbdf2504000000080001002750000020641d0089375e6ae12734efde8aa049e17d74c8791a5a4706b278b3c1c4b1ff79b57a6cd249c03c8d3d3ff4ae1f2df9c77a173934170a424875b15856890159b24aee49795a"], 0x1c}, 0x1, 0x0, 0x0, 0x24040082}, 0x4000090) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000017000d0025bd7080fddbdf2504000000080001002750000020641d0089375e6ae12734efde8aa049e17d74c8791a5a4706b278b3c1c4b1ff79b57a6cd249c03c8d3d3ff4ae1f2df9c77a173934170a424875b15856890159b24aee49795a"], 0x1c}, 0x1, 0x0, 0x0, 0x24040082}, 0x4000090) socket(0x1d, 0x2, 0x6) (async) r2 = socket(0x1d, 0x2, 0x6) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0x21, '\x00', @data=0x4}]}) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="267af7ce204fec7d5b9a678adc41a9ad3043ccf100f526e1606a0bb715b6b464a7c3b8a071af749815d8adb7faa3cfdeb2004884b74f1cb10f1bd96b595282fd7f69dbc6c6d9bc5bfb458e36e13cbec48a2c61234c94f3c7b89e3db2dbd89ead8d387239a3534d2c5509614d14e4ae48cf0d20a215d1406a158911be8b0b06f2f5ad1d12c8e635d790e6de9747df42089adee2ba53e175f72cec1e", 0x9b}], 0x1, &(0x7f0000000600)=[{0xc0, 0x0, 0x5, "bc778fcfaf7f6c102935e0f1bdbad99de5ad449b97ebad128be329a6f7f1a7c58502a3e623a18bc1c252c2430c7312e2448691f30e99efd5947e8bcb725d7c08367407f61e9c115892126fe4261d70bfa9fcb8257273ee2ff35ac255931a608ed2e12fa72fa38bfedad0a9f1e9098c13bc9e173546117cfd4ebeee22130a700d19fc1f76947e8b10e120c1380a6dc6f94aeaa166560dff05f6dbb68b165abc4c1ef94f87e788ae226c9632"}, {0x20, 0x10d, 0x9, "2a782edd984cbee2f8"}], 0xe0}, 0x81) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x7, 0x400) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000380)={0x1, 0x2, @qam={0x1, 0x0, 0xa}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, @val={@void}, {@generic={0x88a2, 'f\n'}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xc7, 0x2, 0x200, 0x0, 0x42, 0x8000, 0x7}}, {0x12, 0x2, [0x7ff, 0x8, 0x15, 0x9, 0xb, 0xfff7, 0x5]}}, {{0x1c, 0x1, {0x6, 0x9, 0x8, 0x3, 0x2, 0x1, 0x0, 0x3}}, {0xa, 0x2, [0x9, 0xa, 0x7]}}, {{0x1c, 0x1, {0xc7, 0x5, 0x4, 0xdd3, 0x2, 0x3, 0x3, 0x5}}, {0xe, 0x2, [0x9, 0x3, 0x200, 0x9, 0x8]}}, {{0x1c, 0x1, {0x2, 0x3, 0x5, 0x1, 0x0, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xc1, 0x0, 0x3, 0x2000, 0x0, 0xab, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x2, 0x2, 0x7fff, 0x3]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040800) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) 265.28962ms ago: executing program 4 (id=1164): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) chdir(0x0) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 207.154438ms ago: executing program 5 (id=1165): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 206.765769ms ago: executing program 5 (id=1166): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000000140), &(0x7f0000000200)={r3, r4+60000000}, 0x8) (async, rerun: 32) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ppoll(&(0x7f00000002c0)=[{r0, 0x80}, {r5, 0x4}, {r6, 0x4170}, {r0, 0xc086}], 0x4, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0x6]}, 0x8) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) (rerun: 64) semtimedop(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, &(0x7f00000003c0)={r7, r8+10000000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xd, 0x3, 0x60, @private0, @empty, 0x7, 0x8, 0x4, 0x9}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x1, 0x6, @local}, 0x10) (async) io_setup(0xffff, &(0x7f0000000500)=0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) io_getevents(r10, 0x8, 0x3, &(0x7f0000000540)=[{}, {}, {}], &(0x7f0000000600)={r11, r12+10000000}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@getspdinfo={0x14, 0x25, 0x2, 0xfffffff2, 0x25dfdbfb, 0x7, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) (async, rerun: 32) ioctl$int_in(r6, 0x5452, &(0x7f0000000740)=0x1) (rerun: 32) r14 = epoll_create1(0x80000) epoll_pwait2(r14, &(0x7f0000000780)=[{}, {}, {}], 0x3, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0x3]}, 0x8) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000840)=0x0) syz_pidfd_open(r15, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000880), &(0x7f00000008c0)=0x40) (async) r16 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r16, 0x4040aea0, &(0x7f0000000900)=@arm64={0x1, 0xf2, 0x2, '\x00', 0xb0c4}) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000940)={0x3, 0x81, 0x3, 0xc7, 0x1, 0x5, 0x2, 0x401}, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x4, 0x605, 0xff, 0x81, 0x2, 0x4}, &(0x7f00000009c0)={0x0, 0x3938700}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0xfffffffffffffff9]}, 0x8}) (async, rerun: 64) recvmmsg(r6, &(0x7f0000001180)=[{{&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b00)=""/125, 0x7d}, {&(0x7f0000000b80)=""/110, 0x6e}, {&(0x7f0000000c00)=""/103, 0x67}, {&(0x7f0000000c80)=""/179, 0xb3}, {&(0x7f0000000d40)=""/83, 0x53}, {&(0x7f0000000dc0)=""/82, 0x52}, {&(0x7f0000000e40)=""/149, 0x95}, {&(0x7f0000000f00)=""/85, 0x55}, {&(0x7f0000000f80)=""/71, 0x47}], 0x9, &(0x7f00000010c0)=""/153, 0x99}, 0x6}], 0x1, 0x1, &(0x7f00000011c0)={0x77359400}) 74.087496ms ago: executing program 2 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x50010, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000100e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r6, &(0x7f00000002c0)='dvmrp1\x00', 0x400801, &(0x7f0000000340)={@_ha_fsid={[0x2, 0x30913681]}, {0x3, 0x5, 0x9, 0xa2c6}}, 0x67f, &(0x7f0000000380), &(0x7f00000003c0)=0xeb}) creat(&(0x7f0000000000)='file0\x00', 0x1ff) r8 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = fcntl$dupfd(r7, 0x0, r0) accept$inet6(r10, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000480)=0x1c) writev(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) lremovexattr(&(0x7f0000000200)='my_configfs/usb_gadget/g1\x00', &(0x7f0000000240)=@random={'user.', '!(:$%$\x00'}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') write(r11, &(0x7f0000000140)="b14b886d5e00c125c9516134da6d19e6bd02ddfa5c4f82fa1116f4c17f533a7fb2364cf4459ffd81eef7ee66756049a5b8af5ec3052ad429509e7f80754de78821efd5aa01972b6bb54dac1c4777dfeb134336fd73ea03b3a240aeabd60e3dc0bd66c28fd9bb16c5258b63ff79642993da2f67fcbca5cfbf7f7fb8f13e8792fc8b62c1ed366dd339a734aacf9b0ecbbd8c711e49492337dc472626b9", 0x9c) 37.870022ms ago: executing program 5 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000410001000000080004000000010000000400cb8014000180100010800800010005000000040010800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 0s ago: executing program 1 (id=1169): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0xa0000, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r3}, './file0\x00'}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) kernel console output (not intermixed with test programs): 96.639379][ T7745] total_mapped_file 2662400 [ 96.641669][ T7745] total_dirty 0 [ 96.642786][ T7745] total_writeback 0 [ 96.644005][ T7745] total_workingset_refault_anon 11 [ 96.645571][ T7745] total_workingset_refault_file 2521 [ 96.647264][ T7745] total_swap 127541248 [ 96.648571][ T7745] total_swapcached 198987776 [ 96.650394][ T7745] total_pgpgin 206282 [ 96.651688][ T7745] total_pgpgout 130996 [ 96.652994][ T7745] total_pgfault 28063 [ 96.654243][ T7745] total_pgmajfault 28 [ 96.655595][ T7745] total_inactive_anon 96559104 [ 96.657448][ T7745] total_active_anon 211611648 [ 96.658924][ T7745] total_inactive_file 53248 [ 96.664100][ T7745] total_active_file 24576 [ 96.665521][ T7745] total_unevictable 0 [ 96.666977][ T7745] anon_cost 0 [ 96.668032][ T7745] file_cost 0 [ 96.669595][ T7745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.488,pid=7765,uid=0 [ 96.675439][ T7745] Memory cgroup out of memory: Killed process 7765 (syz.2.488) total-vm:61556kB, anon-rss:0kB, file-rss:32580kB, shmem-rss:2212kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 96.732278][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 96.738595][ T5100] CPU: 1 UID: 0 PID: 5100 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.738631][ T5100] Tainted: [L]=SOFTLOCKUP [ 96.738639][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.738673][ T5100] Workqueue: hci1 hci_rx_work [ 96.738722][ T5100] Call Trace: [ 96.738729][ T5100] [ 96.738739][ T5100] dump_stack_lvl+0x100/0x190 [ 96.738778][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 96.738812][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 96.738843][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.738862][ T5100] ? find_held_lock+0x2b/0x80 [ 96.738882][ T5100] ? kobject_add_internal+0x25f/0x930 [ 96.738920][ T5100] ? kobject_add_internal+0x25f/0x930 [ 96.738963][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 96.739013][ T5100] kobject_add_internal+0x2c8/0x930 [ 96.739058][ T5100] kobject_add+0x16a/0x1e0 [ 96.739098][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 96.739134][ T5100] ? class_to_subsys+0x10f/0x150 [ 96.739170][ T5100] ? kobject_put+0xb9/0x640 [ 96.739204][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 96.739232][ T5100] device_add+0x294/0x1970 [ 96.739271][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 96.739290][ T5100] ? __pfx_device_add+0x10/0x10 [ 96.739328][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 96.739368][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 96.739402][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 96.739440][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.739470][ T5100] ? hci_event_packet+0x186/0xcd0 [ 96.739509][ T5100] hci_le_conn_complete_evt+0x23c/0x3a0 [ 96.739537][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 96.739622][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 96.739649][ T5100] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 96.739685][ T5100] hci_event_packet+0x51c/0xcd0 [ 96.739711][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.739744][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 96.739771][ T5100] ? kcov_remote_start+0x384/0x670 [ 96.739804][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 96.739838][ T5100] hci_rx_work+0x451/0xfc0 [ 96.739894][ T5100] process_one_work+0xa23/0x1940 [ 96.739933][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 96.739972][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 96.740001][ T5100] worker_thread+0x5ef/0xe50 [ 96.740039][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 96.740063][ T5100] ? kthread+0x13a/0x450 [ 96.740090][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 96.740112][ T5100] kthread+0x370/0x450 [ 96.740132][ T5100] ? __pfx_kthread+0x10/0x10 [ 96.740162][ T5100] ret_from_fork+0x72b/0xd50 [ 96.740217][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 96.740259][ T5100] ? __switch_to+0x800/0x10f0 [ 96.740281][ T5100] ? __pfx_kthread+0x10/0x10 [ 96.740311][ T5100] ret_from_fork_asm+0x1a/0x30 [ 96.740359][ T5100] [ 96.819983][ T5890] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 96.827850][ T5100] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 96.851798][ T5100] Bluetooth: hci1: failed to register connection device [ 96.852416][ T7745] syz.2.488 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.858035][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.2.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.858061][ T7745] Tainted: [L]=SOFTLOCKUP [ 96.858067][ T7745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.858077][ T7745] Call Trace: [ 96.858082][ T7745] [ 96.858087][ T7745] dump_stack_lvl+0x100/0x190 [ 96.858106][ T7745] dump_header+0xfb/0x606 [ 96.858120][ T7745] oom_kill_process.cold+0xd/0x330 [ 96.858133][ T7745] out_of_memory+0x340/0x14f0 [ 96.858154][ T7745] ? __pfx_out_of_memory+0x10/0x10 [ 96.858174][ T7745] mem_cgroup_out_of_memory+0xc6/0x130 [ 96.858187][ T7745] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 96.858198][ T7745] ? find_held_lock+0x2b/0x80 [ 96.858211][ T7745] ? do_raw_spin_unlock+0x145/0x1e0 [ 96.858226][ T7745] ? _raw_spin_unlock+0x28/0x50 [ 96.858240][ T7745] try_charge_memcg+0x6e5/0xdf0 [ 96.858257][ T7745] ? __pfx_try_charge_memcg+0x10/0x10 [ 96.858272][ T7745] ? find_held_lock+0x2b/0x80 [ 96.858281][ T7745] ? rcu_read_unlock+0x17/0x60 [ 96.858296][ T7745] ? rcu_read_unlock+0x17/0x60 [ 96.858312][ T7745] ? find_held_lock+0x2b/0x80 [ 96.858321][ T7745] ? rcu_read_unlock+0x17/0x60 [ 96.858339][ T7745] charge_memcg+0x187/0x1e0 [ 96.858355][ T7745] __mem_cgroup_charge+0x2b/0x1c0 [ 96.858372][ T7745] shmem_alloc_and_add_folio+0x451/0xd40 [ 96.858388][ T7745] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 96.858400][ T7745] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 96.858415][ T7745] shmem_get_folio_gfp+0x6ad/0x1910 [ 96.858428][ T7745] ? __lock_acquire+0x49f/0x1a40 [ 96.858442][ T7745] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 96.858458][ T7745] shmem_write_begin+0x1a4/0x420 [ 96.858470][ T7745] ? __pfx_shmem_write_begin+0x10/0x10 [ 96.858482][ T7745] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 96.858496][ T7745] ? lockdep_hardirqs_on+0x78/0x100 [ 96.858510][ T7745] generic_perform_write+0x292/0xa40 [ 96.858531][ T7745] ? __pfx_generic_perform_write+0x10/0x10 [ 96.858549][ T7745] ? file_update_time_flags+0x373/0x500 [ 96.858566][ T7745] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 96.858579][ T7745] shmem_file_write_iter+0x10e/0x140 [ 96.858594][ T7745] __kernel_write_iter+0x2ac/0x930 [ 96.858611][ T7745] ? __pfx___kernel_write_iter+0x10/0x10 [ 96.858628][ T7745] ? __up_read+0x333/0x980 [ 96.858645][ T7745] ? dump_user_range+0x65e/0xad0 [ 96.858659][ T7745] ? copy_mc_enhanced_fast_string+0x6/0xf [ 96.858679][ T7745] dump_user_range+0x3f9/0xad0 [ 96.858696][ T7745] ? __pfx_dump_user_range+0x10/0x10 [ 96.858715][ T7745] ? __pfx_writenote+0x10/0x10 [ 96.858730][ T7745] ? elf_core_dump+0x1f25/0x3d20 [ 96.858748][ T7745] elf_core_dump+0x2d68/0x3d20 [ 96.858771][ T7745] ? __pfx_elf_core_dump+0x10/0x10 [ 96.858786][ T7745] ? kasan_save_stack+0x3f/0x50 [ 96.858798][ T7745] ? kasan_save_stack+0x30/0x50 [ 96.858810][ T7745] ? kasan_save_track+0x14/0x30 [ 96.858822][ T7745] ? __kasan_kmalloc+0xaa/0xb0 [ 96.858833][ T7745] ? vfs_coredump+0x22a6/0x56f0 [ 96.858846][ T7745] ? get_signal+0x1f2a/0x21e0 [ 96.858861][ T7745] ? arch_do_signal_or_restart+0x91/0x7e0 [ 96.858876][ T7745] ? 