last executing test programs: 10m35.353195449s ago: executing program 4 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 10m33.616744765s ago: executing program 4 (id=2660): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xc075, 0x0, 0xffffffff, 0x4, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 10m33.447805973s ago: executing program 4 (id=2663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000200)=ANY=[], 0x0) 10m31.813142291s ago: executing program 4 (id=2670): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 10m30.600050973s ago: executing program 4 (id=2674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4000) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 10m29.460827675s ago: executing program 4 (id=2681): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 10m29.02269937s ago: executing program 32 (id=2681): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m52.732372756s ago: executing program 3 (id=4915): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)="06354e", 0x3, 0x80000000) 3m51.597042493s ago: executing program 3 (id=4918): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) 3m51.463587246s ago: executing program 3 (id=4919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001220f50004"], 0x20) 3m49.996072568s ago: executing program 3 (id=4921): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x24, &(0x7f0000000100)=[@cr4={0x1, 0x4041d}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="f30f090f21aa2664660f7e63ffc4e22593145b48b80dae0000000000000f23d00f21f835000000060f23f8490fc71c2cc4a1b9f903400f780266baf80cb8266c118cef66bafc0cb0cfee66b802008ed0", 0x50}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.88054687s ago: executing program 3 (id=4925): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 3m49.7202892s ago: executing program 3 (id=4929): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgid(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, 0x0) unshare(0x6a040000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x2080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m35.554169424s ago: executing program 0 (id=4995): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r0, 0x3, r1, 0x3, 0x80000}) 3m35.392168112s ago: executing program 0 (id=4996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, 0x0}, 0x4) 3m35.380758043s ago: executing program 33 (id=4929): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpgid(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) sched_setattr(r1, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) socket(0x10, 0x3, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, 0x0) unshare(0x6a040000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi3\x00', 0x2080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m30.11497172s ago: executing program 0 (id=5015): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000001811", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 3m30.048216092s ago: executing program 0 (id=5016): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x2, 0x0, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) 3m28.480100916s ago: executing program 0 (id=5020): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, 0x0, 0x8040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x61, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x4b}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x34a0}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x170}], 0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0xfeac) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000004c0)=0x1000079, 0x4) unshare(0x2a060400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x9) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) 3m28.188402915s ago: executing program 0 (id=5021): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) ioctl$IMGETCOUNT(r1, 0x618e, 0x0) unshare(0x600) unshare(0x24000480) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd25, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4040090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) 3m13.510555438s ago: executing program 34 (id=5021): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) ioctl$IMGETCOUNT(r1, 0x618e, 0x0) unshare(0x600) unshare(0x24000480) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r4, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd25, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4040090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) unshare(0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) 4.167630726s ago: executing program 6 (id=6954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="4bae4e", 0x3}, {&(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000100)="6200bd750a5c01", 0x7}], 0x3) 4.082013711s ago: executing program 6 (id=6955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x63, 0x0, 0x10, 0x180, 0x5, 0x4, 0xf1, 0x50, 0xfffffffffffffffe, 0x8, 0x9, 0xb, 0x0, 0x6, 0x9, 0x7ff], 0x70000, 0x43103}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeeee000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x2, 0x2, 0x89}, {0x80a0000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x83, 0xa4, 0x5, 0x5}, {0x1, 0xdddd0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x8f, 0xe}, {0xeeee0000, 0x1000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x7}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x5, 0x82, 0xe, 0x81, 0x7}, {0xeeef0000, 0xeeee0000, 0xd, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x10, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x1, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.823802827s ago: executing program 6 (id=6959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x10d, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0xffe0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.707041826s ago: executing program 1 (id=6962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.575418685s ago: executing program 6 (id=6963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.495858795s ago: executing program 6 (id=6966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x110003, 0x0, {[0x0, 0x4, 0x8, 0x3e91, 0x7, 0x5, 0x2, 0xe02]}}) 3.442202116s ago: executing program 1 (id=6967): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000001c0)={0x2f, 0x4, 0x0, {0x2, 0x9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = fsopen(&(0x7f00000003c0)='devtmpfs\x00', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000002b000000040000000d21000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000180000000000000000000000000000000000000000000000f8f6365d8dfccea02300e13e76a976025010d4a78e4ab62d148d50a7463472e2e6f23ab62312232f0e1829c8258a7efbfff0ef364ec5934793550d3a32c0cc9c91a80813190a89452ba238d5c41461edcde3821817a7f3362b6d588d49996ed5dbb6f5e2ba099e7d9245441a8a2ffb20696ea6f8ca7d6cda7e5850ec5e4aa5ef8b6d54e3570749a491ba52b1f864f6856359975f7b1f757fc810d7e3cb012320410839f53e"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tr\nm'], 0xa) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 3.267208449s ago: executing program 1 (id=6970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x63, 0x0, 0x10, 0x180, 0x5, 0x4, 0xf1, 0x50, 0xfffffffffffffffe, 0x8, 0x9, 0xb, 0x0, 0x6, 0x9, 0x7ff], 0x70000, 0x43103}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeeee000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x2, 0x2, 0x89}, {0x80a0000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x83, 0xa4, 0x5, 0x5}, {0x1, 0xdddd0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x8f, 0xe}, {0xeeee0000, 0x1000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x7}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x5, 0x82, 0xe, 0x81, 0x7}, {0xeeef0000, 0xeeee0000, 0xd, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x10, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x1, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.168525315s ago: executing program 6 (id=6972): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.017681197s ago: executing program 1 (id=6975): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 2.431551307s ago: executing program 2 (id=6984): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b000000000000", @ANYBLOB="6ded830630dfcd4adfc487d0dc6403b3f606c6c894c9f19285e601514ad2e6cac3e181d702bd16f18426"], 0x50) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000540)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x151, &(0x7f0000000140)={0x0, 0x8206, 0x400, 0x43, 0x26}, &(0x7f0000000040)=0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0xf00, 0x0, 0x0, 0xfffffdcf) write$P9_RVERSION(r0, &(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x13) 1.535582062s ago: executing program 1 (id=6988): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x1f, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) 1.499997271s ago: executing program 5 (id=6989): openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.423777573s ago: executing program 5 (id=6990): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x2, 0x80000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 722.141051ms ago: executing program 7 (id=6993): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000380), 0x0, 0x1000000000000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb7}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 663.684154ms ago: executing program 5 (id=6994): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000340)={0x90, 0x0, r1, {0x2, 0x2, 0x100000000000, 0xc8, 0x800, 0xf17d, {0x5, 0x5, 0x93, 0x32f, 0x4, 0x5, 0x89, 0x5, 0x4, 0x2000, 0x100, r2, r3, 0x921}}}, 0x90) dup2(0xffffffffffffffff, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 650.829164ms ago: executing program 1 (id=6995): memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x2}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0xa, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0x6, 0x0, 0xb, 0x22, 0x3, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES64=r2, @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x2004c844}, 0x28000004) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x77, 0x2, 0x9}, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x9d12, 0x1c080, 0x0, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 585.322712ms ago: executing program 7 (id=6996): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) write(r2, &(0x7f0000000240)="bd", 0x1) write(r2, 0x0, 0x0) 450.705706ms ago: executing program 2 (id=6997): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000f80), 0x400, 0x0) 449.940123ms ago: executing program 7 (id=6998): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="cf", 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'filter\x00', 0x0, [0x0, 0x8000, 0x4, 0x5, 0xc]}, &(0x7f00000002c0)=0x54) 402.626708ms ago: executing program 2 (id=6999): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000000000000000080822"], &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r3, 0x25, 0x2, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x2}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r4, r2, 0x4, r1}, 0x10) 287.83398ms ago: executing program 2 (id=7000): openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 285.198173ms ago: executing program 7 (id=7001): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x4000850) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x30000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 269.903965ms ago: executing program 2 (id=7002): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x41e, 0xa) 203.674476ms ago: executing program 2 (id=7003): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000d1000000d100000003000000070000000000001105000000090000000b0000000000000c0200000010000000062000000005000000140000000600000004000000030000000001000001000000cf0a0000000000000200000003000000008000000500000096040000040000"], &(0x7f0000000180)=""/76, 0xef, 0x4c, 0x1, 0x3}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x20000008, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, 0x0) epoll_create(0x7) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x44) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x618f, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) 187.26342ms ago: executing program 5 (id=7004): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/144) 106.312687ms ago: executing program 5 (id=7005): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x1f, 0x0, 0x0) write(r2, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) 69.067022ms ago: executing program 7 (id=7006): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000380), 0x0, 0x1000000000000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb7}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 31.114416ms ago: executing program 5 (id=7007): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x4, 0x0, 0x2000}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 0s ago: executing program 7 (id=7008): io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffe, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x7d, {"0f22e5c744240060420000c744240233d8cecbf20faef00f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x7d}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): [T20971] team0: Port device team_slave_0 removed [ 896.188817][T20971] team0: Port device team_slave_1 removed [ 896.206199][T20971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.225921][T20971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.249937][T20971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.284067][T20971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.318121][T20971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 896.523697][T20991] syzkaller0: entered promiscuous mode [ 896.541737][T20991] syzkaller0: entered allmulticast mode [ 896.670864][T21004] syzkaller0: entered promiscuous mode [ 896.696188][T21004] syzkaller0: entered allmulticast mode [ 896.960543][T21020] fuse: Unknown parameter 'grou00000000000000000000' [ 897.450391][T21021] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 897.450391][T21021] program syz.5.4562 not setting count and/or reply_len properly [ 897.779396][T20599] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 897.980393][T20599] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 898.024003][T20599] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 898.084310][T20599] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 898.134552][T20599] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 898.175450][T20599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.210844][T20599] usb 2-1: Product: syz [ 898.224132][T20599] usb 2-1: Manufacturer: syz [ 898.245089][T20599] usb 2-1: SerialNumber: syz [ 898.295130][T20599] hub 2-1:1.0: bad descriptor, ignoring hub [ 898.303474][T20599] hub 2-1:1.0: probe with driver hub failed with error -5 [ 898.509781][T20599] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 898.715746][ T29] audit: type=1400 audit(1772368562.013:695): avc: denied { read write } for pid=21014 comm="syz.1.4565" name="lp0" dev="devtmpfs" ino=4057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 898.741198][ T29] audit: type=1400 audit(1772368562.013:696): avc: denied { open } for pid=21014 comm="syz.1.4565" path="/dev/usb/lp0" dev="devtmpfs" ino=4057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 899.021835][T20636] usb 2-1: USB disconnect, device number 43 [ 899.043877][T20636] usblp0: removed [ 901.182888][T21060] tipc: Enabling of bearer rejected, failed to enable media [ 901.203677][ T29] audit: type=1400 audit(1772368564.628:697): avc: denied { read write } for pid=20269 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 901.228079][ T29] audit: type=1400 audit(1772368564.628:698): avc: denied { open } for pid=20269 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 901.261068][ T29] audit: type=1400 audit(1772368564.628:699): avc: denied { ioctl } for pid=20269 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 901.717881][T21091] syzkaller0: entered promiscuous mode [ 901.746744][T21091] syzkaller0: entered allmulticast mode [ 901.776417][T20599] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 901.804628][T21098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.953039][T20599] usb 4-1: Using ep0 maxpacket: 32 [ 901.962933][T20599] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.987470][T20599] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 902.010218][T20599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.040268][T20599] usb 4-1: config 0 descriptor?? [ 902.048501][T20599] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 902.105963][T21101] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 902.105963][T21101] program syz.1.4584 not setting count and/or reply_len properly [ 902.381170][ T29] audit: type=1400 audit(1772368565.866:700): avc: denied { create } for pid=21071 comm="syz.3.