last executing test programs: 1m24.125569136s ago: executing program 0 (id=667): r0 = fanotify_init(0x1a, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) open(&(0x7f0000000100)='./file0\x00', 0x2008c2, 0x12) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r2, 0x0) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0x1a, 0x800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) setpgid(r1, r1) (async) setpgid(0x0, r1) (async) open(&(0x7f0000000100)='./file0\x00', 0x2008c2, 0x12) (async) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) (async) fanotify_mark(r0, 0x441, 0x4800001a, r2, 0x0) (async) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) 1m23.914399982s ago: executing program 0 (id=670): unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800020015000100d799348b6427a429896ff361", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4084) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff, 0x7}}, './file0\x00'}) fsopen(&(0x7f0000001900)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f0000001900)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) fchdir(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="05031600d3fc140000004788031c09102c28", 0xfffffffffffffc35, 0x4, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) (async) sendto$packet(r4, &(0x7f0000000240)="05031600d3fc140000004788031c09102c28", 0xfffffffffffffc35, 0x4, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x4f, 0x2e, 0x5f]}}, &(0x7f0000000400)=""/21, 0x2a, 0x15, 0x0, 0xffffff81, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="1b0000000000000000c57bf877b6b9d2d1000000", @ANYRES32, @ANYBLOB="c700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{0x1, 0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001700)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x2f, &(0x7f0000000480)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe42f}, @map_idx={0x18, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf0b}}, @ldst={0x3, 0x3, 0x0, 0xb, 0xb, 0x2, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x3, 0x2, 0x0, 0x6, 0x2, 0x20, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x31, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001780)=[r7, r8, r9], &(0x7f00000017c0)=[{0x0, 0x3, 0x3, 0x1}], 0x10, 0x80000000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x2f, &(0x7f0000000480)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe42f}, @map_idx={0x18, 0x9}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf0b}}, @ldst={0x3, 0x3, 0x0, 0xb, 0xb, 0x2, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x3, 0x2, 0x0, 0x6, 0x2, 0x20, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x31, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001780)=[r7, r8, r9], &(0x7f00000017c0)=[{0x0, 0x3, 0x3, 0x1}], 0x10, 0x80000000}, 0x94) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@lx={0x18, 0x1, 0x0, 0xd0}, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x500}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCGPROP(r12, 0x40047438, &(0x7f0000000180)=""/246) writev(r11, &(0x7f0000000440)=[{&(0x7f0000000000)="c00511be33c7958f87", 0x9}], 0x1) 1m23.4555564s ago: executing program 0 (id=676): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8, 0x88a1, 0xd, 0x1, 0x6, 0x2, 0x7}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2000, 0x1208}}}}}}]}, 0x48}}, 0x0) 1m23.455368829s ago: executing program 0 (id=677): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x284102, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, 0x704c3, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0xf, r6, 0xffffffff}, 0xc) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r7, &(0x7f0000000240)='./file0\x00') 1m23.385837725s ago: executing program 0 (id=678): r0 = socket(0x1d, 0x2, 0x6) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x0, 0x54}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m23.382458844s ago: executing program 0 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1m23.254367045s ago: executing program 32 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000240)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1m4.45462177s ago: executing program 4 (id=1161): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xd) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000003940)=0x10) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000003980)={0x7a0, 0x2, 0x0, 0x6, 0x14, "070000000000000000000000004843ff7700"}) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002b27d260c95e98ee430da4e7bd7000fbdbdf25010000000000000008410000004c00180000000873797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003521"], 0x68}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000880) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="6f00330080080c0008021100000008021100"], 0x90}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0) memfd_create(&(0x7f0000000140)='nl80211\x00', 0x2) io_setup(0x6, &(0x7f00000004c0)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) 1m4.293971314s ago: executing program 4 (id=1168): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x8000, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0xd, 0x8, 0x1, 0x9, 0x6}}}, @NHA_ID={0x8, 0x6}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) 1m4.292179174s ago: executing program 4 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, r7, 0xc}, 0x10) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(0x3) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x74, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x18, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r11, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r12, @ANYBLOB="100027bd7000fddbdf25040000005c0008804400078008000600b400000008000500c5e50d5c08000500f300000008000600f5000000080005a285c5144a08000600970000000800050013a587201400078008000500f3d2d5080800050021e03e170800010000000000300008802c00078008000600db00000008000600cf0000000800060078000000080005001c7da44908000500bd0e035c7da5fbbc0b32e43d528c6d4401359810b291c2df3b57b160e36adaa0bd3151a2165c4ec91e489b66498b8400"/210], 0xa8}, 0x1, 0x0, 0x0, 0xc091}, 0x20008000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r13) 1m4.210546131s ago: executing program 4 (id=1175): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) finit_module(r1, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000180)={0x65bc, 0x2, 0x6}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000000c0)={@hyper, 0x2}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000a40)) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) 1m3.325571498s ago: executing program 4 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204081, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) syz_emit_ethernet(0x3a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c686001000080045b4002800000000a30690af5e9d7e78ac1414bbac1414aa4e204001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$dsp(r3, &(0x7f0000000100)="e19f1f75b60e", 0x6) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r3, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864d0, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0xdededede}) r7 = syz_clone(0x100, &(0x7f0000000000)="c85381f6899026566c61d6a37062622e3cf1ed74d3", 0x15, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="25853f20ddd3ef349770fdc24339b5a41d2379be11a1f31e1e29fab1f2fa89ae5f6b5513d51d365dd5f1ee3bfd3ed3d084fd27866466214b8e4494a611c704eb1b592c78788eef50cb7e12abda20e804a2eb60c42c34254ecd51504267af9501ac1d6e4d1f1adac161fa7f51313e") r8 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r9}) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000240)={&(0x7f0000000180)=[0x0], &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x7, 0x3, 0x1, 0x0, r9}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000001200)={{r1}, 0x0, 0x10, @inherit={0x58, &(0x7f00000002c0)={0x1, 0x2, 0xfffffffffffffff0, 0xfffffffffffffff5, {0x24, 0x7, 0x100000000, 0x4, 0x3d}, [0xfffffffffffffeb4, 0x3]}}, @subvolid=0x8fd0}) 1m2.995885392s ago: executing program 4 (id=1188): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 47.977416559s ago: executing program 33 (id=1188): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 3.110648616s ago: executing program 2 (id=2353): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x3, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0xc802) 3.109399706s ago: executing program 2 (id=2356): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000021}, 0x24000400) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000280)=""/38, 0x26}], 0x2}, 0x3ff}], 0x1, 0x40002020, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000000040)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x6, 0x3, {0xffffffffffffffff}, {r2}, 0x1, 0x3}) mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x1045, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c616669643d3078303030303030303030303030303230302c63616368657461673dd88b139f66332fb8e5784320057e0b594a53f946516ea8feb4e09d9f64e4922c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB="2c6d61736b3d4d41595f57524954452c6f626a5f726f6c653dd88b139f66332fb8e5784320057e0b594a53f946516ea8feb4e09d9f64e4922c646f6e745f686173682c736d61636b66736465663d262c666f776e65723e", @ANYRESDEC=r3, @ANYBLOB="2c6d6561737572652c6f626a5f757365723d26232a5e66502c2e2d2c2c00e3efe2de95382639f856acb3a07fb1ba12b08b8cd9b00780dfab0d76757473133924de15ae8c46ef8dfb3de0f80f5122fa4fff94b85a82423e93100cf18a3f344d8b046b0748f6492ee8fb210e5756f810ad6480fe1484b41a56721a77dcd4ba21440b5dbd7e2af75e63ab853b89aa03d31a98df2da0ec7dd7aac8fea6ac1bb89acb"]) 3.046773168s ago: executing program 2 (id=2360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="d8"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) write$cgroup_devices(r5, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xffff, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6d992587, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000040) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xc5}, 0x8) 2.907583226s ago: executing program 2 (id=2365): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a6c000000060a010400000000000000000200000040a904803c0001800e"], 0x94}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) close_range(r1, r1, 0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) (async) listen(r0, 0x0) (async) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f00000001c0)="3d6bbc1a85da0cc384e4a5e78c39e87ced092e89fa22022c1b0825d7e7b64be61077d4cf02b3206ff4962eeba8fed7691f7e5d6aef60eabdfb11431b6fe88d1672101b", 0x43, 0x7, 0x0, 0x1}, &(0x7f0000000180)) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000000)={0x3, 0x2, 0x9, 0x5, 0x11, "71a4b84f10d0554b"}) (async) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000480)=0x1) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x8400, 0x1, 0x0, 0x10000, 0x1b, "4415264a88b82c521113fb235902af2556c6b6"}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000340)={0xb000, 0x100000, 0x8, 0x0, 0x4}) (async) r7 = openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1, 0x4, [0x6, 0x141, 0xa, 0x2]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000240)={r8, @in={{0x2, 0x4e27, @private=0xa010102}}, 0x0, 0xdda56b9, 0x8, 0x20000000, 0x9}, &(0x7f0000000300)=0x98) 2.820823695s ago: executing program 2 (id=2369): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000480)="4edbd6f5d3f8edc3f207895958eb4915033e7b8cfd2b0a90ce1504013d637340ddede195405b199c204ada9bd0429eb999a7870f61268652a4c0d5cfa3035610a5282e66b85f8c8e4fa9ae5242da10755393a40e7a407a90f798b299277fdb40e48452e0b3a81d7e13f0d4f421ce596107393975c26579979d1da8f42d5e646f77c17917d9a7620af7b111d19fb537e725f07e50fd9ef518eb7e8cb5858b2eba369fbae33f9582") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_VERSION={0x5, 0x6, 0xa}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x40, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [@fragment={0x3a, 0x0, 0xc, 0x0, 0x0, 0x1, 0x65}], "d2588e45cd1357bc"}}}}}}}, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x322, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() pwrite64(r4, &(0x7f0000000380)="520058f018baddd1e7619d8d84ec5b4839d777e6c4de081d6816b52f8d3b7f4acfe460fcb681145d7be77397082919c7b6bccb5b53d453ced87c8cbeadf8f82250189746fccdab25b33a29295f0018e298d2aa97daf26c35dca0d4714219ae77774be2fa960019269f00b083f94a5f2c9af53f098eadeb3a4f06b4ca08ee28d8a2a2242685f8ec5b87fabfaa0460e5ca90", 0x91, 0x3) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}}, 0x24000004) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x8, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@routing={0x0, 0x0, 0x5}]}}}}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000002c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r9, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5e}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) 