last executing test programs: 43.119915464s ago: executing program 0 (id=277): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x118, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}}) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) lchown(&(0x7f0000000340)='./file0\x00', r1, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x5}, {0x20, 0x3}}, 0x24, 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r2, 0x3811a000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 43.059882413s ago: executing program 0 (id=278): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x28}, 0x9c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) getpgid(0xffffffffffffffff) (async) r2 = getpgid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x8, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000b00)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r7, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004a00003c0001000000069078ac14141fac1e0001440f08e0000002e00000027f0000014404ef400000000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0400000000000000"], 0x0) 42.959246684s ago: executing program 0 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='pcspkr\x00', 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000880), 0x280, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000ec0)={0xffffffffffffffff, 0x2, {0x0, 0x0, 0x0, 0x6540000000, 0xfffffffffffffff5, 0x0, 0x2, 0x11, 0xc, "41d0bc8a658635a8284faa9680ffd8ae1019e683c9ce1688599c2ff36e163e643155b04f99c6db5bd97b4f1bea35f631cef2ac8b956accb93fee1f23d23b9b13", "a5a73aead9c30def9d7a4f89f914b4db341dcea6d8b4891ff5d146d20c0c01e52888e45349ab782e88e7058a9b58c0dfc9a9a292430cbafef2b4fb3b37edcbb7", "cfa2d9dcf3ad287122b02c9325d08d6d0064568342802135bf2c187fa989e6d9", [0xe44, 0x3d2b]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) (async, rerun: 32) getsockname(r0, &(0x7f0000000480)=@ieee802154={0x24, @short}, &(0x7f0000000500)=0x80) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)={0x0, 0x2, 0x6e, "60ed701d0b8f67712e857c5da86e896800257c7db00206b83bc1de3553dedc6b63b2b2f5fb9578a5921d83e0f4bca163bf9f14935efa9f611a9a123f9148933fa21f3a837d20f8a183b3cec4bab7e059fe8c9651c281a55470440aa16f1d92ffdf76603de203781e62ac6fe14fc4"}, 0x76) (async, rerun: 64) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) (rerun: 32) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) read(r5, &(0x7f0000000380), 0x64) (async, rerun: 32) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 42.889935441s ago: executing program 0 (id=283): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r0 = io_uring_setup(0x22, &(0x7f00000000c0)={0x0, 0x871f, 0x3410, 0x3, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x1, @multicast}, 0x3d, {0x2, 0xe20, @empty}}) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b25, &(0x7f0000000040)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) (async) io_uring_setup(0x22, &(0x7f00000000c0)={0x0, 0x871f, 0x3410, 0x3, 0xfefffffd}) (async) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) (async) socket$inet(0x2, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x1, @multicast}, 0x3d, {0x2, 0xe20, @empty}}) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) flock(r2, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl(r3, 0x8b25, &(0x7f0000000040)) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) (async) 42.830176006s ago: executing program 0 (id=285): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='md0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r3, 0x0, 0x7a) fchdir(r6) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r10 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(0x0, r10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0x9360, 0x0) write(r4, &(0x7f0000000380)='7:0', 0x3) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r12], 0x24}}, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40840001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="200109000000ffdbdf25010000000c0003000a000000000000000c000200ff000000000000000c000800430e0000000000000c00020006000000000000000c00080001000000000000000c00030001010000000000000c00060001000000000000004c0007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="0a000a007379736673000000340007800c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c0075c82d000000", @ANYRES32=r8, @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x1800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r14, @ANYRESOCT=r13], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 42.630317279s ago: executing program 0 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ipvlan1\x00', 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) (async) r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x5}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1f, 0x3, 0xb, 0x8, 0x40080, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='6'], 0x1c}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x4a8e) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000900)="9bae17bf", 0x4}], 0x1) (async) read$FUSE(r3, &(0x7f00000030c0)={0x2020}, 0x2020) 27.404758309s ago: executing program 32 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ipvlan1\x00', 0x10) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) (async) r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x5}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1f, 0x3, 0xb, 0x8, 0x40080, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='6'], 0x1c}}, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a0037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x4a8e) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000900)="9bae17bf", 0x4}], 0x1) (async) read$FUSE(r3, &(0x7f00000030c0)={0x2020}, 0x2020) 5.917439353s ago: executing program 3 (id=701): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}}, 0x4084) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r2, @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xc0000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000000c0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000140)={0xc}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.00323439s ago: executing program 3 (id=708): socket(0x400000000010, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) unshare(0x20000400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r4, &(0x7f0000000180)=ANY=[], 0x12a5) read$FUSE(r3, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r5, 0x0, 0x20000000, 0x0) r6 = dup(r2) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r6, 0x4018aee3, &(0x7f00000003c0)=@attr_set_pmu={0x0, 0x1, 0x1, 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r9, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100030000002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) waitid(0x0, r5, &(0x7f0000000600), 0x2, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0xa) 4.809551016s ago: executing program 3 (id=709): socket(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r3, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) flistxattr(r5, 0x0, 0x0) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) (async) recvmsg(r5, 0x0, 0x123) (async) getsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="82789fa106f3c8413e6474a4cf", 0xd, 0x2004c000, 0x0, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet(0x2, 0x80001, 0x84) unshare(0x20000000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000440)={r8, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r8, 0x68d3, 0x6}, &(0x7f0000000200)=0xc) (async) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r4}, 0x10) 1.408642192s ago: executing program 4 (id=737): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20000840) prctl$PR_GET_FP_MODE(0x2e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='bfs\x00', 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x521000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d04, &(0x7f0000000200)="4ba69c") ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x15, r5}) sendmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="7b7388e2e36f7b9d1526ab938a0a052681b8955df97a94f5dcb4d85a4caada25ef3d845b22f456ff8c7111d7b520d2bfa5c7ad6905d9b7090802312f3d5aecb1db9015562f42812f9df59409bfd3ca0e1bc4cf386d63c9ec5fb077b0740befc381293353e8da1e8bb508d07aafc76bcf5e4dcb7a555778532b35ef5ba4ebf081e21df1d4f20fc42c8481bfe3d1e4da311f7ed0f839eef11903ab98be9b4c009ad06b5e12888230a165b0e6fcf09f31209f84fb6c7456b124ab560cee62dfade2c51db48479726a8759b6a64e258840924670c9", 0xd3}, {&(0x7f00000005c0)="1e07cc66757534da9d5cab40edcdcdd4a95ae101c555f7286524e7c498597c3182ca4339eb29906a85125edfa7f5612a4d812155b65df45bc7d9b6bda2f2bb4224a7cbb00f2120ecfa7b98bd9cb3ec3c534d0b41fac0ad2646a34d3690a9b6b478d2fed9fff6493419d5a6c843de1174632ecbaefcd82ac8dc650c4e8bfad321da83a6b9ff72727222b1f5a09e7c74cc992106d87c6f31", 0x97}], 0x2, &(0x7f00000006c0)=[{0x80, 0x88, 0x2, "565d5bc5734420b3b99f109926515cf847c72ee83f23101021ca4b54c6ea1f2f0d1c068bd7d425f299182a04347c2e1a9649c7aabf88a1fceb9bc75516cfea79ee48ce1fffbfd7dc1893571747149487a1803b18fe393b4887aab77cecc27b95062eb01bb3cf4ff87454c7f4fa5885"}], 0x80}}], 0x1, 0x81) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c00018008000f00e0000001080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./proc/mtrr\x00', &(0x7f0000000300), 0x800000, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@version_9p2000}, {@sq={'sq', 0x3d, 0x7}}, {@common=@cache_loose}, {@sq={'sq', 0x3d, 0x7fff}}, {@sq={'sq', 0x3d, 0x4}}, {@sq}, {@common=@access_client}, {@common=@cache_mmap}, {@common=@debug={'debug', 0x3d, 0x4}}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, ':@@+,,[/+\''}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '/dev/iommu\x00'}}, {@context={'context', 0x3d, 'root'}}, {@flag='nolazytime'}, {@obj_user}]}}) listen(r1, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='4', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.339188882s ago: executing program 3 (id=738): r0 = socket(0x10, 0x803, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000040)='./file0\x00') (async) unlink(&(0x7f00000002c0)='./file0\x00') socket$inet6(0x10, 0x2, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0xc000, 0x716e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e67", 0x26f}], 0x1}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="800066180a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendto$packet(r0, &(0x7f0000000300)="f866829880e667cea14b240212c956d1c8d26dead50039407b0780f3c2dd546a06fd78b5a8e67ea564e3404a9e34ebd556a571", 0x33, 0x0, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0x5, 0x6, @remote}, 0x14) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'virt_wifi0\x00', {'hsr0\x00'}, 0x6}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0xb, @mcast2, 0x1}, 0x1c) 1.276140654s ago: executing program 2 (id=739): syz_emit_ethernet(0x81, &(0x7f00000000c0)={@random="adbb06aa09f1", @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x73, 0x0, 0x0, 0x40, 0x2, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x7b, 0x3, 0x9, [{@multicast1, 0x7}]}, @lsrr={0x83, 0x27, 0x6c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @loopback, @empty, @private=0xa010101, @local]}, @timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x9, [{@loopback, 0x2}]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x7, 0x0, {0x5, 0x4, 0x0, 0x2a, 0x4, 0x65, 0x8, 0x8, 0x2f, 0x401, @local, @private=0xa010100}, "ae29fc"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="00000033841e2aea46b549800b000100b22a363c0a16ba828a35f3b6289c9ac5ead94b8ce100002c000280140003002003e7f697000000000000000000000114000200fc"], 0x5c}}, 0x0) 1.27391954s ago: executing program 4 (id=740): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x6add, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="25daecdbdce723b7b21e", 0xa}], 0x1}, 0x40) 1.215412733s ago: executing program 3 (id=741): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x8, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007665746830000000000000000000000008001f00010000001400128009000100766574680000000004000280"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000400)={0x11, 0x0, r3, 0x0}, 0x14) write(r4, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x4d, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x100, 0x0, 0x8}, {"2f000f726670a363a36c0b676b9cb945a79f0d5fff0d4acb85c3094249d48aca684c030b30d18ee24e06878be69405224e521c4862b70a7d93"}}}}}}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r7, 0x3b66, 0x3) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000280)={0x18, r8, 0xffffffffffffcde, 0x0, &(0x7f0000000240)=[{0x0, 0x403}, {0x5, 0x100000000}]}) r9 = landlock_create_ruleset(&(0x7f0000000000)={0xc340, 0x4, 0x2, 0x2805, 0x2, 0x2}, 0x30, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000040)={0x8001, r5}, 0x1) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x8000, 0x7) 1.215076256s ago: executing program 2 (id=742): r0 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xb81}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x10) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) 1.214471583s ago: executing program 4 (id=743): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 1.214301063s ago: executing program 2 (id=744): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/230) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @private=0xa030100}, 0x4c93}}, 0x0, 0x0, 0x1f, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = getpgid(r0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) getpeername$unix(r4, 0x0, &(0x7f0000000400)) brk(0x8000000000000000) brk(0xe769) ptrace$peekuser(0x3, r3, 0x3d0) 1.214173551s ago: executing program 4 (id=745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000040)=ANY=[@ANYBLOB="681d"]) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setitimer(0x0, 0x0, &(0x7f0000000180)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000140)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockname$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) 1.057953031s ago: executing program 3 (id=746): socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="2000c08e16a5000004000067b725919c77c00000c28d55f490cada4c9d4fc52dfd0304929c0fd6ba79711fb887d08a35027799224d5a7d46a61087c5cc010a92a9066f4577006400dfa47eb3658e26b2f3b308321d99727a1e8a38f10038", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0600"/28], 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r4}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r6, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r4, r1}) sendmsg$NFT_BATCH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040810) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x22008095}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000001780)={&(0x7f0000000780)=[0x7, 0x1, 0xa, 0x7fff, 0xffff0d18, 0x7, 0x1, 0x800, 0x8, 0x9, 0x7, 0x1, 0x0, 0x4, 0x3ff, 0x200, 0xcc0, 0x800, 0x2, 0x2, 0x0, 0x7, 0x0, 0xfffffffd, 0x5d5d, 0x6, 0xba, 0x59c, 0x5, 0x2, 0x2, 0x80, 0x6, 0x5, 0x3, 0x101, 0x8, 0x1, 0x7, 0xf, 0x7, 0xd78d, 0x0, 0x7, 0xfffffff8, 0xfffffff7, 0x10001, 0x9, 0x0, 0x7, 0x1, 0xff, 0x1, 0x3ff, 0x2, 0x80000000, 0x9, 0x3, 0x1, 0x5, 0x5, 0x44, 0x1, 0x100, 0xf3, 0x0, 0x3, 0x2, 0x800, 0x1, 0x2, 0x1, 0x6, 0x5d38, 0x1, 0x0, 0x8b, 0xc8a, 0x3, 0x0, 0x9, 0x9, 0xffffebff, 0x9, 0x3, 0xfffffff8, 0x7fffffff, 0xffffff70, 0xa, 0x6, 0x3, 0x0, 0x8, 0x2, 0x1, 0x4, 0xad6, 0x100, 0x3, 0x7fff, 0x8, 0xfff, 0x8, 0x6, 0x433, 0xf, 0xfffffffe, 0xfffffff7, 0x3bd, 0x5, 0x0, 0x10b8, 0x0, 0x3, 0x4, 0x92b, 0xd0, 0xffffffff, 0x0, 0x2, 0x0, 0x4, 0xda5d, 0x0, 0x2, 0x2, 0x1000, 0xc5, 0x3, 0x0, 0x4, 0x4, 0x4, 0x80000000, 0x1ff, 0x9, 0x5, 0x26, 0x8, 0x0, 0xe3b4, 0x8, 0x1, 0x1, 0x1000000, 0xfc, 0x930, 0x7f, 0x0, 0x4000000, 0x3, 0x7, 0x2, 0xf, 0x800, 0x4, 0x2, 0xa, 0x1, 0xa, 0xad86, 0x2d3, 0x6, 0x5, 0x372, 0x8, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x6, 0x1, 0x2, 0x2, 0xe0a, 0x53a, 0x1, 0x2, 0x8, 0x9, 0xff, 0x0, 0x7ff, 0xfffffff9, 0x4, 0x9, 0x8, 0x2, 0x3, 0xcb, 0x101, 0x24, 0x4, 0x8, 0xbd, 0xef5f, 0x8, 0x7, 0x6, 0x1, 0xb, 0x4, 0x10, 0x80000000, 0x10, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x87d, 0x6, 0x101, 0x2845, 0x22, 0x6e, 0x40, 0x7, 0x4, 0x0, 0x10, 0x10, 0xfff, 0x8, 0x5, 0x7f, 0xffca, 0x3, 0xffffffff, 0x4, 0x9, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x9, 0x0, 0x796b, 0x1000, 0x9, 0xffffffff, 0x6, 0x2, 0x7, 0x3, 0xfc, 0x10000, 0xb87, 0x3, 0x3, 0x5b, 0x9, 0x40c1, 0x4, 0x8, 0x2, 0xf73, 0x40, 0x80, 0x7e, 0x3, 0x3, 0xb, 0x8, 0x100, 0x2, 0x9, 0x400, 0x8, 0xfffffff7, 0x7, 0x4, 0xff, 0x7, 0x7, 0x1000, 0x1, 0x9, 0xbeee, 0x3, 0x11d4, 0x3, 0x9, 0xe, 0x80, 0x10000, 0x6, 0xfffffff8, 0x4, 0x1, 0xd, 0x8001, 0x8, 0x401, 0x0, 0x100, 0x200, 0x80, 0x40, 0x80000001, 0x4, 0x4, 0xad7f, 0x3, 0x9c3, 0x5, 0x4, 0x7fffffff, 0x88, 0x8, 0x9, 0x4800, 0x80, 0x0, 0x6, 0x40, 0x7f58, 0x67b5, 0x8, 0x1, 0x6, 0x401, 0x1, 0x1, 0x7, 0x1, 0xffff, 0x7ff, 0x7fffffff, 0x10, 0x6, 0x6, 0x200, 0x7aa, 0x6, 0x8, 0x9, 0x7b, 0x9, 0x101, 0xc7, 0x0, 0x6, 0x3, 0x2, 0x6c4f, 0xbc, 0x6a, 0x2, 