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 902.402158][T21077] clip:clip_setentry: non-CLIP VCC [ 902.424011][T20599] usb 4-1: USB disconnect, device number 44 [ 902.478580][ T29] audit: type=1400 audit(1772368565.887:701): avc: denied { ioctl } for pid=21071 comm="syz.3.4576" path="socket:[72535]" dev="sockfs" ino=72535 ioctlcmd=0x61e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 903.522283][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 903.689694][ T5863] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 903.701103][ T5863] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 903.723339][ T5863] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 903.739000][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.768833][T21112] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.785465][ T5863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.998065][T21112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.012293][T21112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.080919][T20599] usb 4-1: USB disconnect, device number 45 [ 904.667581][ T29] audit: type=1400 audit(1772368568.239:702): avc: denied { create } for pid=21124 comm="syz.2.4592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 904.944109][T21127] infiniband syz1: set down [ 904.948834][T21127] infiniband syz1: added syz_tun [ 904.998785][T21127] RDS/IB: syz1: added [ 905.013458][T21127] smc: adding ib device syz1 with port count 1 [ 905.026564][T21127] smc: ib device syz1 port 1 has no pnetid [ 905.225886][T20599] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 905.462444][T20599] usb 1-1: Using ep0 maxpacket: 16 [ 905.470083][T20599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.493444][T20599] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.519927][T20599] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 905.548352][T20599] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 905.586353][T20599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.617969][T20599] usb 1-1: config 0 descriptor?? [ 905.663253][T21157] syzkaller0: entered promiscuous mode [ 905.678773][T21157] syzkaller0: entered allmulticast mode [ 905.824179][T21166] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 905.824179][T21166] program syz.5.4604 not setting count and/or reply_len properly [ 906.075485][T20599] HID 045e:07da: Invalid code 65791 type 1 [ 906.108835][T20599] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input45 [ 906.161278][T20599] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 906.417564][T20599] usb 1-1: USB disconnect, device number 44 [ 908.091693][T20599] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 908.331241][T20599] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 908.358332][T20599] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 908.376953][T20599] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 908.396868][T20599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.425024][T20623] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 908.434698][T21184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 908.452661][T20599] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 908.520636][ T5863] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 908.579904][T20623] usb 6-1: Using ep0 maxpacket: 8 [ 908.598972][T20623] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.622194][T20623] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 908.644137][T20623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.659812][T20623] usb 6-1: Product: syz [ 908.672288][T20623] usb 6-1: Manufacturer: syz [ 908.673514][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.682023][T20623] usb 6-1: SerialNumber: syz [ 908.698000][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.699536][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 908.713967][T20623] usb 6-1: config 0 descriptor?? [ 908.739926][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.757994][ T5863] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 908.776998][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.797384][T20599] usb 2-1: USB disconnect, device number 44 [ 908.824965][ T5863] usb 1-1: config 0 descriptor?? [ 908.860075][T20623] msi2500 6-1:0.0: Registered as swradio24 [ 908.865996][T20623] msi2500 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 908.909813][ T5863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 908.949397][T20623] usb 6-1: USB disconnect, device number 10 [ 909.106459][T20599] usb 1-1: USB disconnect, device number 45 [ 909.371062][T15259] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 909.389385][T21204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.755200][T21212] syzkaller0: entered promiscuous mode [ 909.782412][T21212] syzkaller0: entered allmulticast mode [ 910.068640][T21220] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 910.068640][T21220] program syz.5.4618 not setting count and/or reply_len properly [ 912.110770][T20599] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 912.182352][T21227] geneve2: entered promiscuous mode [ 912.208436][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.235321][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.243528][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.254905][T20599] usb 4-1: Using ep0 maxpacket: 32 [ 912.264136][T20599] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 912.284753][T20599] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 912.322566][T20599] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 912.324445][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.343548][T20599] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.359389][T20599] usb 4-1: Product: syz [ 912.364842][T20599] usb 4-1: Manufacturer: syz [ 912.371993][T20599] usb 4-1: SerialNumber: syz [ 912.430895][ T35] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 912.619025][T20599] usb 4-1: USB disconnect, device number 46 [ 914.047786][T21270] xt_SECMARK: invalid security context 'unconfined' [ 914.391496][T21267] wg1 speed is unknown, defaulting to 1000 [ 914.564669][T21277] syzkaller0: entered promiscuous mode [ 914.573262][T21277] syzkaller0: entered allmulticast mode [ 914.581453][T21271] wg1 speed is unknown, defaulting to 1000 [ 915.225521][T21240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.587238][T20599] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 915.753437][T20599] usb 6-1: Using ep0 maxpacket: 32 [ 915.760454][T20599] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 915.771327][T20599] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 915.782439][T20599] usb 6-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 915.791620][T20599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.801429][T20599] usb 6-1: Product: syz [ 915.805603][T20599] usb 6-1: Manufacturer: syz [ 915.810390][T20599] usb 6-1: SerialNumber: syz [ 916.024634][T21288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 916.031903][T21288] IPv6: NLM_F_CREATE should be set when creating new route [ 916.045019][T20599] usb 6-1: USB disconnect, device number 11 [ 916.119743][T21294] bond0: (slave syz_tun): Releasing backup interface [ 916.127533][T21294] bridge_slave_0: left allmulticast mode [ 916.133389][T21294] bridge_slave_0: left promiscuous mode [ 916.141575][T21294] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.152681][T21294] bridge_slave_1: left allmulticast mode [ 916.158330][T21294] bridge_slave_1: left promiscuous mode [ 916.164330][T21294] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.178779][T21294] bond0: (slave bond_slave_0): Releasing backup interface [ 916.209590][T21294] bond0: (slave bond_slave_1): Releasing backup interface [ 916.237185][T21294] team0: Port device team_slave_0 removed [ 916.261231][T21294] team0: Port device team_slave_1 removed [ 916.282908][T21294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.304613][T21294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.322670][T21294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 916.525147][T21308] rdma_rxe: rxe_newlink: failed to add syz_tun [ 917.080471][T15251] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 917.103173][T21314] syzkaller0: entered promiscuous mode [ 917.108664][T21314] syzkaller0: entered allmulticast mode [ 919.488540][T21341] bond0: (slave syz_tun): Releasing backup interface [ 919.497038][T21341] bridge_slave_0: left allmulticast mode [ 919.502824][T21341] bridge_slave_0: left promiscuous mode [ 919.508649][T21341] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.518534][T21341] bridge_slave_1: left allmulticast mode [ 919.524301][T21341] bridge_slave_1: left promiscuous mode [ 919.530100][T21341] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.553568][T21341] bond0: (slave bond_slave_0): Releasing backup interface [ 919.566605][T21341] bond0: (slave bond_slave_1): Releasing backup interface [ 919.576513][T21341] team0: Port device team_slave_0 removed [ 919.586648][T21341] team0: Port device team_slave_1 removed [ 919.593004][T21341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.601268][T21341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.611077][T21341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 919.628250][T21340] syzkaller1: entered promiscuous mode [ 919.633871][T21340] syzkaller1: entered allmulticast mode [ 919.676886][ T29] audit: type=1800 audit(1772368584.030:703): pid=21348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4661" name="bus" dev="tmpfs" ino=1533 res=0 errno=0 [ 919.830315][T21317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.037164][T20636] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 920.859489][ T1332] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.921888][ T1332] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.965827][ T1332] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.015838][ T1332] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.121132][T20636] usb 3-1: Using ep0 maxpacket: 8 [ 921.129612][T20636] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.132952][T21373] syzkaller0: entered promiscuous mode [ 921.168055][T20636] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 921.177020][T21373] syzkaller0: entered allmulticast mode [ 921.177203][T20636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.191115][T20636] usb 3-1: Product: syz [ 921.195277][T20636] usb 3-1: Manufacturer: syz [ 921.449025][T20636] usb 3-1: SerialNumber: syz [ 921.458028][T20636] usb 3-1: config 0 descriptor?? [ 921.563452][T20636] msi2500 3-1:0.0: Registered as swradio24 [ 921.580296][T20636] msi2500 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 921.699532][T20623] usb 3-1: USB disconnect, device number 39 [ 923.276970][ T3596] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 923.477410][T21396] syzkaller1: entered promiscuous mode [ 923.483010][T21396] syzkaller1: entered allmulticast mode [ 923.491162][T21411] bond0: (slave syz_tun): Releasing backup interface [ 923.501149][T21411] bridge_slave_0: left allmulticast mode [ 923.512807][T21411] bridge_slave_0: left promiscuous mode [ 923.525230][T21411] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.535376][T21411] bridge_slave_1: left allmulticast mode [ 923.545507][T21411] bridge_slave_1: left promiscuous mode [ 923.554498][T21411] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.572365][T21411] bond0: (slave bond_slave_0): Releasing backup interface [ 923.595787][T21411] bond0: (slave bond_slave_1): Releasing backup interface [ 923.611241][T21411] team0: Port device team_slave_0 removed [ 923.626666][T21411] team0: Port device team_slave_1 removed [ 923.636745][T21411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.649288][T21411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.674684][T21411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 923.748725][T21424] xt_SECMARK: invalid security context 'unconfined' [ 923.764857][ T29] audit: type=1326 audit(1772368588.313:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 923.790738][T21423] wg1 speed is unknown, defaulting to 1000 [ 923.836577][T21428] netlink: 'syz.3.4680': attribute type 32 has an invalid length. [ 923.844415][T21428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4680'. [ 924.667992][T21428] wg1 speed is unknown, defaulting to 1000 [ 924.804688][ T29] audit: type=1326 audit(1772368588.313:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 924.807482][T21438] xt_SECMARK: invalid security context 'unconfined' [ 924.830315][ T29] audit: type=1326 audit(1772368588.345:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.102426][T21441] wg1 speed is unknown, defaulting to 1000 [ 925.254887][ T29] audit: type=1326 audit(1772368588.345:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.292743][ T29] audit: type=1326 audit(1772368588.345:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.318537][ T29] audit: type=1326 audit(1772368588.345:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.475034][ T29] audit: type=1326 audit(1772368588.345:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.499128][ T29] audit: type=1326 audit(1772368588.345:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.536443][ T29] audit: type=1326 audit(1772368588.345:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.560261][ T29] audit: type=1326 audit(1772368588.345:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.590162][ T29] audit: type=1326 audit(1772368588.345:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21425 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe556d9c799 code=0x7ffc0000 [ 925.638595][T21435] wg1 speed is unknown, defaulting to 1000 [ 925.765257][T21449] wg1 speed is unknown, defaulting to 1000 [ 926.049232][T21406] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.387146][T21458] syzkaller0: entered promiscuous mode [ 926.393316][T21458] syzkaller0: entered allmulticast mode [ 926.406516][T21463] syzkaller1: entered promiscuous mode [ 926.412119][T21463] syzkaller1: entered allmulticast mode [ 929.683132][T13939] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 929.752110][ T29] kauditd_printk_skb: 1611 callbacks suppressed [ 929.752142][ T29] audit: type=1326 audit(1772368594.382:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f54596517 code=0x7ffc0000 [ 929.890856][ T29] audit: type=1326 audit(1772368594.382:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f5453db19 code=0x7ffc0000 [ 929.985953][ T29] audit: type=1326 audit(1772368594.382:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f54596517 code=0x7ffc0000 [ 930.015973][ T29] audit: type=1326 audit(1772368594.382:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f5453db19 code=0x7ffc0000 [ 930.042345][ T29] audit: type=1326 audit(1772368594.382:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f54596517 code=0x7ffc0000 [ 930.072814][ T29] audit: type=1326 audit(1772368594.382:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f5453db19 code=0x7ffc0000 [ 930.228220][ T29] audit: type=1326 audit(1772368594.382:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f54596517 code=0x7ffc0000 [ 930.314157][ T29] audit: type=1326 audit(1772368594.382:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f5453db19 code=0x7ffc0000 [ 930.339709][ T29] audit: type=1326 audit(1772368594.382:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f54596517 code=0x7ffc0000 [ 930.365420][ T29] audit: type=1326 audit(1772368594.392:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21490 comm="syz.2.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f5453db19 code=0x7ffc0000 [ 930.822064][T21520] syzkaller0: entered promiscuous mode [ 930.856528][T21520] syzkaller0: entered allmulticast mode [ 933.400037][T21523] syzkaller1: entered promiscuous mode [ 933.405511][T21523] syzkaller1: entered allmulticast mode [ 933.615637][T21550] tipc: Started in network mode [ 933.620581][T21550] tipc: Node identity 0e9b56b1fa46, cluster identity 4711 [ 933.628258][T21550] tipc: Enabled bearer , priority 0 [ 933.671503][T21550] syzkaller0: entered promiscuous mode [ 933.683899][T21550] syzkaller0: entered allmulticast mode [ 933.692911][T21550] tipc: Resetting bearer [ 933.705190][T21549] tipc: Resetting bearer [ 933.769864][T20636] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 933.971706][T20636] usb 4-1: Using ep0 maxpacket: 8 [ 934.016403][T20636] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.043573][T20636] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 934.075917][T20636] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 934.105783][T20636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.125342][T20636] usb 4-1: Product: syz [ 934.139192][T20636] usb 4-1: Manufacturer: syz [ 934.153036][T20636] usb 4-1: SerialNumber: syz [ 934.180975][T20636] usb 4-1: config 0 descriptor?? [ 934.564766][T20636] usb 4-1: USB disconnect, device number 47 [ 936.019251][T21549] tipc: Disabling bearer [ 936.026997][T20599] tipc: Node number set to 4108146353 [ 936.068955][T21584] syzkaller1: entered promiscuous mode [ 936.084725][T21584] syzkaller1: entered allmulticast mode [ 936.104423][T13939] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 936.238027][ T3596] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.246435][ T3596] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.272502][ T3596] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.280977][ T3596] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.310965][T21597] wg1 speed is unknown, defaulting to 1000 [ 936.328104][T21603] xt_SECMARK: invalid security context 'unconfined' [ 936.616153][T21603] wg1 speed is unknown, defaulting to 1000 [ 937.337038][T21623] tipc: Enabled bearer , priority 0 [ 937.425832][T21623] syzkaller0: entered promiscuous mode [ 937.432024][T21623] syzkaller0: entered allmulticast mode [ 937.438385][T21623] tipc: Resetting bearer [ 937.529688][T21622] tipc: Resetting bearer [ 937.840357][T21648] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 938.986944][T21622] tipc: Disabling bearer [ 939.026635][T21643] syzkaller0: entered promiscuous mode [ 939.035831][T21643] syzkaller0: entered allmulticast mode [ 940.926169][T21681] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 941.216684][T21703] syzkaller0: entered promiscuous mode [ 941.223218][T21703] syzkaller0: entered allmulticast mode [ 941.575255][T21714] wg1 speed is unknown, defaulting to 1000 [ 941.589533][T21717] xt_SECMARK: invalid security context 'unconfined' [ 941.975709][T21717] wg1 speed is unknown, defaulting to 1000 [ 942.012889][T21722] fuse: Bad value for 'fd' [ 942.311904][T21735] xt_SECMARK: invalid security context 'unconfined' [ 942.674524][T21732] wg1 speed is unknown, defaulting to 1000 [ 943.135663][T21752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 943.600668][T21728] wg1 speed is unknown, defaulting to 1000 [ 944.309151][T21767] fuse: Bad value for 'fd' [ 944.430343][ T29] kauditd_printk_skb: 13517 callbacks suppressed [ 944.430360][ T29] audit: type=1400 audit(1772368610.015:15853): avc: denied { read } for pid=21768 comm="syz.2.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 947.043793][T21798] bond0: (slave syz_tun): Releasing backup interface [ 947.087525][T21798] bridge_slave_0: left allmulticast mode [ 947.104304][T21798] bridge_slave_0: left promiscuous mode [ 947.157323][T21798] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.216405][T21798] bridge_slave_1: left allmulticast mode [ 947.245157][T21798] bridge_slave_1: left promiscuous mode [ 947.257098][T21798] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.281343][T21798] bond0: (slave bond_slave_0): Releasing backup interface [ 947.322824][T21798] bond0: (slave bond_slave_1): Releasing backup interface [ 947.352381][T21798] team0: Port device team_slave_0 removed [ 947.383962][T21798] team0: Port device team_slave_1 removed [ 947.395577][T21798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.411825][T21798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.425221][T21798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 947.635566][T21815] fuse: Bad value for 'fd' [ 948.724577][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 951.425760][T21894] syzkaller0: entered promiscuous mode [ 951.442397][T21894] syzkaller0: entered allmulticast mode [ 953.761905][T21946] syzkaller0: entered promiscuous mode [ 953.768390][T21946] syzkaller0: entered allmulticast mode [ 955.462131][T21982] syzkaller0: entered promiscuous mode [ 955.467934][T21982] syzkaller0: entered allmulticast mode [ 956.111422][T22020] syzkaller0: entered promiscuous mode [ 956.124480][T22020] syzkaller0: entered allmulticast mode [ 957.684897][T22047] tipc: Enabled bearer , priority 0 [ 957.714377][T22047] syzkaller0: entered promiscuous mode [ 957.744062][T22047] syzkaller0: entered allmulticast mode [ 957.793145][T22055] tipc: Resetting bearer [ 957.811123][T22046] tipc: Resetting bearer [ 957.857651][T22046] tipc: Disabling bearer [ 959.622965][T22077] syzkaller0: entered promiscuous mode [ 959.628455][T22077] syzkaller0: entered allmulticast mode [ 963.248648][T22130] VFS: Mount too revealing [ 964.255116][T22135] syzkaller0: entered promiscuous mode [ 964.261971][T22135] syzkaller0: entered allmulticast mode [ 966.973567][T22167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 968.963689][T22202] wg1 speed is unknown, defaulting to 1000 [ 969.030189][T22214] syzkaller0: entered promiscuous mode [ 969.047941][T22214] syzkaller0: entered allmulticast mode [ 969.092194][T22209] tipc: Enabled bearer , priority 0 [ 969.118839][T22209] syzkaller0: entered promiscuous mode [ 969.129411][T22209] syzkaller0: entered allmulticast mode [ 969.147444][T22209] tipc: Resetting bearer [ 969.227553][T22225] syzkaller0: entered promiscuous mode [ 969.237951][T22225] syzkaller0: entered allmulticast mode [ 969.323961][T22207] tipc: Resetting bearer [ 969.337868][T22207] tipc: Disabling bearer [ 971.222245][T22256] syzkaller0: entered promiscuous mode [ 971.230666][T22256] syzkaller0: entered allmulticast mode [ 975.357341][T22308] syzkaller0: entered promiscuous mode [ 975.362845][T22308] syzkaller0: entered allmulticast mode [ 977.053361][T22333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22333 comm=syz.2.4974 [ 978.818828][T22365] syzkaller0: entered promiscuous mode [ 978.831350][T22365] syzkaller0: entered allmulticast mode [ 979.805437][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 981.634752][T22408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22408 comm=syz.5.4988 [ 981.909906][T22405] syzkaller0: entered promiscuous mode [ 981.917751][T22405] syzkaller0: entered allmulticast mode [ 982.446987][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 982.458244][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 982.466897][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 982.475502][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 982.483830][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 984.451378][ T5817] Bluetooth: hci4: command tx timeout [ 984.607233][T22464] kvm: pic: non byte write [ 986.446977][ T5817] Bluetooth: hci4: command tx timeout [ 986.852188][T22450] syzkaller0: entered promiscuous mode [ 986.860618][T22450] syzkaller0: entered allmulticast mode [ 988.413556][ T5817] Bluetooth: hci4: command tx timeout [ 989.014348][T22517] xt_SECMARK: invalid security context 'unconfined' [ 990.406282][ T5817] Bluetooth: hci4: command tx timeout [ 991.132242][T22432] wg1 speed is unknown, defaulting to 1000 [ 991.240123][T22528] syzkaller0: entered promiscuous mode [ 991.245810][T22528] syzkaller0: entered allmulticast mode [ 991.373812][T22518] wg1 speed is unknown, defaulting to 1000 [ 992.715907][T22515] wg1 speed is unknown, defaulting to 1000 [ 992.724224][T22547] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 993.101171][T22550] syzkaller0: entered promiscuous mode [ 993.215208][T22550] syzkaller0: entered allmulticast mode [ 996.368923][T22575] syzkaller0: entered promiscuous mode [ 996.374700][T22575] syzkaller0: entered allmulticast mode [ 1000.859997][T22618] syzkaller0: entered promiscuous mode [ 1000.912885][T22618] syzkaller0: entered allmulticast mode [ 1003.609145][T13939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1003.620331][T13939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1003.628882][T13939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1003.639107][T13939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1003.651829][T13939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1003.730781][T22656] syzkaller0: entered promiscuous mode [ 1003.736798][T22656] syzkaller0: entered allmulticast mode [ 1004.052743][T20623] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1004.214771][T20623] usb 2-1: Using ep0 maxpacket: 32 [ 1004.221716][T20623] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.232176][T20623] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1004.243995][T20623] usb 2-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 1004.253178][T20623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.261178][T20623] usb 2-1: Product: syz [ 1004.266623][T20623] usb 2-1: Manufacturer: syz [ 1004.271227][T20623] usb 2-1: SerialNumber: syz [ 1004.481532][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5061'. [ 1005.134862][T22432] chnl_net:caif_netlink_parms(): no params data found [ 1005.140551][T20623] usb 2-1: USB disconnect, device number 45 [ 1005.245886][T22670] wg1 speed is unknown, defaulting to 1000 [ 1005.328455][T22432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.336353][T22432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.345449][T22432] bridge_slave_0: entered allmulticast mode [ 1005.354084][T22432] bridge_slave_0: entered promiscuous mode [ 1005.362405][T22432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.370668][T22432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.378362][T22432] bridge_slave_1: entered allmulticast mode [ 1005.393550][T22432] bridge_slave_1: entered promiscuous mode [ 1005.508331][T22432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.539675][T22432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.606824][T22432] team0: Port device team_slave_0 added [ 1005.625901][T22432] team0: Port device team_slave_1 added [ 1005.634437][ T5817] Bluetooth: hci5: command tx timeout [ 1006.671559][T22702] syzkaller0: entered promiscuous mode [ 1006.701084][T22702] syzkaller0: entered allmulticast mode [ 1006.806250][T22432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.824486][T22432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.862343][T22432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.977287][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1007.280852][T22716] SET target dimension over the limit! [ 1007.615187][ T5817] Bluetooth: hci5: command tx timeout [ 1008.188501][T22432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.195473][T22432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.222169][T22432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.336603][T22432] hsr_slave_0: entered promiscuous mode [ 1008.344232][T22432] hsr_slave_1: entered promiscuous mode [ 1008.350447][T22432] debugfs: 'hsr0' already exists in 'hsr' [ 1008.358907][T22432] Cannot create hsr debugfs directory [ 1008.421151][T22718] syzkaller0: entered promiscuous mode [ 1008.434599][T22718] syzkaller0: entered allmulticast mode [ 1009.636595][ T5817] Bluetooth: hci5: command tx timeout [ 1010.347697][T22670] chnl_net:caif_netlink_parms(): no params data found [ 1010.380752][T22432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1010.442577][T22432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1010.512962][T22432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1010.540523][T22432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1010.757555][T22748] syzkaller0: entered promiscuous mode [ 1010.763281][T22748] syzkaller0: entered allmulticast mode [ 1011.041543][ T5817] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1011.072112][ T152] bond0 (unregistering): Released all slaves [ 1011.084943][ T152] bond1 (unregistering): Released all slaves [ 1011.099549][ T152] bond2 (unregistering): Released all slaves [ 1011.315121][T22775] fuse: Unknown parameter '00000000000000000000005' [ 1011.584047][ T5817] Bluetooth: hci5: command tx timeout [ 1011.990455][ T29] audit: type=1326 audit(1772368680.946:15854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22787 comm="syz.2.