0xffffffffff600000 [ 96.858907][ T7745] ? vfs_coredump+0x294b/0x56f0 [ 96.858921][ T7745] vfs_coredump+0x294b/0x56f0 [ 96.858944][ T7745] ? __pfx_vfs_coredump+0x10/0x10 [ 96.858960][ T7745] ? __lock_acquire+0x49f/0x1a40 [ 96.858986][ T7745] ? bpf_ksym_find+0x128/0x1c0 [ 96.859006][ T7745] ? unwind_get_return_address+0x59/0xa0 [ 96.859019][ T7745] ? arch_stack_walk+0xa6/0xf0 [ 96.859040][ T7745] ? __sigqueue_free+0xbe/0x2a0 [ 96.859050][ T7745] ? stack_trace_save+0x8e/0xc0 [ 96.859062][ T7745] ? __pfx_stack_trace_save+0x10/0x10 [ 96.859073][ T7745] ? stack_depot_save_flags+0x27/0x9d0 [ 96.859114][ T7745] ? proc_coredump_connector+0x2d3/0x4f0 [ 96.859126][ T7745] ? __pfx_proc_coredump_connector+0x10/0x10 [ 96.859140][ T7745] ? rcu_is_watching+0x12/0xc0 [ 96.859159][ T7745] get_signal+0x1f2a/0x21e0 [ 96.859179][ T7745] ? __pfx_get_signal+0x10/0x10 [ 96.859192][ T7745] ? __pfx_force_sig_fault+0x10/0x10 [ 96.859210][ T7745] arch_do_signal_or_restart+0x91/0x7e0 [ 96.859223][ T7745] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.859243][ T7745] irqentry_exit+0x402/0xa00 [ 96.859258][ T7745] asm_exc_page_fault+0x26/0x30 [ 96.859269][ T7745] RIP: 0033:0x7f5267653bd0 [ 96.859282][ T7745] Code: Unable to access opcode bytes at 0x7f5267653ba6. [ 96.859287][ T7745] RSP: 002b:0000000000000838 EFLAGS: 00010206 [ 96.859297][ T7745] RAX: 0000000000000000 RBX: 00007f5267a26090 RCX: 00007f526779e019 [ 96.859304][ T7745] RDX: 0000000000000840 RSI: 0000000000000970 RDI: 000000000000000b [ 96.859310][ T7745] RBP: 00007f526783500c R08: 0000000000000000 R09: 0000000000000000 [ 96.859316][ T7745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.859322][ T7745] R13: 00007f5267a26128 R14: 00007f5267a26090 R15: 00007fff76da65b8 [ 96.859336][ T7745] [ 96.859340][ T7745] memory: usage 307200kB, limit 307200kB, failcnt 41095 [ 96.969839][ T5890] usb 9-1: device descriptor read/64, error -71 [ 96.972656][ T7745] memory+swap: usage 431752kB, limit 9007199254740988kB, failcnt 0 [ 97.022451][ T7745] kmem: usage 5864kB, limit 9007199254740988kB, failcnt 0 [ 97.024704][ T7745] Memory cgroup stats for /syz2: [ 97.024792][ T7745] cache 305033216 [ 97.027522][ T7745] rss 53248 [ 97.028543][ T7745] rss_huge 0 [ 97.029585][ T7745] shmem 305025024 [ 97.030818][ T7745] mapped_file 2666496 [ 97.032051][ T7745] dirty 4096 [ 97.033095][ T7745] writeback 0 [ 97.034195][ T7745] workingset_refault_anon 11 [ 97.035608][ T7745] workingset_refault_file 2710 [ 97.037322][ T7745] swap 121692160 [ 97.038429][ T7745] swapcached 199503872 [ 97.039707][ T7745] pgpgin 206567 [ 97.041073][ T7745] pgpgout 132047 [ 97.042216][ T7745] pgfault 28165 [ 97.043307][ T7745] pgmajfault 31 [ 97.044431][ T7745] inactive_anon 113422336 [ 97.045785][ T7745] active_anon 191803392 [ 97.047193][ T7745] inactive_file 0 [ 97.050933][ T7745] active_file 8192 [ 97.053626][ T7745] unevictable 0 [ 97.054987][ T7745] hierarchical_memory_limit 314572800 [ 97.057138][ T7745] hierarchical_memsw_limit 9223372036854771712 [ 97.059107][ T7745] total_cache 305033216 [ 97.060645][ T7745] total_rss 53248 [ 97.062217][ T7745] total_rss_huge 0 [ 97.063393][ T7745] total_shmem 305025024 [ 97.064724][ T7745] total_mapped_file 2666496 [ 97.066212][ T7745] total_dirty 4096 [ 97.067419][ T7745] total_writeback 0 [ 97.068640][ T7745] total_workingset_refault_anon 11 [ 97.070331][ T7745] total_workingset_refault_file 2710 [ 97.072009][ T7745] total_swap 121692160 [ 97.073426][ T7745] total_swapcached 199503872 [ 97.074956][ T7745] total_pgpgin 206567 [ 97.076342][ T7745] total_pgpgout 132047 [ 97.077635][ T7745] total_pgfault 28165 [ 97.078881][ T7745] total_pgmajfault 31 [ 97.080690][ T7745] total_inactive_anon 113422336 [ 97.082297][ T7745] total_active_anon 191803392 [ 97.084676][ T7745] total_inactive_file 0 [ 97.086021][ T7745] total_active_file 8192 [ 97.087793][ T7745] total_unevictable 0 [ 97.089127][ T7745] anon_cost 0 [ 97.090642][ T7745] file_cost 0 [ 97.092035][ T7745] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.488,pid=7757,uid=0 [ 97.097719][ T7745] Memory cgroup out of memory: Killed process 7757 (syz.2.488) total-vm:61556kB, anon-rss:0kB, file-rss:32580kB, shmem-rss:2212kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 97.239841][ T5890] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 97.283914][ T7993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.550'. [ 97.339975][ T7994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.550'. [ 97.381406][ T5890] usb 9-1: device descriptor read/64, error -71 [ 97.419387][ T7998] netlink: 'syz.0.552': attribute type 11 has an invalid length. [ 97.500177][ T5890] usb usb9-port1: attempt power cycle [ 97.652383][ T8009] netlink: 180 bytes leftover after parsing attributes in process `syz.0.556'. [ 97.741749][ T8010] netlink: 180 bytes leftover after parsing attributes in process `syz.0.556'. [ 97.815448][ T8015] netlink: 'syz.0.558': attribute type 3 has an invalid length. [ 97.859835][ T5890] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 97.880474][ T5890] usb 9-1: device descriptor read/8, error -71 [ 98.023691][ T8021] bond0: option ad_select: unable to set because the bond device is up [ 98.090717][ T8023] netlink: 'syz.1.559': attribute type 2 has an invalid length. [ 98.141122][ T5890] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 98.160469][ T5890] usb 9-1: device descriptor read/8, error -71 [ 98.197121][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 98.202678][ T5100] CPU: 1 UID: 0 PID: 5100 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.202708][ T5100] Tainted: [L]=SOFTLOCKUP [ 98.202716][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.202730][ T5100] Workqueue: hci3 hci_rx_work [ 98.202756][ T5100] Call Trace: [ 98.202762][ T5100] [ 98.202771][ T5100] dump_stack_lvl+0x100/0x190 [ 98.202800][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 98.202831][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 98.202849][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 98.202865][ T5100] ? find_held_lock+0x2b/0x80 [ 98.202880][ T5100] ? kobject_add_internal+0x25f/0x930 [ 98.202906][ T5100] ? kobject_add_internal+0x25f/0x930 [ 98.202934][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 98.202960][ T5100] kobject_add_internal+0x2c8/0x930 [ 98.202991][ T5100] kobject_add+0x16a/0x1e0 [ 98.203016][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 98.203040][ T5100] ? class_to_subsys+0x10f/0x150 [ 98.203070][ T5100] ? kobject_put+0xb9/0x640 [ 98.203092][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 98.203116][ T5100] device_add+0x294/0x1970 [ 98.203141][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 98.203158][ T5100] ? __pfx_device_add+0x10/0x10 [ 98.203182][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 98.203211][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 98.203234][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 98.203262][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 98.203281][ T5100] ? hci_event_packet+0x186/0xcd0 [ 98.203307][ T5100] hci_le_conn_complete_evt+0x23c/0x3a0 [ 98.203327][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 98.203358][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 98.203380][ T5100] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 98.203404][ T5100] hci_event_packet+0x51c/0xcd0 [ 98.203435][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 98.203460][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 98.203486][ T5100] ? kcov_remote_start+0x384/0x670 [ 98.203507][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 98.203533][ T5100] hci_rx_work+0x451/0xfc0 [ 98.203558][ T5100] process_one_work+0xa23/0x1940 [ 98.203587][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 98.203614][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 98.203635][ T5100] worker_thread+0x5ef/0xe50 [ 98.203677][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 98.203699][ T5100] ? kthread+0x13a/0x450 [ 98.203717][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 98.203737][ T5100] kthread+0x370/0x450 [ 98.203756][ T5100] ? __pfx_kthread+0x10/0x10 [ 98.203777][ T5100] ret_from_fork+0x72b/0xd50 [ 98.203803][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 98.203828][ T5100] ? __switch_to+0x800/0x10f0 [ 98.203845][ T5100] ? __pfx_kthread+0x10/0x10 [ 98.203864][ T5100] ret_from_fork_asm+0x1a/0x30 [ 98.203901][ T5100] [ 98.203926][ T5100] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.272261][ T5890] usb usb9-port1: unable to enumerate USB device [ 98.275685][ T5100] Bluetooth: hci3: failed to register connection device [ 98.364162][ T8030] xt_nfacct: accounting object `syz1' does not exist [ 98.680038][ T7763] syz.2.488 (7763) used greatest stack depth: 18344 bytes left [ 99.065943][ T8041] netlink: 59 bytes leftover after parsing attributes in process `syz.2.566'. [ 99.155658][ T42] kauditd_printk_skb: 703 callbacks suppressed [ 99.155676][ T42] audit: type=1800 audit(1785781551.847:1729): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 99.167654][ T8048] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.365152][ T42] audit: type=1800 audit(1785781552.057:1730): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 99.369865][ T8052] CUSE: info not properly terminated [ 99.404612][ T42] audit: type=1800 audit(1785781552.097:1731): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 99.506068][ T42] audit: type=1800 audit(1785781552.197:1732): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 99.536879][ T42] audit: type=1800 audit(1785781552.227:1733): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 99.599583][ T42] audit: type=1800 audit(1785781552.287:1734): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 99.606943][ T8065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.572'. [ 99.606979][ T8066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.572'. [ 99.609950][ T8065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.572'. [ 99.612963][ T8066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.572'. [ 99.649418][ T42] audit: type=1800 audit(1785781552.337:1735): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 99.656463][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 99.660560][ T5100] CPU: 1 UID: 0 PID: 5100 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.660593][ T5100] Tainted: [L]=SOFTLOCKUP [ 99.660601][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.660615][ T5100] Workqueue: hci2 hci_rx_work [ 99.660645][ T5100] Call Trace: [ 99.660652][ T5100] [ 99.660660][ T5100] dump_stack_lvl+0x100/0x190 [ 99.660691][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 99.660723][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 99.660743][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 99.660760][ T5100] ? find_held_lock+0x2b/0x80 [ 99.660777][ T5100] ? kobject_add_internal+0x25f/0x930 [ 99.660807][ T5100] ? kobject_add_internal+0x25f/0x930 [ 99.660838][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 99.660861][ T5100] kobject_add_internal+0x2c8/0x930 [ 99.660890][ T5100] kobject_add+0x16a/0x1e0 [ 99.660918][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 99.660942][ T5100] ? class_to_subsys+0x10f/0x150 [ 99.660974][ T5100] ? kobject_put+0xb9/0x640 [ 99.661000][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 99.661033][ T5100] device_add+0x294/0x1970 [ 99.661061][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 99.661081][ T5100] ? __pfx_device_add+0x10/0x10 [ 99.661105][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 99.661135][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 99.661159][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 99.661189][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 99.661207][ T5100] ? hci_event_packet+0x186/0xcd0 [ 99.661230][ T5100] hci_le_conn_complete_evt+0x23c/0x3a0 [ 99.661253][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 99.661284][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 99.661308][ T5100] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 99.661331][ T5100] hci_event_packet+0x51c/0xcd0 [ 99.661353][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 99.661376][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 99.661399][ T5100] ? kcov_remote_start+0x384/0x670 [ 99.661420][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 99.661448][ T5100] hci_rx_work+0x451/0xfc0 [ 99.661477][ T5100] process_one_work+0xa23/0x1940 [ 99.661511][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 99.661538][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 99.661560][ T5100] worker_thread+0x5ef/0xe50 [ 99.661587][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 99.661609][ T5100] ? kthread+0x13a/0x450 [ 99.661624][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 99.661643][ T5100] kthread+0x370/0x450 [ 99.661659][ T5100] ? __pfx_kthread+0x10/0x10 [ 99.661678][ T5100] ret_from_fork+0x72b/0xd50 [ 99.661706][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 99.661731][ T5100] ? __switch_to+0x800/0x10f0 [ 99.661751][ T5100] ? __pfx_kthread+0x10/0x10 [ 99.661771][ T5100] ret_from_fork_asm+0x1a/0x30 [ 99.661809][ T5100] [ 99.661833][ T5100] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 99.786507][ T5100] Bluetooth: hci2: failed to register connection device [ 100.021977][ T42] audit: type=1800 audit(1785781552.717:1736): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 100.192258][ T42] audit: type=1800 audit(1785781552.887:1737): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 100.215455][ T42] audit: type=1800 audit(1785781552.907:1738): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 100.238163][ T8082] comedi: valid board names for 8255 driver are: [ 100.242127][ T8082] 8255 [ 100.243448][ T8082] comedi: valid board names for vmk80xx driver are: [ 100.247740][ T8082] vmk80xx [ 100.248777][ T8082] comedi: valid board names for usbduxsigma driver are: [ 100.252358][ T8082] usbduxsigma [ 100.253489][ T8082] comedi: valid board names for usbduxfast driver are: [ 100.255704][ T8082] usbduxfast [ 100.256789][ T8082] comedi: valid board names for usbdux driver are: [ 100.262432][ T8082] usbdux [ 100.263877][ T8082] comedi: valid board names for ni6501 driver are: [ 100.266541][ T8082] ni6501 [ 100.267764][ T8082] comedi: valid board names for dt9812 driver are: [ 100.270818][ T8082] dt9812 [ 100.272033][ T8082] comedi: valid board names for ni_labpc_cs driver are: [ 100.275047][ T8082] ni_labpc_cs [ 100.277494][ T8082] comedi: valid board names for ni_daq_700 driver are: [ 100.280657][ T8082] ni_daq_700 [ 100.282117][ T8082] comedi: valid board names for labpc_pci driver are: [ 100.284968][ T8082] labpc_pci [ 100.286343][ T8082] comedi: valid board names for adl_pci9118 driver are: [ 100.289198][ T8082] pci9118dg [ 100.290918][ T8082] pci9118hg [ 100.292388][ T8082] pci9118hr [ 100.294187][ T8082] comedi: valid board names for 8255_pci driver are: [ 100.297007][ T8082] 8255_pci [ 100.298382][ T8082] comedi: valid board names for s526 driver are: [ 100.302538][ T8082] s526 [ 100.303642][ T8082] comedi: valid board names for multiq3 driver are: [ 100.306574][ T8082] multiq3 [ 100.307596][ T8082] comedi: valid board names for pcmuio driver are: [ 100.310019][ T8082] pcmuio48 [ 100.311344][ T8082] pcmuio96 [ 100.312458][ T8082] comedi: valid board names for pcmmio driver are: [ 100.314619][ T8082] pcmmio [ 100.315601][ T8082] comedi: valid board names for pcmda12 driver are: [ 100.318451][ T8082] pcmda12 [ 100.319682][ T8082] comedi: valid board names for pcmad driver are: [ 100.324289][ T8082] pcmad12 [ 100.325723][ T8082] pcmad16 [ 100.327110][ T8082] comedi: valid board names for ni_labpc driver are: [ 100.330207][ T8082] lab-pc-1200 [ 100.332037][ T8082] lab-pc-1200ai [ 100.333658][ T8082] lab-pc+ [ 100.335123][ T8082] comedi: valid board names for atmio16 driver are: [ 100.337943][ T8082] atmio16 [ 100.339320][ T8082] atmio16d [ 100.342415][ T8082] comedi: valid board names for ni_at_ao driver are: [ 100.345275][ T8082] at-ao-6 [ 100.346635][ T8082] at-ao-10 [ 100.348054][ T8082] comedi: valid board names for ni_at_a2150 driver are: [ 100.351003][ T8082] ni_at_a2150 [ 100.352109][ T8082] comedi: valid board names for adq12b driver are: [ 100.354342][ T8082] adq12b [ 100.355690][ T8082] comedi: valid board names for mpc624 driver are: [ 100.358339][ T8082] mpc624 [ 100.360368][ T8082] comedi: valid board names for c6xdigio driver are: [ 100.363153][ T8082] c6xdigio [ 100.364499][ T8082] comedi: valid board names for aio_iiro_16 driver are: [ 100.367601][ T8082] aio_iiro_16 [ 100.368892][ T8082] comedi: valid board names for aio_aio12_8 driver are: [ 100.371997][ T8082] aio_aio12_8 [ 100.373476][ T8082] aio_ai12_8 [ 100.375056][ T8082] aio_ao12_4 [ 100.376451][ T8082] comedi: valid board names for fl512 driver are: [ 100.378583][ T8082] fl512 [ 100.379510][ T8082] comedi: valid board names for dmm32at driver are: [ 100.382046][ T8082] dmm32at [ 100.382090][ T8082] comedi: valid board names for dt282x driver are: [ 100.382095][ T8082] dt2821 [ 100.382099][ T8082] dt2821-f [ 100.382103][ T8082] dt2821-g [ 100.382107][ T8082] dt2823 [ 100.382111][ T8082] dt2824-pgh [ 100.382115][ T8082] dt2824-pgl [ 100.391617][ T8082] dt2825 [ 100.392574][ T8082] dt2827 [ 100.394022][ T8082] dt2828 [ 100.395338][ T8082] dt2829 [ 100.396630][ T8082] dt21-ez [ 100.397688][ T8082] dt23-ez [ 100.398662][ T8082] dt24-ez [ 100.399622][ T8082] dt24-ez-pgl [ 100.400801][ T8082] comedi: valid board names for dt2817 driver are: [ 100.402967][ T8082] dt2817 [ 100.403922][ T8082] comedi: valid board names for dt2815 driver are: [ 100.405999][ T8082] dt2815 [ 100.406953][ T8082] comedi: valid board names for dt2814 driver are: [ 100.408955][ T8082] dt2814 [ 100.409977][ T8082] comedi: valid board names for dt2811 driver are: [ 100.412145][ T8082] dt2811-pgh [ 100.413473][ T8082] dt2811-pgl [ 100.414941][ T8082] comedi: valid board names for dt2801 driver are: [ 100.417001][ T8082] dt2801 [ 100.417952][ T8082] comedi: valid board names for das6402 driver are: [ 100.420156][ T8082] das6402-12 [ 100.421328][ T8082] das6402-16 [ 100.422422][ T8082] comedi: valid board names for das1800 driver are: [ 100.423395][ T8091] ucsi-stm32g0-i2c 0-0035: i2c read 35, 00 error: -95 [ 100.424312][ T8093] netlink: NAT attribute has 1 unknown bytes [ 100.424328][ T8093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.424802][ T8082] das-1701st [ 100.427548][ T8091] ucsi-stm32g0-i2c 0-0035: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 100.429130][ T8082] das-1701st-da [ 100.433958][ T8091] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x35 [ 100.436303][ T8082] das-1702st [ 100.436310][ T8082] das-1702st-da [ 100.436313][ T8082] das-1702hr [ 100.436318][ T8082] das-1702hr-da [ 100.436322][ T8082] das-1701ao [ 100.436326][ T8082] das-1702ao [ 100.436329][ T8082] das-1801st [ 100.436333][ T8082] das-1801st-da [ 100.436337][ T8082] das-1802st [ 100.436341][ T8082] das-1802st-da [ 100.436345][ T8082] das-1802hr [ 100.436349][ T8082] das-1802hr-da [ 100.436353][ T8082] das-1801hc [ 100.436357][ T8082] das-1802hc [ 100.436360][ T8082] das-1801ao [ 100.436364][ T8082] das-1802ao [ 100.436369][ T8082] comedi: valid board names for das800 driver are: [ 100.436373][ T8082] das-800 [ 100.436377][ T8082] cio-das800 [ 100.436381][ T8082] das-801 [ 100.436385][ T8082] cio-das801 [ 100.436389][ T8082] das-802 [ 100.436392][ T8082] cio-das802 [ 100.436396][ T8082] cio-das802/16 [ 100.436400][ T8082] comedi: valid board names for isa-das08 driver are: [ 100.436405][ T8082] isa-das08 [ 100.436409][ T8082] das08-pgm [ 100.436413][ T8082] das08-pgh [ 100.436416][ T8082] das08-pgl [ 100.436420][ T8082] das08-aoh [ 100.436424][ T8082] das08-aol [ 100.436428][ T8082] das08-aom [ 100.436431][ T8082] das08/jr-ao [ 100.436435][ T8082] das08jr-16-ao [ 100.436443][ T8082] pc104-das08 [ 100.436447][ T8082] das08jr/16 [ 100.436451][ T8082] comedi: valid board names for das16m1 driver are: [ 100.436456][ T8082] das16m1 [ 100.436460][ T8082] comedi: valid board names for dac02 driver are: [ 100.436465][ T8082] dac02 [ 100.436469][ T8082] comedi: valid board names for rti802 driver are: [ 100.436474][ T8082] rti802 [ 100.436478][ T8082] comedi: valid board names for rti800 driver are: [ 100.436483][ T8082] rti800 [ 100.436486][ T8082] rti815 [ 100.436490][ T8082] comedi: valid board names for pcm3724 driver are: [ 100.436496][ T8082] pcm3724 [ 100.436500][ T8082] comedi: valid board names for pcl818 driver are: [ 100.436505][ T8082] pcl818l [ 100.436509][ T8082] pcl818h [ 100.436512][ T8082] pcl818hd [ 100.436516][ T8082] pcl818hg [ 100.436520][ T8082] pcl818 [ 100.436524][ T8082] pcl718 [ 100.436527][ T8082] pcm3718 [ 100.436531][ T8082] comedi: valid board names for pcl816 driver are: [ 100.436536][ T8082] pcl816 [ 100.436539][ T8082] pcl814b [ 100.436543][ T8082] comedi: valid board names for pcl812 driver are: [ 100.436548][ T8082] pcl812 [ 100.436552][ T8082] pcl812pg [ 100.436555][ T8082] acl8112pg [ 100.436559][ T8082] acl8112dg [ 100.436563][ T8082] acl8112hg [ 100.436566][ T8082] a821pgl [ 100.436570][ T8082] a821pglnda [ 100.436574][ T8082] a821pgh [ 100.436578][ T8082] a822pgl [ 100.436582][ T8082] a822pgh [ 100.436585][ T8082] a823pgl [ 100.436589][ T8082] a823pgh [ 100.436593][ T8082] pcl813 [ 100.436596][ T8082] pcl813b [ 100.436600][ T8082] acl8113 [ 100.436604][ T8082] iso813 [ 100.436607][ T8082] acl8216 [ 100.436611][ T8082] a826pg [ 100.436615][ T8082] comedi: valid board names for pcl730 driver are: [ 100.436620][ T8082] pcl730 [ 100.436623][ T8082] iso730 [ 100.436627][ T8082] acl7130 [ 100.436631][ T8082] pcm3730 [ 100.436634][ T8082] pcl725 [ 100.436638][ T8082] p8r8dio [ 100.436642][ T8082] acl7225b [ 100.436646][ T8082] p16r16dio [ 100.436650][ T8082] pcl733 [ 100.436654][ T8082] pcl734 [ 100.436658][ T8082] opmm-1616-xt [ 100.436662][ T8082] pearl-mm-p [ 100.436665][ T8082] ir104-pbf [ 100.436670][ T8082] comedi: valid board names for pcl726 driver are: [ 100.436674][ T8082] pcl726 [ 100.436678][ T8082] pcl727 [ 100.436682][ T8082] pcl728 [ 100.436685][ T8082] acl6126 [ 100.436689][ T8082] acl6128 [ 100.436693][ T8082] comedi: valid board names for pcl724 driver are: [ 100.436698][ T8082] pcl724 [ 100.436701][ T8082] pcl722 [ 100.436705][ T8082] pcl731 [ 100.436709][ T8082] acl7122 [ 100.436712][ T8082] acl7124 [ 100.436716][ T8082] pet48dio [ 100.436720][ T8082] pcmio48 [ 100.436723][ T8082] onyx-mm-dio [ 100.436727][ T8082] comedi: valid board names for pcl711 driver are: [ 100.436732][ T8082] pcl711 [ 100.436736][ T8082] pcl711b [ 100.436740][ T8082] acl8112hg [ 100.436743][ T8082] acl8112dg [ 100.436747][ T8082] comedi: valid board names for amplc_pc263 driver are: [ 100.436752][ T8082] pc263 [ 100.436756][ T8082] comedi: valid board names for amplc_pc236 driver are: [ 100.436761][ T8082] pc36at [ 100.436765][ T8082] comedi: valid board names for amplc_dio200 driver are: [ 100.436770][ T8082] pc212e [ 100.436774][ T8082] pc214e [ 100.436777][ T8082] pc215e [ 100.436781][ T8082] pc218e [ 100.436785][ T8082] pc272e [ 100.436788][ T8082] comedi: valid board names for comedi_parport driver are: [ 100.436793][ T8082] comedi_parport [ 100.436798][ T8082] comedi: valid board names for comedi_test driver are: [ 100.436802][ T8082] comedi_test [ 100.436806][ T8082] comedi: valid board names for comedi_bond driver are: [ 100.436811][ T8082] comedi_bond [ 100.470864][ T5100] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 100.472698][ T8095] uhci_hcd 0000:00:1d.0: remove, state 4 [ 100.473834][ T5100] CPU: 0 UID: 0 PID: 5100 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.473865][ T5100] Tainted: [L]=SOFTLOCKUP [ 100.473872][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.473886][ T5100] Workqueue: hci2 hci_rx_work [ 100.473912][ T5100] Call Trace: [ 100.473919][ T5100] [ 100.473926][ T5100] dump_stack_lvl+0x100/0x190 [ 100.473953][ T5100] sysfs_warn_dup.cold+0x1c/0x28 [ 100.474001][ T5100] sysfs_create_dir_ns+0x24b/0x2b0 [ 100.474019][ T5100] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 100.474036][ T5100] ? find_held_lock+0x2b/0x80 [ 100.474053][ T5100] ? kobject_add_internal+0x25f/0x930 [ 100.474079][ T5100] ? kobject_add_internal+0x25f/0x930 [ 100.474106][ T5100] ? do_raw_spin_unlock+0x145/0x1e0 [ 100.474132][ T5100] kobject_add_internal+0x2c8/0x930 [ 100.474161][ T5100] kobject_add+0x16a/0x1e0 [ 100.474186][ T5100] ? __pfx_kobject_add+0x10/0x10 [ 100.474211][ T5100] ? class_to_subsys+0x10f/0x150 [ 100.474242][ T5100] ? kobject_put+0xb9/0x640 [ 100.474266][ T5100] ? _raw_spin_unlock+0x28/0x50 [ 100.474291][ T5100] device_add+0x294/0x1970 [ 100.474317][ T5100] ? __pfx_dev_set_name+0x10/0x10 [ 100.474335][ T5100] ? __pfx_device_add+0x10/0x10 [ 100.474360][ T5100] ? mgmt_send_event_skb+0x2fb/0x460 [ 100.474387][ T5100] hci_conn_add_sysfs+0x1a3/0x260 [ 100.474412][ T5100] le_conn_complete_evt+0x11eb/0x1f60 [ 100.474462][ T5100] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 100.474485][ T5100] ? hci_event_packet+0x186/0xcd0 [ 100.474513][ T5100] hci_le_conn_complete_evt+0x23c/0x3a0 [ 100.474533][ T5100] ? skb_pull_data+0x15f/0x1e0 [ 100.474564][ T5100] hci_le_meta_evt+0x34a/0x5f0 [ 100.474589][ T5100] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 100.474613][ T5100] hci_event_packet+0x51c/0xcd0 [ 100.474632][ T5100] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 100.474653][ T5100] ? __pfx_hci_event_packet+0x10/0x10 [ 100.474675][ T5100] ? kcov_remote_start+0x384/0x670 [ 100.474696][ T5100] ? lockdep_hardirqs_on+0x78/0x100 [ 100.474722][ T5100] hci_rx_work+0x451/0xfc0 [ 100.474746][ T5100] process_one_work+0xa23/0x1940 [ 100.474777][ T5100] ? __pfx_process_one_work+0x10/0x10 [ 100.474805][ T5100] ? __pfx_hci_rx_work+0x10/0x10 [ 100.474827][ T5100] worker_thread+0x5ef/0xe50 [ 100.474851][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 100.474871][ T5100] ? kthread+0x13a/0x450 [ 100.474887][ T5100] ? __pfx_worker_thread+0x10/0x10 [ 100.474904][ T5100] kthread+0x370/0x450 [ 100.474918][ T5100] ? __pfx_kthread+0x10/0x10 [ 100.474937][ T5100] ret_from_fork+0x72b/0xd50 [ 100.474962][ T5100] ? __pfx_ret_from_fork+0x10/0x10 [ 100.475002][ T5100] ? __switch_to+0x800/0x10f0 [ 100.475023][ T5100] ? __pfx_kthread+0x10/0x10 [ 100.475043][ T5100] ret_from_fork_asm+0x1a/0x30 [ 100.475078][ T5100] [ 100.475176][ T5100] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 100.476992][ T8095] usb usb1: USB disconnect, device number 1 [ 100.479522][ T5100] Bluetooth: hci2: failed to register connection device [ 100.502566][ T8097] CUSE: unknown device info "" [ 100.583838][ T8095] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 100.584126][ T8097] CUSE: unknown device info "" [ 100.734935][ T8097] CUSE: unknown device info "" [ 100.736659][ T8097] CUSE: unknown device info "" [ 100.738295][ T8097] CUSE: zero length info key specified [ 100.750950][ T8099] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 100.761299][ T8099] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 100.805025][ T8099] pci 0000:00:1d.0: Adding to iommu group 7 [ 100.828316][ T8099] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 100.915858][ T8099] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 79011 usecs [ 100.937141][ T8119] bond0: option ad_select: unable to set because the bond device is up [ 100.955378][ T8099] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 100.968628][ T8099] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 100.971631][ T8099] uhci_hcd 0000:00:1d.0: detected 2 ports [ 100.980429][ T8099] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 100.989668][ T8124] VFS: file-max limit 0 reached [ 100.992645][ T8099] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 100.996492][ T8099] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 100.999011][ T8099] usb usb1: Product: UHCI Host Controller [ 101.000901][ T8099] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 101.002969][ T8099] usb usb1: SerialNumber: 0000:00:1d.0 [ 101.029218][ T8099] hub 1-0:1.0: USB hub found [ 101.034532][ T8099] hub 1-0:1.0: 2 ports detected [ 101.129830][ T849] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 101.193994][ T8124] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 101.279866][ T849] usb 7-1: Using ep0 maxpacket: 8 [ 101.284718][ T849] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 101.287342][ T849] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.290426][ T849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.293454][ T849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.296665][ T849] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.301603][ T849] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.304887][ T849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.514747][ T849] usb 7-1: usb_control_msg returned -32 [ 101.516604][ T849] usbtmc 7-1:16.0: can't read capabilities [ 101.553066][ T8128] bond2: entered promiscuous mode [ 101.616558][ T8139] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 101.640222][ T8139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.653467][ T8139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.655928][ T8139] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 101.660312][ T8139] bond3: (slave gre1): Error -95 calling set_mac_address [ 101.702736][ T8141] gretap1: entered promiscuous mode [ 101.736358][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 101.756136][ T8145] Trying to write to read-only block-device nullb0 [ 101.786181][ T8147] syzkaller0: entered promiscuous mode [ 101.787947][ T8147] syzkaller0: entered allmulticast mode [ 101.796611][ T8147] tipc: Started in network mode [ 101.800199][ T8147] tipc: Node identity e67d80bce546, cluster identity 4711 [ 101.804586][ T8147] tipc: Enabled bearer , priority 0 [ 101.815514][ T8146] tipc: Resetting bearer [ 101.829854][ T849] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 101.830620][ T8146] tipc: Disabling bearer [ 101.908708][ T8154] xfs: Unknown parameter '/dev/input/mouse#' [ 101.973577][ T5753] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 101.983049][ T849] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 101.985993][ T849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.988498][ T849] usb 9-1: Product: syz [ 101.989947][ T849] usb 9-1: Manufacturer: syz [ 101.991507][ T849] usb 9-1: SerialNumber: syz [ 102.566318][ T8168] SQUASHFS error: Failed to read block 0x0: -5 [ 102.568442][ T8168] unable to read squashfs_super_block [ 102.729183][ T849] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 102.733871][ T849] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 102.739262][ T849] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 102.743114][ T849] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 102.746629][ T849] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.753506][ T849] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 102.761964][ T849] usb 9-1: USB disconnect, device number 12 [ 102.779519][ T8170] __nla_validate_parse: 2 callbacks suppressed [ 102.779536][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 102.784771][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 102.996230][ T8187] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 103.070199][ T8186] IPv6: syztnl0: Disabled Multicast RS [ 103.206095][ T5100] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 103.208646][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.614'. [ 103.388248][ T8193] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 103.420977][ T8195] netlink: 'syz.4.616': attribute type 9 has an invalid length. [ 103.487446][ T8198] VFS: file-max limit 0 reached [ 103.598131][ T8200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8200 comm=syz.4.618 [ 103.605945][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 103.645031][ T8202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 103.647970][ T8202] block nbd1: Unsupported socket: should be TCP or UNIX. [ 103.653029][ T8202] netlink: 'syz.4.619': attribute type 2 has an invalid length. [ 103.822691][ T8186] overlayfs: statfs failed on './file0' [ 103.856331][ T8215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.623'. [ 104.367221][ T42] kauditd_printk_skb: 116 callbacks suppressed [ 104.367235][ T42] audit: type=1800 audit(1785781813.057:1855): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.405559][ T42] audit: type=1800 audit(1785781813.097:1856): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.454528][ T42] audit: type=1800 audit(1785781813.147:1857): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.524989][ T42] audit: type=1800 audit(1785781813.217:1858): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.538918][ T42] audit: type=1400 audit(1785781813.227:1859): avc: denied { watch } for pid=8234 comm="syz.1.630" path="/syzcgroup/unified/syz1/syz1" dev="bpf" ino=21425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 104.566564][ T42] audit: type=1800 audit(1785781813.257:1860): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 104.674594][ T42] audit: type=1800 audit(1785781813.367:1861): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 104.695534][ T8242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.632'. [ 104.726155][ T42] audit: type=1800 audit(1785781813.417:1862): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 104.746685][ T42] audit: type=1400 audit(1785781813.437:1863): avc: denied { write } for pid=8243 comm="syz.4.633" name="cluster" dev="configfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.755815][ T8244] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.759710][ T42] audit: type=1800 audit(1785781813.447:1864): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136174 res=0 errno=0 [ 104.899035][ T8248] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 