2.668149533s ago: executing program 1 (id=2375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r1, 0x329, 0xfffffffc, 0x1000000, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0x5}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xe0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "6f0357412fda1b5ba5cb01c534ceb55b9baab72297ea47f8165836de88cb56357f22542552fe3867600e445ca98d371ef08feaf17c920e356efc5b1d81446628", 0x15}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x13) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r6, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0xffffffffffffffff) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r10, 0x400455cb, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r11, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r11, 0x4, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x4044040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x20}, 0x50) 2.561136223s ago: executing program 2 (id=2376): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="90", 0x1}], 0x1) fcntl$setlease(r1, 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r5, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x9}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x400) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x80000001}]}) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x40074) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000240), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) 2.558892329s ago: executing program 1 (id=2378): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000050000000200000029bd7000e2ffffff0100010028000000000000006800120072"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f015, 0x1}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x13a}, {&(0x7f0000002600)="1ce6fd056189a44cb0f2e5a8b2d12bfc46c5d08e213e8522b14cb50c211e21c6ae2f15ad81331a46673848d4fd62c7b18daf5cd71d9a5111b2a11988a9f25f3188334374acb4bc0cadaf580c76470b753176dc3318214f20bd2127c667a20b6014312a48795c5c0a958a3ac82ba755f97134288e21228c95eda9373eaf7411d8cf9044144994f41604c4d752ad42241184b75c66a9176963ae589065d40b6259e95f347ecf", 0xa5}, {}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x2004c951) readv(r3, &(0x7f00000023c0)=[{&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f0000002440)=""/145, 0x91}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/120, 0x78}], 0x6) 2.460530852s ago: executing program 1 (id=2381): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)=ANY=[@ANYBLOB="010000010000000061616161616161616141616061616161616161616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131"], 0x48, r0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000040)="00000102", 0x4, r0) 2.456901737s ago: executing program 1 (id=2383): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r1, 0x40187013, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='maps\x00') exit(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x0, 0x20, 0x6, 0x5, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x66, 0x0, 0x4, 0x4, 0x0, @local, @private=0xa010100, {[@timestamp={0x44, 0x14, 0x15, 0x0, 0x7, [0x0, 0x2, 0x4, 0x4]}]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040), &(0x7f00000000c0)=""/255, &(0x7f00000001c0), &(0x7f0000000380), 0x6, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x21, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000a000000000088b112bb000018110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000004b70200000200a788225e572cd0c91100008500000085000000b700625f8a4a23011cb3c00000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, @fallback=0x20, r3, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0xc, 0x0, 0x622}, 0x10, 0x0, r3, 0x1, &(0x7f00000004c0)=[r3, r6, r0, r2, r0, r0], &(0x7f0000000500)=[{0x4, 0x4, 0x5, 0x3}], 0x10, 0xe7}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500040001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2b0300001071ca00857249a220b48002001c00328009000100626f6e64000000000c0002800800030000000000140035006200"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) timerfd_create(0x7, 0x0) 1.540757782s ago: executing program 1 (id=2394): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/231, 0xe7}], &(0x7f0000000540)=[0x0, 0x6, 0x4, 0x8, 0x0, 0x1, 0x8, 0x6, 0x9, 0x2]}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r5, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x6004}, 0x400a6) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000600)={'icmp6\x00'}, &(0x7f0000000640)=0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x44000) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0xf3f, &(0x7f00000014c0)={{0x12, 0x1, 0x201, 0x1b, 0x5b, 0x70, 0x40, 0x1b3d, 0x117, 0x1aa2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2d, 0x3, 0x7, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x83, 0x4, 0xe, 0x5, 0xe, 0x42, 0xfe, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "848d6fb6cef0"}, {0x5, 0x24, 0x0, 0x94}, {0xd, 0x24, 0xf, 0x1, 0xb1, 0x1, 0x9, 0xd4}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0xfffa, 0x80, 0xa8, 0x9e0, 0x3f}, @dmm={0x7, 0x24, 0x14, 0x4, 0x7}, @dmm={0x7, 0x24, 0x14, 0x8, 0xfff9}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x3, 0x4, 0x81}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x200, [0x28, 0x3, 0xfbff, 0x5, 0x52b, 0x3]}, @mdlm_detail={0xd5, 0x24, 0x13, 0x1, "83455c5e5da13d4fa0534a3006886506bfa419d4a3d16e4ba8bfc7d715613fe04d802d1953ba264ca83abecfb952cca540c522f0fc30908d3263ce88fae1b1a7643ddc73fdff8dea4e38030f56737e3afb693f0b8e8675d32c4715871b8bc2c87a21b37dcd234a295309a46bb8c50e105e11df6b5081ed30da6d8c32d8c8eeaf3aad49abec89c4f16b8126be9d0921b21880fb6fd88c6e7b9ba383d8903e35188405910d7f8f1a6e03e8b5badea7c5d1b4cf3c0c724174a7f22d6da13d022c6ca3581a72aec0c6e136d92c4d96416e940d"}]}], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x3, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf2, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x8, 0xd3, 0x2, [@generic={0x40, 0x21, "36874c59ad7aef00c9c55a54f0b004bf090701ea54faef20f9c06d8ebee95a6bdc9d07e968ceb4b42fc00440fd7d9d0c6a48b3ff0a7eca288c9f626fe067"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0xa, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xcfaf}, @generic={0x9d, 0xb, "dc0c088eebdc88248b8443aeb83abb582d74d2542f11e814a8ddbab6a5378f40ff14f027c6c3b34727f8c617cdd4aba3820e718c938b46ac5da7c4818fef28fc57e8ad166f2a1376059dfcc2b736f46542f2d5b4a52ab3c93703a5aa43f92124e1010ae0889f0b688eff1b999c0fb7c6e453660465a66da71be7af720e7a1e25bf67750d8ac179124faad47b461ac27bda0097bdf9888c5341616e"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x2, 0x7, 0x2}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x42, 0xa, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0xd}, @generic={0x4, 0x30, "751b"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x2, 0x5, 0x53, [@generic={0xd5, 0x21, "1168b182266e6b45a09e11f35b7747b0e4219584f8f095c35ade2f581c791d503818dfcd831e9811da15d7e41deefc998e12a821d453f66c0cea4883e334354522cd1fb86088eabef2d9b03d1653ca14b25abc6dbdd69f3c23693d6ed9b3266d4eddf514fc094fe9b233d8bc6eb3e53a176ba72158c991d0031fa48b67212e89bffe5e2cc3cf3edf237235a2a56a91ade5a66c9572471259b654693a54c765c719872bd91e3e9ff5e4757afe2276daf3a05d9b552c6dd63935256b97afd5e16e637d2bec039ae158f525afc46cbcc71779f350"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x7, 0x7f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc9}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x7, 0x4c, 0x6f}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x24, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}, @generic={0xd8, 0x30, "6ad98ebef713f5f5593191d4f8c1c3a40970bcf162c0257c162a4575fa3ce5c2063182fed83e0aba6ea0fb340ce301369ee8995cc5b44bea8888e4f0ec424b32179b462f511335bd2890376134b0c4ecbbce874495fdbe09da3a598b0563272ab92ce3847432153a395862058c35ca1f9e89ff85689d6564a584ae35f573503349a06f3f66591ee42aa9eb5c346c10a6d17e55ec7eae24cf2a0b880db97489af3aecfaad01d33315c6a30b584dfcca01d007178648bedda1e74e54669201220790a85b7bef8c33333183424cd371f7ac21211e0b9321"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0xce, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1c, 0x8}, @generic={0xd6, 0x22, "d6f7c5e07b04925b7ae33b71629369f5592855f8527fddd1be22427b799321c66882ead81533a737820ff88c07593b6e1e0757ea6c8ae02d173371b8c12449bec121330ef1b08a0c6768073360af44cc0771acd0bc9c003e3c3ac89c508f00bd2a1f1461a43ddd28f469de1863871c5ea1d6530ea65fb676a8748cc5b593ff8a5ac0b298fdaa6c5faee2a35ee83ce6d29f87acc59158fa86d8978a354b4b2dd58cbd8659f246a07201e64dc5073042e8bc1ac71bb26f9fe16856587459e6b286dd1ef1979573ddd5715ba693ec23a98514272f1c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x9, 0xe, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x2, 0x3, 0xc6, [@generic={0xbd, 0x9, "4db6d89baa8639eb0549666d700795d276cc8c115f147c541d457bf81a9a33788d4fb920d983c2aad97b33f203cb5fbdbf5546199e252a286711f3b61eb682e4d717616c7b6f278d84498bf4bac644576ed6ed1eff167b44830bf08a35ca0d204bff8cd73aeda9b5c9a0ec6b0c4be421852642a6e6c8bcaa49ed45cb61bf0a849f53cc31b0f5aba0ac38229572d803aed77ebd3c7ffa0badc56fa3ad3362c187a6f87b4526db9e4cb16b8bdf78de2f6bfa6552dede47c1743d9e02"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xd, 0xfb, 0x80, [@generic={0xb8, 0x31, "875685e50d31fc3457e6097557c9ebf8e16fde1f26b101924427ba4f16e761d05661407df4aeb6321fd964637afbfaa178634f09e62a98b2f75b3a660290905c673c356ade14889aae4d86de3bb3e4f61ee6e4db2ad8585b25593a4894fb131613690785a240a05a8c157c6360dba9bce75fab99ef18b3814ee31b3ca9eeb3bedc2159f6bd162cb7f3b8b5e6367ea7c3594ae636bd22dc5b8a14a2cf8e0f066fbd1939746c6e37048d83f218754fded89918fcdf015b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x6}]}}, {{0x9, 0x5, 0x0, 0x2, 0x420, 0x7, 0x8d, 0x9, [@generic={0xf, 0x8, "67b1a4ca4a3eeb4f423851846a"}, @generic={0x3b, 0x22, "cd402a53be599da56ea34aec3e74e5f072ad2427c768cc6037c752780c64876f621952e489c53642b208d36a18573c4747088075112d236a2f"}]}}]}}, {{0x9, 0x4, 0xd8, 0x6, 0xb, 0x6b, 0x62, 0xe8, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "bf06dc"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfff, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0xb, 0x2, 0xdd, 0x6}, @dmm={0x7, 0x24, 0x14, 0x9, 0x3}, @obex={0x5, 0x24, 0x15, 0x3}, @country_functional={0xe, 0x24, 0x7, 0x7, 0x0, [0x6, 0x621, 0x7ff, 0x8000]}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x103, 0x4, 0x3, 0x7, 0x6, 0xf}]}], [{{0x9, 0x5, 0x4, 0x3, 0x40, 0x5, 0x5, 0x3, [@generic={0x7a, 0x9, "a88a7aa5461422ac04f17bde7343ba91b1bbf9538f8962327d9061c30e7bd0f8e7d873a30c4d051a7e2005b7f2bd58ef49dbb43317f3a854b6b114f35ec3ab75f5880cd2fbd3262900145a0c15d55eccd9e7e9179d427426aa5634012e2370b587c513dbefb7922a31db7b087c7ec34bb8219992684f08c3"}, @generic={0x1f, 0xe, "6cf51ae7bd662bf71f980a4c3a396131665d38ea3c0f9c6de4e126bab1"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x4, 0x2d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x21, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x483}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x76, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xe}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x64, 0x5, 0x9, [@generic={0x89, 0x21, "bffd8242073452d98596f240f525fae4d071cf9dbcf0d933339b79a20c79e27c78eeb0b062ad20594f4a4890c3ae7148752cf12a99f337451f9d66df7abd7f8f0a50e6d447b236b5d7f887db1491a275be329727450e7e2fc8408f509969b8f0b7fc61baaca4191fe5c545ebb4ef71c60279018d011c2ed5c404a43cec1eff9783d162261be171"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x3, 0x0, 0xa, [@generic={0xd4, 0x9, "097fa0196d1ace45e72bdc4f6d2ec6351accafcaca0fe18889d00eaf55655072c1023a860a062057b7520732d19604ababc24303a8d57098051d457290553f97bed2b66816d6ed88239824774cd05c392aed3b94fa7783a67c1528f545b46e15e4a6110bb5cb1d40eba8b81212bd05ae1959176237ee55dfa06a1debec25360aa06ba9b53caabb81c8d8f286bdec196e14c99e3cff844a3a1b86e532af3de7f99ac1897bca2a5d2baf38f008f0652034272034180a5156f140a4aba57e8d4f83d549a3c3415c940b709c1fb51e9536b701c7"}, @generic={0x6d, 0xb, "b7f59b7e5ace8a84bfad4ac1f28c6a6decc82abbce01fb171b839db1ef286fd1d540f64c7f4ae09792bd2b20f512434d6584606f66adb5ae5934bd270d28db8107eaef88ffe41afc2bc6396a7bcc45e6b0b283b3461b1d02ccb79c657f395a5d85fe617a6e39aa712d06c0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xff, 0x2, 0x2}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x7, 0x8, 0xd7}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x9, 0x80, 0x0, [@generic={0x4e, 0xa, "34f3964a828720897e2010e46e3b6a3ca1f6db544fc0506ba45eeaedc1d6f0d1e4110d4b3dedd0934d1d8e22f67c003438f6c41d90a6dc9b334a90fd94c127e29abad7212c83cfceaf3c3784"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x4, 0x9e, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf4, 0x101}]}}, {{0x9, 0x5, 0x9, 0x10, 0x638, 0x0, 0xe, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xd}, @generic={0x51, 