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1012.043608][ T29] audit: type=1326 audit(1772368680.967:15855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22787 comm="syz.2.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1012.088156][ T29] audit: type=1326 audit(1772368680.967:15856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22787 comm="syz.2.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1012.112557][ T29] audit: type=1326 audit(1772368680.977:15857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22787 comm="syz.2.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1012.136223][ T29] audit: type=1326 audit(1772368680.977:15858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22787 comm="syz.2.5086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1013.069754][T22670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.076987][T22670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.084855][T22670] bridge_slave_0: entered allmulticast mode [ 1013.092640][T22670] bridge_slave_0: entered promiscuous mode [ 1013.105827][ T152] tipc: Left network mode [ 1013.183788][T22794] syzkaller0: entered promiscuous mode [ 1013.189624][T22794] syzkaller0: entered allmulticast mode [ 1013.199008][T22670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.206444][T22670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.225997][T22670] bridge_slave_1: entered allmulticast mode [ 1013.233395][T22670] bridge_slave_1: entered promiscuous mode [ 1014.834382][T22823] fuse: Unknown parameter '00000000000000000000005' [ 1014.914622][T13939] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1014.925463][T13939] Bluetooth: hci3: Injecting HCI hardware error event [ 1014.968588][ T5817] Bluetooth: hci3: hardware error 0x00 [ 1015.261755][T22670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.289270][T22670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.408990][T22670] team0: Port device team_slave_0 added [ 1015.470571][T22670] team0: Port device team_slave_1 added [ 1015.829014][T22838] syzkaller0: entered promiscuous mode [ 1015.834517][T22838] syzkaller0: entered allmulticast mode [ 1016.013908][T22670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.128236][T22670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.367793][T22670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.479299][T22670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.511064][T22670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.629520][T22670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.989866][ T5817] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1018.513130][ T152] hsr_slave_0: left promiscuous mode [ 1018.520666][ T152] hsr_slave_1: left promiscuous mode [ 1018.825415][T22887] fuse: Unknown parameter '00000000000000000000005' [ 1019.215373][T22873] syzkaller0: entered promiscuous mode [ 1019.223049][T22873] syzkaller0: entered allmulticast mode [ 1020.576234][T22670] hsr_slave_0: entered promiscuous mode [ 1020.598589][T22670] hsr_slave_1: entered promiscuous mode [ 1020.604791][T22670] debugfs: 'hsr0' already exists in 'hsr' [ 1020.624215][T22670] Cannot create hsr debugfs directory [ 1020.670276][T22432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.768918][ T29] audit: type=1326 audit(1772368690.154:15859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1020.824105][ T29] audit: type=1326 audit(1772368690.154:15860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1020.891842][T22432] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.910759][ T29] audit: type=1326 audit(1772368690.196:15861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1021.622582][T22916] fuse: Unknown parameter '00000000000000000000005' [ 1021.886353][ T29] audit: type=1326 audit(1772368690.196:15862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1021.916521][ T29] audit: type=1326 audit(1772368690.196:15863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1022.203933][ T29] audit: type=1326 audit(1772368690.196:15864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1022.257289][ T29] audit: type=1326 audit(1772368690.206:15865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1022.318465][ T29] audit: type=1326 audit(1772368690.217:15866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1022.369258][ T29] audit: type=1326 audit(1772368690.217:15867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f5455cfce code=0x7ffc0000 [ 1022.429343][T22920] kvm: kvm [22919]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1022.438269][ T29] audit: type=1326 audit(1772368690.259:15868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22904 comm="syz.2.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1022.462403][T22920] kvm: kvm [22919]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1022.562050][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.569246][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.627468][T22925] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2165128721 (8660514884 ns) > initial count (6860265812 ns). Using initial count to start timer. [ 1022.634462][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.652011][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.699441][T22927] syzkaller0: entered promiscuous mode [ 1022.715311][T22927] syzkaller0: entered allmulticast mode [ 1022.908337][T22432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1023.019761][T22953] netlink: 'syz.5.5123': attribute type 5 has an invalid length. [ 1023.057013][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'. [ 1023.092520][T22954] netlink: 'syz.5.5123': attribute type 5 has an invalid length. [ 1023.112326][T22954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5123'. [ 1023.246798][T22670] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1023.267862][T22670] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1023.297376][T22670] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1023.359545][T22670] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1023.442383][T22966] fuse: Unknown parameter '00000000000000000000005' [ 1023.903566][T22432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.884108][T22670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.941534][T22670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.063845][T15259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.071049][T15259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.143617][T15259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.150797][T15259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.320158][T22670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1025.393010][T23011] syzkaller0: entered promiscuous mode [ 1025.418581][T23011] syzkaller0: entered allmulticast mode [ 1025.435222][T23023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23023 comm=syz.1.5133 [ 1025.484473][T23025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23025 comm=syz.1.5133 [ 1025.631033][T22432] veth0_vlan: entered promiscuous mode [ 1025.681339][T22432] veth1_vlan: entered promiscuous mode [ 1025.764286][T22432] veth0_macvtap: entered promiscuous mode [ 1025.785121][T22432] veth1_macvtap: entered promiscuous mode [ 1025.846802][T22432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.863995][T22432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.992444][T22670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.546152][T15251] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.711044][T15251] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.742663][T15251] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.752899][T15251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.762497][T15251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.820600][T15251] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.832667][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.889099][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.003918][T23048] fuse: Unknown parameter '00000000000000000000005' [ 1027.336210][T22670] veth0_vlan: entered promiscuous mode [ 1027.349347][T22670] veth1_vlan: entered promiscuous mode [ 1027.390653][T22670] veth0_macvtap: entered promiscuous mode [ 1027.435040][T22670] veth1_macvtap: entered promiscuous mode [ 1027.473618][T22670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.533268][T22670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.551066][ T3596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.571769][T23067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23067 comm=syz.6.5143 [ 1027.596799][ T3596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.608283][T23067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23067 comm=syz.6.5143 [ 1027.627248][ T3596] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.650442][ T3596] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.673926][T23069] syzkaller0: entered promiscuous mode [ 1027.689624][T23069] syzkaller0: entered allmulticast mode [ 1027.829260][T23074] syzkaller0: entered promiscuous mode [ 1027.834993][T23074] syzkaller0: entered allmulticast mode [ 1028.006172][T15259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.019082][T15259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.046749][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.054732][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.335649][T23103] fuse: Unknown parameter 'fd00000000000000000000005' [ 1029.818767][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23106 comm=syz.2.5156 [ 1029.838042][T23106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23106 comm=syz.2.5156 [ 1030.011300][T23113] syzkaller0: entered promiscuous mode [ 1030.023515][T23113] syzkaller0: entered allmulticast mode [ 1030.263600][T23129] syzkaller0: entered promiscuous mode [ 1030.271413][T23129] syzkaller0: entered allmulticast mode [ 1031.821003][T23149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23149 comm=syz.2.5171 [ 1031.835524][T23149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23149 comm=syz.2.5171 [ 1031.903721][T23150] fuse: Unknown parameter 'fd00000000000000000000005' [ 1032.722361][T23164] syzkaller0: entered promiscuous mode [ 1032.731804][T23164] syzkaller0: entered allmulticast mode [ 1032.738743][ T3596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.980542][T23170] syzkaller0: entered promiscuous mode [ 1032.986159][T23170] syzkaller0: entered allmulticast mode [ 1033.274620][T23189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23189 comm=syz.7.5184 [ 1033.293306][T23189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=23189 comm=syz.7.5184 [ 1033.736585][T23196] fuse: Unknown parameter 'fd00000000000000000000005' [ 1037.776202][T23261] syzkaller0: entered promiscuous mode [ 1037.781827][T23261] syzkaller0: entered allmulticast mode [ 1037.898791][T23235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.906302][T23235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.968138][T23235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.981917][T23235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.139644][T23231] syzkaller0: entered promiscuous mode [ 1038.146031][T23231] syzkaller0: entered allmulticast mode [ 1040.670629][ T35] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.679682][ T35] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.705485][T23265] wg1 speed is unknown, defaulting to 1000 [ 1040.796197][ T35] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.805654][ T35] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.008969][T23329] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1041.065512][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1041.980791][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1041.989898][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1042.095566][T23333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.103130][T23333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.257675][T23333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1042.288764][T23333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1042.296763][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1042.296785][ T29] audit: type=1400 audit(1772368712.737:15881): avc: denied { watch_reads } for pid=23348 comm="syz.5.5221" path="/161/file1" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1042.457100][T23355] SET target dimension over the limit! [ 1042.494083][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1042.515358][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1042.564522][ T152] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.594158][ T152] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.626964][ T152] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.656909][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1042.713485][ T152] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.727434][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1042.817015][T23356] syzkaller0: entered promiscuous mode [ 1042.836292][T23356] syzkaller0: entered allmulticast mode [ 1043.781576][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1045.278002][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5219'. [ 1045.491283][T23400] syzkaller0: entered promiscuous mode [ 1045.514618][T23400] syzkaller0: entered allmulticast mode [ 1049.564163][T23457] syzkaller0: entered promiscuous mode [ 1049.610803][T23457] syzkaller0: entered allmulticast mode [ 1050.041858][T23473] wg1 speed is unknown, defaulting to 1000 [ 1051.397273][T23486] kvm: MONITOR instruction emulated as NOP! [ 1051.778288][T23500] syzkaller0: entered promiscuous mode [ 1051.790954][T23500] syzkaller0: entered allmulticast mode [ 1052.269626][T23415] Set syz1 is full, maxelem 65536 reached [ 1053.695464][T23550] syzkaller0: entered promiscuous mode [ 1053.714826][T23550] syzkaller0: entered allmulticast mode [ 1053.987592][ T5863] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1054.063725][ T29] audit: type=1400 audit(1772368725.115:15882): avc: denied { watch watch_reads } for pid=23565 comm="syz.5.5280" path="/proc/509/task" dev="proc" ino=87381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1054.143535][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 1054.168825][ T5863] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.211752][ T5863] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1054.218858][T23572] wg1 speed is unknown, defaulting to 1000 [ 1054.229162][T23575] syzkaller0: entered promiscuous mode [ 1054.231768][ T5863] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 1054.234646][T23575] syzkaller0: entered allmulticast mode [ 1054.264786][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.274861][ T5863] usb 3-1: Product: syz [ 1054.279455][ T5863] usb 3-1: Manufacturer: syz [ 1054.324409][ T5863] usb 3-1: SerialNumber: syz [ 1054.552722][T23589] syzkaller0: entered promiscuous mode [ 1054.563503][T23554] __nla_validate_parse: 26 callbacks suppressed [ 1054.563523][T23554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5275'. [ 1054.579334][T23589] syzkaller0: entered allmulticast mode [ 1054.784521][ T5863] usb 3-1: USB disconnect, device number 40 [ 1055.818895][T23604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5294'. [ 1055.862871][T23604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5294'. [ 1055.994296][ T29] audit: type=1326 audit(1772368727.131:15883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.121747][ T29] audit: type=1326 audit(1772368727.131:15884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.266193][ T29] audit: type=1326 audit(1772368727.131:15885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.304364][ T29] audit: type=1326 audit(1772368727.131:15886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.339807][ T29] audit: type=1326 audit(1772368727.131:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.379729][ T29] audit: type=1326 audit(1772368727.131:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.405418][ T29] audit: type=1326 audit(1772368727.131:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.446989][ T29] audit: type=1326 audit(1772368727.131:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.472548][ T29] audit: type=1326 audit(1772368727.131:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23607 comm="syz.6.