104.981595][ T8256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8256 comm=syz.4.635 [ 105.022143][ T8256] team0 (unregistering): Port device team_slave_0 removed [ 105.038596][ T8256] team0 (unregistering): Port device team_slave_1 removed [ 105.308726][ T8273] xt_CONNSECMARK: invalid mode: 0 [ 105.338088][ T8276] binder: 8275:8276 ioctl c0306201 200000000080 returned -14 [ 105.925379][ T8291] zonefs (loop0) ERROR: Not a zoned block device [ 106.279979][ T849] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 106.432733][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.437799][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.442264][ T849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.448486][ T849] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.452821][ T849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.465645][ T849] usb 9-1: config 0 descriptor?? [ 106.539292][ T8307] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.684782][ T8313] 9p: Bad value for 'rfdno' [ 106.690797][ T8314] CIFS: Attempting to mount //127.0.0.1/share [ 106.755165][ T8314] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.758709][ T8314] CIFS: VFS: cifs_mount failed w/return code = -4 [ 106.765293][ T8313] CIFS: Attempting to mount //127.0.0.1/share [ 106.772675][ T8313] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.776684][ T8313] CIFS: VFS: cifs_mount failed w/return code = -4 [ 106.906399][ T849] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 107.091352][ T849] usb 9-1: USB disconnect, device number 13 [ 107.261992][ T8324] fuse: Unknown parameter 'grou' [ 107.265690][ T8324] ubi: mtd0 is already attached to ubi16 [ 107.310499][ T8163] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 107.331957][ T3272] usb 7-1: USB disconnect, device number 16 [ 107.405809][ T8333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.659'. [ 107.482192][ T8337] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 107.639817][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.664'. [ 107.829838][ T5847] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 107.927059][ T8367] uhci_hcd 0000:00:1d.0: remove, state 4 [ 107.928919][ T8367] usb usb1: USB disconnect, device number 1 [ 107.945501][ T8367] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 107.960394][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'. [ 107.964468][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.670'. [ 107.982203][ T5847] usb 7-1: not running at top speed; connect to a high speed hub [ 107.986651][ T5847] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.994700][ T5847] usb 7-1: config 1 interface 0 has no altsetting 0 [ 108.000207][ T8369] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 108.000958][ T5847] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.007473][ T8369] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 108.010065][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.014299][ T5847] usb 7-1: Product: syz [ 108.016022][ T5847] usb 7-1: Manufacturer: syz [ 108.019244][ T5847] usb 7-1: SerialNumber: syz [ 108.020716][ T8369] pci 0000:00:1d.0: Adding to iommu group 7 [ 108.033682][ T8369] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 108.106198][ T8369] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 68440 usecs [ 108.158721][ T8369] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 108.165240][ T8369] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 108.170084][ T8369] uhci_hcd 0000:00:1d.0: detected 2 ports [ 108.175229][ T8369] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 108.183290][ T8369] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 108.187184][ T8369] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 108.190756][ T8369] usb usb1: Product: UHCI Host Controller [ 108.193156][ T8369] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 108.195682][ T8369] usb usb1: SerialNumber: 0000:00:1d.0 [ 108.211407][ T8369] hub 1-0:1.0: USB hub found [ 108.213772][ T8369] hub 1-0:1.0: 2 ports detected [ 108.236040][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.241512][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.254895][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.261843][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.268184][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.273437][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.281923][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.285802][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.295266][ T8371] openvswitch: netlink: IP tunnel dst address not specified [ 108.304211][ T5847] usb 7-1: USB disconnect, device number 17 [ 108.947575][ T8401] overlayfs: unescaped trailing colons in lowerdir mount option. [ 109.349963][ T5847] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 109.459165][ T42] kauditd_printk_skb: 97 callbacks suppressed [ 109.459185][ T42] audit: type=1800 audit(1785781818.147:1962): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 109.497577][ T42] audit: type=1800 audit(1785781818.187:1963): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 109.499853][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 109.519243][ T8413] kernel read not supported for file /policy (pid: 8413 comm: syz.0.686) [ 109.525063][ T42] audit: type=1800 audit(1785781818.217:1964): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.686" name="policy" dev="selinuxfs" ino=20 res=0 errno=0 [ 109.552264][ T42] audit: type=1800 audit(1785781818.247:1965): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 109.570382][ T42] audit: type=1800 audit(1785781818.267:1966): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137749 res=0 errno=0 [ 109.577334][ T5847] usb 7-1: unable to get BOS descriptor or descriptor too short [ 109.585098][ T5847] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 109.587497][ T5847] usb 7-1: can't read configurations, error -71 [ 109.732428][ T42] audit: type=1800 audit(1785781818.427:1967): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 109.755950][ T42] audit: type=1400 audit(1785781818.447:1968): avc: denied { mount } for pid=8417 comm="syz.1.688" name="/" dev="autofs" ino=24236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.769679][ T42] audit: type=1400 audit(1785781818.457:1969): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.792498][ T42] audit: type=1800 audit(1785781818.487:1970): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 109.821434][ T42] audit: type=1800 audit(1785781818.517:1971): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=137768 res=0 errno=0 [ 109.980540][ T8433] loop5: detected capacity change from 0 to 7 [ 109.985797][ T8433] loop5: p1 < > p3 p4 [ 109.987205][ T8433] loop5: partition table partially beyond EOD, truncated [ 109.993490][ T8433] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 110.204973][ T8438] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 110.324377][ T8441] sctp: [Deprecated]: syz.2.693 (pid 8441) Use of int in max_burst socket option. [ 110.324377][ T8441] Use struct sctp_assoc_value instead [ 110.574850][ T8455] CIFS mount error: No usable UNC path provided in device string! [ 110.574850][ T8455] [ 110.578181][ T8455] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 110.606111][ T8458] 9pnet_virtio: no channels available for device syz [ 111.022606][ T5847] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 111.072953][ T8480] netlink: 'syz.1.706': attribute type 10 has an invalid length. [ 111.078176][ T8480] syz_tun: entered promiscuous mode [ 111.086818][ T8480] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.172466][ T5847] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.176731][ T5847] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.180864][ T5847] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.184827][ T5847] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.192348][ T5847] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 111.196187][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.199575][ T5847] usb 7-1: Product: syz [ 111.201547][ T5847] usb 7-1: Manufacturer: syz [ 111.203575][ T5847] usb 7-1: SerialNumber: syz [ 111.411979][ T5847] usb 7-1: usb_control_msg returned -71 [ 111.413929][ T5847] usbtmc 7-1:1.0: can't read capabilities [ 111.426320][ T5847] usb 7-1: USB disconnect, device number 20 [ 111.870172][ T29] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 112.000028][ T29] usb 7-1: device descriptor read/64, error -71 [ 112.249943][ T5847] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 112.249963][ T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 112.379837][ T29] usb 7-1: device descriptor read/64, error -71 [ 112.399920][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 112.403622][ T5847] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 112.407451][ T5847] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 112.411423][ T5847] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.415527][ T5847] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.421070][ T5847] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.424683][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.490172][ T29] usb usb7-port1: attempt power cycle [ 112.725613][ T5847] usb 6-1: GET_CAPABILITIES returned 0 [ 112.727519][ T5847] usbtmc 6-1:16.0: can't read capabilities [ 112.829877][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 112.850552][ T29] usb 7-1: device descriptor read/8, error -71 [ 113.076439][ T55] usb 6-1: USB disconnect, device number 7 [ 113.090594][ T29] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 113.110542][ T29] usb 7-1: device descriptor read/8, error -71 [ 113.220377][ T29] usb usb7-port1: unable to enumerate USB device [ 113.658183][ T8495] tmpfs: Unknown parameter 'mpo' [ 113.773537][ T8506] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 113.817739][ T8506] bond5: entered promiscuous mode [ 113.820538][ T8506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 113.828511][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 113.833159][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 113.863717][ T8506] bond5: (slave bridge3): making interface the new active one [ 113.866929][ T8506] bridge3: entered promiscuous mode [ 113.871412][ T8506] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 114.071992][ T8518] sock: sock_timestamping_bind_phc: sock not bind to device [ 114.453083][ T8523] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 114.456510][ T5854] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 114.487640][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 114.487670][ T42] audit: type=1800 audit(2000000004.499:2052): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 114.501221][ T8525] syzkaller1: entered promiscuous mode [ 114.503564][ T8525] syzkaller1: entered allmulticast mode [ 114.510718][ T8525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.722'. [ 114.554114][ T42] audit: type=1800 audit(2000000004.569:2053): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 114.587982][ T42] audit: type=1800 audit(2000000004.599:2054): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 114.626569][ T42] audit: type=1800 audit(2000000004.639:2055): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 114.636716][ T8529] SET target dimension over the limit! [ 114.659031][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 114.659641][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 114.665873][ T8529] nvme_fabrics: missing parameter 'transport=%s' [ 114.669674][ T8529] nvme_fabrics: missing parameter 'nqn=%s' [ 114.694888][ T42] audit: type=1400 audit(2000000004.709:2056): avc: denied { create } for pid=8531 comm="syz.0.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.717528][ T42] audit: type=1800 audit(2000000004.729:2057): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 114.777722][ T42] audit: type=1800 audit(2000000004.789:2058): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 114.814260][ T42] audit: type=1800 audit(2000000004.829:2059): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 115.069964][ T8476] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.231599][ T8476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.233432][ T42] audit: type=1800 audit(2000000005.249:2060): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 115.239389][ T8476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.246446][ T8476] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.251691][ T8476] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.255714][ T8476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.261505][ T8476] usb 6-1: config 0 descriptor?? [ 115.267541][ T42] audit: type=1800 audit(2000000005.279:2061): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=139137 res=0 errno=0 [ 115.364008][ T8547] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 115.423125][ T8549] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 115.427078][ T8549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.681457][ T8476] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.941359][ T8509] mount: server not responding, timed out [ 116.469451][ T8556] Bluetooth: (null): Invalid header checksum [ 116.572158][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.734'. [ 116.575845][ T8562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.579467][ T8562] IPv6: NLM_F_CREATE should be set when creating new route [ 117.325909][ T8574] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.367895][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.740'. [ 117.415347][ T8578] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 117.664115][ T8599] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 117.765582][ T55] usb 6-1: USB disconnect, device number 8 [ 117.834616][ T8611] XFS (nbd2): SB validate failed with error -5. [ 117.887663][ T8619] ip6erspan0: entered allmulticast mode [ 117.936465][ T8618] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 117.987522][ T8623] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 118.102169][ T8637] netlink: 84 bytes leftover after parsing attributes in process `syz.2.759'. [ 118.147980][ T8641] netlink: 'syz.1.762': attribute type 10 has an invalid length. [ 118.172596][ T8641] team0: Port device dummy0 added [ 118.241028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.354987][ T8646] nftables ruleset with unbound set [ 118.403526][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 118.438205][ T6614] Bluetooth: hci4: Frame reassembly failed (-84) [ 118.478600][ T8650] netlink: 108 bytes leftover after parsing attributes in process `syz.4.766'. [ 118.899993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 119.287370][ T8677] __nla_validate_parse: 3 callbacks suppressed [ 119.287383][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.774'. [ 119.486669][ T8683] syzkaller0: entered promiscuous mode [ 119.488590][ T8683] syzkaller0: entered allmulticast mode [ 119.929882][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 119.929907][ T42] audit: type=1800 audit(2000000009.939:2144): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 120.025162][ T42] audit: type=1400 audit(2000000010.039:2145): avc: denied { lock } for pid=8686 comm="syz.0.777" path="socket:[26796]" dev="sockfs" ino=26796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.058124][ T42] audit: type=1800 audit(2000000010.069:2146): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 120.105128][ T42] audit: type=1800 audit(2000000010.119:2147): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 120.119565][ T8694] netlink: 88 bytes leftover after parsing attributes in process `syz.2.779'. [ 120.161644][ T42] audit: type=1800 audit(2000000010.179:2148): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 120.234424][ T42] audit: type=1800 audit(2000000010.249:2149): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 120.277557][ T42] audit: type=1800 