0xb, "47620e4471d5fb1bc8afb77550d136a98b691db66ab2abb8b0b4fa5d26e11fa830ff69dc1cfae78a7c35c895a67ffc12ed6e004d35406f5aeff1447f26e4c8ee0dcd280436b27365c5538320104dac"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x2, 0xa, 0x1, [@generic={0x84, 0x0, "8eba087d1702d6f180d6ba5c6c669e56b3e1eb746ca069022c4d0120c04c69b25786f0f35e1c15865c5830eb0a57322325aeb81b80301e2aa8517d07701c56d61dac5c6c801aea2fdb93d76d727061311bbd3b86dc41e4e7cae3285ea28eeacbdf037d9278803d80383c80c86af6248ada8f0fe69bc4d640263b8c5e5478655bcb51"}, @generic={0x47, 0x21, "f37bb06cd6a5229e61c3cc06970f7505666ec32e532a22887ece0ecbd5771c89d20e0ba37714f0b00c331feda4cf53e8e06dd2276b6ce6b3839e11c429b28c0771c82a5ed7"}]}}]}}, {{0x9, 0x4, 0x20, 0x0, 0x9, 0x31, 0x3a, 0xf, 0xfb, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x8}}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xc0, 0x1, 0x6, 0x8, "2cc8b0"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x4, 0xf9, 0x6}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x80, 0x2, 0x28, 0x7, 'F'}]}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0xd7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x23}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x0, 0xf7, 0x0, [@generic={0xbe, 0x1, "cc8628c88122309246468fe08e39acb29b599eb0d22ce7e1aab5c34e798ae23cabee1ef9ba140d6463ad820ce0c44b17dc8261edf2ec075a5e5f8f5cf5edd098ee1bb9b87cef2cf274d582afbccdebbe53630321d248ac7be2ddabe6aa6ed71c9c415750778fd3d224ef65e7c2a191db8919ded0e72ab8a5ae14e18d0adbc581ea6520b999d641e067458b65149cb94b682ab0b3ec424554db47201d014644292ac1f204997d5ba40f21698f97f2f25ac7ae82bf1f110420e2079582"}, @generic={0x10, 0x23, "6505d6d8bdfa3dee0d96dc7d8341"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0xc, 0xbf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x3}, @generic={0x100, 0x22, "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"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0xc, 0x9, 0x8, [@generic={0xc6, 0x23, "9bc11529a35004bcf33939c549171ea60783f643d0dcc247fd64b5fc7ec8f66136c5bf437a7a2d2dabcd9e6f6a64f4d68b7fb7621e53f0278c27c8551cc8fb15f959bb40fad3075bb50e38e9f792dc7d6c403f3c0fcbc9f93e1a83d593e6e6f0ade6a8f25b0da6b0940a84830848f9fc371df2d68eed7ce9a12a5407c84b891529c110cf1a92ab5a67bd5ce18fd6934d8a2de351b86b46da70fa3ee840d294486d8983bec6bc5352232956617ac98de48847d1ded7bfd1fbe8c62899b3d7ddcfae95eb1d"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0xf8, 0x6, 0x5, [@generic={0x2c, 0x0, "80fef50b423c3374d073e4a3ef2ca277afb5ffa6669ef2906e59e8ed8b85178053fe14d18fc75ccb0b43"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x8, 0x0, 0x7}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x2, 0x9, 0x9}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x9, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x4, 0x6, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x9}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x54, 0x81, 0x7, 0x8, 0x5}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}]}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.450845085s ago: executing program 3 (id=2396): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x2100) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 1.449319809s ago: executing program 3 (id=2397): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xb, 0x3}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@pids_localevents}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_type}, {@smackfsdef={'smackfsdef', 0x3d, 'cbq\x00'}}, {@subj_role={'subj_role', 0x3d, 'cbq\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@euid_lt={'euid<', r5}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, 'cbq\x00'}}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r10 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010001000010000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000ff00080211000001080211005050505080000c00450000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x23}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0xc000) 1.34091775s ago: executing program 3 (id=2398): madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000300)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) syz_clone(0xc0068000, 0x0, 0xfd6c, 0x0, 0x0, 0x0) 1.088827839s ago: executing program 3 (id=2399): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0xa}}, 0x10) shutdown(r2, 0x2) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x208000, 0x0) 870.299176ms ago: executing program 3 (id=2402): unshare(0x6a040000) (async) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000001500010029bd7000ffdbd7250a0110b4", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4084) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r1], 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 718.86537ms ago: executing program 5 (id=2404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0x6) (async) connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x9041, @none, 0x8, 0x2}, 0xe) (async) close(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x12, 0x2, 0x0, 0x5, 0x0}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000f90800010073797a310000000014000380100000800c000180060001007df00000140000001100010100000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c1}, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 718.596906ms ago: executing program 5 (id=2405): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001a001307fefffffffcdbdf256401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0080006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = dup(r2) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x2000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85513, &(0x7f0000002600)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004"], 0xfdef) r7 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28012, r7, 0x0) 250.272399ms ago: executing program 5 (id=2406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 246.83365ms ago: executing program 5 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@private1}}, &(0x7f0000000740)=0xe8) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000380)='./bus\x00', &(0x7f0000000400), 0x80000, &(0x7f0000000780)={'trans=virtio,', {[{@access_client}], [{@hash}, {@dont_appraise}, {@fowner_lt={'fowner<', r1}}]}}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xc8fee3f8}, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) (async) write$selinux_create(r4, &(0x7f00000005c0)=@access={'system_u:object_r:auth_cache_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x2}, 0x46) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file1\x00', 0x42) (async) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000040)) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 179.997639ms ago: executing program 1 (id=2408): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7800, 0x700, 0x9, 0x5, {{0x30, 0x4, 0x1, 0x5, 0xc0, 0x68, 0x0, 0xfb, 0x29, 0x0, @multicast1, @remote, {[@end, @timestamp={0x44, 0x20, 0x86, 0x0, 0xb, [0xa0, 0x5, 0x8, 0x8001, 0x1ff, 0x3, 0x5]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4b, 0x3, [{0x7, 0xb, "40a656d849806fb569"}, {0x1, 0xc, "db0725d4074a79a8397d"}, {0x6, 0x4, 'F\x00'}, {0x0, 0x8, "eb105631e6f2"}, {0x7, 0xc, "273537e479022cfa6c88"}, {0x1, 0x11, "c5432dd7209d52186b45e549f93398"}, {0x2, 0x5, "5e73fc"}]}, @timestamp={0x44, 0x14, 0xc4, 0x0, 0x5, [0x1, 0x9d91, 0x9, 0x6]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x4}]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r1, 0x30, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x800) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000480)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000004c0)=0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, 0x4, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x48854}, 0x20000884) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', r3, 0x700, 0x700, 0xa4, 0x7ff, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x65, 0x0, 0x4, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @generic={0x0, 0x12, "28dbbd2af4bff77ef561502387e66eae"}, @timestamp={0x44, 0xc, 0xa4, 0x0, 0x9, [0x7, 0x4]}, @generic={0x89, 0x3, 'x'}, @end, @timestamp_prespec={0x44, 0x24, 0x7e, 0x3, 0x4, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @noop]}}}}}) syz_usb_connect(0x0, 0x136, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x36, 0x11, 0x3f, 0x8, 0x2c7c, 0x30c, 0xf67d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x124, 0x1, 0x10, 0x2, 0x80, 0x3, [{{0x9, 0x4, 0x41, 0x1b, 0x1, 0xff, 0x5f, 0x97, 0x3, [], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0x8c, 0x9, 0x9, [@generic={0x102, 0x4, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x91, 0x10}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x7, 0xd4, 0x8, 0x20, 0x2}, 0x112, &(0x7f0000000880)={0x5, 0xf, 0x112, 0x3, [@generic={0xef, 0x10, 0x1, "81b563a21ab3a0b76e5477fe1c08a362f4ca47f26b3e90d3b054b3d1b8fefd1d5a113b0ed59adfd534e5ed1ac1e3c8e87eebcc9ced17c40a4c36056e7fae9e7259229dfceec89fd37ea94b0334be2cdedfff40b7f5f6fa82ad7bb999656ff0f0cc1ed14207586985158e6f0895728a21b59d1921c7000c2e32ab18bcdb251a1063679a602be596b6a557a69b0f7489d0c02002f6f00449778040b410a957e5dd53279cafd51eba06b1206da86f943885d4fa80a95606929d3dfb33bba49fe699575b74abb061ae39e96c4e170362f36a9deaf0bdc1f9cb4905ac71f830abdc809309fc02ee32de45eb296e90"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0xef, 0x4084}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "28da42105b4d38c53904e9168fe59fc1"}]}, 0x6, [{0x59, &(0x7f00000009c0)=@string={0x59, 0x3, "bf22f75ef8325e708f114a092287842b1ee9cbe62fbd2e5e191a34c289f25ed220e60236182880f43c1721dc7df579b34f6b2703efcd4317eb173e99b002c6d83becb7cd030692dd463d6edbf99f49082c5e4870fdf2f2"}}, {0x58, &(0x7f0000000a40)=@string={0x58, 0x3, "dd3d3ba1d34b24396bc0bead70020dd825a8abd8cdce3ad32e5c0a1b15c6d56a8c441633855fd40cee82bda0d6efc6a6e8feef43c7ad944b3551b4a8349ba04179c0c12f4ed0ee44080b2a39be248d32959bf3ca0abb"}}, {0x24, &(0x7f0000000ac0)=@string={0x24, 0x3, "1997a0586b4c886accaf7fb25309f2350f15800071012d033c2dfaf69e2b412e9a60"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x430}}, {0x1e, &(0x7f0000000b80)=@string={0x1e, 0x3, "c6ab17989c5c0b35875fd7cf60b624ad9a46be4bb8e7f461289b22d8"}}]}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000c40)={0x3, 'geneve0\x00', {0x200}, 0x9}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x83}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x400c010) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x1a) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000dc0)=0xffffffffffffffff) r5 = openat$cgroup_freezer_state(r0, &(0x7f0000000e00), 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000e40)={0x0, 0xff}, &(0x7f0000000e80)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000ec0)={r6, 0x9, 0xaa, "80c0280939e6455dacc4561f2b07df24aad56a8bd6b116291a09471ae37172188546bdb633b1a8a4364453275a508208aa2338e952426d4aa6e26e931207516558ed92d477a36b742576c405a25562887c88aa4d0a88d58d73e495ec69d399a3b466810c782de747bfd06aa86b7191ec92f4e33578e00f69f880b974e6d8829c9263527146363860cfe38e629abb88723d846b9de82991f0b5625e348f3ffaf318c22c4ee967448bf8fb"}, 0xb2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x8c, r7, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x76b19d2f, 0x56}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x80000001}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="4e1b8cc402d37b2c7c5b04ebff4dba1b7cd301e40a419bc6acb281f526e7c5"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x84, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}]}, @CTA_MARK_MASK={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r1, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xfff}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x10}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000001440)={{0x1, 0x1, 0x18, r5, {0x3ac}}, './file0\x00'}) fsetxattr$security_capability(r9, &(0x7f0000001480), &(0x7f00000014c0)=@v1={0x1000000, [{0x401, 0x9}]}, 0xc, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001540), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, r10, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x95b}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 179.678711ms ago: executing program 5 (id=2409): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2f25, "99bdb1b826641b0894d002060074b7b94d3c10db57c3f7484d9ed4190db800f3"}) ioctl$SW_SYNC_IOC_INC(r0, 0xc0285700, &(0x7f0000000180)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./file0\x00', 0x20200, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400ebff0f0000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) 60.236041ms ago: executing program 5 (id=2410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="1400000013000149993dde440113e90006"], 