0xe46, 0x9, 0x3ff, 0x7368, 0x3, 0x6, 0x88, 0x0, 0x3, 0x3, 0x0, 0x669a3794, 0x3, 0x1, 0x80, 0x6, 0x6, 0x9, 0xcd, 0x6, 0xe, 0x9, 0x29a6, 0x478f80, 0x0, 0xfff, 0x7, 0x8001, 0x80000000, 0x3, 0x2, 0x101, 0x3, 0x4, 0xffff9125, 0x6, 0x103, 0x6, 0x3, 0x99, 0x5, 0x9, 0xa8, 0x2, 0x0, 0x2, 0x2, 0x8, 0x3, 0x3, 0x6bc7, 0x0, 0x8, 0x2, 0x8, 0x8, 0x80000000, 0x5, 0x80000001, 0x3, 0x9, 0x7, 0xc48, 0xff, 0x5, 0x3, 0x2, 0x0, 0x6dcd, 0xc0c, 0x9, 0x7, 0x80000000, 0x4, 0xfffff800, 0xa6b0, 0x5, 0x0, 0x7, 0xfffffffc, 0xd92, 0x4, 0x7fff, 0x4696, 0x1ff, 0xfffffffd, 0x5, 0xa0c, 0x2, 0x1, 0x2, 0x2, 0x0, 0x5, 0x6, 0x5, 0x19, 0x8, 0x635e, 0x5, 0xe, 0x6, 0x10001, 0x50, 0x6, 0x80, 0x6, 0x2, 0x200, 0x8000, 0x2, 0x0, 0x7, 0x6, 0x0, 0xff, 0x6, 0x7, 0xffffd66d, 0xa, 0x7, 0x6, 0x9, 0x9, 0x3, 0x10, 0x86f, 0x3, 0x81, 0x7, 0x97, 0x6, 0x7, 0x1, 0x8, 0x9, 0x3, 0x7f, 0x9, 0x0, 0xa, 0x7, 0x7ff, 0x8, 0x6, 0x4, 0x1, 0x3ff, 0x89f, 0x33, 0x400, 0x57, 0x4, 0x3, 0x3, 0x2, 0x8b2, 0x5, 0xff, 0x5, 0xc, 0x6, 0x2a5, 0x401, 0x586, 0xffff, 0x3, 0x8, 0x5, 0x0, 0x7, 0x0, 0x9, 0x907a, 0xa, 0xb, 0x81, 0x7, 0x804, 0x8, 0x7ff, 0x4, 0x4, 0x10, 0x3, 0x1000, 0x10001, 0x8, 0x5, 0x2, 0x81, 0xfffffff8, 0x8, 0x7, 0x8, 0x8, 0x8, 0x5, 0x9, 0x7fffffff, 0x9, 0x23df, 0x4, 0xffff0001, 0x2, 0x91, 0x6, 0x1, 0x1, 0x401, 0x200, 0x7, 0x6, 0x6, 0x6, 0x2, 0x10000, 0x8000000, 0xe765, 0xffffffff, 0x4, 0x6, 0x10000, 0xfffffffd, 0xba0, 0x17, 0xffffffff, 0xd, 0x65253a73, 0x10001, 0x9, 0x1, 0x0, 0x6, 0x5, 0x4f8, 0x9, 0x1a7f, 0x7e9, 0x1, 0x4, 0x6cb, 0x40, 0x3, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x5, 0x3, 0x9, 0x1ff, 0x10001, 0xfffffff8, 0xfffffff8, 0x8, 0x8, 0x3, 0x9, 0x7fff, 0x4, 0x1ff, 0x0, 0x7, 0x9, 0x2, 0x80, 0x3, 0x2000, 0x2, 0x4, 0x9, 0xe, 0x6, 0xb, 0x35916e6e, 0xccea, 0xec, 0x1, 0x0, 0x2, 0x1ff, 0x50486dfe, 0x3, 0x2, 0xb, 0x7, 0x4, 0x7fe, 0x6, 0x2, 0x80000000, 0x7, 0x7, 0x6, 0x1ff, 0x6, 0x9, 0x80000001, 0xcc0, 0x9, 0x5, 0x0, 0xfffffffd, 0x2, 0x5, 0xffffffff, 0x5, 0x0, 0xa, 0x8, 0x4, 0x6, 0x0, 0x80000001, 0x1, 0x6, 0x4b, 0x4, 0x6, 0xfffffff8, 0x2, 0x46b5, 0x2005, 0x8, 0x1000, 0x9, 0x4, 0x1, 0x401, 0x8, 0x8, 0xbbae, 0x80, 0x7, 0x2, 0x7, 0x3, 0xffff, 0xff, 0x9, 0x101000, 0x3ff, 0x3, 0x9, 0x1, 0xa, 0x1, 0x8, 0x4, 0x80, 0x9, 0x499e, 0xc, 0x973f, 0x5, 0xfffffffd, 0xc5b4, 0x6, 0x6, 0x9, 0x94, 0x49deebdd, 0x6, 0x1000, 0x0, 0x5, 0x6, 0xa, 0x7, 0x1, 0x9, 0x5, 0x6, 0x4, 0x6, 0x1, 0x96, 0x192, 0x7, 0x6f5c, 0x4, 0x6, 0x7, 0x3, 0x0, 0x6098, 0x9, 0xccf, 0x8, 0x0, 0x5, 0x800, 0x3ff, 0xc, 0x10001, 0x80000000, 0x7, 0x5, 0xe6, 0x8, 0x4c, 0x2e85, 0x9, 0xa, 0x2, 0x6, 0x7, 0x6, 0xb86, 0x6, 0x0, 0x1, 0x0, 0xadc, 0xf, 0x9, 0x2, 0x36, 0x6, 0x3, 0x3fc0000, 0x9, 0x7fffffff, 0x9, 0x2, 0xb, 0xe, 0x6, 0x3, 0x81, 0x2, 0x8000, 0x4, 0x0, 0x709e, 0x7fffffff, 0x7, 0xa, 0x0, 0xfffffff4, 0x2, 0x4, 0x9, 0x1, 0x90, 0x3, 0xcf, 0x8, 0x1, 0xfff, 0x7, 0xea, 0x40, 0x8, 0x0, 0xb60, 0x8a4a, 0x4, 0x7, 0x63, 0x3, 0x7fffffff, 0x8, 0x0, 0x9, 0x9, 0x6, 0x5b67, 0x4, 0x9, 0x3, 0x9, 0x22, 0xb2, 0xf369, 0x1, 0x2, 0x2, 0x7ff, 0x8001, 0x5be3, 0x1, 0x2, 0x4e6a, 0x2, 0xb7, 0x11, 0xfffffff8, 0x49, 0x3ff, 0x8, 0x0, 0x5185, 0x3, 0x7ff, 0x3, 0x7fffffff, 0xffffc20e, 0x6, 0x3, 0x2, 0x7, 0x1, 0x6, 0x5, 0xffffffe3, 0x10000, 0x0, 0x1, 0x8000, 0x43b2, 0x9, 0x401, 0x4, 0x0, 0x80, 0xff, 0x7fff, 0x3, 0x400, 0xfffffff9, 0x6, 0x5, 0xc71, 0x800, 0xf, 0x77, 0x9, 0x2800000, 0x9, 0xfffffffb, 0x6, 0xa7a, 0x80000000, 0x3, 0x0, 0x8, 0x5, 0x4, 0x6, 0x6, 0x1, 0x8001, 0x40, 0x3, 0x81, 0x4, 0xf5, 0x2400, 0x8001, 0x6, 0x3, 0x22200, 0x3, 0x7, 0x1d5, 0x8, 0xfffffffc, 0x0, 0x0, 0x2, 0x8, 0xb, 0x1, 0x6, 0x0, 0x0, 0x0, 0x7, 0x1ff, 0x5, 0x30a0, 0x0, 0xa8, 0x2, 0x8, 0xfc000000, 0x8, 0x7fff, 0x5, 0x8, 0x5, 0x46f65108, 0x29, 0x0, 0x0, 0x8, 0xac58, 0xffff, 0x80f, 0xfffffff8, 0x2, 0xde7, 0x10, 0x8001, 0x9, 0x6, 0xfffff467, 0x2, 0x7, 0x8000, 0x54f, 0xb12, 0x4, 0x10ab08, 0x400, 0x81, 0x7, 0x9, 0xa0, 0xffffff80, 0xc0b, 0x8, 0x1, 0x8, 0x9, 0xe2, 0xf, 0xfffffffa, 0x8, 0xffffff6a, 0x7fff, 0x5, 0x499, 0x4, 0x10001, 0x2, 0x5, 0xa, 0x8, 0x101, 0xfffffffe, 0x80, 0xa, 0x2, 0x8000, 0x6b602f4e, 0x10000, 0x2, 0x5, 0x10001, 0x9, 0xfffff801, 0x0, 0x4, 0x2, 0x0, 0x228, 0x7fff, 0x7, 0x81, 0x8, 0x7, 0xc9e, 0xc9f, 0x5, 0xffff6b04, 0x2, 0xdc2, 0x1, 0x76, 0x1, 0x997, 0x8, 0x487, 0x3, 0x59c7, 0x0, 0x4], 0x2, 0x400, 0xfffff3d6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r8, 0xaeb, 0x1) getdents64(r8, 0x0, 0x4f) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002300010322bd7002fadbdf2501000000b7ca0de37d5b88f33c3435934ab786f05d201bc9934382aa3964986cc6ef4fdeac729b43aa0c483321bf61db9b872c40028acb9bc6e731869fce7c63294f186559291bd0e4d7d113fc258129a845bb5235c2dbde5b27bad086520167083a1b8aad235a1206c815f7c5f7e11ba47b62234276dd8b667c7dae368d86c83134e3ebbce3ae1236607f20662df9ef44c1bd6e30ce917b0c4e2569b444e0a4081e85785cfac0ed52e66168fd7ec6dc7f766d"], 0x14}}, 0xc004) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1aa) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/201, 0xc9) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000340)) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) 1.057379451s ago: executing program 4 (id=747): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r0, 0x8) r1 = syz_open_procfs(r0, &(0x7f0000000140)='smaps\x00') (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_script(r1, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000040)) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe256610c62001369}, 0x600000c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x20, 0x1000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10200, 0x4581}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}]}, 0x34}}, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000006f80)=0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) 350.174284ms ago: executing program 2 (id=748): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x8f}, {0xfa, 0xc9, 0xa8}}}}, 0xa) write(r0, &(0x7f0000000140)="41000200010001", 0x178) r1 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60200, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xfffffffffffffc55, 0x5, 0xcb9, 0xb012, 0x80, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) close(0x3) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) fdatasync(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x104002, 0x0) r6 = syz_clone(0xd6004d80, &(0x7f0000000300)="99bf713c3080afa743673690856b7b1d57309fcb25e551a97d4ec715e2d1694c96155c3d7edca988f0e4b0acdbce552978213b90fd52db2abdbba224ce553acbf99973bf66c0900aabae1fe2c5571e01a40c7dfda6a776164ecc945cc7f6e25d60be5b752060aa494843a24450d989c93a650bc8626a25ceecc65e82b4982707a5fb4808549c4dc7278e6ee5b8389de252879a2dd31bdbf4218e53e4db7512e9016f969f40e18646d2646eb8555d2f25177df5e39ea2302561ad2c825cc557b59281a46f3e56285aa4df6fc89693ae11d061036950280952dbd3d87e0f73b0aed2fe62e5a0a05cdb", 0xe8, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="3828f5be19295a55d15bc1a0fcbf53aa5cc3aba476c731ed70639e3e123a0a4f9753bc645758457f580e10254138d0200e4b4794746f610bb8") getpgrp(r6) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x3}}, './file1\x00'}) 289.585634ms ago: executing program 4 (id=750): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xa, 0xffffffff, 0x1, 0x9, 0x800, 0x6, 0x48d4}, {0x40000000, 0x84, 0x0, 0x8, 0x7, 0x7, 0x5}, {0x8000000e, 0x8, 0x1, 0x3ff, 0x7ffffdff, 0x8005, 0x1}, {0x80000019, 0x2, 0x6, 0x7, 0xdf1, 0x5, 0x80000001}, {0x80000008, 0x2bb, 0x1, 0xd, 0x0, 0x7ff, 0x8}, {0x80000000, 0xff, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0x5, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x10020, &(0x7f0000000500)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010100}, 0x4, 0x4}}, 0x80, &(0x7f0000000080)}, 0x0) 249.231942ms ago: executing program 2 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='pi3usb30532 0x5', 0xf) 248.32293ms ago: executing program 1 (id=752): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x6add, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c", 0xf}], 0x1}, 0x40) 246.942791ms ago: executing program 1 (id=753): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000e6256500000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x89a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="98010000", @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf250700000008000100620bab0008000300", @ANYRES32=r5, @ANYBLOB="0c0099007a0b000079000000140004006970365f767469300000000000000000140004006e6963766630000000000000000000001c00e70004e6a4b2608ce2465f4c59d50201ff31cec79e4c64e221961c00e700b0bcf54f56ce89cf1c40183901a8270f71f9e282d323ab881c00e7006170eea4b0d046ae4299f48905fdc1d4b48810a8bc1e71060400178020001780040004000400060004000500040006000400020004000200040002001c00e700809575893e50cbba48132eb52a862e30b02b686fd89a2e530a0018000303030303030000040017800c00178004000600040003000a00e800ffffffffffff00000a00e800ffffffffffff00001c00e7001910ac7b89af9369942eb058eb68014410e115e6d39ec8e71c00e700a44418c45a89a870dbbc9291d6abb1b36426a0bc27accae01c00178004000100040005000400040004000100040002000400020014001780040001000400050004000500040006000a00e80008021100000100000400cc00"], 0x198}, 0x1, 0x0, 0x0, 0x4400}, 0xc1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtclass={0x30, 0x28, 0x4, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0x6, 0xffff}, {0xf, 0xfff3}}, [@tclass_kind_options=@c_mqprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x200008c0}, 0x20004095) 197.109691ms ago: executing program 2 (id=754): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x30, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000480)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, r3, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000440)}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8835}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_ublk_setup_io_uring(0x30, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) (async) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000480)=@ublk_get_features_sqe={0x2e, 0x0, 0x0, r3, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000440)}}) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8835}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) (async) 99.96576ms ago: executing program 1 (id=755): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/connector\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x65, &(0x7f0000000fc0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 99.569668ms ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r1, 0x1, 0xf9, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) 50.175695ms ago: executing program 1 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) (async) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20028}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x24008084) 0s ago: executing program 1 (id=758): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) (async) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f00000000c0)={r2, r3, 0x3, 0xc21}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) (async) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./dev/ttyUSB0\x00', 0x1, 0x1) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000010600002f"]) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): tes [ 59.448152][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 59.450295][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 59.452420][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 59.454670][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 59.456139][ T5875] usb 5-1: USB disconnect, device number 2 [ 59.456588][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 59.513797][ T42] audit: type=1400 audit(1786121620.588:239): avc: denied { mount } for pid=5921 comm="syz.1.14" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.537599][ T42] audit: type=1400 audit(1786121620.608:240): avc: denied { ioctl } for pid=5923 comm="syz.2.15" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7142 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.538987][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 59.559425][ T42] audit: type=1400 audit(1786121620.628:241): avc: denied { bind } for pid=5923 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.571536][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 59.576997][ T42] audit: type=1400 audit(1786121620.648:242): avc: denied { open } for pid=5923 comm="syz.2.15" path="/dev/ttyq9" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 59.639577][ T42] audit: type=1400 audit(1786121620.708:243): avc: denied { setopt } for pid=5930 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.652088][ T42] audit: type=1400 audit(1786121620.728:244): avc: denied { map_read map_write } for pid=5930 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.962229][ T5946] mmap: syz.2.23 (5946) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.106163][ T5962] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 60.153235][ T5972] ======================================================= [ 60.153235][ T5972] WARNING: The mand mount option has been deprecated and [ 60.153235][ T5972] and is ignored by this kernel. Remove the mand [ 60.153235][ T5972] option from the mount to silence this warning. [ 60.153235][ T5972] ======================================================= [ 60.168295][ T5972] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 60.179152][ T5972] cramfs: wrong magic [ 60.276688][ T5981] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.288237][ T5981] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.290147][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 60.471935][ T5994] overlayfs: empty lowerdir [ 60.548456][ T6002] warning: `syz.1.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.581176][ T6007] Device name not specified. [ 60.581176][ T6007] [ 60.614622][ T6011] autofs4:pid:6011:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 60.628860][ T6011] WARNING! power/level is deprecated; use power/control instead [ 60.684404][ T6020] comedi comedi0: Minor 3 could not be opened [ 60.694224][ T6018] bridge_slave_0: left allmulticast mode [ 60.696852][ T6018] bridge_slave_0: left promiscuous mode [ 60.701389][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.713296][ T6018] bridge_slave_1: left allmulticast mode [ 60.715764][ T6018] bridge_slave_1: left promiscuous mode [ 60.718271][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.726962][ T6018] bond0: (slave bond_slave_0): Releasing backup interface [ 60.737451][ T6018] bond0: (slave bond_slave_1): Releasing backup interface [ 60.748683][ T6018] team0: Port device team_slave_0 removed [ 60.755025][ T6018] team0: Port device team_slave_1 removed [ 60.758133][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.761732][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.767978][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.771650][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.776542][ T6018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.796769][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'. [ 60.801366][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 60.815443][ T6021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.839727][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.845090][ T6018] bond1: (slave bond0): Enslaving as an active interface with a down link [ 60.900781][ T6027] capability: warning: `syz.2.49' uses deprecated v2 capabilities in a way that may be insecure [ 60.930963][ T5732] Bluetooth: hci2: command tx timeout [ 60.939855][ T5732] Bluetooth: hci1: command tx timeout [ 60.939930][ T5728] Bluetooth: hci0: command tx timeout [ 60.940367][ T5725] Bluetooth: hci3: command tx timeout [ 61.367719][ T6058] netlink: 'syz.2.56': attribute type 1 has an invalid length. [ 61.372664][ T6058] netlink: 244 bytes leftover after parsing attributes in process `syz.2.56'. [ 61.436584][ T6062] use of bytesused == 0 is deprecated and will be removed in the future, [ 61.439965][ T6062] use the actual size instead. [ 61.729869][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.772787][ T6067] jffs2: notice: (6067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 61.881946][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 61.885236][ T29] usb 5-1: config 4 has an invalid interface number: 13 but max is 0 [ 61.888507][ T29] usb 5-1: config 4 has no interface number 0 [ 61.891103][ T29] usb 5-1: config 4 interface 13 has no altsetting 0 [ 61.895696][ T29] usb 5-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 61.899140][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.903813][ T29] usb 5-1: Product: syz [ 61.905191][ T29] usb 5-1: Manufacturer: syz [ 61.906798][ T29] usb 5-1: SerialNumber: syz [ 62.058634][ T6085] CacheFiles: Empty directory specified [ 62.124142][ T29] ums-realtek 5-1:4.13: USB Mass Storage device detected [ 62.194032][ T29] usb 5-1: USB disconnect, device number 3 [ 62.254900][ T6089] netlink: 256 bytes leftover after parsing attributes in process `syz.2.67'. [ 62.258736][ T6089] netlink: 56 bytes leftover after parsing attributes in process `syz.2.67'. [ 62.310701][ T1037] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.475784][ T1037] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.479883][ T1037] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.484017][ T1037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.486977][ T1037] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 62.490680][ T1037] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 62.496619][ T1037] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.499813][ T1037] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.502908][ T1037] usb 6-1: Product: syz [ 62.504449][ T1037] usb 6-1: Manufacturer: syz [ 62.511804][ T1037] cdc_wdm 6-1:1.0: skipping garbage [ 62.513652][ T1037] cdc_wdm 6-1:1.0: skipping garbage [ 62.518844][ T1037] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 62.520998][ T1037] cdc_wdm 6-1:1.0: Unknown control protocol [ 62.650679][ T6098] jffs2: notice: (6098) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 62.722135][ T6104] binder: 6099:6104 ioctl c0306201 200000000640 returned -22 [ 62.723553][ T6085] ntfs3(sr0): Primary boot signature is not NTFS. [ 62.727039][ T6104] devpts: Unknown parameter 'ui 0x000000000000ee01' [ 62.730748][ T6085] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 62.887566][ T6111] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 62.899097][ T6111] tmpfs: Bad value for 'mpol' [ 63.001457][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 63.001868][ T5843] usb 6-1: USB disconnect, device number 2 [ 63.003589][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 63.007670][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 63.009610][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 63.010327][ T5732] Bluetooth: hci0: command tx timeout [ 63.010372][ T5725] Bluetooth: hci3: command tx timeout [ 63.010399][ T5725] Bluetooth: hci2: command tx timeout [ 63.020361][ T5732] Bluetooth: hci1: command tx timeout [ 63.091377][ T5728] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 63.130767][ T6131] program syz.2.