audit(2000000010.289:2150): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 120.500433][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 120.500461][ T5100] Bluetooth: hci4: command 0x1003 tx timeout [ 120.993689][ T42] audit: type=1800 audit(2000000011.009:2151): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 121.096729][ T42] audit: type=1800 audit(2000000011.109:2152): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 121.340476][ T42] audit: type=1800 audit(2000000011.359:2153): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=27175 res=0 errno=0 [ 121.472644][ T8743] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.503286][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 121.602407][ T8760] comedi comedi3: pcl818: I/O base address not correctly aligned [ 121.686481][ T8773] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 121.789845][ T5890] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 121.827642][ T8800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=8800 comm=syz.0.795 [ 121.851020][ T8802] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 121.853532][ T8802] netlink: 224 bytes leftover after parsing attributes in process `syz.2.799'. [ 121.902988][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 121.909239][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 121.943403][ T5890] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.951135][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 121.959845][ T5890] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.966077][ T5890] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.979977][ T5890] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.985742][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.990061][ T8815] kAFS: unable to lookup cell '1' [ 121.993251][ T5890] usb 9-1: config 0 descriptor?? [ 121.998013][ T8815] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 122.002184][ T8751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.133985][ T8832] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 122.139623][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.144391][ T8832] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.180609][ T8835] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 122.336837][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.810'. [ 122.423329][ T5890] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 122.431053][ T5890] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 122.439097][ T8845] kvm: kvm [8844]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 122.444214][ T8845] kvm: kvm [8844]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 122.516344][ T8845] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 122.705244][ T5831] usb 9-1: USB disconnect, device number 14 [ 122.870411][ T8866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'. [ 122.931602][ T8876] netlink: 'syz.2.820': attribute type 11 has an invalid length. [ 122.986610][ T8876] A link change request failed with some changes committed already. Interface s may have been left with an inconsistent configuration, please check. [ 123.001167][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.031823][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.821'. [ 123.040456][ T5846] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 123.130038][ T8884] binfmt_misc: register: failed to install interpreter file ./file1 [ 123.164587][ T8883] netlink: 'syz.1.823': attribute type 5 has an invalid length. [ 123.188158][ T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 123.373097][ T8907] ublk2: read batch cmd buffer failed [ 123.376235][ T8907] ublk2: read batch cmd buffer failed [ 123.413144][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 123.584480][ T8929] usb usb2: usbfs: process 8929 (syz.4.840) did not claim interface 0 before use [ 123.610503][ T8927] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 123.879903][ T5890] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 123.932220][ T8945] sg_write: data in/out 197376/186 bytes for SCSI command 0x8-- guessing data in; [ 123.932220][ T8945] program syz.2.845 not setting count and/or reply_len properly [ 124.030148][ T55] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 124.031116][ T5890] usb 9-1: Using ep0 maxpacket: 32 [ 124.039896][ T5890] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 124.043423][ T5890] usb 9-1: config 0 has no interface number 0 [ 124.046133][ T5890] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 124.050771][ T5890] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 124.055352][ T5890] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 49954, setting to 64 [ 124.059966][ T5890] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.067627][ T5890] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 124.071707][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.074996][ T5890] usb 9-1: Product: syz [ 124.076850][ T5890] usb 9-1: Manufacturer: syz [ 124.078787][ T5890] usb 9-1: SerialNumber: syz [ 124.083430][ T5890] usb 9-1: config 0 descriptor?? [ 124.092617][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input20 [ 124.261080][ T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 124.266496][ T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 124.292332][ T5890] usb 9-1: USB disconnect, device number 15 [ 124.310630][ T55] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 124.489838][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 124.544133][ T8955] __nla_validate_parse: 2 callbacks suppressed [ 124.544146][ T8955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.847'. [ 124.761127][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 124.806296][ T8961] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.814132][ T8961] bond4: (slave macvlan2): making interface the new active one [ 124.818748][ T8961] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 124.925835][ T8979] usb usb2: usbfs: process 8979 (syz.1.850) did not claim interface 0 before use [ 124.936255][ T5854] bond_slave_1: entered promiscuous mode [ 124.979535][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 124.993335][ T8983] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 124.995166][ T42] kauditd_printk_skb: 135 callbacks suppressed [ 124.995238][ T42] audit: type=1800 audit(2000000015.009:2289): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 125.008682][ T8983] sctp: [Deprecated]: syz.4.852 (pid 8983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.008682][ T8983] Use struct sctp_sack_info instead [ 125.037072][ T42] audit: type=1400 audit(2000000015.049:2290): avc: denied { write } for pid=8984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.052889][ T55] usb 7-1: unable to get BOS descriptor or descriptor too short [ 125.056833][ T55] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 125.060289][ T55] usb 7-1: can't read configurations, error -71 [ 125.064228][ T3272] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 125.084803][ T42] audit: type=1800 audit(2000000015.099:2291): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 125.098498][ T8991] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 125.101336][ T42] audit: type=1800 audit(2000000015.119:2292): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 125.113748][ T8991] atomic_op ffff888057af8198 conn xmit_atomic 0000000000000000 [ 125.114421][ T42] audit: type=1400 audit(2000000015.129:2293): avc: denied { write } for pid=8989 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.136832][ T42] audit: type=1800 audit(2000000015.139:2294): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142099 res=0 errno=0 [ 125.173580][ T42] audit: type=1800 audit(2000000015.189:2295): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 125.180586][ T42] audit: type=1400 audit(2000000015.189:2296): avc: denied { write } for pid=8995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.191416][ T42] audit: type=1400 audit(2000000015.199:2297): avc: denied { read } for pid=8990 comm="syz.1.854" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 125.202044][ T42] audit: type=1400 audit(2000000015.199:2298): avc: denied { open } for pid=8990 comm="syz.1.854" path="/255/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 125.227209][ T8997] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.231637][ T8997] block device autoloading is deprecated and will be removed. [ 125.272637][ T9007] netlink: 'syz.4.858': attribute type 21 has an invalid length. [ 125.275193][ T9007] netlink: 128 bytes leftover after parsing attributes in process `syz.4.858'. [ 125.278088][ T9007] netlink: 'syz.4.858': attribute type 5 has an invalid length. [ 125.281345][ T9007] netlink: 'syz.4.858': attribute type 6 has an invalid length. [ 125.288214][ T9007] netlink: 3 bytes leftover after parsing attributes in process `syz.4.858'. [ 125.292087][ T9007] netlink: 'syz.4.858': attribute type 21 has an invalid length. [ 125.294780][ T9007] netlink: 128 bytes leftover after parsing attributes in process `syz.4.858'. [ 125.298021][ T9007] netlink: 'syz.4.858': attribute type 5 has an invalid length. [ 125.300829][ T9007] netlink: 'syz.4.858': attribute type 6 has an invalid length. [ 125.303997][ T9007] netlink: 3 bytes leftover after parsing attributes in process `syz.4.858'. [ 125.311912][ T9007] SQUASHFS error: Failed to read block 0x0: -5 [ 125.322620][ T9007] unable to read squashfs_super_block [ 125.411086][ T9016] kvm: kvm [9015]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000019) = 0x1 [ 125.535923][ T9016] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 125.548890][ T9016] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 125.558209][ T9016] netlink: 1 bytes leftover after parsing attributes in process `syz.4.860'. [ 125.732313][ T9043] 9pnet_fd: p9_fd_create_tcp (9043): problem binding to privport [ 125.806643][ T9050] overlay: Unknown parameter 'subj_role' [ 125.810531][ T9053] netlink: 'syz.4.868': attribute type 10 has an invalid length. [ 125.895624][ T9063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.869'. [ 125.952745][ T5753] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 125.954841][ T9072] Invalid option length (480) for dns_resolver key [ 125.957455][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: kworker/u34:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.957489][ T5753] Tainted: [L]=SOFTLOCKUP [ 125.957497][ T5753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.957526][ T5753] Workqueue: hci3 hci_rx_work [ 125.957650][ T5753] Call Trace: [ 125.957665][ T5753] [ 125.957671][ T5753] dump_stack_lvl+0x100/0x190 [ 125.957740][ T5753] sysfs_warn_dup.cold+0x1c/0x28 [ 125.957776][ T5753] sysfs_create_dir_ns+0x24b/0x2b0 [ 125.957815][ T5753] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 125.957835][ T5753] ? find_held_lock+0x2b/0x80 [ 125.957866][ T5753] ? kobject_add_internal+0x25f/0x930 [ 125.957919][ T5753] ? kobject_add_internal+0x25f/0x930 [ 125.957955][ T5753] ? do_raw_spin_unlock+0x145/0x1e0 [ 125.957988][ T5753] kobject_add_internal+0x2c8/0x930 [ 125.958023][ T5753] kobject_add+0x16a/0x1e0 [ 125.958057][ T5753] ? __pfx_kobject_add+0x10/0x10 [ 125.958083][ T5753] ? class_to_subsys+0x10f/0x150 [ 125.958143][ T5753] ? kobject_put+0xb9/0x640 [ 125.958178][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 125.958202][ T5753] device_add+0x294/0x1970 [ 125.958236][ T5753] ? __pfx_dev_set_name+0x10/0x10 [ 125.958254][ T5753] ? __pfx_device_add+0x10/0x10 [ 125.958281][ T5753] ? mgmt_send_event_skb+0x2fb/0x460 [ 125.958315][ T5753] hci_conn_add_sysfs+0x1a3/0x260 [ 125.958347][ T5753] le_conn_complete_evt+0x11eb/0x1f60 [ 125.958377][ T5753] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 125.958399][ T5753] ? hci_event_packet+0x186/0xcd0 [ 125.958435][ T5753] hci_le_conn_complete_evt+0x23c/0x3a0 [ 125.958453][ T5753] ? skb_pull_data+0x15f/0x1e0 [ 125.958530][ T5753] hci_le_meta_evt+0x34a/0x5f0 [ 125.958575][ T5753] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 125.958610][ T5753] hci_event_packet+0x51c/0xcd0 [ 125.958634][ T5753] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 125.958667][ T5753] ? __pfx_hci_event_packet+0x10/0x10 [ 125.958695][ T5753] ? kcov_remote_start+0x384/0x670 [ 125.958735][ T5753] ? lockdep_hardirqs_on+0x78/0x100 [ 125.958765][ T5753] hci_rx_work+0x451/0xfc0 [ 125.958797][ T5753] process_one_work+0xa23/0x1940 [ 125.958836][ T5753] ? __pfx_process_one_work+0x10/0x10 [ 125.958869][ T5753] ? __pfx_hci_rx_work+0x10/0x10 [ 125.958895][ T5753] worker_thread+0x5ef/0xe50 [ 125.958928][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 125.958943][ T5753] ? kthread+0x13a/0x450 [ 125.958973][ T5753] ? __pfx_worker_thread+0x10/0x10 [ 125.958991][ T5753] kthread+0x370/0x450 [ 125.959007][ T5753] ? __pfx_kthread+0x10/0x10 [ 125.959034][ T5753] ret_from_fork+0x72b/0xd50 [ 125.959067][ T5753] ? __pfx_ret_from_fork+0x10/0x10 [ 125.959105][ T5753] ? __switch_to+0x800/0x10f0 [ 125.959125][ T5753] ? __pfx_kthread+0x10/0x10 [ 125.959148][ T5753] ret_from_fork_asm+0x1a/0x30 [ 125.959196][ T5753] [ 125.959247][ T5753] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 126.059376][ T9079] overlay: ./file1 is not a directory [ 126.059917][ T5753] Bluetooth: hci3: failed to register connection device [ 126.114543][ T9085] syz.1.875 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.739938][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.980435][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 127.025383][ T9165] cgroup: Unknown subsys name 'cpuset' [ 127.055453][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 127.410224][ T12] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.480073][ T12] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.520471][ T9192] kvm: user requested TSC rate below hardware speed [ 128.174678][ T9219] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 128.260272][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 128.426760][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9239 comm=syz.0.914 [ 128.548457][ T9245] kAFS: Can only specify source 'none' with -o dyn [ 128.637472][ T9245] team0: Port device vlan5 added [ 128.767079][ T9261] configfs: Unknown parameter 'grpqu2ha~l'um-/rʴBMn [ 128.767079][ T9261] I/v' [ 129.649946][ T5890] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.676688][ T9278] batadv_slave_1: entered promiscuous mode [ 129.680423][ T9278] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.682386][ T9279] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.688627][ T9277] batadv_slave_1: left promiscuous mode [ 129.725908][ T9281] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.748959][ T9281] __nla_validate_parse: 7 callbacks suppressed [ 129.748989][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 129.756780][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 129.760688][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 129.774965][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 129.778298][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 129.782417][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 129.790993][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.794284][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.797451][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.801863][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.819832][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 129.824547][ T5890] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.829125][ T5890] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.837598][ T5890] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 129.841825][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 129.845434][ T5890] usb 6-1: Product: syz [ 129.847212][ T5890] usb 6-1: Manufacturer: syz [ 129.849212][ T5890] usb 6-1: SerialNumber: syz [ 129.866615][ T5890] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input21 [ 129.928180][ T9288] hugetlbfs: Bad value for 'uid' [ 129.931502][ T9288] hugetlbfs: Bad value for 'uid' [ 130.007269][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 130.007290][ T42] audit: type=1800 audit(2000000020.019:2457): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=144600 res=0 errno=0 [ 130.028623][ T42] audit: type=1800 audit(2000000020.039:2458): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=144607 res=0 errno=0 [ 130.037068][ T42] audit: type=1800 audit(2000000020.049:2459): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=144608 res=0 errno=0 [ 130.048031][ T42] audit: type=1800 audit(2000000020.059:2460): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 130.059183][ T5753] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 130.065541][ T5846] usb 6-1: USB disconnect, device number 9 [ 130.091572][ T5846] appletouch 6-1:1.0: input: appletouch disconnected [ 130.114951][ T9298] syzkaller1: entered promiscuous mode [ 130.116904][ T9298] syzkaller1: entered allmulticast mode [ 130.124662][ T42] audit: type=1800 audit(2000000020.139:2461): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 130.146400][ T42] audit: type=1400 audit(2000000020.159:2462): avc: denied { bind } for pid=9300 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.163741][ T42] audit: type=1800 audit(2000000020.179:2463): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 130.189156][ T42] audit: type=1800 audit(2000000020.199:2464): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 130.223018][ T42] audit: type=1800 audit(2000000020.239:2465): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 130.234641][ T42] audit: type=1400 audit(2000000020.249:2466): avc: denied { create } for pid=9309 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.314354][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.939'. [ 131.143764][ T9349] 9p: Bad value for 'version' [ 131.239980][ T9355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.949'. [ 131.476349][ T9368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.954'. [ 131.719451][ T9376] could not allocate digest TFM handle blake2s-160 [ 131.740241][ T5854] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 131.891287][ T5854] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 131.894612][ T5854] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.899476][ T5854] usb 7-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 131.902698][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.905390][ T5854] usb 7-1: Product: syz [ 131.906812][ T5854] usb 7-1: Manufacturer: syz [ 131.908427][ T5854] usb 7-1: SerialNumber: syz [ 131.928908][ T9372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.932602][ T9372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.937749][ T5854] kl5kusb105 7-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 131.940986][ T9395] netlink: 'syz.4.958': attribute type 13 has an invalid length. [ 131.955919][ T5854] usb 7-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 131.998306][ T9395] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 132.147635][ T9403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.959'. [ 132.217451][ T9408] netlink: 'syz.2.955': attribute type 2 has an invalid length. [ 132.220184][ T9408] netlink: 'syz.2.955': attribute type 2 has an invalid length. [ 132.467278][ T9418] xt_hashlimit: size too large, truncated to 1048576 [ 132.470645][ T9417] xt_hashlimit: size too large, truncated to 1048576 [ 132.473050][ T9417] xt_hashlimit: invalid interval [ 132.474700][ T9418] xt_hashlimit: invalid interval [ 132.538276][ T9420] FAT-fs (md0): unable to read boot sector [ 132.661976][ T9424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 132.746989][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887600][ T9437] binder: 9436:9437 ioctl c0306201 0 returned -14 [ 132.971991][ T9442] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 133.001058][ T9442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.019228][ T9442] bond1: (slave geneve2): making interface the new active one [ 133.026728][ T9442] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 133.111249][ T5550] netdevsim netdevsim10 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.118714][ T5550] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.125660][ T5550] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.129100][ T5550] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.133595][ T5550] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.137279][ T5550] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.151112][ T5890] usb 7-1: USB disconnect, device number 27 [ 133.183392][ T5890] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 133.202200][ T5890] kl5kusb105 7-1:1.0: device disconnected [ 133.479201][ T9466] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 133.490622][ T9468] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 133.805523][ T9481] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.121020][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 134.208895][ T9502] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.994' sets config #134219915 [ 134.291747][ T34] usb 6-1: config 0 has no interfaces? [ 134.294172][ T34] usb 6-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 134.298006][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.318323][ T34] usb 6-1: config 0 descriptor?? [ 134.532260][ T34] usb 6-1: USB disconnect, device number 10 [ 134.660272][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.937450][ T9514] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 134.951800][ T9514] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 135.028044][ T9520] __nla_validate_parse: 9 callbacks suppressed [ 135.028063][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.998'. [ 135.042714][ T42] kauditd_printk_skb: 113 callbacks suppressed [ 135.042744][ T42] audit: type=1800 audit(2000000025.059:2580): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146022 res=0 errno=0 [ 135.078386][ T42] audit: type=1800 audit(2000000025.089:2581): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.199513][ T42] audit: type=1800 audit(2000000025.209:2582): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.293956][ T42] audit: type=1800 audit(2000000025.309:2583): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.363064][ T42] audit: type=1800 audit(2000000025.379:2584): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.371924][ T42] audit: type=1400 audit(2000000025.379:2585): avc: denied { write } for pid=9549 comm="syz.1.1005" name="ip_vs" dev="proc" ino=4026533128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 135.393797][ T42] audit: type=1800 audit(2000000025.409:2586): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.453793][ T42] audit: type=1800 audit(2000000025.469:2587): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.455575][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1007'. [ 135.556850][ T9564] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 135.558886][ T42] audit: type=1800 audit(2000000025.569:2588): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 135.569436][ T42] audit: type=1800 audit(2000000025.579:2589): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=146222 res=0 errno=0 [ 135.584270][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'. [ 135.770878][ T9517] nvme_tcp: queue 0: failed to receive icresp, error -104 [ 135.939958][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 136.044893][ T9576] i2c i2c-1: dtv_property_process_set: SET cmd 0x25dfdbff undefined [ 136.057180][ T9576] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 136.164289][ T9580] program syz.4.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.465575][ T9595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1017'. [ 137.818596][ T9593] erspan1: entered promiscuous mode [ 137.976574][ T9614] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 138.002789][ T9614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.008557][ T9619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1026'. [ 138.258647][ T29] IPVS: starting estimator thread 0... [ 138.299882][ T149] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 138.359895][ T9632] IPVS: using max 26 ests per chain, 62400 per kthread [ 138.363888][ T9635] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.374757][ T9637] netlink: 'syz.2.1032': attribute type 14 has an invalid length. [ 138.473786][ T149] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.478350][ T149] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.482853][ T149] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.486484][ T149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.494394][ T9622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.509442][ T149] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.710394][ T149] usb 6-1: USB disconnect, device number 11 [ 138.749919][ T8476] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 138.899841][ T8476] usb 9-1: Using ep0 maxpacket: 8 [ 138.905072][ T8476] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.908712][ T8476] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.912499][ T8476] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.916029][ T8476] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.922028][ T8476] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.925259][ T8476] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.132596][ T8476] usb 9-1: GET_CAPABILITIES returned 0 [ 139.134389][ T8476] usbtmc 9-1:16.0: can't read capabilities [ 139.334212][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 139.347382][ T9645] macvlan0: entered allmulticast mode [ 139.349844][ T9645] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 139.362833][ T9645] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 139.373422][ T29] usb 9-1: USB disconnect, device number 16 [ 139.538937][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 139.543040][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 139.547020][ T9663] netlink: 'syz.1.1037': attribute type 20 has an invalid length. [ 139.908119][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 140.054104][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 140.054116][ T42] audit: type=1800 audit(2000000030.069:2667): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 140.071080][ T42] audit: type=1800 audit(2000000030.089:2668): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 140.105633][ T42] audit: type=1800 audit(2000000030.119:2669): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 140.125068][ T9706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1050'. [ 140.143719][ T42] audit: type=1800 audit(2000000030.159:2670): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 140.152775][ T9708] Cannot find add_set index 0 as target [ 140.158685][ T42] audit: type=1800 audit(2000000030.169:2671): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 140.182220][ T42] audit: type=1800 audit(2000000030.199:2672): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 140.188028][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 140.203801][ T42] audit: type=1800 audit(2000000030.219:2673): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 140.213556][ T9712] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 140.227364][ T9712] bond6: option mode: invalid value (8) [ 140.233411][ T9712] bond6 (unregistering): Released all slaves [ 140.264859][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1053'. [ 140.284117][ T42] audit: type=1800 audit(2000000030.299:2674): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 140.346779][ T42] audit: type=1800 audit(2000000030.359:2675): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 140.358796][ T42] audit: type=1800 audit(2000000030.379:2676): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16354 res=0 errno=0 [ 140.366995][ T9722] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002 [ 140.482054][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1061'. [ 140.694637][ T9738] overlayfs: missing 'workdir' [ 140.787822][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 140.796550][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 140.804406][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 140.939629][ T5831] vcan0 speed is unknown, defaulting to 1000 [ 140.939879][ T9743] infiniband syz1: set active [ 140.946247][ T9743] infiniband syz1: added vcan0 [ 140.952902][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 140.977222][ T9743] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 140.983653][ T9743] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 140.992440][ T9743] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 141.034880][ T9743] RDS/IB: syz1: added [ 141.037340][ T9743] smc: adding ib device syz1 with port count 1 [ 141.041689][ T9743] smc: ib device syz1 port 1 has no pnetid [ 141.049664][ T8476] vcan0 speed is unknown, defaulting to 1000 [ 141.063811][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 141.110055][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 141.115761][ T24] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 141.121144][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 141.125870][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.131515][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.137130][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.143011][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.183835][ T24] usbtmc 9-1:16.0: bulk endpoints not found [ 141.272259][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 141.381535][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 141.488238][ T9743] vcan0 speed is unknown, defaulting to 1000 [ 141.731007][ T9749] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 141.769321][ T9749] gretap1: entered allmulticast mode [ 141.777622][ T9749] bond2: (slave gretap1): making interface the new active one [ 141.781232][ T9749] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 141.784673][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 141.791195][ T9754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.791320][ T9749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9749 comm=syz.4.1065 [ 141.935111][ T5890] hid-generic 0005:07C0:5505.0005: collection stack underflow [ 141.945349][ T5890] hid-generic 0005:07C0:5505.0005: item 0 2 0 12 parsing failed [ 141.950996][ T5890] hid-generic 0005:07C0:5505.0005: probe with driver hid-generic failed with error -22 [ 142.054095][ T9774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51728 sclass=netlink_route_socket pid=9774 comm=syz.2.1074 [ 142.059117][ T9775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51728 sclass=netlink_route_socket pid=9775 comm=syz.2.1074 [ 142.242702][ T9783] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 142.255022][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 142.259273][ T9785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.331874][ T9790] bridge_slave_1: left allmulticast mode [ 142.333684][ T9790] bridge_slave_1: left promiscuous mode [ 142.335626][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.342278][ T9790] bridge_slave_0: left allmulticast mode [ 142.343973][ T9790] bridge_slave_0: left promiscuous mode [ 142.349028][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.495742][ T9795] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 142.879869][ T5890] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 143.051396][ T5890] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.056633][ T5890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 143.072060][ T5890] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.075938][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.080914][ T5890] usb 6-1: Product: syz [ 143.082620][ T5890] usb 6-1: Manufacturer: syz [ 143.086744][ T5890] usb 6-1: SerialNumber: syz [ 143.107686][ T5890] usb 6-1: config 0 descriptor?? [ 143.132879][ T5890] usb 6-1: selecting invalid altsetting 0 [ 143.344857][ T29] usb 6-1: USB disconnect, device number 12 [ 143.725631][ T24] usb 9-1: USB disconnect, device number 17 [ 144.119890][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 144.271046][ T24] usb 9-1: device descriptor read/64, error -71 [ 144.529906][ T24] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 144.689886][ T24] usb 9-1: device descriptor read/64, error -71 [ 144.810202][ T24] usb usb9-port1: attempt power cycle [ 145.169938][ T24] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 145.200466][ T24] usb 9-1: device descriptor read/8, error -71 [ 145.439912][ T24] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 145.460925][ T24] usb 9-1: device descriptor read/8, error -71 [ 145.570123][ T24] usb usb9-port1: unable to enumerate USB device [ 146.811381][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 146.811408][ T42] audit: type=1800 audit(2000000036.829:2740): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 146.867153][ T9820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 146.901696][ T42] audit: type=1800 audit(2000000036.919:2741): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 146.908444][ T5100] Bluetooth: hci2: ACL packet for unknown connection handle 344 [ 146.918053][ T9824] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.923246][ T9824] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 146.930771][ T9824] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.938928][ T9824] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 146.973070][ T42] audit: type=1400 audit(2000000036.989:2742): avc: denied { write } for pid=9823 comm="syz.4.1091" path="socket:[30234]" dev="sockfs" ino=30234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 146.997308][ T5738] bond0: (slave syz_tun): Releasing backup interface [ 147.001537][ T42] audit: type=1800 audit(2000000037.019:2743): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164328 res=0 errno=0 [ 147.014023][ T42] audit: type=1800 audit(2000000037.029:2744): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164339 res=0 errno=0 [ 147.026032][ T5753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.040595][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.043767][ T42] audit: type=1800 audit(2000000037.059:2745): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 147.044692][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.057886][ T5753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.064186][ T5753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.065606][ T9838] netlink: 'syz.2.1094': attribute type 4 has an invalid length. [ 147.079668][ T42] audit: type=1800 audit(2000000037.089:2746): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164358 res=0 errno=0 [ 147.097658][ T42] audit: type=1800 audit(2000000037.109:2747): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164369 res=0 errno=0 [ 147.120892][ T42] audit: type=1800 audit(2000000037.139:2748): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 147.128954][ T42] audit: type=1400 audit(2000000037.139:2749): avc: denied { watch } for pid=9844 comm="syz.2.1096" path="/237" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.267951][ T9859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1098'. [ 147.297663][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.313420][ T9863] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 147.397707][ T9870] vivid-000: ================= START STATUS ================= [ 147.401423][ T9870] vivid-000: Test Pattern: 100% Colorbar [ 147.412116][ T9870] vivid-000: Fill Percentage of Frame: 100 [ 147.415608][ T9870] vivid-000: Horizontal Movement: No Movement [ 147.417938][ T9833] vcan0 speed is unknown, defaulting to 1000 [ 147.418329][ T9870] vivid-000: Vertical Movement: No Movement [ 147.425454][ T9870] vivid-000: OSD Text Mode: All [ 147.427729][ T9870] vivid-000: Show Border: true [ 147.431254][ T9870] vivid-000: Show Square: false [ 147.433499][ T9870] vivid-000: Sensor Flipped Horizontally: false [ 147.436196][ T9870] vivid-000: Sensor Flipped Vertically: false [ 147.438792][ T9870] vivid-000: Insert SAV Code in Image: false [ 147.442189][ T9870] vivid-000: Insert EAV Code in Image: false [ 147.444850][ T9870] vivid-000: Insert Video Guard Band: false [ 147.447526][ T9870] vivid-000: Reduced Framerate: false [ 147.450269][ T9870] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 147.454035][ T9870] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 147.457672][ T9870] vivid-000: Enable Capture Cropping: true [ 147.460576][ T9870] vivid-000: Enable Capture Composing: true [ 147.463223][ T9870] vivid-000: Enable Capture Scaler: true [ 147.465766][ T9870] vivid-000: Timestamp Source: End of Frame [ 147.468361][ T9870] vivid-000: Colorspace: sRGB [ 147.471255][ T9870] vivid-000: Transfer Function: Default [ 147.473634][ T9870] vivid-000: Y'CbCr Encoding: Default [ 147.475886][ T9870] vivid-000: HSV Encoding: Hue 0-179 [ 147.476789][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 147.478865][ T9870] vivid-000: Quantization: Default [ 147.491796][ T9870] vivid-000: Apply Alpha To Red Only: false [ 147.494360][ T9870] vivid-000: Standard Aspect Ratio: 4x3 [ 147.496687][ T9870] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 147.496819][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.500470][ T9870] vivid-000: DV Timings: 640x480p59 inactive [ 147.506049][ T9870] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 147.509086][ T9870] vivid-000: Maximum EDID Blocks: 2 [ 147.511497][ T9870] vivid-000: Limited RGB Range (16-235): false [ 147.514130][ T9870] vivid-000: Rx RGB Quantization Range: Automatic [ 147.516861][ T9870] vivid-000: Power Present: 0x00000001 [ 147.519146][ T9870] tpg source WxH: 320x180 (Y'CbCr) [ 147.522026][ T9870] tpg field: 1 [ 147.523558][ T9870] tpg crop: (0,0)/320x180 [ 147.525422][ T9870] tpg compose: (0,0)/320x180 [ 147.527319][ T9870] tpg colorspace: 8 [ 147.528917][ T9870] tpg transfer function: 0/2 [ 147.531325][ T9870] tpg Y'CbCr encoding: 0/1 [ 147.533276][ T9870] tpg quantization: 0/2 [ 147.535090][ T9870] tpg RGB range: 0/2 [ 147.536709][ T9870] vivid-000: ================== END STATUS ================== [ 147.603718][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.670609][ T9890] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 147.673592][ T9887] netlink: 'syz.2.1105': attribute type 14 has an invalid length. [ 147.687984][ T9890] cramfs: wrong magic [ 147.748217][ T9897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1107'. [ 147.757506][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.916114][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1111'. [ 147.919634][ T9913] netlink: 'syz.1.1111': attribute type 7 has an invalid length. [ 147.922918][ T9913] netlink: 'syz.1.1111': attribute type 8 has an invalid length. [ 147.923658][ T5550] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.926984][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 147.938398][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 147.941370][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1111'. [ 147.989218][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 147.992927][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 147.996010][ T5550] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.035996][ T12] bridge_slave_1: left allmulticast mode [ 148.038448][ T12] bridge_slave_1: left promiscuous mode [ 148.042262][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.053690][ T12] bridge_slave_0: left promiscuous mode [ 148.056321][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.150588][ T5846] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 148.275898][ T12] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 148.279336][ T12] bridge3 (unregistering): left promiscuous mode [ 148.290340][ T5846] usb 9-1: device descriptor read/64, error -71 [ 148.312374][ T12] bond0 (unregistering): left promiscuous mode [ 148.315020][ T12] bond_slave_0: left promiscuous mode [ 148.317551][ T12] bond_slave_1: left promiscuous mode [ 148.321653][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.327827][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.340539][ T12] bond0 (unregistering): Released all slaves [ 148.348268][ T12] bond1 (unregistering): Released all slaves [ 148.362788][ T12] bond2 (unregistering): Released all slaves [ 148.374858][ T12] bond3 (unregistering): Released all slaves [ 148.394109][ T12] bond4 (unregistering): Released all slaves [ 148.404895][ T12] bond5 (unregistering): Released all slaves [ 148.443032][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.446183][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.449327][ T9833] bridge_slave_0: entered allmulticast mode [ 148.457873][ T9833] bridge_slave_0: entered promiscuous mode [ 148.472447][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.476910][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.481633][ T9833] bridge_slave_1: entered allmulticast mode [ 148.485679][ T9833] bridge_slave_1: entered promiscuous mode [ 148.536174][ T9833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.542914][ T5846] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 148.552557][ T9833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.575638][ T12] tipc: Left network mode [ 148.617530][ T9833] team0: Port device team_slave_0 added [ 148.627338][ T9833] team0: Port device team_slave_1 added [ 148.667666][ T9945] netlink: 'syz.2.1121': attribute type 5 has an invalid length. [ 148.682069][ T5846] usb 9-1: device descriptor read/64, error -71 [ 148.705822][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6 [ 148.713899][ T9945] ip6erspan1: entered promiscuous mode [ 148.728188][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.734153][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.753577][ T9833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.760926][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.763292][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.773286][ T9833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.804307][ T5846] usb usb9-port1: attempt power cycle [ 148.873829][ T9833] hsr_slave_0: entered promiscuous mode [ 148.877220][ T9833] hsr_slave_1: entered promiscuous mode [ 148.881913][ T9833] debugfs: 'hsr0' already exists in 'hsr' [ 148.884454][ T9833] Cannot create hsr debugfs directory [ 148.889914][ T13] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.892590][ T13] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.075449][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7 [ 149.140226][ T5100] Bluetooth: hci0: command tx timeout [ 149.167114][ T9972] program syz.2.1126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.171761][ T5846] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 149.201815][ T5846] usb 9-1: device descriptor read/8, error -71 [ 149.328082][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8 [ 149.332916][ T9833] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.335590][ T9987] sd 0:0:0:0: PR command failed: 1026 [ 149.337380][ T9987] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 149.339558][ T9987] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 149.344656][ T9833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.351683][ T9833] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.357310][ T9833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.361269][ T9833] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.374470][ T9833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.385097][ T9833] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.407287][ T9833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.451306][ T5846] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 149.480970][ T5846] usb 9-1: device descriptor read/8, error -71 [ 149.597232][ T12] batadv0: left promiscuous mode [ 149.601928][ T5846] usb usb9-port1: unable to enumerate USB device [ 149.615067][ T12] hsr_slave_0: left promiscuous mode [ 149.618838][ T12] hsr_slave_1: left promiscuous mode [ 149.622294][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.625526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.629419][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.633379][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.641314][ T12] veth1_macvtap: left promiscuous mode [ 149.643472][ T12] veth0_macvtap: left promiscuous mode [ 149.645781][ T12] veth1_vlan: left promiscuous mode [ 149.647981][ T12] veth0_vlan: left promiscuous mode [ 149.715937][ T12] team0 (unregistering): Port device vlan5 removed [ 149.862102][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.871223][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.969188][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9 [ 149.979572][T10017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.015652][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.020318][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.038829][ T9833] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.048727][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.051014][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.083635][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.085969][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.286816][T10038] binder: 10037:10038 ioctl 4018620d 0 returned -22 [ 150.392587][ T9833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.471193][T10067] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 150.569230][ T9833] veth0_vlan: entered promiscuous mode [ 150.577409][ T9833] veth1_vlan: entered promiscuous mode [ 150.599141][ T9833] veth0_macvtap: entered promiscuous mode [ 150.606780][ T9833] veth1_macvtap: entered promiscuous mode [ 150.624464][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.636261][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.691228][ T5550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.694282][ T5550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.698853][ T5550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.722071][ T5845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.772230][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.779278][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.803145][ T6613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.806131][ T6613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.867128][T10101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.987081][T10118] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 150.997573][T10118] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 151.002529][T10118] SELinux: failed to load policy [ 151.067706][T10128] Bluetooth: MGMT ver 1.23 [ 151.069915][T10128] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 151.156152][ T5100] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 151.160170][T10135] xt_hashlimit: size too large, truncated to 1048576 [ 151.172036][ T5100] Bluetooth: hci3: Injecting HCI hardware error event [ 151.179049][ T5100] Bluetooth: hci3: hardware error 0x00 [ 151.222608][ T5753] Bluetooth: hci0: command tx timeout [ 151.270701][T10140] Mass Storage Function, version: 2009/09/11 [ 151.277691][T10140] LUN: removable file: (no medium) [ 151.288000][T10140] [ 151.288794][T10140] ====================================================== [ 151.290826][T10140] WARNING: possible circular locking dependency detected [ 151.292946][T10140] syzkaller #0 Tainted: G L [ 151.295179][T10140] ------------------------------------------------------ [ 151.297770][T10140] syz.2.1167/10140 is trying to acquire lock: [ 151.297856][T10142] openvswitch: netlink: IPv4 tun info is not correct [ 151.299890][T10140] ffff888025f62450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 151.299971][T10140] [ 151.299971][T10140] but task is already holding lock: [ 151.299975][T10140] ffff8880609fa920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 