0x14}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='ui']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='devpts\x00', 0x1000000, &(0x7f00000000c0)='\xbc\x15\\\x16\v\f\xd7\x84><\xb2}\x9a\x80\xff\xfb/\xf5\x14\xf6\xf8\xca\xb6*I`4+\xa2t\xd5\"\xe8\x19\xffJ\x14\xb1d\x89\xb73\x929\xc1\xe2\xdf,\xd8\xe0\xd5\x9d\xbe\x1b\xd4\xcb\xda\a\xc1o,\xb8\xb56J\xa4KfgXl\x8a\xb9\xea\x01&*P(\xb1\x93\xe0B\a') bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 0s ago: executing program 3 (id=2411): mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2020008, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000100), 0x4) (async, rerun: 32) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): 1735][ T40] audit: type=1400 audit(5298344569.884:700): avc: denied { connect } for pid=9996 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.122089][ T9997] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 125.219356][T10003] erspan0: entered promiscuous mode [ 125.444639][T10017] macsec2: entered allmulticast mode [ 125.446820][T10017] bridge0: entered allmulticast mode [ 125.449306][T10017] bridge0: port 1(macsec2) entered blocking state [ 125.451851][T10017] bridge0: port 1(macsec2) entered disabled state [ 125.459778][T10017] bridge0: left allmulticast mode [ 126.277393][T10029] openvswitch: netlink: Missing key (keys=40, expected=100) [ 126.361306][ T40] audit: type=1400 audit(5298344571.124:701): avc: denied { write } for pid=10034 comm="syz.3.1213" lport=39975 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.370101][ T40] audit: type=1400 audit(5298344571.134:702): avc: denied { setopt } for pid=10034 comm="syz.3.1213" lport=39975 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.378743][ T40] audit: type=1400 audit(5298344571.134:703): avc: denied { getopt } for pid=10034 comm="syz.3.1213" lport=39975 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 126.993253][ T5996] usb 6-1: USB disconnect, device number 11 [ 127.364326][T10064] ip6gre1: entered promiscuous mode [ 127.366071][T10064] ip6gre1: entered allmulticast mode [ 127.401495][T10069] __nla_validate_parse: 19 callbacks suppressed [ 127.401506][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 127.557634][ T40] audit: type=1400 audit(5298344572.324:704): avc: denied { lock } for pid=10073 comm="syz.3.1224" path="socket:[30214]" dev="sockfs" ino=30214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.694142][ T64] Bluetooth: hci2: ISO packet too small [ 127.704258][T10084] validate_nla: 1 callbacks suppressed [ 127.704269][T10084] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 127.708554][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 127.711508][T10084] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 127.714298][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 128.025587][T10098] batadv_slave_1: entered promiscuous mode [ 128.028324][T10098] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1233'. [ 128.033620][T10097] batadv_slave_1: left promiscuous mode [ 128.122393][T10102] geneve1: entered allmulticast mode [ 128.269215][T10106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'. [ 128.274750][T10106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'. [ 129.084591][ T64] Bluetooth: hci3: ISO packet too small [ 129.115493][ T40] audit: type=1400 audit(5298344573.884:705): avc: denied { ioctl } for pid=10117 comm="syz.1.1241" path="socket:[27565]" dev="sockfs" ino=27565 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 129.147482][T10124] CIFS: Unable to determine destination address [ 129.208318][T10132] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 129.210862][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1246'. [ 129.386180][T10143] overlayfs: workdir and upperdir must be separate subtrees [ 129.397245][ T64] Bluetooth: hci2: ISO packet too small [ 129.444869][T10152] xt_hashlimit: invalid rate [ 129.453600][T10154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 129.614437][ T40] audit: type=1400 audit(5298344574.384:706): avc: denied { create } for pid=10162 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 129.661975][ T64] Bluetooth: hci0: ISO packet too small [ 129.712535][T10183] netlink: 'syz.2.1264': attribute type 21 has an invalid length. [ 129.715779][T10183] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.739448][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 129.818905][T10193] No control pipe specified [ 129.822952][T10190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 129.845443][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1268'. [ 129.887328][ T64] Bluetooth: hci2: ISO packet too small [ 130.330851][ T40] audit: type=1400 audit(5298344575.094:707): avc: denied { write } for pid=10236 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 130.368788][ T64] Bluetooth: hci3: ISO packet too small [ 130.509342][T10253] netlink: 'syz.1.1284': attribute type 2 has an invalid length. [ 130.533362][T10253] lo speed is unknown, defaulting to 1000 [ 130.768269][T10258] veth0: mtu greater than device maximum [ 130.914271][T10262] /dev/sr0: Can't open blockdev [ 131.053230][T10263] /dev/sr0: Can't open blockdev [ 131.197408][ T64] Bluetooth: hci0: ISO packet too small [ 131.238632][T10278] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 131.241812][T10278] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 131.246461][T10278] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 131.249220][T10278] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 131.266467][T10278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.311890][T10284] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 131.367856][ T40] audit: type=1400 audit(5298344576.134:708): avc: denied { accept } for pid=10294 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.530609][ T64] Bluetooth: hci2: ISO packet too small [ 131.605700][T10332] netlink: 'syz.3.1301': attribute type 21 has an invalid length. [ 131.626150][ T40] audit: type=1400 audit(5298344576.394:709): avc: denied { read } for pid=10334 comm="syz.1.1302" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.633068][ T40] audit: type=1400 audit(5298344576.404:710): avc: denied { open } for pid=10334 comm="syz.1.1302" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 131.645945][T10309] "syz.2.1297" (10309) uses obsolete ecb(arc4) skcipher [ 131.694976][T10345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10345 comm=syz.3.1305 [ 131.739581][ T64] Bluetooth: hci2: ISO packet too small [ 132.550669][ T64] Bluetooth: hci0: ISO packet too small [ 132.608112][T10389] __nla_validate_parse: 9 callbacks suppressed [ 132.608127][T10389] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1320'. [ 132.671729][T10401] trusted_key: encrypted_key: insufficient parameters specified [ 132.690615][T10401] l2tp_ppp: sess 2/0: no socket in recv [ 132.718716][ T64] Bluetooth: hci0: ISO packet too small [ 132.787723][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 134.590992][T10414] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1330'. [ 134.594220][T10414] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 134.643585][T10425] tmpfs: Bad value for 'huge' [ 134.677069][ T40] audit: type=1400 audit(5298344579.444:711): avc: denied { relabelfrom } for pid=10427 comm="syz.2.1334" name="" dev="pipefs" ino=31764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 134.747648][ T40] audit: type=1400 audit(5298344579.514:712): avc: denied { create } for pid=10429 comm="syz.1.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.751376][T10432] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.1335'. [ 134.756768][T10432] openvswitch: netlink: Message has 6 unknown bytes. [ 134.762679][ T40] audit: type=1400 audit(5298344579.514:713): avc: denied { ioctl } for pid=10429 comm="syz.1.1335" path="socket:[28504]" dev="sockfs" ino=28504 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 135.429521][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1336'. [ 135.432644][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1336'. [ 135.535986][ T64] Bluetooth: hci0: ISO packet too small [ 135.559296][T10443] overlayfs: failed to resolve '/': -2 [ 135.562275][T10441] overlayfs: failed to clone lowerpath [ 135.751164][T10463] validate_nla: 1 callbacks suppressed [ 135.751175][T10463] netlink: 'syz.2.1345': attribute type 32 has an invalid length. [ 135.756007][ T6014] IPVS: starting estimator thread 0... [ 135.758147][T10464] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 135.808539][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 135.811438][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'. [ 135.842814][T10466] IPVS: using max 43 ests per chain, 103200 per kthread [ 135.859407][T10463] netlink: 'syz.2.1345': attribute type 32 has an invalid length. [ 135.874373][ T40] audit: type=1400 audit(5298344580.644:714): avc: denied { lock } for pid=10478 comm="syz.1.1347" path="socket:[31865]" dev="sockfs" ino=31865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.875682][T10479] ptrace attach of "/syz-executor exec"[5930] was attempted by "/syz-executor exec"[10479] [ 135.888147][T10479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1347'. [ 135.960369][ T64] Bluetooth: hci3: ISO packet too small [ 135.995962][T10463] netlink: 'syz.2.1345': attribute type 32 has an invalid length. [ 136.014551][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 136.111590][T10463] netlink: 'syz.2.1345': attribute type 32 has an invalid length. [ 136.158328][T10530] netlink: 'syz.3.1357': attribute type 2 has an invalid length. [ 136.218650][T10463] netlink: 'syz.2.1345': attribute type 32 has an invalid length. [ 136.230350][ T64] Bluetooth: hci3: ISO packet too small [ 136.296370][T10556] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 136.299778][ T40] audit: type=1400 audit(5298344581.064:715): avc: denied { relabelto } for pid=10552 comm="syz.1.1362" name="298" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 136.318351][ T40] audit: type=1400 audit(5298344581.084:716): avc: denied { associate } for pid=10552 comm="syz.1.1362" name="298" dev="tmpfs" ino=1611 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwclock_exec_t:s0" [ 136.318852][T10463] netlink: 'syz.2.1345': attribute type 32 has an invalid length. [ 136.327397][T10553] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 136.365522][T10553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.366120][T10570] netlink: 'syz.3.1364': attribute type 10 has an invalid length. [ 136.377255][T10570] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.380419][T10570] bond0: (slave team0): Enslaving as an active interface with an up link [ 136.392462][T10570] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 136.397339][T10570] siw: device registration error -23 [ 136.572142][ T40] audit: type=1400 audit(5298344581.334:717): avc: denied { watch watch_reads } for pid=10595 comm="syz.3.1368" path="pipe:[32837]" dev="pipefs" ino=32837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 137.133701][ T40] audit: type=1400 audit(5298344581.894:718): avc: denied { remove_name } for pid=5930 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 137.152481][ T40] audit: type=1400 audit(5298344581.914:719): avc: denied { rmdir } for pid=5930 comm="syz-executor" name="298" dev="tmpfs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 137.350839][ T40] audit: type=1400 audit(5298344582.114:720): avc: denied { setopt } for pid=10654 comm="syz.1.