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 1056.479261][T23624] syzkaller0: entered promiscuous mode [ 1056.528654][T23624] syzkaller0: entered allmulticast mode [ 1056.566382][T23622] syzkaller0: entered promiscuous mode [ 1056.571941][T23622] syzkaller0: entered allmulticast mode [ 1056.791846][T20636] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1056.921789][T23639] kvm: emulating exchange as write [ 1056.972161][T20636] usb 2-1: Using ep0 maxpacket: 32 [ 1056.980342][T20636] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.991505][T20636] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1057.003987][T20636] usb 2-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 1057.038080][T20636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.073129][T20636] usb 2-1: Product: syz [ 1057.083256][T20636] usb 2-1: Manufacturer: syz [ 1057.088141][T20636] usb 2-1: SerialNumber: syz [ 1057.393523][T23628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5302'. [ 1058.053166][T20636] usb 2-1: USB disconnect, device number 46 [ 1058.129443][T23657] wg1 speed is unknown, defaulting to 1000 [ 1058.176700][T23664] syzkaller0: entered promiscuous mode [ 1058.190583][T23664] syzkaller0: entered allmulticast mode [ 1058.570114][T23660] syzkaller0: entered promiscuous mode [ 1058.585102][T23660] syzkaller0: entered allmulticast mode [ 1058.904411][T23680] syzkaller0: entered promiscuous mode [ 1058.922223][T23680] syzkaller0: entered allmulticast mode [ 1059.746091][T23705] misc userio: Invalid payload size [ 1059.868469][T23706] syzkaller0: entered promiscuous mode [ 1059.921953][T23706] syzkaller0: entered allmulticast mode [ 1060.513862][T23716] syzkaller0: entered promiscuous mode [ 1060.520113][T23716] syzkaller0: entered allmulticast mode [ 1060.527715][T15251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.896186][T23724] syzkaller0: entered promiscuous mode [ 1060.915182][T23724] syzkaller0: entered allmulticast mode [ 1061.290234][T23740] wg1 speed is unknown, defaulting to 1000 [ 1061.437568][T23749] syzkaller0: entered promiscuous mode [ 1061.462583][T23749] syzkaller0: entered allmulticast mode [ 1061.493383][T23752] syzkaller0: entered promiscuous mode [ 1061.521988][T23752] syzkaller0: entered allmulticast mode [ 1062.028552][T23766] misc userio: Invalid payload size [ 1062.855838][T23773] SET target dimension over the limit! [ 1063.699904][T23797] syzkaller0: entered promiscuous mode [ 1063.706386][T23797] syzkaller0: entered allmulticast mode [ 1064.036827][T23807] syzkaller0: entered promiscuous mode [ 1064.049641][T23807] syzkaller0: entered allmulticast mode [ 1064.281929][T23817] SET target dimension over the limit! [ 1064.527260][T23828] misc userio: Invalid payload size [ 1065.455403][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1067.356841][T23857] syzkaller0: entered promiscuous mode [ 1067.371959][T23857] syzkaller0: entered allmulticast mode [ 1067.452212][T23865] SET target dimension over the limit! [ 1067.596500][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1067.763839][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1067.780125][ T10] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.815465][ T10] usb 8-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1067.860044][ T10] usb 8-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 1067.885456][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.903972][ T10] usb 8-1: Product: syz [ 1067.913860][ T10] usb 8-1: Manufacturer: syz [ 1067.923728][ T10] usb 8-1: SerialNumber: syz [ 1068.156589][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5379'. [ 1068.194981][ T10] usb 8-1: USB disconnect, device number 2 [ 1068.606614][T23892] syzkaller0: entered promiscuous mode [ 1068.617900][T23892] syzkaller0: entered allmulticast mode [ 1068.885507][T23902] syzkaller0: entered promiscuous mode [ 1068.897578][T23902] syzkaller0: entered allmulticast mode [ 1069.593759][T23928] syzkaller0: entered promiscuous mode [ 1069.599374][T23928] syzkaller0: entered allmulticast mode [ 1069.792492][ T5863] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1069.905399][T23933] syzkaller0: entered promiscuous mode [ 1069.911297][T23933] syzkaller0: entered allmulticast mode [ 1070.017395][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 1070.036539][ T5863] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.048960][ T5863] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1070.060625][ T5863] usb 7-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59 [ 1070.069792][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.077835][ T5863] usb 7-1: Product: syz [ 1070.088826][ T5863] usb 7-1: Manufacturer: syz [ 1070.096278][ T5863] usb 7-1: SerialNumber: syz [ 1070.204928][T23945] syzkaller0: entered promiscuous mode [ 1070.210553][T23945] syzkaller0: entered allmulticast mode [ 1070.335911][T23926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5401'. [ 1070.365216][ T5863] usb 7-1: USB disconnect, device number 2 [ 1070.431686][T23953] syzkaller0: entered promiscuous mode [ 1070.437196][T23953] syzkaller0: entered allmulticast mode [ 1071.093243][T23969] syzkaller0: entered promiscuous mode [ 1071.114239][T23969] syzkaller0: entered allmulticast mode [ 1071.524977][T23990] syzkaller0: entered promiscuous mode [ 1071.545541][T23990] syzkaller0: entered allmulticast mode [ 1071.905899][T24003] syzkaller0: entered promiscuous mode [ 1071.921737][T24003] syzkaller0: entered allmulticast mode [ 1071.937562][T24005] syzkaller0: entered promiscuous mode [ 1071.950248][T24005] syzkaller0: entered allmulticast mode [ 1072.214145][T24010] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24010 comm=syz.1.5433 [ 1072.409165][T24025] SET target dimension over the limit! [ 1072.554718][T24033] syzkaller0: entered promiscuous mode [ 1072.566413][T24033] syzkaller0: entered allmulticast mode [ 1072.807026][T24036] tipc: Enabling of bearer rejected, failed to enable media [ 1072.817006][T24036] syzkaller0: entered promiscuous mode [ 1072.829117][T24036] syzkaller0: entered allmulticast mode [ 1072.934298][T24041] syzkaller0: entered promiscuous mode [ 1072.946013][T24041] syzkaller0: entered allmulticast mode [ 1073.026899][T24043] syzkaller0: entered promiscuous mode [ 1073.032930][T24043] syzkaller0: entered allmulticast mode [ 1073.210668][T24057] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5450'. [ 1073.466497][T24067] syzkaller0: entered promiscuous mode [ 1073.494164][T24067] syzkaller0: entered allmulticast mode [ 1073.932893][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1073.932909][ T29] audit: type=1326 audit(1772368745.977:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.011676][ T29] audit: type=1326 audit(1772368745.977:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.059532][ T29] audit: type=1326 audit(1772368745.977:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.123751][T24088] syzkaller0: entered promiscuous mode [ 1074.132147][T24088] syzkaller0: entered allmulticast mode [ 1074.185229][ T29] audit: type=1326 audit(1772368745.977:15896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.216631][ T29] audit: type=1326 audit(1772368745.977:15897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.279022][ T29] audit: type=1326 audit(1772368745.977:15898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.366539][ T29] audit: type=1326 audit(1772368745.977:15899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.448865][ T29] audit: type=1326 audit(1772368745.977:15900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1074.552106][T24099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1074.562749][ T29] audit: type=1326 audit(1772368745.977:15901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24082 comm="syz.2.5457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1076.921702][T24145] wg1 speed is unknown, defaulting to 1000 [ 1078.780653][T24062] Set syz1 is full, maxelem 65536 reached [ 1080.373960][T24238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5509'. [ 1080.655395][T24251] wg1 speed is unknown, defaulting to 1000 [ 1080.926910][ T29] audit: type=1800 audit(1772368753.315:15902): pid=24262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5515" name="bus" dev="tmpfs" ino=2595 res=0 errno=0 [ 1081.085095][ T29] audit: type=1400 audit(1772368753.483:15903): avc: denied { write } for pid=24264 comm="syz.1.5516" lport=36474 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1081.150053][ T29] audit: type=1326 audit(1772368753.557:15904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.189394][ T29] audit: type=1326 audit(1772368753.588:15905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.223243][ T29] audit: type=1326 audit(1772368753.588:15906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.333473][ T29] audit: type=1326 audit(1772368753.588:15907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.358758][ T29] audit: type=1326 audit(1772368753.588:15908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.384041][ T29] audit: type=1326 audit(1772368753.588:15909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.416857][ T29] audit: type=1326 audit(1772368753.588:15910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.440733][ T29] audit: type=1326 audit(1772368753.588:15911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24266 comm="syz.1.5517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86719c799 code=0x7ffc0000 [ 1081.635527][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1081.970162][T24303] wg1 speed is unknown, defaulting to 1000 [ 1082.493246][T24325] netlink: 'syz.5.5538': attribute type 7 has an invalid length. [ 1082.501155][T24325] netlink: 'syz.5.5538': attribute type 8 has an invalid length. [ 1083.203258][T24362] syzkaller0: entered promiscuous mode [ 1083.208901][T24362] syzkaller0: entered allmulticast mode [ 1083.239455][T24364] syzkaller0: entered promiscuous mode [ 1083.246685][T24364] syzkaller0: entered allmulticast mode [ 1083.380568][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1083.567720][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.578535][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1083.589964][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.613182][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1083.637796][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.665463][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1083.702459][ T10] usb 2-1: invalid MIDI out EP 0 [ 1083.873423][T24357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.928110][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1083.937665][T24357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.045969][ T5863] usb 2-1: USB disconnect, device number 47 [ 1084.211862][T24398] syzkaller0: entered promiscuous mode [ 1084.232277][T24398] syzkaller0: entered allmulticast mode [ 1084.260220][T24397] syzkaller0: entered promiscuous mode [ 1084.279938][T24397] syzkaller0: entered allmulticast mode [ 1085.498041][T24438] syzkaller0: entered promiscuous mode [ 1085.510471][T24438] syzkaller0: entered allmulticast mode [ 1085.733041][T24450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=24450 comm=syz.7.5585 [ 1085.899597][T24447] syzkaller0: entered promiscuous mode [ 1085.911768][T24447] syzkaller0: entered allmulticast mode [ 1087.708725][T24487] pimreg1: tun_chr_ioctl cmd 1074025677 [ 1087.714536][T24487] pimreg1: linktype set to 772 [ 1087.737138][ T5855] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1087.910111][ T5855] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1087.921554][ T5855] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1087.934230][ T5855] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1087.944093][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.960262][ T5855] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1087.977708][ T5855] usb 3-1: invalid MIDI out EP 0 [ 1088.121247][ T5855] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1088.158493][T24480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.185308][T24480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.244288][T24494] netlink: 'syz.5.5599': attribute type 32 has an invalid length. [ 1088.264373][ T10] usb 3-1: USB disconnect, device number 41 [ 1089.554808][T24510] syzkaller0: entered promiscuous mode [ 1089.572472][T24510] syzkaller0: entered allmulticast mode [ 1091.613024][T24552] syzkaller0: entered promiscuous mode [ 1091.633021][T24552] syzkaller0: entered allmulticast mode [ 1091.712881][T24559] syzkaller0: entered promiscuous mode [ 1091.723782][T24559] syzkaller0: entered allmulticast mode [ 1091.795684][ T5863] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1092.006398][ T5863] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1092.033191][ T5863] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1092.061628][ T5863] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1092.082304][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.170375][ T5863] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.208564][ T5863] usb 6-1: invalid MIDI out EP 0 [ 1092.209621][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5632'. [ 1092.238081][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5632'. [ 1092.373289][T24555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.412244][T24555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.492043][ T5863] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1092.541013][ T5863] usb 6-1: USB disconnect, device number 12 [ 1094.470489][T24615] syzkaller0: entered promiscuous mode [ 1094.480554][T24615] syzkaller0: entered allmulticast mode [ 1095.185673][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1095.202219][T24661] syzkaller0: entered promiscuous mode [ 1095.211927][T24661] syzkaller0: entered allmulticast mode [ 1095.356684][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1095.389658][ T10] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1095.401405][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1095.411454][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.443392][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1095.460082][ T10] usb 2-1: invalid MIDI out EP 0 [ 1095.495315][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1095.526722][T23046] udevd[23046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1095.733645][T24641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.758869][T24641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.837301][ T5863] usb 2-1: USB disconnect, device number 48 [ 1096.296698][T24697] syzkaller0: entered promiscuous mode [ 1096.308595][T24697] syzkaller0: entered allmulticast mode [ 1097.053912][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1097.053929][ T29] audit: type=1400 audit(1772368770.261:15914): avc: denied { read } for pid=24711 comm="syz.5.5685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1097.704046][T24740] syzkaller0: entered promiscuous mode [ 1097.720156][T24740] syzkaller0: entered allmulticast mode [ 1098.787358][ T29] audit: type=1800 audit(1772368772.077:15915): pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5702" name="bus" dev="tmpfs" ino=2776 res=0 errno=0 [ 1099.017638][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1099.215030][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1099.243417][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1099.271953][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1099.291166][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1099.327667][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.368994][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1099.564415][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1099.575851][T24767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.627947][T24767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.692241][ T3596] bridge_slave_1: left allmulticast mode [ 1099.713032][ T5863] usb 2-1: USB disconnect, device number 49 [ 1099.715465][ T3596] bridge_slave_1: left promiscuous mode [ 1099.754141][ T3596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.848892][ T3596] bridge_slave_0: left allmulticast mode [ 1099.862399][ T3596] bridge_slave_0: left promiscuous mode [ 1099.872646][ T3596] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.139783][ T3596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1101.269978][ T3596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1101.354945][ T3596] bond0 (unregistering): Released all slaves [ 1101.482564][ T3596] tipc: Disabling bearer [ 1101.490301][ T3596] tipc: Left network mode [ 1101.579208][T22824] Bluetooth: hci4: command 0x0406 tx timeout [ 1102.609983][ T3596] hsr_slave_0: left promiscuous mode [ 1102.630518][ T3596] hsr_slave_1: left promiscuous mode [ 1102.660125][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.692374][ T3596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.301428][ T3596] team0 (unregistering): Port device team_slave_1 removed [ 1103.370802][ T3596] team0 (unregistering): Port device team_slave_0 removed [ 1103.501040][T24874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5740'. [ 1103.814861][ T29] audit: type=1800 audit(1772368777.348:15916): pid=24887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5742" name="bus" dev="tmpfs" ino=660 res=0 errno=0 [ 1104.087461][T24895] syzkaller0: entered promiscuous mode [ 1104.100963][T24895] syzkaller0: entered allmulticast mode [ 1104.442081][T24902] wg1 speed is unknown, defaulting to 1000 [ 1104.639371][ T3596] IPVS: stop unused estimator thread 0... [ 1104.693857][ T29] audit: type=1326 audit(1772368778.271:15917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1104.828949][ T29] audit: type=1326 audit(1772368778.303:15918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1104.882644][ T29] audit: type=1326 audit(1772368778.313:15919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1104.932862][ T29] audit: type=1326 audit(1772368778.313:15920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1104.998405][ T29] audit: type=1326 audit(1772368778.313:15921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1105.074164][ T29] audit: type=1326 audit(1772368778.313:15922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1105.199272][ T29] audit: type=1326 audit(1772368778.313:15923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1105.343301][ T29] audit: type=1326 audit(1772368778.324:15924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1105.449008][ T29] audit: type=1326 audit(1772368778.324:15925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24913 comm="syz.2.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f3f5459c799 code=0x7ffc0000 [ 1105.832690][T24956] syzkaller0: entered promiscuous mode [ 1105.850946][T24956] syzkaller0: entered allmulticast mode [ 1106.285573][T24972] syzkaller0: entered promiscuous mode [ 1106.304098][T24972] syzkaller0: entered allmulticast mode [ 1106.324052][ T3596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.006826][T25006] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1107.036583][T25006] block device autoloading is deprecated and will be removed. [ 1107.065929][T25009] syzkaller0: entered promiscuous mode [ 1107.092699][T25009] syzkaller0: entered allmulticast mode [ 1107.566178][T25026] wg1 speed is unknown, defaulting to 1000 [ 1108.665344][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1108.665360][ T29] audit: type=1400 audit(1772368782.440:15941): avc: denied { write } for pid=25073 comm="syz.7.5792" name="file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1108.736003][ T29] audit: type=1400 audit(1772368782.440:15942): avc: denied { open } for pid=25073 comm="syz.7.5792" path="/123/file0" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1109.446293][T25105] netlink: 'syz.6.5804': attribute type 9 has an invalid length. [ 1110.084295][T25130] syzkaller0: entered promiscuous mode [ 1110.089797][T25130] syzkaller0: entered allmulticast mode [ 1110.174648][ T29] audit: type=1400 audit(1772368784.025:15943): avc: denied { watch_mount } for pid=25134 comm="syz.1.5816" path="/591" dev="tmpfs" ino=3042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1110.304126][T25132] wg1 speed is unknown, defaulting to 1000 [ 1110.730260][ T5920] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1110.904941][ T5920] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.922382][T25166] kvm: pic: non byte write [ 1110.930500][ T5920] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.968357][ T5920] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.977413][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.028387][T25148] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1111.046957][ T5920] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.283873][T25148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.310126][T25148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.390757][ T5855] usb 7-1: USB disconnect, device number 3 [ 1111.992111][ T29] audit: type=1326 audit(1772368785.936:15944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25187 comm="syz.7.5836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbffb79c799 code=0x0 [ 1112.038452][T25188] wg1 speed is unknown, defaulting to 1000 [ 1113.644925][ T5863] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1113.799508][T22824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1113.837479][T22824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1113.844576][T25260] kvm: pic: non byte write [ 1113.848781][ T5863] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1113.874459][T22824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1113.884926][ T5863] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1113.895030][ T5863] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1113.904229][T22824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1113.911410][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.919820][T22824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1113.949543][T25244] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1113.951387][T25258] wg1 speed is unknown, defaulting to 1000 [ 1114.024537][T25264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1114.053426][ T5863] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1114.204927][T25244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.256925][T25244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.359593][ T5863] usb 3-1: USB disconnect, device number 42 [ 1114.395505][T25280] kvm: pic: level sensitive irq not supported [ 1114.396541][T25280] kvm: pic: non byte write [ 1115.134072][T25258] chnl_net:caif_netlink_parms(): no params data found [ 1115.245947][T25302] kvm: pic: non byte write [ 1115.609694][T25321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.633105][T25321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.689922][T25321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1115.714897][T25258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.740821][T25258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.751209][T25258] bridge_slave_0: entered allmulticast mode [ 1115.759515][T25258] bridge_slave_0: entered promiscuous mode [ 1115.892751][ T5817] Bluetooth: hci1: command tx timeout [ 1116.005257][ T49] bond0 (unregistering): Released all slaves [ 1116.020729][ T49] bond1 (unregistering): Released all slaves [ 1116.037906][ T49] bond2 (unregistering): Released all slaves [ 1116.110135][T25258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.128766][T25258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.162799][T25258] bridge_slave_1: entered allmulticast mode [ 1116.241005][T25258] bridge_slave_1: entered promiscuous mode [ 1116.306695][ T49] tipc: Left network mode [ 1116.332793][T25258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.382059][T25258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.573825][T25258] team0: Port device team_slave_0 added [ 1116.592261][T25258] team0: Port device team_slave_1 added [ 1116.636620][ T29] audit: type=1800 audit(1772368790.807:15945): pid=25382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5897" name="bus" dev="tmpfs" ino=762 res=0 errno=0 [ 1116.760784][T25258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.775316][T25258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.821115][T25258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.922325][T25258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.939887][T25258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.994560][T25258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.096615][T25392] syzkaller0: entered promiscuous mode [ 1117.102121][T25392] syzkaller0: entered allmulticast mode [ 1117.877884][ T5817] Bluetooth: hci1: command tx timeout [ 1118.866497][ T49] hsr_slave_0: left promiscuous mode [ 1118.872169][ T49] hsr_slave_1: left promiscuous mode [ 1119.230639][T25258] hsr_slave_0: entered promiscuous mode [ 1119.262311][T25258] hsr_slave_1: entered promiscuous mode [ 1119.269330][T25258] debugfs: 'hsr0' already exists in 'hsr' [ 1119.276386][T25258] Cannot create hsr debugfs directory [ 1119.775125][ T29] audit: type=1326 audit(1772368794.093:15946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1119.822331][T25467] syzkaller0: entered promiscuous mode [ 1119.837108][ T29] audit: type=1326 audit(1772368794.093:15947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1119.861202][T22824] Bluetooth: hci1: command tx timeout [ 1119.881527][T25467] syzkaller0: entered allmulticast mode [ 1119.906536][ T29] audit: type=1326 audit(1772368794.093:15948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1120.005401][ T29] audit: type=1326 audit(1772368794.093:15949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1120.063321][ T29] audit: type=1326 audit(1772368794.093:15950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1120.129245][ T29] audit: type=1326 audit(1772368794.093:15951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1120.185859][ T29] audit: type=1326 audit(1772368794.093:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1120.214026][ T29] audit: type=1326 audit(1772368794.104:15953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1120.330297][ T29] audit: type=1326 audit(1772368794.104:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25476 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1121.084731][T22824] Bluetooth: hci5: command 0x0406 tx timeout [ 1121.848319][T22824] Bluetooth: hci1: command tx timeout [ 1122.230152][T25258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1122.292254][T25258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1122.407256][T25258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1122.460676][T25258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1122.636995][T25574] syzkaller0: entered promiscuous mode [ 1122.651816][T25574] syzkaller0: entered allmulticast mode [ 1122.699100][T25578] syzkaller0: entered promiscuous mode [ 1122.710702][T25578] syzkaller0: entered allmulticast mode [ 1122.853640][T25258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.915185][T25258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.950286][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.957451][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1123.017758][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.024914][ T6834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.624127][T25258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.699453][T25258] veth0_vlan: entered promiscuous mode [ 1123.735209][T25258] veth1_vlan: entered promiscuous mode [ 1123.827135][T25258] veth0_macvtap: entered promiscuous mode [ 1123.843598][T25258] veth1_macvtap: entered promiscuous mode [ 