151.300037][T10140] [ 151.300037][T10140] which lock already depends on the new lock. [ 151.300037][T10140] [ 151.300041][T10140] [ 151.300041][T10140] the existing dependency chain (in reverse order) is: [ 151.300046][T10140] [ 151.300046][T10140] -> #3 (&common->filesem){++++}-{4:4}: [ 151.300072][T10140] lock_acquire+0x1b9/0x370 [ 151.300096][T10140] down_read+0x99/0x4c0 [ 151.300158][T10140] fsg_show_file+0x20/0x180 [ 151.300171][T10140] configfs_read_iter+0x426/0x6f0 [ 151.300184][T10140] __kernel_read+0x397/0xad0 [ 151.300207][T10140] integrity_kernel_read+0x7e/0xb0 [ 151.300229][T10140] ima_calc_file_hash_tfm+0x25e/0x350 [ 151.329930][T10140] ima_calc_file_hash+0x167/0x380 [ 151.331700][T10140] ima_collect_measurement+0x94f/0xb30 [ 151.333579][T10140] process_measurement+0xdfe/0x2350 [ 151.335353][T10140] ima_file_check+0xc3/0x110 [ 151.336956][T10140] security_file_post_open+0xc4/0x210 [ 151.338806][T10140] path_openat+0x985/0x4280 [ 151.340405][T10140] do_file_open+0x20e/0x430 [ 151.342024][T10140] do_sys_openat2+0x10f/0x1e0 [ 151.343634][T10140] __x64_sys_openat+0x12d/0x210 [ 151.345232][T10140] do_syscall_64+0x115/0x870 [ 151.346837][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.348851][T10140] [ 151.348851][T10140] -> #2 (&p->frag_sem){++++}-{4:4}: [ 151.351205][T10140] lock_acquire+0x1b9/0x370 [ 151.352843][T10140] down_read+0x99/0x4c0 [ 151.354328][T10140] __configfs_open_file+0xe8/0x9c0 [ 151.356089][T10140] do_dentry_open+0x6ab/0x14d0 [ 151.357741][T10140] vfs_open+0x82/0x3f0 [ 151.359206][T10140] dentry_open+0x71/0xd0 [ 151.360746][T10140] ima_calc_file_hash+0xe1/0x380 [ 151.362479][T10140] ima_collect_measurement+0x94f/0xb30 [ 151.364360][T10140] process_measurement+0xdfe/0x2350 [ 151.366138][T10140] ima_file_check+0xc3/0x110 [ 151.367755][T10140] security_file_post_open+0xc4/0x210 [ 151.369631][T10140] path_openat+0x985/0x4280 [ 151.371157][T10140] do_file_open+0x20e/0x430 [ 151.372748][T10140] do_sys_openat2+0x10f/0x1e0 [ 151.374321][T10140] __x64_sys_openat+0x12d/0x210 [ 151.376188][T10140] do_syscall_64+0x115/0x870 [ 151.377763][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.379671][T10140] [ 151.379671][T10140] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 151.382308][T10140] lock_acquire+0x1b9/0x370 [ 151.383898][T10140] __mutex_lock+0x1a4/0x1bd0 [ 151.385464][T10140] process_measurement+0x5ab/0x2350 [ 151.387213][T10140] ima_file_check+0xc3/0x110 [ 151.388814][T10140] security_file_post_open+0xc4/0x210 [ 151.390656][T10140] path_openat+0x985/0x4280 [ 151.392266][T10140] do_file_open+0x20e/0x430 [ 151.393858][T10140] do_sys_openat2+0x10f/0x1e0 [ 151.395431][T10140] __x64_sys_openat+0x12d/0x210 [ 151.397014][T10140] do_syscall_64+0x115/0x870 [ 151.398566][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.400474][T10140] [ 151.400474][T10140] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 151.402762][T10140] check_prev_add+0xeb/0xe60 [ 151.404389][T10140] __lock_acquire+0x136c/0x1a40 [ 151.406071][T10140] lock_acquire+0x1b9/0x370 [ 151.407659][T10140] mnt_want_write+0x6f/0x410 [ 151.409286][T10140] path_openat+0xad9/0x4280 [ 151.410923][T10140] do_file_open+0x20e/0x430 [ 151.412540][T10140] file_open_name+0x1c3/0x3e0 [ 151.414181][T10140] filp_open+0x2e/0x50 [ 151.415657][T10140] fsg_lun_open+0x6b/0x7b0 [ 151.417230][T10140] fsg_store_file+0x1e7/0x450 [ 151.418864][T10140] configfs_write_iter+0x302/0x4e0 [ 151.420677][T10140] vfs_write+0x6ac/0x1050 [ 151.422232][T10140] ksys_write+0x12a/0x250 [ 151.423762][T10140] do_syscall_64+0x115/0x870 [ 151.425365][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.427296][T10140] [ 151.427296][T10140] other info that might help us debug this: [ 151.427296][T10140] [ 151.430427][T10140] Chain exists of: [ 151.430427][T10140] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 151.430427][T10140] [ 151.434741][T10140] Possible unsafe locking scenario: [ 151.434741][T10140] [ 151.437070][T10140] CPU0 CPU1 [ 151.438746][T10140] ---- ---- [ 151.440447][T10140] lock(&common->filesem); [ 151.441926][T10140] lock(&p->frag_sem); [ 151.444003][T10140] lock(&common->filesem); [ 151.446178][T10140] rlock(sb_writers#6); [ 151.447522][T10140] [ 151.447522][T10140] *** DEADLOCK *** [ 151.447522][T10140] [ 151.450399][T10140] 5 locks held by syz.2.1167/10140: [ 151.452097][T10140] #0: ffff88803e2cd430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 151.454916][T10140] #1: ffff888023ef4450 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 151.457645][T10140] #2: ffff88803740a680 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 151.460623][T10140] #3: ffff88806492ec70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 151.463659][T10140] #4: ffff8880609fa920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 151.466648][T10140] [ 151.466648][T10140] stack backtrace: [ 151.468505][T10140] CPU: 1 UID: 0 PID: 10140 Comm: syz.2.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.468523][T10140] Tainted: [L]=SOFTLOCKUP [ 151.468527][T10140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.468546][T10140] Call Trace: [ 151.468558][T10140] [ 151.468565][T10140] dump_stack_lvl+0x100/0x190 [ 151.468595][T10140] print_circular_bug.cold+0x178/0x1c7 [ 151.468615][T10140] check_noncircular+0x146/0x160 [ 151.468629][T10140] ? __lock_acquire+0xd5b/0x1a40 [ 151.468644][T10140] check_prev_add+0xeb/0xe60 [ 151.468657][T10140] __lock_acquire+0x136c/0x1a40 [ 151.468670][T10140] ? try_to_unlazy+0x296/0x910 [ 151.468687][T10140] lock_acquire+0x1b9/0x370 [ 151.468700][T10140] ? path_openat+0xad9/0x4280 [ 151.468711][T10140] ? __pfx___might_resched+0x10/0x10 [ 151.468732][T10140] mnt_want_write+0x6f/0x410 [ 151.468742][T10140] ? path_openat+0xad9/0x4280 [ 151.468752][T10140] path_openat+0xad9/0x4280 [ 151.468765][T10140] ? __pfx_path_openat+0x10/0x10 [ 151.468776][T10140] ? kasan_save_stack+0x30/0x50 [ 151.468795][T10140] ? kasan_save_track+0x14/0x30 [ 151.468807][T10140] ? __kasan_slab_alloc+0x89/0x90 [ 151.468819][T10140] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 151.468837][T10140] ? do_getname_kernel+0x5d/0x250 [ 151.468849][T10140] ? filp_open+0x1d/0x50 [ 151.468862][T10140] ? fsg_lun_open+0x6b/0x7b0 [ 151.468874][T10140] ? fsg_store_file+0x1e7/0x450 [ 151.468886][T10140] do_file_open+0x20e/0x430 [ 151.468897][T10140] ? __pfx_do_file_open+0x10/0x10 [ 151.468914][T10140] ? rcu_is_watching+0x12/0xc0 [ 151.468936][T10140] file_open_name+0x1c3/0x3e0 [ 151.468949][T10140] ? __pfx_file_open_name+0x10/0x10 [ 151.468962][T10140] ? do_getname_kernel+0x5d/0x250 [ 151.468974][T10140] ? __asan_memcpy+0x3c/0x60 [ 151.468985][T10140] ? do_getname_kernel+0x1be/0x250 [ 151.468998][T10140] filp_open+0x2e/0x50 [ 151.469010][T10140] fsg_lun_open+0x6b/0x7b0 [ 151.469022][T10140] ? __pfx_down_read+0x10/0x10 [ 151.469038][T10140] fsg_store_file+0x1e7/0x450 [ 151.469051][T10140] configfs_write_iter+0x302/0x4e0 [ 151.469065][T10140] vfs_write+0x6ac/0x1050 [ 151.469080][T10140] ? __pfx_configfs_write_iter+0x10/0x10 [ 151.469099][T10140] ? __pfx_vfs_write+0x10/0x10 [ 151.469117][T10140] ksys_write+0x12a/0x250 [ 151.469133][T10140] ? __pfx_ksys_write+0x10/0x10 [ 151.469150][T10140] do_syscall_64+0x115/0x870 [ 151.469164][T10140] ? clear_bhb_loop+0x40/0x90 [ 151.469178][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.469190][T10140] RIP: 0033:0x7f526779e019 [ 151.469201][T10140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.469211][T10140] RSP: 002b:00007f52686ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.469235][T10140] RAX: ffffffffffffffda RBX: 00007f5267a26090 RCX: 00007f526779e019 [ 151.469246][T10140] RDX: 000000000000009c RSI: 0000200000000140 RDI: 000000000000000a [ 151.469255][T10140] RBP: 00007f526783500c R08: 0000000000000000 R09: 0000000000000000 [ 151.469263][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.469271][T10140] R13: 00007f5267a26128 R14: 00007f5267a26090 R15: 00007fff76da65b8 [ 151.469287][T10140] [ 151.566689][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 151.652180][T10140] mass_storage.usb0/lun.0: unable to open backing file: Km^ [ 151.766336][ T6096] bond0: (slave syz_tun): Releasing backup interface [ 151.945695][ T5550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.948878][ T5550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.004671][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 152.004705][ T42] audit: type=1400 audit(2000000042.019:2851): avc: denied { write } for pid=10152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.036011][ T42] audit: type=1400 audit(2000000042.049:2852): avc: denied { write } for pid=10155 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.103905][ T5550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.107122][ T5550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.264355][ T5550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.267415][ T5550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.332935][ T5550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.336966][ T5550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.399184][ T42] audit: type=1800 audit(2000000042.409:2853): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175028 res=0 errno=0 [ 152.402466][ T12] netdevsim netdevsim4 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.405837][ T42] audit: type=1800 audit(2000000042.409:2854): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=175033 res=0 errno=0 [ 152.415005][ T42] audit: type=1800 audit(2000000042.409:2855): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=175037 res=0 errno=0 [ 152.421914][ T42] audit: type=1800 audit(2000000042.409:2856): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=175036 res=0 errno=0 [ 152.427443][ T5845] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.428195][ T42] audit: type=1800 audit(2000000042.409:2857): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=175039 res=0 errno=0 [ 152.438523][ T42] audit: type=1800 audit(2000000042.429:2858): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175114 res=0 errno=0 [ 152.445020][ T42] audit: type=1800 audit(2000000042.429:2859): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=175119 res=0 errno=0 [ 152.445647][ T5550] netdevsim netdevsim10 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.451290][ T42] audit: type=1800 audit(2000000042.429:2860): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=175123 res=0 errno=0 [ 152.461983][ T5550] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.480318][ T5845] netdevsim netdevsim4 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.484292][ T5845] netdevsim netdevsim4 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.562728][ T5550] netdevsim netdevsim10 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.566413][ T5550] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.572772][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10 [ 152.643319][ T5845] netdevsim netdevsim10 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.648727][ T5550] bridge_slave_1: left allmulticast mode [ 152.651319][ T5550] bridge_slave_1: left promiscuous mode [ 152.653793][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.657988][ T5550] bridge_slave_0: left allmulticast mode [ 152.660633][ T5550] bridge_slave_0: left promiscuous mode [ 152.663088][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.739555][ T5550] bond2 (unregistering): (slave gretap1): Releasing active interface [ 152.746834][ T5550] bond1 (unregistering): (slave geneve2): Releasing active interface [ 152.756414][ T5550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.762082][ T5550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.765400][ T5550] bond0 (unregistering): Released all slaves [ 152.768530][ T5550] bond1 (unregistering): Released all slaves [ 152.774241][ T5550] bond2 (unregistering): Released all slaves [ 152.779039][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11 [ 152.799984][ T5845] netdevsim netdevsim10 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.896928][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12 [ 153.016630][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13 [ 153.148829][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14 [ 153.184468][ T5550] hsr_slave_0: left promiscuous mode [ 153.187171][ T5550] hsr_slave_1: left promiscuous mode [ 153.189631][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.196563][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.210269][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.213099][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.217690][ T5550] veth1_macvtap: left promiscuous mode [ 153.219348][ T5550] veth0_macvtap: left promiscuous mode [ 153.221488][ T5550] veth1_vlan: left promiscuous mode [ 153.223732][ T5550] veth0_vlan: left promiscuous mode [ 153.299888][ T5100] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 153.310910][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15 [ 153.734820][ T5550] IPVS: stop unused estimator thread 0... [ 153.824404][ T5550] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.963959][ T5550] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.035561][ T5550] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.084922][ T5550] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.148905][ T12] netdevsim netdevsim5 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.168312][ T5550] bridge_slave_1: left allmulticast mode [ 154.170853][ T5550] bridge_slave_1: left promiscuous mode [ 154.173365][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.177773][ T5550] bridge_slave_0: left allmulticast mode [ 154.180529][ T5550] bridge_slave_0: left promiscuous mode [ 154.183079][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.235873][ T5550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.247879][ T5550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.252072][ T5550] bond0 (unregistering): Released all slaves [ 154.255233][ T5550] bond1 (unregistering): Released all slaves [ 154.280011][ T12] netdevsim netdevsim5 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.282927][ T12] netdevsim netdevsim5 eth19: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.285943][ T12] netdevsim netdevsim5 eth18: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.361241][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16 [ 154.484908][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17 [ 154.546743][ T5550] hsr_slave_0: left promiscuous mode [ 154.549554][ T5550] hsr_slave_1: left promiscuous mode [ 154.552318][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.555471][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.558974][ T5550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.562207][ T5550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.567961][ T5550] veth1_macvtap: left promiscuous mode [ 154.575240][ T5550] veth0_macvtap: left promiscuous mode [ 154.589894][ T5550] veth1_vlan: left promiscuous mode [ 154.601801][ T5550] veth0_vlan: left promiscuous mode [ 154.679535][ T5550] team0 (unregistering): Port device team_slave_1 removed [ 154.694939][ T5550] team0 (unregistering): Port device team_slave_0 removed [ 154.723159][ T5451] 8021q: adding VLAN 0 to HW filter on device eth18 [ 154.849492][ T5451] 8021q: adding VLAN 0 to HW filter on device eth19 [ 160.869791][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 160.869804][ T42] audit: type=1400 audit(2000000050.879:2924): avc: denied { write } for pid=10232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.904638][ T42] audit: type=1400 audit(2000000050.919:2925): avc: denied { write } for pid=10235 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.138486][ T42] audit: type=1400 audit(2000000051.149:2926): avc: denied { write } for pid=10238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.165908][ T42] audit: type=1400 audit(2000000051.179:2927): avc: denied { write } for pid=10241 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1