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.563220][ T6144] jffs2: notice: (6144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 63.825547][ T6154] vfat: Unknown parameter 'discard' [ 64.074538][ T6170] jffs2: notice: (6170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 3 orphan) found. [ 64.274079][ T6179] input: syz1 as /devices/virtual/input/input6 [ 64.277170][ T6180] input: syz1 as /devices/virtual/input/input7 [ 64.398189][ T42] kauditd_printk_skb: 148 callbacks suppressed [ 64.398203][ T42] audit: type=1400 audit(1786121625.468:393): avc: denied { allowed } for pid=6183 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.407816][ T6184] netlink: 'syz.3.92': attribute type 1 has an invalid length. [ 64.584321][ T6188] netlink: 'syz.0.93': attribute type 63 has an invalid length. [ 64.587469][ T6188] netlink: 5 bytes leftover after parsing attributes in process `syz.0.93'. [ 64.590989][ T6188] gretap0: entered allmulticast mode [ 64.593347][ T6188] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.603245][ T42] audit: type=1400 audit(1786121625.678:394): avc: denied { bind } for pid=6187 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.640523][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.669338][ T6192] input: syz1 as /devices/virtual/input/input8 [ 64.677523][ T29] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 64.678226][ T6192] cgroup: Need name or subsystem set [ 64.680622][ T29] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 64.695435][ T1158] wlan1: authenticated [ 64.695611][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.713132][ T1158] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 64.733196][ T6196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.97'. [ 64.753999][ T6190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.757180][ T1158] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 64.762704][ T1158] wlan1: associated [ 64.772822][ T6198] jffs2: notice: (6198) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 64.779373][ T42] audit: type=1400 audit(1786121625.848:395): avc: denied { write } for pid=6197 comm="syz.3.98" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.789223][ T42] audit: type=1400 audit(1786121625.858:396): avc: denied { write } for pid=6197 comm="syz.3.98" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.798589][ T42] audit: type=1400 audit(1786121625.858:397): avc: denied { write } for pid=6197 comm="syz.3.98" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.850227][ T6192] futex_wake_op: syz.0.95 tries to shift op by -1; fix this program [ 64.855599][ T6201] XFS (mtdblock0): Invalid superblock magic number [ 64.879524][ T42] audit: type=1400 audit(1786121625.948:398): avc: denied { mounton } for pid=6200 comm="syz.3.99" path="/27/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 64.932689][ T42] audit: type=1400 audit(1786121626.008:399): avc: denied { create } for pid=6211 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.941208][ T42] audit: type=1400 audit(1786121626.008:400): avc: denied { ioctl } for pid=6211 comm="syz.3.100" path="socket:[10834]" dev="sockfs" ino=10834 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.961859][ T42] audit: type=1400 audit(1786121626.038:401): avc: denied { bind } for pid=6213 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.969282][ T42] audit: type=1400 audit(1786121626.038:402): avc: denied { setopt } for pid=6213 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.356870][ T6238] Zero length message leads to an empty skb [ 65.618057][ T6250] jffs2: notice: (6250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 6 of xref (0 dead, 5 orphan) found. [ 65.688674][ T6256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.753424][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 65.756558][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 65.815757][ T6261] xt_hashlimit: size too large, truncated to 1048576 [ 65.925454][ T6226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 66.009053][ T6277] program syz.1.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.015639][ T6277] program syz.1.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.022110][ T6278] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 66.026221][ T6282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.117'. [ 66.026879][ T6272] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.037239][ T6272] trusted_key: syz.3.114 sent an empty control message without MSG_MORE. [ 66.076974][ T6285] x_tables: duplicate underflow at hook 2 [ 66.080084][ T6285] netlink: 56 bytes leftover after parsing attributes in process `syz.1.118'. [ 66.142099][ T6297] (syz.3.122,6297,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 66.146686][ T6297] (syz.3.122,6297,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 66.150762][ T6297] (syz.3.122,6297,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 66.153662][ T6297] (syz.3.122,6297,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 66.269584][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.419624][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 66.423344][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 66.434441][ T29] usb 7-1: string descriptor 0 read error: -22 [ 66.436604][ T29] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 66.443811][ T29] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 66.464080][ T29] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 66.466612][ T29] dw2102: su3000_power_ctrl: 1, initialized 0 [ 66.469282][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 66.480783][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.484570][ T29] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 66.487741][ T29] usb 7-1: media controller created [ 66.489534][ T5830] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 66.492844][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 66.495297][ T29] dw2102: i2c transfer failed. [ 66.498062][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 66.501325][ T29] dw2102: i2c transfer failed. [ 66.503190][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 66.505068][ T29] dw2102: i2c transfer failed. [ 66.506557][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 66.508340][ T29] dw2102: i2c transfer failed. [ 66.510224][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 66.512893][ T29] dw2102: i2c transfer failed. [ 66.514668][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 66.516455][ T29] dw2102: i2c transfer failed. [ 66.518025][ T29] dvb-usb: MAC address: 02:02:02:02:02:02 [ 66.527130][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.541700][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 66.544639][ T29] dw2102: command 0x0e transfer failed. [ 66.547261][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 66.549151][ T29] dw2102: command 0x0e transfer failed. [ 66.641523][ T5830] usb 6-1: unable to get BOS descriptor or descriptor too short [ 66.644740][ T5830] usb 6-1: not running at top speed; connect to a high speed hub [ 66.648180][ T5830] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 66.650906][ T5830] usb 6-1: config 0 has no interface number 0 [ 66.653188][ T5830] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 66.656950][ T5830] usb 6-1: config 0 interface 88 has no altsetting 0 [ 66.662733][ T5830] usb 6-1: language id specifier not provided by device, defaulting to English [ 66.668781][ T5830] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 66.672851][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 66.675464][ T5830] usb 6-1: Product: syz [ 66.676795][ T5830] usb 6-1: SerialNumber: Љ [ 66.681316][ T5830] usb 6-1: config 0 descriptor?? [ 66.683965][ T6306] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 66.767151][ T6318] kvm: kvm [6275]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 66.773386][ T6318] kvm: kvm [6275]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 66.861104][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 66.863239][ T29] dw2102: command 0x0e transfer failed. [ 66.866888][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 66.868934][ T29] dw2102: command 0x0e transfer failed. [ 66.872086][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 66.874232][ T29] dw2102: command 0x51 transfer failed. [ 66.878890][ T6278] dvb-usb: bulk message failed: -22 (5/0) [ 66.882288][ T6278] dw2102: i2c transfer failed. [ 66.903361][ T29] DVB: Unable to find symbol ds3000_attach() [ 66.905406][ T29] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 66.959505][ T29] rc_core: IR keymap rc-su3000 not found [ 66.961457][ T29] Registered IR keymap rc-empty [ 66.965060][ T29] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 66.978658][ T29] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input9 [ 66.986178][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 66.988956][ T29] dw2102: su3000_power_ctrl: 0, initialized 1 [ 66.991464][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 66.998559][ T29] usb 7-1: USB disconnect, device number 2 [ 67.035356][ T29] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 67.319607][ T6341] jffs2: notice: (6341) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 7 of xref (0 dead, 6 orphan) found. [ 67.465384][ T6351] program syz.0.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.481926][ T24] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 67.490853][ T24] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 67.536618][ T6357] lo speed is unknown, defaulting to 1000 [ 67.539038][ T6357] lo speed is unknown, defaulting to 1000 [ 67.542490][ T6357] lo speed is unknown, defaulting to 1000 [ 67.545157][ T6357] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 67.549729][ T6357] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 67.555558][ T6357] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 67.561011][ T6357] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.567506][ T6357] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 67.586178][ T6357] lo speed is unknown, defaulting to 1000 [ 67.590733][ T6357] lo speed is unknown, defaulting to 1000 [ 67.596201][ T6357] lo speed is unknown, defaulting to 1000 [ 67.602078][ T6357] lo speed is unknown, defaulting to 1000 [ 67.771456][ T5734] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 67.786215][ T6365] jffs2: notice: (6365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 8 of xref (0 dead, 7 orphan) found. [ 67.830249][ T6368] openvswitch: netlink: Flow key attr not present in new flow. [ 67.838507][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 67.859805][ T6368] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 67.862950][ T6368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.872394][ T6368] vhci_hcd vhci_hcd.0: Device attached [ 67.878066][ T6368] netlink: 'syz.2.141': attribute type 19 has an invalid length. [ 67.881133][ T6371] vlan2: entered promiscuous mode [ 67.882986][ T6369] vhci_hcd: connection closed [ 67.883287][ T6371] hsr0: entered promiscuous mode [ 67.885274][ T5831] vhci_hcd vhci_hcd.2: stop threads [ 67.886590][ T6371] vlan2: entered allmulticast mode [ 67.889115][ T5831] vhci_hcd vhci_hcd.2: release socket [ 67.890899][ T6371] hsr0: entered allmulticast mode [ 67.893576][ T5831] vhci_hcd vhci_hcd.2: disconnect device [ 67.894489][ T6371] hsr_slave_0: entered allmulticast mode [ 67.894502][ T6371] hsr_slave_1: entered allmulticast mode [ 67.977103][ T6373] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 68.195282][ T6377] jffs2: notice: (6377) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 9 of xref (0 dead, 7 orphan) found. [ 68.280955][ T5734] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 68.529890][ T6351] ceph: No mds server is up or the cluster is laggy [ 68.561001][ T6391] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 68.596012][ T6391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.619162][ T6391] bond1: (slave gretap1): making interface the new active one [ 68.623999][ T6391] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.683923][ T6394] protocol 0000 is buggy, dev veth0_vlan [ 68.731451][ T6396] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 68.741097][ T6396] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 68.898759][ T6404] Invalid source name [ 68.900613][ T6404] UBIFS error (pid: 6404): cannot open "/dev/sg0", error -22 [ 69.174294][ T5830] input: syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input10 [ 69.185853][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 69.203694][ C1] usb_acecad 6-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 69.216797][ T5830] usb 6-1: USB disconnect, device number 3 [ 69.216844][ C2] usb_acecad 6-1:0.88: can't resubmit intr, dummy_hcd.1-1/input0, status -19 [ 69.237006][ T6420] jffs2: notice: (6420) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 9 of xref (0 dead, 7 orphan) found. [ 69.253144][ T6424] netlink: 124 bytes leftover after parsing attributes in process `syz.1.159'. [ 69.358021][ T6431] tipc: Enabling of bearer rejected, failed to enable media [ 69.374085][ T6432] lo speed is unknown, defaulting to 1000 [ 69.752211][ T6456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 69.752618][ T6458] jffs2: notice: (6458) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 9 of xref (0 dead, 7 orphan) found. [ 69.759005][ T6455] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 69.810484][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 69.810499][ T42] audit: type=1400 audit(1786121630.878:487): avc: denied { map } for pid=6460 comm="syz.3.172" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.828192][ T42] audit: type=1400 audit(1786121630.878:488): avc: denied { execute } for pid=6460 comm="syz.3.172" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 69.855624][ T6468] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 69.862811][ T222] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.941681][ T6477] netlink: 200 bytes leftover after parsing attributes in process `syz.0.175'. [ 69.975442][ T42] audit: type=1400 audit(1786121631.048:489): avc: denied { getopt } for pid=6481 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.013338][ T42] audit: type=1400 audit(1786121631.088:490): avc: denied { read append } for pid=6481 comm="syz.3.176" name="mouse1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.021298][ T42] audit: type=1400 audit(1786121631.088:491): avc: denied { open } for pid=6481 comm="syz.3.176" path="/dev/input/mouse1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 70.032313][ T42] audit: type=1326 audit(1786121631.098:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.2.169" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f534179e0d9 code=0x0 [ 70.151675][ T6495] jffs2: notice: (6495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 9 of xref (0 dead, 7 orphan) found. [ 70.196353][ T6498] netlink: 'syz.3.180': attribute type 32 has an invalid length. [ 70.221511][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 70.372766][ T10] usb 5-1: config 0 has no interfaces? [ 70.374562][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 70.377519][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.381791][ T10] usb 5-1: config 0 descriptor?? [ 70.587693][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.590784][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.594864][ T64] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 70.594904][ T64] Bluetooth: hci1: Malformed LE Event: 0x0d [ 70.661249][ T24] usb 5-1: USB disconnect, device number 4 [ 71.199626][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.228861][ T42] audit: type=1400 audit(1786121632.298:493): avc: denied { unmount } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.334068][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.336787][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.360956][ T24] usb 7-1: config 128 has an invalid interface number: 148 but max is 0 [ 71.363888][ T24] usb 7-1: config 128 has no interface number 0 [ 71.366159][ T24] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 71.369768][ T24] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 71.373269][ T24] usb 7-1: config 128 interface 148 has no altsetting 0 [ 71.376968][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 71.380262][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.382821][ T24] usb 7-1: Product: syz [ 71.384115][ T24] usb 7-1: Manufacturer: syz [ 71.385552][ T24] usb 7-1: SerialNumber: syz [ 71.598213][ T42] audit: type=1400 audit(1786121632.668:494): avc: denied { unlink } for pid=6511 comm="syz.0.185" name="#5" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.599889][ T24] usb 7-1: USB disconnect, device number 3 [ 71.786893][ T6527] jffs2: notice: (6527) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 9 of xref (0 dead, 7 orphan) found. [ 71.846774][ T42] audit: type=1400 audit(1786121632.918:495): avc: denied { bind } for pid=6529 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.854792][ T42] audit: type=1400 audit(1786121632.918:496): avc: denied { getopt } for pid=6529 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.873805][ T6530] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 71.890581][ T5728] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.893858][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 71.964895][ T6533] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 72.049534][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.114751][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 72.149992][ T6535] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 72.209563][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 72.211403][ T5732] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 72.213387][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 72.217674][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.221491][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.225173][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 72.229253][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.234433][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.237984][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.451729][ T10] usb 7-1: usb_control_msg returned -32 [ 72.456161][ T10] usbtmc 7-1:16.0: can't read capabilities [ 72.458951][ T6548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 72.601239][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.706220][ T6560] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001 [ 72.721743][ T6560] netlink: 'syz.1.198': attribute type 10 has an invalid length. [ 72.727832][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.733946][ T6560] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.739707][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 72.761267][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.766178][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.772229][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.776090][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.783927][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.797418][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.810836][ T29] usb 8-1: config 0 descriptor?? [ 72.849961][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 72.864398][ T6571] sctp: [Deprecated]: syz.1.202 (pid 6571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.864398][ T6571] Use struct sctp_sack_info instead [ 72.918053][ T6577] binder: 6575:6577 ioctl 4b4c 200000000240 returned -22 [ 72.970080][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 72.988261][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.206'. [ 73.046113][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 73.055990][ T6590] IPv6: sit1: Disabled Multicast RS [ 73.091482][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 73.174461][ T6590] kvm: pic: non byte write [ 73.179654][ T5830] usb 7-1: USB disconnect, device number 4 [ 73.201198][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 73.229364][ T29] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 73.244800][ T6605] netlink: 700 bytes leftover after parsing attributes in process `syz.0.208'. [ 73.256710][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 73.309413][ T6601] autofs4:pid:6601:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 73.310279][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 73.385811][ T6615] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.402860][ T6615] syzkaller0: entered promiscuous mode [ 73.405117][ T6615] syzkaller0: entered allmulticast mode [ 73.439602][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 73.540886][ T5830] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.559572][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 73.669770][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 73.691108][ T5830] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 73.695033][ T5830] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8D has an invalid bInterval 195, changing to 7 [ 73.698716][ T5830] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8D has invalid maxpacket 49451, setting to 1024 [ 73.702481][ T5830] usb 7-1: config 0 interface 0 has no altsetting 0 [ 73.706855][ T5830] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 73.710006][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 73.712818][ T5830] usb 7-1: Product: syz [ 73.714259][ T5830] usb 7-1: Manufacturer: syz [ 73.716172][ T5830] usb 7-1: SerialNumber: syz [ 73.721292][ T5830] usb 7-1: config 0 descriptor?? [ 73.730022][ T5830] usb 7-1: selecting invalid altsetting 0 [ 73.779627][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 73.779643][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.892855][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 73.926543][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.930610][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.939718][ T5830] usb 7-1: USB disconnect, device number 5 [ 73.953789][ T34] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 73.961616][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.968616][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.973374][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 73.978885][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.983036][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.987598][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 73.992190][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.996448][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.002136][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.006302][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.010537][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.015133][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.021437][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.027463][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.035698][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.043200][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.047356][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.052163][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.056146][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.063857][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.068653][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.074521][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.078546][ T34] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.083300][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.088909][ T34] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 74.092889][ T34] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 74.096534][ T34] usb 6-1: Product: syz [ 74.098309][ T34] usb 6-1: Manufacturer: syz [ 74.100493][ T34] usb 6-1: SerialNumber: syz [ 74.105521][ T34] usb 6-1: config 0 descriptor?? [ 74.116633][ T34] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 74.156862][ T6621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 74.161319][ T6621] block device autoloading is deprecated and will be removed. [ 74.373366][ T5875] usb 6-1: USB disconnect, device number 4 [ 74.496954][ T6632] netlink: 'syz.2.221': attribute type 5 has an invalid length. [ 74.518968][ T6632] kernel read not supported for file /policy (pid: 6632 comm: syz.2.221) [ 74.539970][ T5875] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 74.574931][ T6633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21246 sclass=netlink_route_socket pid=6633 comm=syz.2.221 [ 74.593125][ T6617] netlink: 52 bytes leftover after parsing attributes in process `syz.1.216'. [ 75.112645][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 75.112665][ T42] audit: type=1400 audit(1786121636.188:524): avc: denied { read write } for pid=6642 comm="syz.3.222" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.125667][ T42] audit: type=1400 audit(1786121636.188:525): avc: denied { open } for pid=6642 comm="syz.3.222" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.135458][ T42] audit: type=1400 audit(1786121636.198:526): avc: denied { map } for pid=6642 comm="syz.3.222" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 75.255178][ T42] audit: type=1400 audit(1786121636.328:527): avc: denied { write } for pid=6652 comm="syz.3.227" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.259721][ T6654] Bluetooth: ISO socket layer initialized [ 75.273831][ T42] audit: type=1400 audit(1786121636.328:528): avc: denied { write } for pid=6652 comm="syz.3.227" path="socket:[15526]" dev="sockfs" ino=15526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.334236][ T34] usb 8-1: USB disconnect, device number 2 [ 75.390810][ T6664] tracefs: Unknown parameter 'm' [ 75.391009][ T42] audit: type=1400 audit(1786121636.468:529): avc: denied { mount } for pid=6663 comm="syz.3.230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.419769][ T42] audit: type=1400 audit(1786121636.468:530): avc: denied { remount } for pid=6663 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.425731][ T42] audit: type=1400 audit(1786121636.468:531): avc: denied { read } for pid=6663 comm="syz.3.230" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.432905][ T42] audit: type=1400 audit(1786121636.468:532): avc: denied { watch } for pid=6663 comm="syz.3.230" path="/59/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 75.435396][ T6664] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 75.468141][ T42] audit: type=1400 audit(1786121636.538:533): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 75.493027][ T6668] netlink: 'syz.1.231': attribute type 34 has an invalid length. [ 75.495602][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 75.531306][ T6670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.537824][ T6671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.670093][ T6686] type: 17119 invalid [ 75.670721][ T6687] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 75.872062][ T6698] netlink: 52 bytes leftover after parsing attributes in process `syz.2.240'. [ 75.877252][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.880597][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.922288][ T6700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'. [ 75.941451][ T6700] Console: switching to colour dummy device 80x25 [ 76.158522][ T6713] fuse: Unknown parameter 'subj_type' [ 76.238795][ T6715] fuse: Bad value for 'fd' [ 76.305952][ T6704] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 76.319199][ T6704] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 76.324520][ T6704] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 76.332542][ T6704] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 76.334798][ T6704] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 76.337883][ T6704] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 76.350048][ T6704] pci 0000:00:01.0: Adding to iommu group 1 [ 76.355971][ T6704] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 76.358249][ T6704] pci 0000:00:01.0: vgaarb: bridge control possible [ 76.360229][ T6704] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io,locks=none [ 76.375929][ T6704] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 76.378577][ T6704] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 76.383526][ T6704] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 76.389252][ T6704] virtio-pci 0000:00:01.0: enabling device (0001 -> 0003) [ 76.453464][ T6704] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 76.463673][ T6704] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 76.471945][ T6704] [drm] features: -virgl +edid -resource_blob -host_visible [ 76.471994][ T6704] [drm] features: -context_init -blob_alignment [ 76.523186][ T6704] [drm] number of scanouts: 1 [ 76.525092][ T6704] [drm] number of cap sets: 0 [ 76.563179][ T6741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.251'. [ 76.568816][ T6704] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 76.706601][ T6751] jffs2: notice: (6751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 9 of xref (0 dead, 7 orphan) found. [ 76.717957][ T6704] Console: switching to colour frame buffer device 160x50 [ 76.725106][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 76.730421][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 76.785276][ T6704] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 76.804424][ T6760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6760 comm=syz.3.255 [ 76.806026][ T6761] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 76.841612][ T6764] overlayfs: failed to resolve './bus': -2 [ 76.872524][ T6770] vlan2: entered promiscuous mode [ 76.874342][ T6770] bridge0: entered promiscuous mode [ 76.959038][ T6778] binder: 6775:6778 ioctl 40046205 0 returned -22 [ 77.037580][ T6789] jffs2: notice: (6789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 2 orphan) and 10 of xref (0 dead, 8 orphan) found. [ 77.089585][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 77.138542][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 77.168109][ T6798] netlink: 52 bytes leftover after parsing attributes in process `syz.1.269'. [ 77.256760][ T41] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.260709][ T41] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 77.267050][ T41] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.270158][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.272669][ T41] usb 8-1: Product: syz [ 77.273979][ T41] usb 8-1: Manufacturer: syz [ 77.275435][ T41] usb 8-1: SerialNumber: syz [ 77.280592][ T5830] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.281076][ T41] cdc_mbim 8-1:1.0: skipping garbage [ 77.316658][ T6802] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 77.429594][ T5830] usb 7-1: Using ep0 maxpacket: 16 [ 77.433952][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.437292][ T5830] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.440810][ T5830] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.445069][ T5830] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 77.448386][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.454645][ T5830] usb 7-1: config 0 descriptor?? [ 77.483491][ T6767] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.504961][ T6312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 77.508011][ T6312] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 77.517835][ T6312] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 77.618298][ T6818] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 77.854854][ T6839] xt_bpf: check failed: parse error [ 77.871487][ T5830] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 77.879532][ T5830] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 77.881687][ T5830] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 77.888309][ T5830] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 77.893297][ T5830] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 77.904239][ T5830] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 77.949735][ T5831] net_ratelimit: 35 callbacks suppressed [ 77.949761][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 77.996398][ T6849] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.001353][ T5830] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 78.006313][ T5830] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 78.065961][ T6791] netlink: 504 bytes leftover after parsing attributes in process `syz.2.266'. [ 78.069577][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.084873][ T5830] usb 7-1: USB disconnect, device number 6 [ 78.085508][ T6849] md: loop0 has zero or unknown size, marking faulty! [ 78.088630][ T6312] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 78.094799][ T6767] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.098371][ T41] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 78.106889][ T6312] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.111311][ T41] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 78.117824][ T6312] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.124903][ T6312] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.127268][ T41] wwan wwan0: port wwan0mbim0 attached [ 78.160429][ T847] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 78.173454][ T41] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, da:d8:12:ef:bb:90 [ 78.189632][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.301186][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.304325][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.306409][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.308444][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.310526][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.312615][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.314585][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.317551][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.319681][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.321712][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 78.323333][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.323344][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.325418][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.325429][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.327343][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.327353][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.328624][ T6767] usb 8-1: USB disconnect, device number 3 [ 78.329527][ C2] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 78.329538][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 78.329546][ C2] cdc_mbim 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 78.331616][ T847] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 78.336800][ T6767] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 78.338203][ T847] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 78.340093][ T847] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 78.358048][ T847] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 78.360672][ T847] usb 6-1: Product: syz [ 78.362139][ T847] usb 6-1: Manufacturer: syz [ 78.363678][ T847] usb 6-1: SerialNumber: syz [ 78.383183][ T847] usb 6-1: config 0 descriptor?? [ 78.450288][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.521091][ T6767] wwan wwan0: port wwan0mbim0 disconnected [ 78.559576][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.588194][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.590522][ T5875] usb 6-1: USB disconnect, device number 5 [ 78.595132][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.669835][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.685850][ T6873] process 'syz.2.289' launched '/dev/fd/4' with NULL argv: empty string added [ 78.693235][ T6873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6873 comm=syz.2.289 [ 78.779716][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 78.794120][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 78.829921][ T5831] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.834171][ T5831] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.837233][ T5831] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.840897][ T5831] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.900857][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 79.009878][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 79.057734][ T6903] capability: warning: `syz.2.296' uses 32-bit capabilities (legacy support in use) [ 79.214133][ T6914] Bluetooth: MGMT ver 1.23 [ 79.771175][ T6935] futex_wake_op: syz.2.307 tries to shift op by 32; fix this program [ 79.777864][ T6935] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 79.828595][ T6935] gretap2: entered allmulticast mode [ 79.835864][ T6935] bond2: (slave gretap2): making interface the new active one [ 79.842190][ T6935] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 79.852675][ T6935] netlink: 'syz.2.307': attribute type 21 has an invalid length. [ 80.061267][ T6953] Invalid ELF header len 18 [ 80.062994][ T6953] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 80.086134][ T6953] bond2: entered promiscuous mode [ 80.088159][ T6953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.128618][ T6954] bond2: (slave bridge2): making interface the new active one [ 80.131888][ T6954] bridge2: entered promiscuous mode [ 80.134800][ T6954] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 80.158000][ T6953] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 80.223862][ T42] kauditd_printk_skb: 68 callbacks suppressed [ 80.223882][ T42] audit: type=1400 audit(1786121641.298:602): avc: denied { read } for pid=6958 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.305310][ T6965] support for the xor transformation has been removed. [ 80.311781][ T6965] x_tables: duplicate underflow at hook 2 [ 80.692971][ T42] audit: type=1400 audit(1786121641.768:603): avc: denied { read append } for pid=6976 comm="syz.3.319" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.707134][ T42] audit: type=1400 audit(1786121641.768:604): avc: denied { open } for pid=6976 comm="syz.3.319" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.747689][ T42] audit: type=1400 audit(1786121641.818:605): avc: denied { map } for pid=6980 comm="syz.3.320" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 81.096634][ T6987] dlm: no locking on control device [ 81.203064][ T6990] team0: Mode changed to "activebackup" [ 81.209853][ T42] audit: type=1400 audit(1786121642.278:606): avc: denied { write } for pid=6988 comm="syz.1.323" name="functions" dev="configfs" ino=11484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.216644][ T6990] printk: legacy console [ttyGS0] disabled [ 81.577157][ T1353] cfg80211: failed to load regulatory.db [ 81.684110][ T6998] 9pnet_virtio: no channels available for device 127.0.0.1 [ 81.687970][ T6996] bridge_slave_0: left allmulticast mode [ 81.695119][ T6996] bridge_slave_0: left promiscuous mode [ 81.698330][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.709394][ T6996] bridge_slave_1: left allmulticast mode [ 81.713148][ T6996] bridge_slave_1: left promiscuous mode [ 81.717098][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.733200][ T6996] bond0: (slave bond_slave_0): Releasing backup interface [ 81.739955][ T6996] bond0: (slave bond_slave_1): Releasing backup interface [ 81.765704][ T6996] team0: Port device team_slave_0 removed [ 81.775795][ T6996] team0: Port device team_slave_1 removed [ 81.778930][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.782783][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.784827][ T7005] __nla_validate_parse: 6 callbacks suppressed [ 81.784842][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 81.792655][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 81.801630][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.804156][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.813931][ T10] lo speed is unknown, defaulting to 1000 [ 81.843409][ T6993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.858914][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.866635][ T7005] bond3: (slave bond0): Enslaving as an active interface with a down link [ 82.161392][ T42] audit: type=1400 audit(1786121643.238:607): avc: denied { connect } for pid=7024 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.185940][ T7029] jffs2: notice: (7029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (1 unchecked, 3 orphan) and 11 of xref (0 dead, 9 orphan) found. [ 82.198796][ T42] audit: type=1400 audit(1786121643.268:608): avc: denied { write } for pid=7028 comm="syz.2.335" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.218170][ T42] audit: type=1400 audit(1786121643.288:609): avc: denied { write } for pid=7028 comm="syz.2.335" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.227396][ T42] audit: type=1400 audit(1786121643.288:610): avc: denied { write } for pid=7028 comm="syz.2.335" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.502455][ T7057] pim6reg: entered allmulticast mode [ 82.547891][ T42] audit: type=1400 audit(1786121643.618:611): avc: denied { read write } for pid=7058 comm="syz.2.344" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.580598][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.683117][ T7061] netlink: 'syz.2.345': attribute type 21 has an invalid length. [ 82.686857][ T7061] netlink: 156 bytes leftover after parsing attributes in process `syz.2.345'. [ 82.753544][ T10] usb 6-1: config index 0 descriptor too short (expected 112, got 45) [ 82.758678][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 82.762485][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.765861][ T10] usb 6-1: Product: syz [ 82.767652][ T10] usb 6-1: Manufacturer: syz [ 82.771153][ T10] usb 6-1: SerialNumber: syz [ 82.858323][ T7071] jffs2: notice: (7071) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (1 unchecked, 3 orphan) and 12 of xref (0 dead, 10 orphan) found. [ 83.047887][ T7083] loop3: detected capacity change from 0 to 7 [ 83.063576][ T7083] loop3: p1 p4 [ 83.065580][ T7083] loop3: partition table partially beyond EOD, truncated [ 83.102060][ T13] net_ratelimit: 34 callbacks suppressed [ 83.102092][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 83.117223][ T5737] udevd[5737]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.122120][ T6426] udevd[6426]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.135782][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 83.141450][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 83.158638][ T10] usb 6-1: USB disconnect, device number 6 [ 83.219622][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 83.331776][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 83.455479][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 83.559714][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 83.579661][ T5804] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 83.669728][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 83.689203][ T7107] overlayfs: conflicting lowerdir path [ 83.705194][ T7110] jffs2: notice: (7110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 6 of xdatum (1 unchecked, 4 orphan) and 13 of xref (0 dead, 11 orphan) found. [ 83.732109][ T5804] usb 7-1: config 0 has no interfaces? [ 83.733872][ T5804] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 83.736886][ T5804] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.747460][ T5804] usb 7-1: config 0 descriptor?? [ 83.749608][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 83.779715][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 83.891943][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 83.960652][ T7102] netlink: 'syz.2.353': attribute type 178 has an invalid length. [ 83.974073][ T5804] usb 7-1: USB disconnect, device number 7 [ 84.002931][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 84.017879][ T7126] hpfs: Bad magic ... probably not HPFS [ 84.032299][ T7103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 84.134602][ T7129] bond4 (unregistering): Released all slaves [ 84.199591][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 84.286837][ T7143] jffs2: notice: (7143) jffs2_build_xattr_subsystem: complete building xattr subsystem, 7 of xdatum (1 unchecked, 5 orphan) and 14 of xref (0 dead, 12 orphan) found. [ 84.354858][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 84.357945][ T7148] netlink: 80 bytes leftover after parsing attributes in process `syz.3.367'. [ 84.391173][ T7150] xt_CT: No such helper "snmp_trap" [ 84.597615][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.370'. [ 84.602833][ T7159] netlink: 3 bytes leftover after parsing attributes in process `syz.3.370'. [ 84.759593][ T41] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 84.786646][ T7177] jffs2: notice: (7177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (1 unchecked, 6 orphan) and 15 of xref (0 dead, 13 orphan) found. [ 84.910466][ T41] usb 6-1: Using ep0 maxpacket: 16 [ 84.915855][ T41] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.922217][ T41] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.928480][ T41] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 84.931774][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.934509][ T41] usb 6-1: Product: syz [ 84.935914][ T41] usb 6-1: Manufacturer: syz [ 84.937922][ T41] usb 6-1: SerialNumber: syz [ 84.950712][ T41] r8152-cfgselector 6-1: Unknown version 0x0000 [ 84.955245][ T41] r8152-cfgselector 6-1: config 0 descriptor?? [ 85.083264][ T7187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.378'. [ 85.163841][ T7157] xt_hashlimit: size too large, truncated to 1048576 [ 85.182752][ T7197] /dev/nullb0: Can't open blockdev [ 85.305508][ T41] r8152-cfgselector 6-1: USB disconnect, device number 7 [ 85.312377][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 85.312394][ T42] audit: type=1400 audit(2000000000.789:649): avc: denied { append } for pid=7202 comm="syz.3.383" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.635799][ T7214] jffs2: notice: (7214) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 7 orphan) and 16 of xref (0 dead, 14 orphan) found. [ 85.645752][ T42] audit: type=1400 audit(2000000001.119:650): avc: denied { write } for pid=7213 comm="syz.3.386" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.657065][ T42] audit: type=1400 audit(2000000001.119:651): avc: denied { write } for pid=7213 comm="syz.3.386" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.667047][ T42] audit: type=1400 audit(2000000001.119:652): avc: denied { write } for pid=7213 comm="syz.3.386" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.798610][ T7223] erspan1: entered promiscuous mode [ 85.813794][ T42] audit: type=1400 audit(2000000001.289:653): avc: denied { remount } for pid=7219 comm="syz.3.