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 137.450252][ T40] audit: type=1400 audit(5298344582.214:721): avc: denied { read write } for pid=10657 comm="syz.1.1388" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 137.457831][ T40] audit: type=1400 audit(5298344582.214:722): avc: denied { open } for pid=10657 comm="syz.1.1388" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 137.607149][T10665] bond0: entered allmulticast mode [ 137.609431][T10665] bond_slave_0: entered allmulticast mode [ 137.611892][T10665] bond_slave_1: entered allmulticast mode [ 137.616038][T10665] team0: entered allmulticast mode [ 137.618137][T10665] team_slave_1: entered allmulticast mode [ 137.620513][T10665] batadv0: entered allmulticast mode [ 137.704913][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.707479][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.904067][ T64] Bluetooth: hci3: ISO packet too small [ 137.970889][ T40] audit: type=1400 audit(5298344582.734:723): avc: denied { lock } for pid=10692 comm="syz.1.1401" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.262764][ T6014] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 138.332995][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.391548][ T64] Bluetooth: hci2: ISO packet too small [ 138.416935][T10719] fuse: Bad value for 'user_id' [ 138.418562][T10719] fuse: Bad value for 'user_id' [ 138.422771][ T6014] usb 6-1: Using ep0 maxpacket: 32 [ 138.426895][ T6014] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 138.430196][ T6014] usb 6-1: can't read configurations, error -61 [ 138.562668][ T6014] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 138.714009][ T6014] usb 6-1: Using ep0 maxpacket: 32 [ 138.718570][ T6014] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 138.721022][ T6014] usb 6-1: can't read configurations, error -61 [ 138.729058][ T6014] usb usb6-port1: attempt power cycle [ 138.820243][T10736] __nla_validate_parse: 5 callbacks suppressed [ 138.820258][T10736] netlink: 46 bytes leftover after parsing attributes in process `syz.2.1416'. [ 139.071730][ T64] Bluetooth: hci0: ISO packet too small [ 139.074083][ T6014] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 139.093088][ T6014] usb 6-1: Using ep0 maxpacket: 32 [ 139.097201][ T6014] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 139.100508][ T6014] usb 6-1: can't read configurations, error -61 [ 139.180089][T10754] No source specified [ 139.184835][T10754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1421'. [ 139.243108][ T6014] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 139.263120][ T6014] usb 6-1: Using ep0 maxpacket: 32 [ 139.266999][ T6014] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 139.269979][ T6014] usb 6-1: can't read configurations, error -61 [ 139.273587][ T6014] usb usb6-port1: unable to enumerate USB device [ 139.284394][T10762] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.287821][T10762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.344903][ T64] Bluetooth: hci0: ISO packet too small [ 139.370487][T10772] batadv_slave_1: entered promiscuous mode [ 139.382144][T10772] pim6reg: entered allmulticast mode [ 139.384465][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 139.388679][T10771] batadv_slave_1: left promiscuous mode [ 139.569786][T10787] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1432'. [ 139.597768][T10791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1433'. [ 139.600571][T10791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1433'. [ 139.662541][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 139.744423][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.748355][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.753486][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.756884][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.759431][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.800186][T10795] lo speed is unknown, defaulting to 1000 [ 139.944053][T10795] chnl_net:caif_netlink_parms(): no params data found [ 140.000127][T10806] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1435'. [ 140.009753][ T6019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.020279][T10795] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.023179][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.025607][T10795] bridge_slave_0: entered allmulticast mode [ 140.028574][T10795] bridge_slave_0: entered promiscuous mode [ 140.031907][T10795] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.036058][T10795] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.038501][T10795] bridge_slave_1: entered allmulticast mode [ 140.041229][T10795] bridge_slave_1: entered promiscuous mode [ 140.058172][T10795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.061171][ T5944] Bluetooth: hci0: ISO packet too small [ 140.063131][T10795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.089258][ T6019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.098949][T10795] team0: Port device team_slave_0 added [ 140.102086][T10795] team0: Port device team_slave_1 added [ 140.120727][T10795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.125313][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.133593][T10795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.138205][T10795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.140424][T10795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.151621][T10795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.190733][ T6019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.196766][T10816] overlayfs: missing 'lowerdir' [ 140.235193][T10795] hsr_slave_0: entered promiscuous mode [ 140.237498][T10795] hsr_slave_1: entered promiscuous mode [ 140.240062][T10795] debugfs: 'hsr0' already exists in 'hsr' [ 140.241958][T10795] Cannot create hsr debugfs directory [ 140.293407][ T6019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.347260][T10824] /dev/nullb0: Can't lookup blockdev [ 140.385970][ T5944] Bluetooth: hci2: ISO packet too small [ 140.413791][T10833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.429869][T10287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.432502][T10287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.476597][T10795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.481255][T10795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.492048][T10795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.498531][T10795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.502477][ T6019] bridge_slave_1: left allmulticast mode [ 140.515173][ T6019] bridge_slave_1: left promiscuous mode [ 140.517238][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.523580][ T6019] bridge_slave_0: left allmulticast mode [ 140.525516][ T6019] bridge_slave_0: left promiscuous mode [ 140.527388][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.700444][ T6019] bridge0 (unregistering): left allmulticast mode [ 140.840340][ T6019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.854541][ T6019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.865456][ T6019] bond0 (unregistering): Released all slaves [ 140.961516][ T6019] bond1 (unregistering): Released all slaves [ 141.025294][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.035419][T10795] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.045236][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.048237][T10290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.075148][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.077514][T10290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.124575][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 141.124584][ T40] audit: type=1400 audit(5298344585.894:726): avc: denied { append } for pid=10849 comm="syz.1.1450" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 141.140291][T10852] overlay: Unknown parameter 'subj_user' [ 141.147309][T10852] overlay: Unknown parameter 'subj_user' [ 141.149669][T10852] overlay: Unknown parameter 'subj_user' [ 141.151818][T10852] overlay: Unknown parameter 'subj_user' [ 141.155980][T10852] overlay: Unknown parameter 'subj_user' [ 141.158247][T10852] overlay: Unknown parameter 'subj_user' [ 141.161269][T10852] overlay: Unknown parameter 'subj_user' [ 141.164046][T10852] overlay: Unknown parameter 'subj_user' [ 141.168153][T10852] overlay: Unknown parameter 'subj_user' [ 141.170664][T10852] overlay: Unknown parameter 'subj_user' [ 141.184326][T10852] overlay: Unknown parameter 'subj_user' [ 141.189872][T10852] overlay: Unknown parameter 'subj_user' [ 141.199280][T10852] overlayfs: failed to resolve './bus': -2 [ 141.213848][T10852] overlayfs: failed to resolve './bus': -2 [ 141.223899][T10852] overlayfs: failed to resolve './bus': -2 [ 141.227777][T10852] overlayfs: failed to resolve './bus': -2 [ 141.240789][T10852] overlayfs: failed to resolve './bus': -2 [ 141.254499][T10852] overlayfs: failed to resolve './bus': -2 [ 141.258423][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'. [ 141.287033][T10795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.319790][ T5944] Bluetooth: hci2: ISO packet too small [ 141.360676][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'. [ 141.457110][T10879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10879 comm=syz.3.1457 [ 141.495302][ T6019] hsr_slave_0: left promiscuous mode [ 141.502205][ T6019] hsr_slave_1: left promiscuous mode [ 141.513527][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.516012][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.519058][ T6019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.521389][ T6019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.535015][ T6019] veth1_macvtap: left promiscuous mode [ 141.536899][ T6019] veth0_macvtap: left promiscuous mode [ 141.538789][ T6019] veth1_vlan: left promiscuous mode [ 141.540534][ T6019] veth0_vlan: left promiscuous mode [ 141.588816][T10891] 9p: Bad value for 'rfdno' [ 141.616412][ T6016] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 141.762956][ T6016] usb 6-1: Using ep0 maxpacket: 8 [ 141.767816][ T6016] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 141.771740][ T6016] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.780749][ T6016] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.783949][ T5944] Bluetooth: hci4: command tx timeout [ 141.785207][ T6016] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.791147][ T6016] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.806061][ T6016] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.809025][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.952344][ T6019] team0 (unregistering): Port device team_slave_1 removed [ 141.990781][ T6019] team0 (unregistering): Port device team_slave_0 removed [ 142.022355][ T5944] Bluetooth: hci2: ISO packet too small [ 142.028087][ T6016] usb 6-1: usb_control_msg returned -32 [ 142.033572][ T6016] usbtmc 6-1:16.0: can't read capabilities [ 142.042802][T10872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.062095][T10872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.260082][T10906] bond4: Removing last ns target with arp_interval on [ 142.265702][ T6016] usb 6-1: USB disconnect, device number 16 [ 142.299076][T10795] veth0_vlan: entered promiscuous mode [ 142.309489][T10795] veth1_vlan: entered promiscuous mode [ 142.324222][T10795] veth0_macvtap: entered promiscuous mode [ 142.327993][T10795] veth1_macvtap: entered promiscuous mode [ 142.348760][T10795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.355061][T10795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.360656][T10291] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.366681][T10291] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.373823][T10291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.381802][T10291] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.454620][T10287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.457810][T10287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.480732][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.483581][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.491707][ T40] audit: type=1400 audit(5298344587.254:727): avc: denied { mounton } for pid=10795 comm="syz-executor" path="/syzkaller.ic5mtS/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 142.559034][ T40] audit: type=1400 audit(5298344587.324:728): avc: denied { connect } for pid=10919 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.610508][T10927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58384 sclass=netlink_route_socket pid=10927 comm=syz.2.1468 [ 142.612732][T10928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58384 sclass=netlink_route_socket pid=10928 comm=syz.2.1468 [ 142.621630][T10926] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10926 comm=syz.2.1468 [ 142.627262][ T40] audit: type=1400 audit(5298344587.394:729): avc: denied { create } for pid=10925 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.640304][ T40] audit: type=1400 audit(5298344587.394:730): avc: denied { bind } for pid=10925 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.682385][ T40] audit: type=1400 audit(5298344587.444:731): avc: denied { setopt } for pid=10925 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.704225][ T40] audit: type=1400 audit(5298344587.444:732): avc: denied { accept } for pid=10925 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.729173][T10939] wg2: entered promiscuous mode [ 142.730738][T10939] wg2: entered allmulticast mode [ 142.805033][T10944] vxlan1: entered promiscuous mode [ 142.810180][ T5944] Bluetooth: hci3: ISO packet too small [ 142.814768][ T61] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.818143][ T61] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.821489][ T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.828663][ T61] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.887680][T10953] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 142.905018][T10952] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 142.916421][T10956] pim6reg: entered