1123.916095][T25258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.945288][T25258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.983971][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.039130][ T3596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.157997][ T3596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.182199][ T3596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.201212][ T3596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.435796][T25654] syzkaller0: entered promiscuous mode [ 1124.464932][T25654] syzkaller0: entered allmulticast mode [ 1124.644198][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.665217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.696640][ T6834] hsr0: left allmulticast mode [ 1124.701453][ T6834] hsr_slave_0: left allmulticast mode [ 1124.719465][ T6834] hsr_slave_1: left allmulticast mode [ 1124.726834][ T6834] bridge0: port 3(hsr0) entered disabled state [ 1125.024975][ T6834] bond0 (unregistering): Released all slaves [ 1125.124098][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.133160][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.198984][ T6834] tipc: Left network mode [ 1125.765805][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1125.775984][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1125.805982][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1125.819710][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1125.836761][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1125.952301][T25728] syzkaller0: entered promiscuous mode [ 1125.978244][T25728] syzkaller0: entered allmulticast mode [ 1126.014157][T25726] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1126.064448][T25726] block device autoloading is deprecated and will be removed. [ 1126.155866][T25722] wg1 speed is unknown, defaulting to 1000 [ 1126.170134][T25738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1126.403267][T25738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1126.447542][T25738] team0: Port device bond1 added [ 1126.560768][ T6834] hsr_slave_0: left promiscuous mode [ 1126.623188][ T6834] hsr_slave_1: left promiscuous mode [ 1127.768177][T25772] syzkaller0: entered promiscuous mode [ 1127.785906][T25772] syzkaller0: entered allmulticast mode [ 1127.865438][T22824] Bluetooth: hci0: command tx timeout [ 1127.932800][ T92] smc: removing ib device syz1 [ 1127.940297][ T1332] smc: removing ib device sz0 [ 1129.837365][T22824] Bluetooth: hci0: command tx timeout [ 1130.317853][T25782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1130.395548][T25831] xt_hashlimit: size too large, truncated to 1048576 [ 1130.747646][T25722] chnl_net:caif_netlink_parms(): no params data found [ 1131.764701][T25722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.790403][T25722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.817788][T25722] bridge_slave_0: entered allmulticast mode [ 1131.818032][T22824] Bluetooth: hci0: command tx timeout [ 1131.857183][T25722] bridge_slave_0: entered promiscuous mode [ 1131.911463][T25722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.953105][T25722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.982276][T25722] bridge_slave_1: entered allmulticast mode [ 1132.015149][T25722] bridge_slave_1: entered promiscuous mode [ 1132.184619][T25722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.212841][T25722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.324819][T25722] team0: Port device team_slave_0 added [ 1132.346714][T25722] team0: Port device team_slave_1 added [ 1132.356126][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1132.356142][ T29] audit: type=1400 audit(1772368807.322:15970): avc: denied { associate } for pid=25925 comm="syz.7.6027" name="snmp" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1132.445023][ T29] audit: type=1400 audit(1772368807.406:15971): avc: denied { map_create } for pid=25928 comm="syz.6.6029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1132.479794][ T29] audit: type=1400 audit(1772368807.406:15972): avc: denied { map_read map_write } for pid=25928 comm="syz.6.6029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1132.524709][T25722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.545257][T25722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.553125][ T29] audit: type=1400 audit(1772368807.438:15973): avc: denied { prog_load } for pid=25928 comm="syz.6.6029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1132.594702][ T29] audit: type=1400 audit(1772368807.438:15974): avc: denied { bpf } for pid=25928 comm="syz.6.6029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1132.617056][ T29] audit: type=1400 audit(1772368807.438:15975): avc: denied { perfmon } for pid=25928 comm="syz.6.6029" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1132.625464][T25722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.713626][T25722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.732422][T25722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.779186][T25722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.911668][ T29] audit: type=1400 audit(1772368807.899:15976): avc: denied { prog_run } for pid=25938 comm="syz.7.6032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1133.214514][T25722] hsr_slave_0: entered promiscuous mode [ 1133.229916][T25722] hsr_slave_1: entered promiscuous mode [ 1133.244790][T25722] debugfs: 'hsr0' already exists in 'hsr' [ 1133.261354][T25722] Cannot create hsr debugfs directory [ 1133.496152][ T29] audit: type=1400 audit(1772368808.519:15977): avc: denied { mounton } for pid=25949 comm="syz.7.6035" path="/file0" dev="bpf" ino=105071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1133.800576][T22824] Bluetooth: hci0: command tx timeout [ 1133.939671][T15251] bond0 (unregistering): Released all slaves [ 1134.059641][T15251] tipc: Left network mode [ 1134.162086][ T29] audit: type=1800 audit(1772368809.201:15978): pid=25975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.6043" name="bus" dev="tmpfs" ino=1004 res=0 errno=0 [ 1134.294452][ T29] audit: type=1326 audit(1772368809.348:15979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.1.6046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f319c799 code=0x0 [ 1134.443992][T15251] hsr_slave_0: left promiscuous mode [ 1134.451446][T15251] hsr_slave_1: left promiscuous mode [ 1135.062685][T25919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1135.115519][T25722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1135.175492][T25722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1135.257910][T25722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1135.299574][T25722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1135.554001][T25722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.639547][T25722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.678552][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.685739][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.758597][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.765810][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.154965][T25722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.234414][T25722] veth0_vlan: entered promiscuous mode [ 1136.271480][T25722] veth1_vlan: entered promiscuous mode [ 1136.344057][T25722] veth0_macvtap: entered promiscuous mode [ 1136.370053][T25722] veth1_macvtap: entered promiscuous mode [ 1136.402484][T25722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.426065][T25722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.451348][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.470863][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.487800][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.497029][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.980077][T26107] kvm: pic: level sensitive irq not supported [ 1136.980440][T26107] kvm: pic: non byte read [ 1137.286506][T26130] syzkaller0: entered promiscuous mode [ 1137.292557][T26130] syzkaller0: entered allmulticast mode [ 1137.477986][T26140] kvm: pic: level sensitive irq not supported [ 1137.478059][T26140] kvm: pic: non byte read [ 1137.682789][T26151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26151 comm=syz.6.6098 [ 1137.752351][T26156] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6101'. [ 1137.929687][T26171] syzkaller0: entered promiscuous mode [ 1137.951147][T26171] syzkaller0: entered allmulticast mode [ 1138.560191][T26209] syzkaller0: entered promiscuous mode [ 1138.565777][T26209] syzkaller0: entered allmulticast mode [ 1138.656359][T26212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6123'. [ 1138.863864][T26058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1138.942981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.966908][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.030767][ T29] audit: type=1400 audit(1772368814.314:15980): avc: denied { write } for pid=26227 comm="syz.7.6129" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1139.078439][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.095011][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.108449][ T29] audit: type=1400 audit(1772368814.314:15981): avc: denied { open } for pid=26227 comm="syz.7.6129" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1139.451742][T26251] syzkaller0: entered promiscuous mode [ 1139.475832][T26251] syzkaller0: entered allmulticast mode [ 1140.189277][T26293] kvm: pic: level sensitive irq not supported [ 1140.189349][T26293] kvm: pic: non byte read [ 1141.431631][T26350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1142.464782][T26265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1142.966820][ T29] audit: type=1400 audit(1772368818.451:15982): avc: denied { unmount } for pid=20269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1143.414796][T26450] : renamed from bridge_slave_0 [ 1145.942340][T26424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1145.957810][T26566] netlink: 'syz.6.6223': attribute type 27 has an invalid length. [ 1146.361254][T26584] kvm: pic: non byte write [ 1146.546624][T26601] netlink: 'syz.6.6236': attribute type 27 has an invalid length. [ 1147.137658][T26631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1147.256960][T26636] overlayfs: missing 'lowerdir' [ 1147.498284][T26646] fuse: Bad value for 'fd' [ 1147.697564][T26657] overlayfs: missing 'lowerdir' [ 1147.807898][T26664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6263'. [ 1148.203431][T26692] overlayfs: missing 'lowerdir' [ 1148.716001][T26716] fuse: Bad value for 'fd' [ 1148.721322][T26716] fuse: Bad value for 'fd' [ 1150.608445][T26765] kvm: pic: non byte read [ 1150.621859][T26765] kvm: pic: non byte read [ 1150.634805][T26765] kvm: pic: non byte read [ 1150.650261][T26765] kvm: pic: single mode not supported [ 1150.650281][T26765] kvm: pic: level sensitive irq not supported [ 1150.662680][T26765] kvm: pic: non byte read [ 1150.679310][T26765] kvm: pic: single mode not supported [ 1150.679336][T26765] kvm: pic: level sensitive irq not supported [ 1150.689446][T26765] kvm: pic: non byte read [ 1150.708281][T26765] kvm: pic: single mode not supported [ 1150.708344][T26765] kvm: pic: non byte read [ 1150.732521][T26765] kvm: pic: single mode not supported [ 1150.732582][T26765] kvm: pic: non byte read [ 1150.772481][T26765] kvm: pic: non byte read [ 1150.776907][ T29] audit: type=1400 audit(1772368826.651:15983): avc: denied { ioctl } for pid=26777 comm="syz.2.6305" path="socket:[112083]" dev="sockfs" ino=112083 ioctlcmd=0x587c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1150.807096][T26765] kvm: pic: non byte read [ 1151.399884][ T29] audit: type=1400 audit(1772368827.302:15984): avc: denied { lock } for pid=26807 comm="syz.5.6315" path="socket:[112917]" dev="sockfs" ino=112917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1154.199377][T26802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1154.220619][ T29] audit: type=1400 audit(1772368830.262:15985): avc: denied { map } for pid=26940 comm="syz.2.6356" path="socket:[112425]" dev="sockfs" ino=112425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1154.978337][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6373'. [ 1154.996132][T26991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1156.601761][ T29] audit: type=1400 audit(1772368832.761:15986): avc: denied { write } for pid=27087 comm="syz.2.6399" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1156.664604][T27097] fuse: Bad value for 'fd' [ 1156.716555][ T29] audit: type=1400 audit(1772368832.887:15987): avc: denied { write } for pid=27099 comm="syz.6.6405" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1156.765100][ T29] audit: type=1400 audit(1772368832.950:15988): avc: denied { getopt } for pid=27098 comm="syz.5.6404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1156.858946][T27107] fuse: Bad value for 'fd' [ 1157.130767][T27129] fuse: Bad value for 'fd' [ 1157.508749][T27154] netlink: 'syz.6.6425': attribute type 1 has an invalid length. [ 1157.528139][T27154] netlink: 'syz.6.6425': attribute type 2 has an invalid length. [ 1157.557055][T27154] netlink: 'syz.6.6425': attribute type 1 has an invalid length. [ 1157.568735][T27154] netlink: 'syz.6.6425': attribute type 2 has an invalid length. [ 1157.578356][T27156] fuse: Bad value for 'fd' [ 1157.655492][T26980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.154765][T27194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6441'. [ 1159.167374][T27238] kvm_intel: kvm [27237]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x930b [ 1159.514679][T27262] netlink: 'syz.1.6470': attribute type 1 has an invalid length. [ 1159.579590][T27268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1159.626416][T27271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1159.818128][T27286] fuse: Bad value for 'group_id' [ 1159.823678][T27286] fuse: Bad value for 'group_id' [ 1160.132056][T27308] overlayfs: missing 'workdir' [ 1160.142285][T27309] SET target dimension over the limit! [ 1160.142779][T27306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1160.187426][T27312] fuse: Bad value for 'group_id' [ 1160.192510][T27312] fuse: Bad value for 'group_id' [ 1160.769600][T27337] overlayfs: missing 'workdir' [ 1160.841946][T27341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1161.068535][T27197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1161.530150][T27382] SET target dimension over the limit! [ 1161.685359][T27387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1162.574451][T27428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.211203][T27440] syzkaller0: entered promiscuous mode [ 1163.221976][T27440] syzkaller0: entered allmulticast mode [ 1163.609860][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6551'. [ 1163.652059][T27467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.676576][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6551'. [ 1164.590567][T27488] md: could not open device unknown-block(0,0). [ 