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.814258][ T7222] netlink: 'syz.2.389': attribute type 10 has an invalid length. [ 85.832693][ T7222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.836445][ T7222] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 85.851436][ T7222] bond3: (slave bond0): Releasing active interface [ 85.857028][ T7222] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 85.864054][ T7222] bond0 (unregistering): Released all slaves [ 85.900912][ T7224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.390790][ T42] audit: type=1400 audit(2000000001.869:654): avc: denied { mounton } for pid=7242 comm="syz.2.395" path="/100/dev/mtdblock0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.393867][ T7243] jffs2: notice: (7243) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 8 orphan) and 17 of xref (0 dead, 15 orphan) found. [ 86.460627][ T7246] jffs2: notice: (7246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (1 unchecked, 8 orphan) and 17 of xref (0 dead, 15 orphan) found. [ 86.467655][ T42] audit: type=1400 audit(2000000001.939:655): avc: denied { write } for pid=7245 comm="syz.2.396" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.475011][ T42] audit: type=1400 audit(2000000001.939:656): avc: denied { write } for pid=7245 comm="syz.2.396" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.482096][ T42] audit: type=1400 audit(2000000001.939:657): avc: denied { write } for pid=7245 comm="syz.2.396" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.982373][ T7261] netlink: 'syz.1.401': attribute type 21 has an invalid length. [ 87.147261][ T42] audit: type=1400 audit(2000000002.619:658): avc: denied { map } for pid=7266 comm="syz.1.403" path="socket:[17013]" dev="sockfs" ino=17013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 87.243799][ T7269] loop5: detected capacity change from 0 to 2640 [ 87.260622][ T7269] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 87.264174][ T7269] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 87.267629][ T7269] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 87.271544][ T7269] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 87.274995][ T7269] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 87.278353][ T7269] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 87.281812][ T7269] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 87.285210][ T7269] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 87.288653][ T7269] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 87.292271][ T7269] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 87.443262][ T7271] jffs2: notice: (7271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 10 of xdatum (1 unchecked, 8 orphan) and 18 of xref (0 dead, 16 orphan) found. [ 87.536812][ T7274] jffs2: notice: (7274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (1 unchecked, 9 orphan) and 19 of xref (0 dead, 17 orphan) found. [ 87.560881][ T7274] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 88.192233][ T5831] net_ratelimit: 34 callbacks suppressed [ 88.192308][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 88.238724][ T7304] __nla_validate_parse: 3 callbacks suppressed [ 88.238747][ T7304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.413'. [ 88.252259][ T7304] tmpfs: Bad value for 'mpol' [ 88.293977][ T7306] jffs2: notice: (7306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (1 unchecked, 9 orphan) and 19 of xref (0 dead, 17 orphan) found. [ 88.411799][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 88.526709][ T7317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.417'. [ 88.529931][ T7317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.417'. [ 88.534128][ T7317] xt_hl: Unknown TTL match mode: 255 [ 88.580003][ T7309] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 88.651774][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 88.721518][ T7329] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 88.781139][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 88.873103][ T7343] jffs2: notice: (7343) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (1 unchecked, 10 orphan) and 20 of xref (0 dead, 18 orphan) found. [ 88.884272][ T7340] gadgetfs: bound to dummy_udc driver [ 88.891745][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 88.991546][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 89.009551][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 89.129860][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 89.139829][ T41] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 89.146389][ C3] gadgetfs: connected [ 89.150304][ T41] gadgetfs: disconnected [ 89.150997][ T7362] netlink: 'syz.2.428': attribute type 8 has an invalid length. [ 89.204380][ T7370] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 89.243011][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 89.299743][ C3] gadgetfs: connected [ 89.303098][ T41] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 89.310440][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 89.317808][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.325480][ C3] gadgetfs: configuration #1 [ 89.359599][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 89.469871][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 89.551689][ T7372] cgroup: fork rejected by pids controller in /syz1 [ 89.662619][ T7339] gadgetfs: suspended from state 3 [ 89.665199][ T5804] usb 5-1: USB disconnect, device number 5 [ 89.667938][ T7339] gadgetfs: disconnected [ 90.351242][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 90.351256][ T42] audit: type=1400 audit(2000000005.829:691): avc: denied { write } for pid=7451 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.543549][ T42] audit: type=1400 audit(2000000006.019:692): avc: denied { mounton } for pid=7460 comm="syz.1.435" path="/125/proc/429/net/afs/cells" dev="proc" ino=4026533434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.549311][ T7461] kAFS: bad VL server IP address [ 90.663664][ T7468] usbcore.quirks: string doesn't fit in 127 chars. [ 90.777154][ T42] audit: type=1400 audit(2000000006.249:693): avc: denied { mount } for pid=7473 comm="syz.3.440" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 90.783598][ T7474] bpf: Bad value for 'gid' [ 90.790320][ T7474] overlay: Unknown parameter '/' [ 90.846839][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 90.852225][ T42] audit: type=1400 audit(2000000006.329:694): avc: denied { write } for pid=7473 comm="syz.3.440" name="/" dev="9p" ino=80740445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.871868][ T42] audit: type=1400 audit(2000000006.349:695): avc: denied { create } for pid=7473 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.879997][ T42] audit: type=1400 audit(2000000006.349:696): avc: denied { getopt } for pid=7473 comm="syz.3.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.609073][ T42] audit: type=1400 audit(2000000007.079:697): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 92.278373][ T42] audit: type=1400 audit(2000000007.749:698): avc: denied { write } for pid=7479 comm="syz.1.442" name="nullb" dev="configfs" ino=5924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.288055][ T42] audit: type=1800 audit(2000000007.759:699): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.442" name="zoned" dev="configfs" ino=16370 res=0 errno=0 [ 92.342230][ T7482] binder: 7481:7482 ioctl 40046210 0 returned -14 [ 92.392515][ T7484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.444'. [ 92.396589][ T7484] program syz.1.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.289589][ T5831] net_ratelimit: 33 callbacks suppressed [ 93.289605][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 93.407640][ T42] audit: type=1400 audit(2000000008.879:700): avc: denied { execute } for pid=7493 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 93.409624][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 93.450343][ T7495] kAFS: unable to lookup cell 'syz1' [ 93.529627][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 93.540176][ T5728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.556872][ T5728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.566958][ T5728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.583268][ T5728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.587147][ T5728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.640569][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 93.750132][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 93.779696][ T7497] lo speed is unknown, defaulting to 1000 [ 93.958748][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.961257][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.964126][ T7497] bridge_slave_0: entered allmulticast mode [ 93.966966][ T7497] bridge_slave_0: entered promiscuous mode [ 93.973133][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.976287][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.980450][ T7497] bridge_slave_1: entered allmulticast mode [ 93.984597][ T7497] bridge_slave_1: entered promiscuous mode [ 94.012770][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.019779][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.045515][ T7497] team0: Port device team_slave_0 added [ 94.049355][ T7497] team0: Port device team_slave_1 added [ 94.064144][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.066407][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.078858][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.084234][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.086506][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.095846][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.123500][ T7497] hsr_slave_0: entered promiscuous mode [ 94.125834][ T7497] hsr_slave_1: entered promiscuous mode [ 94.127984][ T7497] debugfs: 'hsr0' already exists in 'hsr' [ 94.129900][ T7497] Cannot create hsr debugfs directory [ 94.239603][ T5776] bond1: (slave bond0): failed to get link speed/duplex [ 94.273815][ T7497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.280650][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.284771][ T7497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.290938][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.294800][ T7497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.301694][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.305599][ T7497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.314217][ T7497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.339550][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.342624][ T7497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.345803][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.348789][ T7497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.413718][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.426434][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.432431][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.442846][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.453346][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.456319][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.465658][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.468633][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.480849][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 94.589629][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 94.701827][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 94.762282][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.809623][ T5831] bond1: (slave bond0): failed to get link speed/duplex [ 94.942437][ T7497] veth0_vlan: entered promiscuous mode [ 94.987338][ T7497] veth1_vlan: entered promiscuous mode [ 95.016349][ T7497] veth0_macvtap: entered promiscuous mode [ 95.021046][ T7497] veth1_macvtap: entered promiscuous mode [ 95.030661][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.036800][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.061709][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.088676][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.138740][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.141379][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.152819][ T7562] xt_connbytes: Forcing CT accounting to be enabled [ 95.152820][ T7563] xt_connbytes: Forcing CT accounting to be enabled [ 95.152858][ T7563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.154961][ T7562] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.163676][ T6732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.166730][ T6732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.172313][ T5803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.177402][ T5803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.243966][ T7572] trusted_key: encrypted_key: master key parameter '' is invalid [ 95.316746][ T7577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'. [ 95.321103][ T7577] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'. [ 95.333923][ T7574] Mount JFS Failure: -5 [ 95.338964][ T7574] jfs_mount failed w/return code = -5 [ 95.381859][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 95.381880][ T42] audit: type=1400 audit(2000000010.859:714): avc: denied { watch } for pid=7581 comm="syz.1.461" path="/144" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.391394][ T7587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'. [ 95.482680][ T7592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7592 comm=syz.1.465 [ 95.510772][ T7592] macvtap1: entered promiscuous mode [ 95.513480][ T7592] veth1_to_hsr: entered promiscuous mode [ 95.521852][ T7592] team0: Device macvtap1 failed to register rx_handler [ 95.527135][ T7592] veth1_to_hsr: left promiscuous mode [ 95.587832][ T7609] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 95.597064][ T7609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.605211][ T7609] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 95.611198][ T7609] netlink: 14 bytes leftover after parsing attributes in process `syz.3.468'. [ 95.624155][ T7609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.631109][ T7609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.640399][ T7609] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 95.648661][ T7609] bond0 (unregistering): Released all slaves [ 95.649607][ T5728] Bluetooth: hci4: command tx timeout [ 95.663821][ T42] audit: type=1400 audit(2000000011.139:715): avc: denied { ioctl } for pid=7613 comm="syz.4.470" path="socket:[18847]" dev="sockfs" ino=18847 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.871898][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'. [ 95.924638][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.477'. [ 95.927623][ T7630] nbd: nbd64 already in use [ 96.043464][ T7642] netlink: 52 bytes leftover after parsing attributes in process `syz.3.480'. [ 96.059011][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.062831][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.078319][ T5747] udevd[5747]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 96.213415][ T42] audit: type=1400 audit(2000000011.689:716): avc: denied { nlmsg_write } for pid=7649 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 96.221756][ T42] audit: type=1400 audit(2000000011.689:717): avc: denied { audit_write } for pid=7649 comm="syz.4.481" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 96.229624][ T42] audit: type=1107 audit(2000000011.689:718): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.258376][ T7652] input: syz1 as /devices/virtual/input/input14 [ 96.413048][ T42] audit: type=1400 audit(2000000011.889:719): avc: denied { shutdown } for pid=7658 comm="syz.4.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.462896][ T42] audit: type=1400 audit(2000000011.939:720): avc: denied { name_bind } for pid=7665 comm="syz.4.487" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 96.464685][ T7666] fuse: Bad value for 'group_id' [ 96.474531][ T7666] fuse: Bad value for 'group_id' [ 96.509636][ T42] audit: type=1400 audit(2000000011.979:721): avc: denied { append } for pid=7670 comm="syz.4.488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.531518][ T7671] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7671 comm=syz.4.488 [ 96.692900][ T7680] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.697082][ T7683] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.725431][ T42] audit: type=1400 audit(2000000012.199:722): avc: denied { write } for pid=7684 comm="syz.1.492" name="functions" dev="configfs" ino=11484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.743227][ T42] audit: type=1400 audit(2000000012.219:723): avc: denied { mount } for pid=7686 comm="syz.4.493" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 96.760574][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 96.802705][ T5732] Bluetooth: hci2: hardware error 0xc6 [ 96.862945][ T7694] SELinux: policydb string H does not match my string SE Linux [ 96.867371][ T7694] SELinux: failed to load policy [ 97.038877][ T7747] [U]  [ 97.085736][ T7749] netlink: 44 bytes leftover after parsing attributes in process `syz.4.502'. [ 97.089681][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.092976][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.104242][ T7749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7749 comm=syz.4.502 [ 97.249268][ T7761] syzkaller0: entered promiscuous mode [ 97.253014][ T7761] syzkaller0: entered allmulticast mode [ 97.744450][ T5728] Bluetooth: hci4: command tx timeout [ 98.641110][ T7653] net_ratelimit: 20 callbacks suppressed [ 98.641145][ T7653] bond1: (slave bond0): failed to get link speed/duplex [ 98.769923][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 98.799838][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'. [ 98.853353][ T5732] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 98.879590][ T7653] bond1: (slave bond0): failed to get link speed/duplex [ 98.989564][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 98.992021][ T93] Bluetooth: (null): Invalid header checksum [ 99.036084][ T7799] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 99.052317][ T7799] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 99.068876][ T7802] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 99.099590][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 99.103718][ T93] Bluetooth: (null): Invalid header checksum [ 99.111188][ T7805] tmpfs: Invalid uid '0x00000000ffffffff' [ 99.113991][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.116317][ T7805] bridge0: port 