allmulticast mode [ 142.920664][ T40] audit: type=1400 audit(5298344587.684:733): avc: denied { read } for pid=10955 comm="syz.1.1476" dev="sockfs" ino=32165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.962391][T10959] sch_tbf: burst 88 is lower than device veth1 mtu (1514) ! [ 143.040550][ T5944] Bluetooth: hci4: ISO packet too small [ 143.091178][ T40] audit: type=1400 audit(5298344587.854:734): avc: denied { map } for pid=10974 comm="syz.5.1483" path="/proc/sys/net/ipv4/tcp_wmem" dev="proc" ino=33298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 143.112700][ T40] audit: type=1400 audit(5298344587.874:735): avc: denied { execute } for pid=10974 comm="syz.5.1483" path="/proc/sys/net/ipv4/tcp_wmem" dev="proc" ino=33298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 143.346560][ T5944] Bluetooth: hci4: ISO packet too small [ 143.418788][T11003] bond0: (slave syz_tun): Releasing backup interface [ 143.440538][T11007] batadv_slave_1: entered promiscuous mode [ 143.444152][T11007] batman_adv: batadv0: Adding interface: macsec1 [ 143.448579][T11007] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.462739][T11007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.466932][T11007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.470722][T11007] batman_adv: batadv0: Interface activated: macsec1 [ 143.509206][T11011] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 143.653416][ T5944] Bluetooth: hci3: ISO packet too small [ 143.662306][T11026] tmpfs: Cannot change global quota limit on remount [ 143.713203][T11035] validate_nla: 5 callbacks suppressed [ 143.713214][T11035] netlink: 'syz.3.1500': attribute type 32 has an invalid length. [ 143.717907][T11039] futex_wake_op: syz.2.1506 tries to shift op by -1; fix this program [ 143.721093][T11039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11039 comm=syz.2.1506 [ 143.737825][T11035] bond6: Setting coupled_control to off (0) [ 143.862713][ T5944] Bluetooth: hci4: command tx timeout [ 143.929548][ T5944] Bluetooth: hci3: ISO packet too small [ 143.979955][T11064] fuse: Bad value for 'fd' [ 143.999000][T11060] Process accounting resumed [ 144.003183][ T54] delete_channel: no stack [ 144.100156][ T5944] Bluetooth: hci3: ISO packet too small [ 144.110250][T11072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.158961][T11092] netlink: 'syz.5.1522': attribute type 10 has an invalid length. [ 144.167367][T11094] netlink: 'syz.5.1522': attribute type 10 has an invalid length. [ 144.168633][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.173993][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.179916][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.182294][T11092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.184938][T11092] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.187299][T11092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.192341][T11092] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 144.195668][T11094] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.198593][T11094] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.207079][T11092] fuse: Unknown parameter 'group_if' [ 144.348948][ T5944] Bluetooth: hci4: ISO packet too small [ 144.446350][T11120] program syz.5.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.452813][T11120] IPv6: addrconf: prefix option has invalid lifetime [ 144.522741][ T5996] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 144.673873][ T5996] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 144.676438][ T5996] usb 6-1: config 4 has no interface number 0 [ 144.680044][ T5996] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 144.683148][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.686477][ T5996] usb 6-1: Product: syz [ 144.687862][ T5996] usb 6-1: Manufacturer: syz [ 144.689445][ T5996] usb 6-1: SerialNumber: syz [ 144.698675][ T5996] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:4.28/input/input12 [ 144.904771][T11110] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 144.907295][T11110] __nla_validate_parse: 42 callbacks suppressed [ 144.907303][T11110] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1528'. [ 144.960438][ T5323] bcm5974 6-1:4.28: could not read from device [ 144.965065][ T5323] bcm5974 6-1:4.28: could not read from device [ 144.970848][ T5323] bcm5974 6-1:4.28: could not read from device [ 144.971333][ T5996] usb 6-1: USB disconnect, device number 17 [ 145.128350][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'. [ 145.134170][T11139] Can't find ip_set type hash:i [ 145.144090][ T5944] Bluetooth: hci2: ISO packet too small [ 145.228718][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1542'. [ 145.232850][T11155] bridge_slave_1: left allmulticast mode [ 145.234550][T11157] xt_l2tp: invalid flags combination: 8 [ 145.235139][T11155] bridge_slave_1: left promiscuous mode [ 145.240170][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.247578][T11155] bridge_slave_0: left allmulticast mode [ 145.249817][T11155] bridge_slave_0: left promiscuous mode [ 145.253301][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.267585][T11160] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 145.270995][T11161] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 145.276914][T11155] bond0: (slave bridge0): Releasing backup interface [ 145.593410][T11187] overlay: Bad value for 'workdir' [ 145.619624][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11192 comm=syz.2.1555 [ 145.644014][T11194] netlink: 'syz.1.1556': attribute type 1 has an invalid length. [ 145.654718][T11194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.679242][T11194] bond5: (slave veth3): Enslaving as an active interface with a down link [ 145.685773][T11194] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 145.688321][T11194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1556'. [ 145.779823][T11185] netlink: 14684 bytes leftover after parsing attributes in process `syz.5.1552'. [ 145.802066][T11185] lo speed is unknown, defaulting to 1000 [ 145.936108][ T5944] Bluetooth: hci4: command tx timeout [ 146.077321][T11224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.137969][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 146.137980][ T40] audit: type=1400 audit(5298344590.904:743): avc: denied { accept } for pid=11233 comm="syz.5.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.218065][ T40] audit: type=1326 audit(5298344590.984:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.231195][ T40] audit: type=1326 audit(5298344590.984:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.238430][ T40] audit: type=1326 audit(5298344590.984:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.249203][ T40] audit: type=1326 audit(5298344590.984:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.257309][ T40] audit: type=1326 audit(5298344590.984:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.264421][ T40] audit: type=1326 audit(5298344590.984:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.271274][ T40] audit: type=1326 audit(5298344590.984:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.278810][ T40] audit: type=1326 audit(5298344590.984:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.287026][ T40] audit: type=1326 audit(5298344590.984:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11243 comm="syz.5.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f073978f7c9 code=0x7ffc0000 [ 146.481193][T11284] netlink: 'syz.1.1581': attribute type 8 has an invalid length. [ 146.484078][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 146.489421][T11284] bond0: entered promiscuous mode [ 146.491148][T11284] bond_slave_0: entered promiscuous mode [ 146.493837][T11284] bond_slave_1: entered promiscuous mode [ 146.495758][T11284] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 146.499163][T11284] gretap0: entered promiscuous mode [ 146.502792][T11284] bond0: left promiscuous mode [ 146.504532][T11284] bond_slave_0: left promiscuous mode [ 146.506758][T11284] bond_slave_1: left promiscuous mode [ 146.508718][T11284] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 146.512220][T11284] gretap0: left promiscuous mode [ 146.689051][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 146.723331][T11307] lo: entered promiscuous mode [ 146.745505][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1588'. [ 146.757828][T11311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1590'. [ 146.875060][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1593'. [ 146.877861][T11321] netlink: 'syz.3.1593': attribute type 30 has an invalid length. [ 146.976994][T11330] trusted_key: syz.3.1595 sent an empty control message without MSG_MORE. [ 147.113554][T11345] netlink: 'syz.3.1599': attribute type 20 has an invalid length. [ 147.239801][T11353] 9p filesystem being mounted at /478/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 147.543109][ T838] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 147.704254][ T838] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.708190][ T838] usb 10-1: config 0 has no interfaces? [ 147.711141][ T838] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.714386][ T838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.716953][ T838] usb 10-1: SerialNumber: syz [ 147.720514][ T838] usb 10-1: config 0 descriptor?? [ 148.172530][ T6014] usb 10-1: USB disconnect, device number 2 [ 148.366232][T11413] xt_l2tp: unknown flags: 51 [ 148.520363][T11431] /dev/nullb0: Can't lookup blockdev [ 148.683746][T11451] bond4 (unregistering): Released all slaves [ 148.769073][T11457] nbd: illegal input index 1879048192 [ 148.780884][T11457] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11457 comm=syz.5.1638 [ 148.897000][T11471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11471 comm=syz.2.1642 [ 149.585021][T11488] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 149.645393][T11492] ref_ctr increment failed for inode: 0x767 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888026648c40 [ 149.885245][T11500] x_tables: duplicate underflow at hook 1 [ 150.543662][T11535] __nla_validate_parse: 15 callbacks suppressed [ 150.543674][T11535] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1661'. [ 150.577672][T11537] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 150.806865][T11547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 150.811170][T11557] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 150.814904][T11558] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 151.082503][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1674'. [ 151.135236][T11585] Bluetooth: MGMT ver 1.23 [ 151.242385][T11591] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1678'. [ 151.365777][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 151.365793][ T40] audit: type=1400 audit(5298344596.134:874): avc: denied { connect } for pid=11613 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.417806][ T40] audit: type=1400 audit(5298344596.184:875): avc: denied { write } for pid=11613 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.421138][T11617] smc: net device bond0 applied user defined pnetid SYZ2 [ 151.430291][T11617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1686'. [ 151.449519][T11617] smc: removing net device bond0 with user defined pnetid SYZ2 [ 151.456997][T11617] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 151.462176][T11617] bond0 (unregistering): (slave team0): Releasing backup interface [ 151.471107][T11617] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 151.478444][T11617] bond0 (unregistering): Released all slaves [ 151.548122][T11632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=11632 comm=syz.2.1689 [ 151.555297][T11632] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 151.579434][T11627] comedi: No check for data length of config insn id 255 is implemented [ 151.583082][T11627] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 151.586197][T11627] comedi: Assuming n=15 is correct [ 151.635332][ T40] audit: type=1400 audit(5298344596.404:876): avc: denied { wake_alarm } for pid=11640 comm="syz.1.1691" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.013082][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1700'. [ 152.016649][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1700'. [ 152.034403][T11675] 9p filesystem being mounted at /365/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 152.049077][ T40] audit: type=1804 audit(5298344596.814:877): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1700" name="/newroot/365/file0/file0" dev="9p" ino=72095629 res=1 errno=0 [ 152.188873][T11685] overlayfs: failed to clone upperpath [ 152.306106][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 152.309669][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'. [ 152.315955][T11697] xfrm1: entered promiscuous mode [ 152.317610][T11697] xfrm1: entered allmulticast mode [ 152.412729][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.415847][ T40] audit: type=1400 audit(5298344597.184:878): avc: denied { getopt } for pid=11701 comm="syz.1.