1164.609047][T27488] md: md_import_device returned -6 [ 1165.271222][T27509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1169.074651][T27584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1169.295515][T27592] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1169.432570][T27599] "syz.6.6590" (27599) uses obsolete ecb(arc4) skcipher [ 1169.646179][T27616] tipc: Started in network mode [ 1169.653934][T27616] tipc: Node identity d619c2bec683, cluster identity 4711 [ 1169.664883][T27616] tipc: Enabled bearer , priority 0 [ 1169.703904][T27615] tipc: Disabling bearer [ 1170.478802][T20603] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1170.509196][T27651] tipc: Started in network mode [ 1170.514238][T27651] tipc: Node identity e6f333204f9b, cluster identity 4711 [ 1170.522204][T27651] tipc: Enabled bearer , priority 0 [ 1170.531979][T27650] tipc: Disabling bearer [ 1170.658940][T20603] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1170.670528][T20603] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1170.681758][T20603] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1170.701448][T20603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.722946][T27639] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1170.733231][T20603] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1170.947266][T27639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.961053][T27639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.031558][ T5855] usb 7-1: USB disconnect, device number 4 [ 1171.096295][T27678] tipc: Started in network mode [ 1171.107480][T27678] tipc: Node identity f62d8fc2b761, cluster identity 4711 [ 1171.114745][T27678] tipc: Enabled bearer , priority 0 [ 1171.186263][T27677] tipc: Disabling bearer [ 1171.949398][T27711] tipc: Enabled bearer , priority 0 [ 1171.997964][T27711] syzkaller0: entered promiscuous mode [ 1172.003589][T27711] syzkaller0: entered allmulticast mode [ 1172.010573][T27711] tipc: Resetting bearer [ 1172.031355][T27710] tipc: Resetting bearer [ 1172.176008][T27721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1172.722495][T27739] fuse: Unknown parameter 'group_id00000000000000000000' [ 1173.051795][T27751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1173.069400][ T5855] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1173.226321][ T5855] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1173.248172][ T5855] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1173.273857][ T5855] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1173.283639][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.310539][T27745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1173.340791][ T5855] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1173.443662][T27767] fuse: Unknown parameter 'group_id00000000000000000000' [ 1173.543341][T27745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.552317][T27745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.619783][ T5855] usb 2-1: USB disconnect, device number 50 [ 1175.017836][T27710] tipc: Disabling bearer [ 1175.027283][T27790] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1175.605670][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6683'. [ 1176.882751][T27871] fuse: Bad value for 'fd' [ 1177.185175][T27883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1177.547630][T27905] fuse: Bad value for 'fd' [ 1179.046488][T27919] fuse: Unknown parameter 'grou00000000000000000000' [ 1180.084370][T27968] fuse: Unknown parameter 'grou00000000000000000000' [ 1180.518490][T27983] kvm: pic: non byte write [ 1182.497546][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.524095][T28084] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1182.558612][T28084] team0 (unregistering): Port device team_slave_0 removed [ 1182.586312][T28084] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1182.606976][T28084] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1182.660605][T28084] team0 (unregistering): Port device team_slave_1 removed [ 1182.990481][T28115] kvm: pic: non byte write [ 1183.010445][T28115] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967201 (8589934402 ns) > initial count (32 ns). Using initial count to start timer. [ 1183.289754][ T5920] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1183.462283][ T5920] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1183.479822][ T5920] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1183.496061][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1183.505507][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.566668][T28130] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1183.581693][ T5920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.792595][T28130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.802512][T28130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.875527][ T5855] usb 6-1: USB disconnect, device number 13 [ 1184.339945][T28190] tmpfs: Bad value for 'mpol' [ 1184.653715][T28194] fuse: Invalid rootmode [ 1185.992987][T28228] fuse: Invalid rootmode [ 1186.259401][T28234] fuse: Bad value for 'user_id' [ 1186.272938][T28234] fuse: Bad value for 'user_id' [ 1187.014343][ T5920] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1187.186797][ T5920] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1187.212855][ T5920] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1187.237065][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1187.257303][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.287177][T28251] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1187.301848][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1187.557731][T28251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.669405][T28251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.109231][ T29] audit: type=1400 audit(1772368865.791:15989): avc: denied { append } for pid=28289 comm="syz.1.6853" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1188.688488][ T5920] usb 3-1: USB disconnect, device number 43 [ 1189.109773][T28333] xt_connbytes: Forcing CT accounting to be enabled [ 1189.229126][ T29] audit: type=1326 audit(1772368867.030:15990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.279448][ T29] audit: type=1326 audit(1772368867.061:15991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.305468][ T29] audit: type=1326 audit(1772368867.061:15992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.403891][ T29] audit: type=1326 audit(1772368867.061:15993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.446161][ T29] audit: type=1326 audit(1772368867.061:15994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.475238][ T29] audit: type=1326 audit(1772368867.072:15995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.545013][ T29] audit: type=1326 audit(1772368867.072:15996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.616645][ T29] audit: type=1326 audit(1772368867.072:15997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1189.700542][ T29] audit: type=1326 audit(1772368867.072:15998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28338 comm="syz.5.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2da659c799 code=0x7ffc0000 [ 1190.002696][T28376] fuse: Bad value for 'fd' [ 1191.629780][T28489] fuse: Bad value for 'fd' [ 1191.918659][T28511] tmpfs: Bad value for 'nr_blocks' [ 1192.533342][T28542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6946'. [ 1193.530289][T28585] xt_hashlimit: max too large, truncated to 1048576 [ 1193.663620][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1193.663637][ T29] audit: type=1400 audit(1772368871.681:16020): avc: denied { mount } for pid=28593 comm="syz.1.6967" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1193.868939][T28605] syzkaller0: entered promiscuous mode [ 1193.885076][T28605] syzkaller0: entered allmulticast mode [ 1196.086113][ T29] audit: type=1400 audit(1772368874.211:16021): avc: denied { block_suspend } for pid=28662 comm="syz.7.6991" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1196.999691][T28705] ------------[ cut here ]------------ [ 1197.005472][T28705] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 1197.005489][T28705] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#0: syz.5.7007/28705 [ 1197.025930][T28705] Modules linked in: [ 1197.030342][T28705] CPU: 0 UID: 0 PID: 28705 Comm: syz.5.7007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1197.041363][T28705] Tainted: [L]=SOFTLOCKUP [ 1197.045771][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1197.055906][T28705] RIP: 0010:path_noexec+0x1cf/0x230 [ 1197.061098][T28705] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 9a e2 7d ff 83 e3 01 e8 b2 e7 7d ff 89 d8 5b 5d 41 5c e9 87 44 08 09 e8 a2 e7 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 60 ea ff e9 a3 fe ff ff e8 3a 60 ea [ 1197.081547][T28705] RSP: 0018:ffffc9000f39fbd8 EFLAGS: 00010283 [ 1197.087608][T28705] RAX: 00000000000000a1 RBX: 0000000000000000 RCX: ffffc90010026000 [ 1197.096572][T28705] RDX: 0000000000080000 RSI: ffffffff828ab71e RDI: ffff888054b50000 [ 1197.104761][T28705] RBP: ffff88801cec98a0 R08: 0000000000000007 R09: 0000000000000000 [ 1197.112952][T28705] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 1197.121597][T28705] R13: 0000000000000001 R14: ffff8880271043c8 R15: 0000000000000001 [ 1197.130199][T28705] FS: 00007f2da73d16c0(0000) GS:ffff888124344000(0000) knlGS:0000000000000000 [ 1197.139175][T28705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1197.145753][T28705] CR2: 000000110c3f9dfc CR3: 0000000064a2f000 CR4: 00000000003526f0 [ 1197.153755][T28705] Call Trace: [ 1197.157030][T28705] [ 1197.159998][T28705] do_mmap+0x857/0x12f0 [ 1197.164156][T28705] ? __pfx_do_mmap+0x10/0x10 [ 1197.168792][T28705] ? __pfx_down_write_killable+0x10/0x10 [ 1197.174441][T28705] vm_mmap_pgoff+0x29e/0x470 [ 1197.179073][T28705] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1197.184176][T28705] ? __fget_files+0x215/0x3d0 [ 1197.188876][T28705] ? __fget_files+0x21f/0x3d0 [ 1197.193550][T28705] ksys_mmap_pgoff+0x3c8/0x650 [ 1197.198471][T28705] ? __x64_sys_futex+0x34f/0x4d0 [ 1197.203416][T28705] ? __x64_sys_futex+0x358/0x4d0 [ 1197.208530][T28705] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1197.214043][T28705] ? xfd_validate_state+0x129/0x190 [ 1197.219570][T28705] __x64_sys_mmap+0x125/0x190 [ 1197.224259][T28705] do_syscall_64+0x106/0xf80 [ 1197.228888][T28705] ? clear_bhb_loop+0x40/0x90 [ 1197.233543][T28705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.239442][T28705] RIP: 0033:0x7f2da659c799 [ 1197.243868][T28705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.263654][T28705] RSP: 002b:00007f2da73d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1197.272410][T28705] RAX: ffffffffffffffda RBX: 00007f2da6815fa0 RCX: 00007f2da659c799 [ 1197.280388][T28705] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 1197.288383][T28705] RBP: 00007f2da6632bd9 R08: 0000000000000003 R09: 0000000000000000 [ 1197.296371][T28705] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1197.304379][T28705] R13: 00007f2da6816038 R14: 00007f2da6815fa0 R15: 00007ffdbfd8f658 [ 1197.312842][T28705] [ 1197.315861][T28705] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1197.323122][T28705] CPU: 0 UID: 0 PID: 28705 Comm: syz.5.7007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1197.334035][T28705] Tainted: [L]=SOFTLOCKUP [ 1197.338343][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1197.348378][T28705] Call Trace: [ 1197.351643][T28705] [ 1197.354553][T28705] dump_stack_lvl+0x100/0x190 [ 1197.359222][T28705] vpanic+0x552/0x970 [ 1197.363181][T28705] ? __pfx_vpanic+0x10/0x10 [ 1197.367668][T28705] panic+0xd1/0xe0 [ 1197.371364][T28705] ? __pfx_panic+0x10/0x10 [ 1197.375774][T28705] check_panic_on_warn.cold+0x19/0x34 [ 1197.381123][T28705] ? path_noexec+0x1cf/0x230 [ 1197.385693][T28705] __warn.cold+0x191/0x348 [ 1197.390089][T28705] __report_bug+0x296/0x3d0 [ 1197.394567][T28705] ? path_noexec+0x1cf/0x230 [ 1197.399137][T28705] ? __pfx___report_bug+0x10/0x10 [ 1197.404137][T28705] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 1197.410386][T28705] ? futex_unqueue+0x133/0x2c0 [ 1197.415145][T28705] ? path_noexec+0x1cf/0x230 [ 1197.419729][T28705] report_bug+0xb2/0x220 [ 1197.423953][T28705] ? path_noexec+0x1cf/0x230 [ 1197.428530][T28705] handle_bug+0x166/0x2a0 [ 1197.432848][T28705] exc_invalid_op+0x17/0x50 [ 1197.437333][T28705] asm_exc_invalid_op+0x1a/0x20 [ 1197.442164][T28705] RIP: 0010:path_noexec+0x1cf/0x230 [ 1197.447350][T28705] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 9a e2 7d ff 83 e3 01 e8 b2 e7 7d ff 89 d8 5b 5d 41 5c e9 87 44 08 09 e8 a2 e7 7d ff 90 <0f> 0b 90 e9 46 ff ff ff e8 44 60 ea ff e9 a3 fe ff ff e8 3a 60 ea [ 1197.466940][T28705] RSP: 0018:ffffc9000f39fbd8 EFLAGS: 00010283 [ 1197.472989][T28705] RAX: 00000000000000a1 RBX: 0000000000000000 RCX: ffffc90010026000 [ 1197.480940][T28705] RDX: 0000000000080000 RSI: ffffffff828ab71e RDI: ffff888054b50000 [ 1197.488892][T28705] RBP: ffff88801cec98a0 R08: 0000000000000007 R09: 0000000000000000 [ 1197.496842][T28705] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 1197.504792][T28705] R13: 0000000000000001 R14: ffff8880271043c8 R15: 0000000000000001 [ 1197.512751][T28705] ? path_noexec+0x1ce/0x230 [ 1197.517334][T28705] ? path_noexec+0x1ce/0x230 [ 1197.521910][T28705] do_mmap+0x857/0x12f0 [ 1197.526050][T28705] ? __pfx_do_mmap+0x10/0x10 [ 1197.530622][T28705] ? __pfx_down_write_killable+0x10/0x10 [ 1197.536245][T28705] vm_mmap_pgoff+0x29e/0x470 [ 1197.540819][T28705] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1197.545910][T28705] ? __fget_files+0x215/0x3d0 [ 1197.550570][T28705] ? __fget_files+0x21f/0x3d0 [ 1197.555232][T28705] ksys_mmap_pgoff+0x3c8/0x650 [ 1197.559976][T28705] ? __x64_sys_futex+0x34f/0x4d0 [ 1197.564900][T28705] ? __x64_sys_futex+0x358/0x4d0 [ 1197.569818][T28705] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1197.575084][T28705] ? xfd_validate_state+0x129/0x190 [ 1197.580286][T28705] __x64_sys_mmap+0x125/0x190 [ 1197.585031][T28705] do_syscall_64+0x106/0xf80 [ 1197.589603][T28705] ? clear_bhb_loop+0x40/0x90 [ 1197.594266][T28705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.600138][T28705] RIP: 0033:0x7f2da659c799 [ 1197.604533][T28705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.624122][T28705] RSP: 002b:00007f2da73d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1197.632517][T28705] RAX: ffffffffffffffda RBX: 00007f2da6815fa0 RCX: 00007f2da659c799 [ 1197.640528][T28705] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffc000 [ 1197.648500][T28705] RBP: 00007f2da6632bd9 R08: 0000000000000003 R09: 0000000000000000 [ 1197.656466][T28705] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1197.664420][T28705] R13: 00007f2da6816038 R14: 00007f2da6815fa0 R15: 00007ffdbfd8f658 [ 1197.672386][T28705] [ 1197.675688][T28705] Kernel Offset: disabled [ 1197.679998][T28705] Rebooting in 86400 seconds..