2(bridge_slave_1) entered listening state [ 99.118726][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.121083][ T7805] bridge0: port 1(bridge_slave_0) entered listening state [ 99.209916][ T106] Bluetooth: (null): Invalid header checksum [ 99.219605][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 99.329754][ T7653] bond1: (slave bond0): failed to get link speed/duplex [ 99.332054][ T106] Bluetooth: (null): Invalid header checksum [ 99.439589][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 99.439955][ T106] Bluetooth: (null): Invalid header checksum [ 99.519521][ T7811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.552448][ T106] Bluetooth: (null): Invalid header checksum [ 99.559605][ T7653] bond1: (slave bond0): failed to get link speed/duplex [ 99.660488][ T106] Bluetooth: (null): Invalid header checksum [ 99.679577][ T7653] bond1: (slave bond0): failed to get link speed/duplex [ 99.770806][ T7732] Bluetooth: (null): Invalid header checksum [ 99.811575][ T5732] Bluetooth: hci4: command tx timeout [ 99.853505][ T7828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7828 comm=syz.3.525 [ 100.029746][ T7836] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.159952][ T7860] netlink: 'syz.4.535': attribute type 12 has an invalid length. [ 100.291523][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 101.294770][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 101.294816][ T42] audit: type=1400 audit(2000000016.769:749): avc: denied { read } for pid=7895 comm="syz.2.545" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.296415][ T7899] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 101.297516][ T42] audit: type=1400 audit(2000000016.769:750): avc: denied { open } for pid=7895 comm="syz.2.545" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.307069][ T7900] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 101.308329][ T42] audit: type=1400 audit(2000000016.779:751): avc: denied { write } for pid=7894 comm="syz.1.544" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.351353][ T7902] bond0: entered promiscuous mode [ 101.353134][ T7902] bond_slave_0: entered promiscuous mode [ 101.355107][ T7902] bond_slave_1: entered promiscuous mode [ 101.360455][ T7902] batadv0: entered promiscuous mode [ 101.365390][ T7902] netlink: 'syz.4.546': attribute type 10 has an invalid length. [ 101.368243][ T7902] syz_tun: entered promiscuous mode [ 101.375000][ T7902] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.379020][ T42] audit: type=1400 audit(2000000016.849:752): avc: denied { accept } for pid=7901 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 101.401700][ T7905] CIFS: Attempting to mount //127.0.0.1/share [ 101.401812][ T42] audit: type=1400 audit(2000000016.869:753): avc: denied { wake_alarm } for pid=7895 comm="syz.2.545" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.464466][ T7909] __nla_validate_parse: 4 callbacks suppressed [ 101.464482][ T7909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.545'. [ 101.466047][ T7906] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x5f [ 101.480553][ T7905] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 101.486699][ T7905] CIFS: VFS: cifs_mount failed w/return code = -11 [ 101.546735][ T7911] 9p: Bad value for 'rfdno' [ 101.554638][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 101.708610][ T42] audit: type=1400 audit(2000000017.179:754): avc: denied { read } for pid=7920 comm="syz.4.551" lport=35318 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 101.889670][ T5732] Bluetooth: hci4: command tx timeout [ 102.132331][ T7896] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.136069][ T7896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.151810][ T7896] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.162082][ T7896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.164744][ T7896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.170306][ T7896] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.174684][ T7896] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 102.178663][ T7896] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.192733][ T7896] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.081337][ T7928] syz.2.553 (7928) used greatest stack depth: 19176 bytes left [ 103.195640][ T7867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.248777][ T7931] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 103.253711][ T7932] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 103.264383][ T7931] netlink: 'syz.1.555': attribute type 4 has an invalid length. [ 103.275154][ T42] audit: type=1400 audit(2000000018.739:755): avc: denied { map } for pid=7934 comm="syz.4.557" path="socket:[19321]" dev="sockfs" ino=19321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.317740][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 103.320515][ T10] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 103.334416][ T42] audit: type=1400 audit(2000000018.809:756): avc: denied { ioctl } for pid=7948 comm="syz.3.560" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x540d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 103.340511][ T10] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 103.356375][ T42] audit: type=1400 audit(2000000018.809:757): avc: denied { append } for pid=7948 comm="syz.3.560" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.358798][ T7949] input: syz0 as /devices/virtual/input/input16 [ 103.385145][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.387640][ T42] audit: type=1400 audit(2000000018.859:758): avc: denied { write } for pid=7946 comm="syz.1.559" name="/" dev="9p" ino=80740445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.414575][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.426012][ T7947] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 103.428860][ T7947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 103.432978][ T7947] vhci_hcd vhci_hcd.0: Device attached [ 103.434349][ T7955] fido_id[7955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.443439][ T7952] team0: Port device team_slave_0 removed [ 103.446495][ T7947] vhci_hcd vhci_hcd.0: port 0 already used [ 103.451973][ T7958] vhci_hcd: connection closed [ 103.453650][ T12] vhci_hcd vhci_hcd.1: stop threads [ 103.459197][ T12] vhci_hcd vhci_hcd.1: release socket [ 103.467972][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 103.478956][ T7963] MINIX-fs: unable to read superblock [ 103.543994][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.546935][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.563'. [ 103.547963][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.554493][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.558595][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.562580][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.566452][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 103.635844][ T7975] libceph: resolve '0' (ret=-3): failed [ 103.707115][ T7986] tmpfs: Bad value for 'mpol' [ 103.710851][ T12] net_ratelimit: 34 callbacks suppressed [ 103.710880][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 103.819600][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 103.929680][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 103.976708][ T8000] netlink: 'syz.4.571': attribute type 4 has an invalid length. [ 104.039579][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 104.102255][ T8002] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 104.108871][ T8002] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 104.149625][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 104.210630][ T5732] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.210647][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.259572][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 104.369671][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 104.479656][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 104.599761][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 104.719642][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 105.199382][ T8055] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 105.276397][ T8060] configfs-gadget.g1 gadget.32: FS Capture: Req. wMaxPacketSize 3864 at bInterval 1 > max ISOC 1023, may drop data! [ 105.499636][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.289635][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.294960][ T5732] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.300713][ T42] kauditd_printk_skb: 7477 callbacks suppressed [ 106.300732][ T42] audit: type=1326 audit(2000000021.769:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.312287][ T42] audit: type=1326 audit(2000000021.769:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.319400][ T42] audit: type=1326 audit(2000000021.769:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.327167][ T42] audit: type=1326 audit(2000000021.769:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.334407][ T42] audit: type=1326 audit(2000000021.769:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.341658][ T42] audit: type=1326 audit(2000000021.769:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.348590][ T42] audit: type=1326 audit(2000000021.769:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.356527][ T42] audit: type=1326 audit(2000000021.769:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.366622][ T42] audit: type=1326 audit(2000000021.769:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.375899][ T42] audit: type=1326 audit(2000000021.769:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.3.593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef78f9e0d9 code=0x50000 [ 106.662479][ T8122] jffs2: notice: (8122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (1 unchecked, 11 orphan) and 21 of xref (0 dead, 19 orphan) found. [ 106.754560][ T8127] netlink: 'syz.1.604': attribute type 8 has an invalid length. [ 106.757676][ T8127] __nla_validate_parse: 65 callbacks suppressed [ 106.757692][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 106.769241][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 106.780679][ T8125] netlink: 92 bytes leftover after parsing attributes in process `syz.4.603'. [ 106.785738][ T8125] netlink: 'syz.4.603': attribute type 63 has an invalid length. [ 106.788356][ T8125] netlink: 5 bytes leftover after parsing attributes in process `syz.4.603'. [ 106.822111][ T8129] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 107.383061][ T8154] bridge0: port 1(vlan3) entered blocking state [ 107.385934][ T8154] bridge0: port 1(vlan3) entered disabled state [ 107.388792][ T8154] vlan3: entered allmulticast mode [ 107.391152][ T8154] bridge0: entered allmulticast mode [ 107.404277][ T8154] vlan3: left allmulticast mode [ 107.406553][ T8154] bridge0: left allmulticast mode [ 107.569948][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.614271][ T8178] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 107.624950][ T8178] netlink: 56 bytes leftover after parsing attributes in process `syz.1.618'. [ 107.987390][ T8187] tmpfs: Unknown parameter 'm &c.Yeta-u[+UG ~̸ `5ߍ(S-#>'[3g' [ 108.149240][ T8195] lo speed is unknown, defaulting to 1000 [ 108.330705][ T8207] exFAT-fs (nullb0): invalid boot record signature [ 108.348314][ T8207] exFAT-fs (nullb0): failed to read boot sector [ 108.359592][ T8207] exFAT-fs (nullb0): failed to recognize exfat type [ 108.369806][ T5732] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.372665][ T5728] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.591503][ T8222] 9p: Bad value for 'rfdno' [ 108.681837][ T8228] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.723588][ T8234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.633'. [ 108.739642][ T13] net_ratelimit: 33 callbacks suppressed [ 108.739684][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 108.850380][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 108.959627][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.069717][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.179621][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.289588][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.409663][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.529663][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.639576][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 109.749758][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 111.192220][ T8202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.224544][ T8248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2166 sclass=netlink_route_socket pid=8248 comm=syz.2.637 [ 111.241953][ T8250] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.242173][ T8250] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 111.295517][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.300640][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.305446][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.310118][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.317328][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.322208][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.329564][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.332433][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.334811][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.337189][ T41] hid-generic 0007:0004:0009.0006: unknown main item tag 0x0 [ 111.372106][ T41] hid-generic 0007:0004:0009.0006: hidraw1: HID v1.10 Device [syz1] on syz0 [ 111.419945][ T8264] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 111.422693][ T8264] fuse: fd is not a fuse device [ 111.423978][ T8262] fido_id[8262]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.558514][ T42] kauditd_printk_skb: 18597 callbacks suppressed [ 111.558529][ T42] audit: type=1400 audit(2000000027.029:26843): avc: denied { write } for pid=8277 comm="syz.4.647" name="/" dev="9p" ino=80740445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.602560][ T8280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63504 sclass=netlink_route_socket pid=8280 comm=syz.2.646 [ 111.866200][ T42] audit: type=1400 audit(2000000027.339:26844): avc: denied { create } for pid=8291 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.025752][ T8307] syz.1.655 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.066328][ T42] audit: type=1400 audit(2000000027.539:26845): avc: denied { name_bind } for pid=8309 comm="syz.1.656" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 112.447643][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 112.599747][ T41] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.636887][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.664'. [ 112.666279][ T8329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.665'. [ 112.717535][ T8336] CacheFiles: Failed to register: -30 [ 112.781606][ T41] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 112.785531][ T41] usb 6-1: config 128 has no interface number 0 [ 112.793759][ T41] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.798141][ T41] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 112.803806][ T41] usb 6-1: config 128 interface 148 has no altsetting 0 [ 112.808911][ T8332] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 112.809534][ T41] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 112.811788][ T8332] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 112.817884][ T8332] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 112.818304][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.826619][ T41] usb 6-1: Product: syz [ 112.838066][ T41] usb 6-1: Manufacturer: syz [ 112.840279][ T41] usb 6-1: SerialNumber: syz [ 112.855073][ T42] audit: type=1400 audit(2000000028.329:26846): avc: denied { cmd } for pid=8341 comm="syz.2.670" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 112.990092][ T8356] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 113.036907][ T42] audit: type=1400 audit(2000000028.509:26847): avc: denied { bind } for pid=8357 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.047010][ T5732] Bluetooth: hci4: unexpected event for opcode 0x2027 [ 113.103428][ T41] usb 6-1: USB disconnect, device number 8 [ 113.117816][ T8362] qnx4: no qnx4 filesystem (no root dir). [ 113.143502][ T8364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14092 sclass=netlink_route_socket pid=8364 comm=syz.2.680 [ 113.203058][ T8370] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 113.204631][ T8368] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.206823][ T8370] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 113.438209][ T42] audit: type=1400 audit(2000000028.909:26848): avc: denied { read } for pid=8382 comm="syz.2.687" path="socket:[24758]" dev="sockfs" ino=24758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.446712][ T42] audit: type=1326 audit(2000000028.909:26849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.2.687" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f534179e0d9 code=0x0 [ 113.539641][ T41] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 113.608814][ T8389] bridge0: entered promiscuous mode [ 113.618013][ T8389] bridge0: entered allmulticast mode [ 113.709667][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 113.716236][ T41] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 113.725747][ T41] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.731965][ T41] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.739720][ T41] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 113.750467][ T41] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 113.758422][ T41] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.767667][ T42] audit: type=1400 audit(2000000029.239:26850): avc: denied { write } for pid=8391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.769595][ T41] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.769672][ T12] net_ratelimit: 34 callbacks suppressed [ 113.769699][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 113.786206][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.832529][ T42] audit: type=1400 audit(2000000029.309:26851): avc: denied { write } for pid=8394 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.889715][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 114.001199][ T41] usb 6-1: usb_control_msg returned -32 [ 114.001353][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 114.003040][ T41] usbtmc 6-1:16.0: can't read capabilities [ 114.109779][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 114.214169][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 114.217026][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 114.219604][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 114.334076][ T8404] lo speed is unknown, defaulting to 1000 [ 114.356804][ T8407] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 114.361969][ T5811] usb 6-1: USB disconnect, device number 9 [ 114.366183][ T42] audit: type=1400 audit(2000000029.839:26852): avc: denied { getopt } for pid=8403 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.413644][ T8411] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 114.432980][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 114.550498][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 114.656336][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 114.660692][ T8423] program syz.2.