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 152.459597][T11704] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1710'. [ 152.466456][ T40] audit: type=1400 audit(5298344597.234:879): avc: denied { mounton } for pid=11703 comm="syz.1.1710" path="/370/file0" dev="hugetlbfs" ino=34788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 152.467399][T11704] overlayfs: maximum fs stacking depth exceeded [ 152.494841][ T40] audit: type=1400 audit(5298344597.264:880): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 152.519768][ T40] audit: type=1400 audit(5298344597.284:881): avc: denied { read write } for pid=11705 comm="syz.1.1711" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.524673][T11706] netlink: 'syz.1.1711': attribute type 12 has an invalid length. [ 152.527473][ T40] audit: type=1400 audit(5298344597.284:882): avc: denied { open } for pid=11705 comm="syz.1.1711" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.698479][T11708] netlink: 'syz.1.1712': attribute type 9 has an invalid length. [ 152.942769][ T54] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 153.097591][ T54] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 153.100569][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.107412][ T54] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 153.111404][ T54] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 153.121730][ T54] usb 6-1: Manufacturer: syz [ 153.126167][ T54] usb 6-1: config 0 descriptor?? [ 153.182829][ T54] rc_core: IR keymap rc-hauppauge not found [ 153.184790][ T54] Registered IR keymap rc-empty [ 153.188736][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 153.195800][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 153.299455][ T40] audit: type=1400 audit(5298344598.064:883): avc: denied { name_bind } for pid=11765 comm="syz.2.1730" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 153.337050][ T53] usb 6-1: USB disconnect, device number 18 [ 154.198095][T11812] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 154.241918][T11817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 154.249649][T11817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.273563][T11817] bond4: option xmit_hash_policy: invalid value (6) [ 154.278491][T11817] bond4 (unregistering): Released all slaves [ 154.323395][T11825] overlayfs: failed to resolve './file1': -2 [ 154.446861][T11844] trusted_key: encrypted_key: master key parameter 'vusted:syz' is invalid [ 154.508856][T11852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.958525][T11874] tls_set_device_offload_rx: netdev not found [ 155.067905][T11893] program syz.5.1765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.077923][T11893] random: crng reseeded on system resumption [ 155.331079][T11919] netlink: 'syz.5.1773': attribute type 2 has an invalid length. [ 155.344145][T11917] lo speed is unknown, defaulting to 1000 [ 155.420252][ T5944] Bluetooth: hci4: ISO packet too small [ 155.543346][T11941] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 155.611101][ T5944] Bluetooth: hci0: ISO packet too small [ 155.621349][T11961] __nla_validate_parse: 11 callbacks suppressed [ 155.621367][T11961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 155.723939][T11978] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1792'. [ 155.755874][T11977] dvmrp6: entered allmulticast mode [ 155.836045][T11988] : entered promiscuous mode [ 155.843103][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1797'. [ 155.867135][T11993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2548 sclass=netlink_route_socket pid=11993 comm=syz.3.1799 [ 155.871813][T11993] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1799'. [ 155.898694][ T5944] Bluetooth: hci2: ISO packet too small [ 155.927567][T12000] bond0: left allmulticast mode [ 155.929638][T12000] bond_slave_0: left allmulticast mode [ 155.931852][T12000] bond_slave_1: left allmulticast mode [ 155.934536][T12000] team0: left allmulticast mode [ 155.936754][T12000] team_slave_1: left allmulticast mode [ 155.938982][T12000] batadv0: left allmulticast mode [ 155.962944][T12000] wg2: left promiscuous mode [ 155.964581][T12000] wg2: left allmulticast mode [ 155.980308][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.986671][T12000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.065781][T12000] ip6erspan0: left promiscuous mode [ 156.071967][T12000] ip6gre1: left allmulticast mode [ 156.081481][T12000] gretap2: left promiscuous mode [ 156.085254][T12000] erspan1: left promiscuous mode [ 156.095968][T12000] vxlan1: left promiscuous mode [ 156.099748][T12000] xfrm1: left promiscuous mode [ 156.101759][T12000] xfrm1: left allmulticast mode [ 156.105494][ T6019] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.109130][ T6019] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.112888][T12004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1801'. [ 156.117860][T12010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1801'. [ 156.118149][ T6019] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.124769][ T6019] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.128948][ T6019] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.132776][ T6019] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.136202][ T6019] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.139645][ T6019] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.225166][T12019] /dev/nullb0: Can't lookup blockdev [ 156.258392][T12017] netlink: 'syz.5.1804': attribute type 1 has an invalid length. [ 156.273662][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 156.281047][T12017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.354152][T12017] bond2: (slave veth3): Enslaving as an active interface with a down link [ 156.382616][T12026] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 156.418719][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1808'. [ 156.422457][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1808'. [ 156.437030][ T5944] Bluetooth: hci2: ISO packet too small [ 156.472303][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 156.472313][ T40] audit: type=1400 audit(5299393177.207:891): avc: denied { listen } for pid=12033 comm="syz.5.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.743784][T12037] No such timeout policy "syz1" [ 156.751791][T12037] 9p filesystem being mounted at /517/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 157.098855][ T40] audit: type=1400 audit(5299393177.808:892): avc: denied { accept } for pid=12048 comm="syz.3.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.388689][T12074] netlink: 'syz.2.1823': attribute type 23 has an invalid length. [ 157.416703][T12080] netlink: 'syz.2.1823': attribute type 23 has an invalid length. [ 157.463995][ T5944] Bluetooth: hci4: unexpected event 0x04 length: 1 < 10 [ 157.582661][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 157.608239][ T40] audit: type=1400 audit(5299393178.304:893): avc: denied { bind } for pid=12093 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 157.618687][T12093] delete_channel: no stack [ 157.631601][T12096] gretap0: left allmulticast mode [ 157.633323][T12096] gretap0: left promiscuous mode [ 157.634987][T12096] bridge1: port 1(gretap0) entered disabled state [ 157.639977][T12096] bridge4: port 1(gretap0) entered blocking state [ 157.642205][T12096] bridge4: port 1(gretap0) entered disabled state [ 157.644458][T12096] gretap0: entered allmulticast mode [ 157.647142][T12096] gretap0: entered promiscuous mode [ 157.650652][T12096] veth0_to_bond: left allmulticast mode [ 157.652393][T12096] veth0_to_bond: left promiscuous mode [ 157.654210][T12096] bridge1: port 2(veth0_to_bond) entered disabled state [ 157.664884][T12096] bridge4: port 2(veth0_to_bond) entered blocking state [ 157.668347][T12096] bridge4: port 2(veth0_to_bond) entered disabled state [ 157.671435][T12096] veth0_to_bond: entered allmulticast mode [ 157.675378][T12096] veth0_to_bond: entered promiscuous mode [ 157.787064][ T40] audit: type=1400 audit(5299393178.479:894): avc: denied { map } for pid=12104 comm="syz.2.1834" path="socket:[36371]" dev="sockfs" ino=36371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 157.820054][T12106] lo speed is unknown, defaulting to 1000 [ 158.123920][ T40] audit: type=1400 audit(5299393178.809:895): avc: denied { connect } for pid=12124 comm="syz.2.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.133027][T12125] openvswitch: netlink: IP tunnel dst address not specified [ 158.136629][T12125] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 158.152754][ T40] audit: type=1400 audit(5299393178.838:896): avc: denied { ioctl } for pid=12124 comm="syz.2.1839" path="socket:[36386]" dev="sockfs" ino=36386 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.279187][T12141] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1028 sclass=netlink_tcpdiag_socket pid=12141 comm=syz.1.1845 [ 158.286022][T12141] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 158.296182][T12141] cramfs: wrong magic [ 158.368159][T12161] netlink: 'syz.5.1852': attribute type 11 has an invalid length. [ 158.643214][ T5944] Bluetooth: hci0: unexpected event for opcode 0x200b [ 158.649355][ T40] audit: type=1400 audit(5299393179.315:897): avc: denied { getopt } for pid=12206 comm="syz.2.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 158.680925][T12212] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 158.697235][T12215] Invalid ELF header type: 0 != 1 [ 158.698845][ T40] audit: type=1400 audit(5299393179.364:898): avc: denied { module_load } for pid=12197 comm="syz.3.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 158.708216][T12215] ip6gretap1: entered allmulticast mode [ 158.728162][ T40] audit: type=1400 audit(5299393179.393:899): avc: denied { validate_trans } for pid=12216 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.763893][ T40] audit: type=1400 audit(5299393179.422:900): avc: denied { getopt } for pid=12225 comm="syz.5.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.783559][T12197] Process accounting resumed [ 158.796409][T12229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.801744][T12232] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 158.841335][T12239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12239 comm=syz.1.1875 [ 159.271147][T12304] x_tables: ip_tables: MASQUERADE target: only valid in nat table, not trans=virtio,noxattr, [ 159.323334][T12314] /dev/nullb0: Can't lookup blockdev [ 159.485076][T12340] smc: adding net device bond0 with user defined pnetid SYZ2 [ 159.571602][T12359] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 159.576016][T12360] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 159.614136][T12367] nfs4: Unknown parameter 'pJ' [ 159.616263][ T5944] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 159.767107][ T5944] Bluetooth: hci3: ISO packet too small [ 159.768221][T12396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12396 comm=syz.5.1904 [ 159.814878][T12407] syzkaller0: entered promiscuous mode [ 159.817217][T12407] syzkaller0: entered allmulticast mode [ 160.258769][ T5944] Bluetooth: hci0: ISO packet too small [ 160.309853][T12427] netlink: 'syz.2.1914': attribute type 7 has an invalid length. [ 160.312214][T12427] netlink: 'syz.2.1914': attribute type 8 has an invalid length. [ 160.391726][T12433] sz1: rxe_newlink: already configured on lo [ 160.431496][ T5944] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 160.646971][T12461] netlink: 'syz.2.1925': attribute type 30 has an invalid length. [ 160.661849][T12461] bond4: option arp_missed_max: invalid value (0) [ 160.663955][T12461] bond4: option arp_missed_max: allowed values 1 - 255 [ 160.670099][T12461] bond4 (unregistering): Released all slaves [ 160.702077][T12464] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12464 comm=syz.2.1925 [ 160.812469][ T5944] Bluetooth: hci2: ISO packet too small [ 161.140548][T12491] netlink: 'syz.5.1935': attribute type 1 has an invalid length. [ 161.142824][T12491] __nla_validate_parse: 21 callbacks suppressed [ 161.142832][T12491] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1935'. [ 161.149650][T12491] overlay: Unknown parameter 'smackfsdef' [ 161.244196][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1936'. [ 161.430379][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1938'. [ 161.433389][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1938'. [ 