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.669646][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 114.820174][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 114.914635][ T8440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.701'. [ 114.933497][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 114.936197][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 114.938848][ T8443] netlink: 'syz.1.703': attribute type 7 has an invalid length. [ 114.949800][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 115.114645][ T8455] binder: 8454:8455 ioctl c0306201 200000000640 returned -22 [ 115.125241][ T8455] netlink: 'syz.4.705': attribute type 2 has an invalid length. [ 115.159864][ T5734] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 115.321790][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.325352][ T5734] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.328397][ T5734] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.331817][ T5734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.336311][ T5734] usb 7-1: config 0 descriptor?? [ 115.349878][ T8469] netlink: 2040 bytes leftover after parsing attributes in process `syz.4.706'. [ 115.353944][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 115.587805][ T5734] usbhid 7-1:0.0: can't add hid device: -71 [ 115.592215][ T5734] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 115.602759][ T5734] usb 7-1: USB disconnect, device number 8 [ 115.874858][ T8500] netlink: 'syz.3.708': attribute type 3 has an invalid length. [ 116.150691][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 116.163729][ T8508] netlink: 'syz.4.711': attribute type 12 has an invalid length. [ 116.753500][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 116.753519][ T42] audit: type=1400 audit(2000000032.229:26858): avc: denied { create } for pid=8522 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.762352][ T42] audit: type=1400 audit(2000000032.229:26859): avc: denied { map } for pid=8522 comm="syz.2.714" path="socket:[24032]" dev="sockfs" ino=24032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.770025][ T42] audit: type=1400 audit(2000000032.229:26860): avc: denied { read } for pid=8522 comm="syz.2.714" path="socket:[24032]" dev="sockfs" ino=24032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.777557][ T42] audit: type=1400 audit(2000000032.229:26861): avc: denied { ioctl } for pid=8522 comm="syz.2.714" path="socket:[24032]" dev="sockfs" ino=24032 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.838088][ T42] audit: type=1400 audit(2000000032.309:26862): avc: denied { connect } for pid=8526 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.844771][ T8527] blkio.reset_stats is deprecated [ 117.005109][ T42] audit: type=1400 audit(2000000032.479:26863): avc: denied { ioctl } for pid=8532 comm="syz.1.718" path="socket:[23378]" dev="sockfs" ino=23378 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.008780][ T42] audit: type=1400 audit(2000000032.479:26864): avc: denied { read } for pid=8532 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.359873][ T8537] kvm: kvm [8536]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 117.360952][ T8537] kvm: kvm [8536]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 117.461800][ T42] audit: type=1400 audit(2000000032.929:26865): avc: denied { setattr } for pid=8540 comm="syz.4.721" name="NETLINK" dev="sockfs" ino=24039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.534241][ T8542] netlink: 'syz.4.721': attribute type 2 has an invalid length. [ 117.536707][ T8542] __nla_validate_parse: 3 callbacks suppressed [ 117.536716][ T8542] netlink: 228 bytes leftover after parsing attributes in process `syz.4.721'. [ 118.088443][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802677e000: rx timeout, send abort [ 118.096484][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802677e000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 118.104555][ T42] audit: type=1400 audit(2000000033.579:26866): avc: denied { read } for pid=5114 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 118.113533][ T42] audit: type=1400 audit(2000000033.579:26867): avc: denied { search } for pid=5114 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.197108][ T8558] netlink: 228 bytes leftover after parsing attributes in process `syz.2.727'. [ 118.331647][ T8557] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 118.332391][ T8568] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 118.337110][ T8557] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 118.342986][ T8557] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 118.345469][ T8557] netlink: 1 bytes leftover after parsing attributes in process `syz.2.727'. [ 118.390471][ T8571] netlink: 56 bytes leftover after parsing attributes in process `syz.4.730'. [ 118.430798][ T8577] netlink: 60 bytes leftover after parsing attributes in process `syz.4.732'. [ 118.522488][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 118.684563][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.688404][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.693447][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.697191][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.705632][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.714177][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.718058][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.721524][ T10] usb 6-1: Product: syz [ 118.723337][ T10] usb 6-1: Manufacturer: syz [ 118.734876][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 118.737210][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 118.746893][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 118.749734][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 118.799624][ T13] net_ratelimit: 34 callbacks suppressed [ 118.799661][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 118.909603][ T13] bond1: (slave bond0): failed to get link speed/duplex [ 119.019755][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 119.129603][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 119.191848][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 119.196386][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 119.198472][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 119.201632][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 119.203726][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 119.206363][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 119.207750][ T41] usb 6-1: USB disconnect, device number 10 [ 119.208440][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 119.212323][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 119.239856][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 119.337451][ T8615] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 119.346495][ T8615] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.350220][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 119.471464][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 119.566531][ T8628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8628 comm=syz.3.741 [ 119.589926][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 119.614310][ T8635] tmpfs: Unknown parameter 'h' [ 119.672808][ T8637] hpfs: hpfs_map_sector(): read error [ 119.699932][ T5803] bond1: (slave bond0): failed to get link speed/duplex [ 119.760421][ T8646] Attempt to restore checkpoint with obsolete wellknown handles [ 120.507970][ T5728] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 120.515848][ T8655] jffs2: notice: (8655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 13 of xdatum (1 unchecked, 11 orphan) and 21 of xref (0 dead, 19 orphan) found. [ 120.522071][ T8655] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 120.538977][ T8651] tmpfs: Cannot change global quota limit on remount [ 120.561153][ T8661] pi3usb30532 0-0005: Error reading config register -6 [ 120.578026][ T8661] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 120.589800][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 121.759817][ T5728] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.210534][ T10] ------------[ cut here ]------------ [ 123.214716][ T10] virtio-pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 123.218083][ T10] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#0: kworker/0:1/10 [ 123.223309][ T10] Modules linked in: [ 123.227169][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.231883][ T10] Tainted: [L]=SOFTLOCKUP [ 123.233778][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.238111][ T10] Workqueue: events drm_fb_helper_damage_work [ 123.240929][ T10] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 123.243685][ T10] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 a0 74 40 fc 48 89 df e8 d8 02 91 00 48 89 c6 48 8d 3d 1e 47 63 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 123.251615][ T10] RSP: 0018:ffffc900000d7a60 EFLAGS: 00010293 [ 123.254316][ T10] RAX: ffffffff8c4f36e0 RBX: ffff88802e8f00d0 RCX: 0000000000000000 [ 123.257771][ T10] RDX: ffff8880395228e0 RSI: ffffffff8c4f36e0 RDI: ffffffff912d3770 [ 123.261314][ T10] RBP: ffff8880395228e0 R08: 0000000000000005 R09: 0000000000000000 [ 123.264748][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888034fb4000 [ 123.268158][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000d56 [ 123.271697][ T10] FS: 0000000000000000(0000) GS:ffff8880d5dec000(0000) knlGS:0000000000000000 [ 123.275585][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.278518][ T10] CR2: 0000200000000040 CR3: 0000000035f82000 CR4: 0000000000352ef0 [ 123.283657][ T10] Call Trace: [ 123.285514][ T10] [ 123.286836][ T10] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 123.289961][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 123.292711][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 123.301760][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 123.304659][ T10] ? drm_vblank_get+0x14f/0x2d0 [ 123.306834][ T10] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 123.310091][ T10] drm_fb_helper_damage_work+0x2e2/0xab0 [ 123.312702][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 123.315307][ T10] ? rcu_is_watching+0x12/0xc0 [ 123.317273][ T10] process_one_work+0xa23/0x1940 [ 123.319373][ T10] ? __pfx_process_one_work+0x10/0x10 [ 123.321416][ T8680] erspan0: entered promiscuous mode [ 123.321943][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 123.323595][ T10] worker_thread+0x5ef/0xe50 [ 123.323638][ T10] ? __pfx_worker_thread+0x10/0x10 [ 123.333364][ T10] ? kthread+0x13a/0x450 [ 123.335225][ T10] ? __pfx_worker_thread+0x10/0x10 [ 123.337472][ T10] kthread+0x370/0x450 [ 123.339297][ T10] ? __pfx_kthread+0x10/0x10 [ 123.341694][ T10] ret_from_fork+0x72b/0xd50 [ 123.343811][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 123.346087][ T10] ? __switch_to+0x800/0x10f0 [ 123.348179][ T10] ? __pfx_kthread+0x10/0x10 [ 123.350538][ T10] ret_from_fork_asm+0x1a/0x30 [ 123.352674][ T10] [ 123.354062][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.357222][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.361811][ T10] Tainted: [L]=SOFTLOCKUP [ 123.363705][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.368068][ T10] Workqueue: events drm_fb_helper_damage_work [ 123.370743][ T10] Call Trace: [ 123.372228][ T10] [ 123.373545][ T10] dump_stack_lvl+0x100/0x190 [ 123.375634][ T10] vpanic+0x552/0x970 [ 123.377430][ T10] ? __pfx_vpanic+0x10/0x10 [ 123.379322][ T10] panic+0xd1/0xe0 [ 123.380876][ T10] ? __pfx_panic+0x10/0x10 [ 123.382861][ T10] ? check_panic_on_warn+0x1f/0x90 [ 123.385119][ T10] check_panic_on_warn.cold+0x19/0x34 [ 123.387472][ T10] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 123.389979][ T10] __warn.cold+0x191/0x318 [ 123.391967][ T10] __report_bug+0x30f/0x440 [ 123.393948][ T10] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 123.396693][ T10] ? __pfx___report_bug+0x10/0x10 [ 123.399008][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 123.401373][ T10] report_bug_entry+0xe1/0x290 [ 123.403522][ T10] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 123.406022][ T10] handle_bug+0x1cd/0x2a0 [ 123.407972][ T10] exc_invalid_op+0x17/0x50 [ 123.409942][ T10] asm_exc_invalid_op+0x1a/0x20 [ 123.411849][ T10] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 123.414644][ T10] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 a0 74 40 fc 48 89 df e8 d8 02 91 00 48 89 c6 48 8d 3d 1e 47 63 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 123.422714][ T10] RSP: 0018:ffffc900000d7a60 EFLAGS: 00010293 [ 123.425173][ T10] RAX: ffffffff8c4f36e0 RBX: ffff88802e8f00d0 RCX: 0000000000000000 [ 123.428498][ T10] RDX: ffff8880395228e0 RSI: ffffffff8c4f36e0 RDI: ffffffff912d3770 [ 123.431811][ T10] RBP: ffff8880395228e0 R08: 0000000000000005 R09: 0000000000000000 [ 123.435077][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888034fb4000 [ 123.438258][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000d56 [ 123.441740][ T10] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 123.444372][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 123.446892][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 123.449084][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 123.451560][ T10] ? drm_vblank_get+0x14f/0x2d0 [ 123.453604][ T10] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 123.456268][ T10] drm_fb_helper_damage_work+0x2e2/0xab0 [ 123.458658][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 123.461371][ T10] ? rcu_is_watching+0x12/0xc0 [ 123.463488][ T10] process_one_work+0xa23/0x1940 [ 123.465676][ T10] ? __pfx_process_one_work+0x10/0x10 [ 123.468014][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 123.470747][ T10] worker_thread+0x5ef/0xe50 [ 123.472783][ T10] ? __pfx_worker_thread+0x10/0x10 [ 123.475007][ T10] ? kthread+0x13a/0x450 [ 123.476899][ T10] ? __pfx_worker_thread+0x10/0x10 [ 123.479157][ T10] kthread+0x370/0x450 [ 123.480995][ T10] ? __pfx_kthread+0x10/0x10 [ 123.482954][ T10] ret_from_fork+0x72b/0xd50 [ 123.485016][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 123.487299][ T10] ? __switch_to+0x800/0x10f0 [ 123.489408][ T10] ? __pfx_kthread+0x10/0x10 [ 123.491470][ T10] ret_from_fork_asm+0x1a/0x30 [ 123.493649][ T10] [ 124.591683][ T10] Shutting down cpus with NMI [ 124.594105][ T10] Kernel Offset: disabled [ 124.595864][ T10] Rebooting in 86400 seconds..