161.481965][T12506] fuse: Unknown parameter 'Nd' [ 161.492077][T12506] devpts: Bad value for 'max' [ 161.526543][T12510] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 161.539968][T12510] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.552104][T12510] vlan0: entered promiscuous mode [ 161.554372][T12510] bond6: entered promiscuous mode [ 161.576180][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 161.612416][T12510] gretap1: entered promiscuous mode [ 161.619882][T12510] bond6: (slave gretap1): making interface the new active one [ 161.625150][T12510] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 161.697728][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 161.697743][ T40] audit: type=1400 audit(5299393182.272:905): avc: denied { create } for pid=12517 comm="syz.1.1944" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 161.816391][T12525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12525 comm=syz.3.1947 [ 161.865510][T12531] bond0: entered promiscuous mode [ 161.867998][T12531] batadv0: entered promiscuous mode [ 161.870708][T12531] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 161.874813][T12531] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 161.878391][T12531] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.882468][T12531] bond0: left promiscuous mode [ 161.884444][T12531] batadv0: left promiscuous mode [ 161.910505][T12533] binder: 12532:12533 ioctl 80049367 200000000100 returned -22 [ 162.064970][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1953'. [ 162.110316][T12539] tmpfs: Bad value for 'mpol' [ 162.115228][ T5944] Bluetooth: hci2: ISO packet too small [ 162.247010][T12556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=12556 comm=syz.1.1956 [ 162.393841][T12572] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.476156][T12587] rdma_rxe: rxe_newlink: failed to add lo [ 162.509838][T12593] Cannot find set identified by id 65534 to match [ 162.513833][T12593] SELinux: security policydb version 17 (MLS) not backwards compatible [ 162.517000][T12593] SELinux: failed to load policy [ 162.570781][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 162.665419][T12593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.669897][T12593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.672477][T12593] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.680279][T12593] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.685182][T12593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.687886][T12593] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.721484][T12593] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.724118][T12593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.726078][T12593] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.730569][T12593] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 162.930997][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 162.935129][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 162.939280][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 163.000291][ T40] audit: type=1400 audit(5299393183.564:906): avc: denied { read } for pid=12633 comm="syz.1.1979" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.002918][T12634] loop4: detected capacity change from 0 to 2560 [ 163.009665][ T40] audit: type=1400 audit(5299393183.564:907): avc: denied { open } for pid=12633 comm="syz.1.1979" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.009708][ T40] audit: type=1400 audit(5299393183.564:908): avc: denied { ioctl } for pid=12633 comm="syz.1.1979" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 163.041298][T12634] openvswitch: netlink: IP tunnel dst address not specified [ 163.044133][ T7149] buffer_io_error: 28 callbacks suppressed [ 163.044146][ T7149] Buffer I/O error on dev loop4, logical block 0, async page read [ 163.057451][T12634] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 163.060964][T12634] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 163.064422][T12634] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 163.067960][T12634] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 163.071395][T12634] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 163.074838][T12634] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 163.080678][T12634] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 163.083843][T12636] netlink: 'syz.5.1980': attribute type 12 has an invalid length. [ 163.084097][T12634] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 163.090263][T12634] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 163.091552][T12636] input: syz0 as /devices/virtual/input/input14 [ 163.291502][T12649] Invalid logical block size (1) [ 163.366216][T12663] netlink: 'syz.1.1988': attribute type 29 has an invalid length. [ 163.369942][T12663] comedi comedi2: comedi_config --init_data is deprecated [ 163.373239][T12663] netlink: 'syz.1.1988': attribute type 29 has an invalid length. [ 163.414485][T12672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43302 sclass=netlink_route_socket pid=12672 comm=syz.1.1991 [ 163.443899][ T40] audit: type=1400 audit(5299393183.995:909): avc: denied { setattr } for pid=12679 comm="syz.1.1994" name="nbd1" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.504853][ T64] Bluetooth: hci2: ISO packet too small [ 163.521970][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 163.598106][ T40] audit: type=1400 audit(5299393184.152:910): avc: denied { prog_load } for pid=12701 comm="syz.2.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.604146][ T40] audit: type=1400 audit(5299393184.152:911): avc: denied { bpf } for pid=12701 comm="syz.2.2002" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.617455][ T40] audit: type=1400 audit(5299393184.152:912): avc: denied { perfmon } for pid=12701 comm="syz.2.2002" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 163.640218][ T40] audit: type=1400 audit(5299393184.171:913): avc: denied { read write } for pid=5930 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.647590][ T40] audit: type=1400 audit(5299393184.171:914): avc: denied { open } for pid=5930 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.656180][T12713] batman_adv: batadv0: Adding interface: gretap2 [ 163.658806][T12713] batman_adv: batadv0: Interface activated: gretap2 [ 163.662161][T12713] futex_wake_op: syz.1.2004 tries to shift op by 32; fix this program [ 163.683808][T12714] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 163.686697][T12714] UDF-fs: Scanning with blocksize 2048 failed [ 163.690298][T12714] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 163.692874][T12714] UDF-fs: Scanning with blocksize 4096 failed [ 163.768300][T12735] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 163.802656][T12739] overlayfs: failed to clone upperpath [ 163.808409][T12739] 9p: Bad value for 'rfdno' [ 163.826498][T12739] overlay: ./bus is not a directory [ 164.514464][T12799] netlink: 'syz.5.2026': attribute type 9 has an invalid length. [ 164.520487][T12800] netlink: 'syz.5.2026': attribute type 9 has an invalid length. [ 164.730021][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.730054][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.810116][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.140074][T12867] x_tables: duplicate underflow at hook 3 [ 165.160812][T12872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12872 comm=syz.1.2040 [ 165.182889][T12872] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.190133][T12872] bond7: (slave lo): speed changed to 0 on port 1 [ 165.193079][T12872] bond7: (slave lo): Enslaving as a backup interface with an up link [ 165.199316][T12872] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 165.277785][T12884] rdma_op ffff8880558a89f0 conn xmit_rdma 0000000000000000 [ 165.280626][ T5944] Bluetooth: hci0: ISO packet too small [ 165.372537][T12894] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.374803][T12894] overlayfs: failed to set xattr on upper [ 165.376667][T12894] overlayfs: ...falling back to redirect_dir=nofollow. [ 165.379389][T12894] overlayfs: ...falling back to index=off. [ 165.381670][T12894] overlayfs: ...falling back to uuid=null. [ 165.385929][T12894] overlayfs: cleanup of 'bus/work' failed (-13) [ 165.388095][T12896] 8021q: adding VLAN 0 to HW filter on device bond8 [ 165.390034][T12894] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 165.394735][T12896] bond0: (slave bond8): Enslaving as an active interface with an up link [ 165.395544][T12894] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.403324][T12894] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 165.498323][T12908] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 166.092413][ T5996] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 166.225747][ T5998] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 166.265361][ T5996] usb 10-1: Using ep0 maxpacket: 32 [ 166.268350][ T5996] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.271873][ T5996] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.274949][ T5996] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.278161][ T5996] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.282136][ T5996] usb 10-1: config 0 descriptor?? [ 166.377104][ T5998] usb 6-1: Using ep0 maxpacket: 16 [ 166.380040][ T5998] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 166.383105][ T5998] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 166.386576][ T5998] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 166.391486][ T5998] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.400920][ T5998] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 166.404469][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.411624][ T5998] usb 6-1: Product: syz [ 166.413001][ T5998] usb 6-1: Manufacturer: syz [ 166.414610][ T5998] usb 6-1: SerialNumber: syz [ 166.417452][ T5998] usb 6-1: config 0 descriptor?? [ 166.497478][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.502830][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.506346][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.512233][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.515857][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.547681][T12961] lo speed is unknown, defaulting to 1000 [ 166.624494][ T5998] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input15 [ 166.737593][ T5996] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 166.758277][T12961] chnl_net:caif_netlink_parms(): no params data found [ 166.823422][ T40] kauditd_printk_skb: 212 callbacks suppressed [ 166.823432][ T40] audit: type=1400 audit(5299393187.322:1127): avc: denied { read append } for pid=12928 comm="syz.1.2069" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 166.834754][ T40] audit: type=1400 audit(5299393187.322:1128): avc: denied { open } for pid=12928 comm="syz.1.2069" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 166.837233][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.841933][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.842060][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.842167][T12961] bridge_slave_0: entered allmulticast mode [ 166.842404][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.843477][T12961] bridge_slave_0: entered promiscuous mode [ 166.845641][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.861665][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.864804][T12961] bridge_slave_1: entered allmulticast mode [ 166.869152][T12961] bridge_slave_1: entered promiscuous mode [ 166.884410][ T5996] usb 6-1: USB disconnect, device number 19 [ 166.912824][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.917025][ T5944] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.919049][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.942212][T12961] team0: Port device team_slave_0 added [ 166.946700][T12961] team0: Port device team_slave_1 added [ 166.969382][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.972250][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.982724][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.988696][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.988816][T12925] netlink: 'syz.5.2067': attribute type 4 has an invalid length. [ 166.991510][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.994779][T12925] __nla_validate_parse: 5 callbacks suppressed [ 166.994792][T12925] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2067'. [ 167.004598][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.024305][ T6022] usb 10-1: USB disconnect, device number 3 [ 167.030115][T12961] hsr_slave_0: entered promiscuous mode [ 167.032404][T12961] hsr_slave_1: entered promiscuous mode [ 167.034552][T12961] debugfs: 'hsr0' already exists in 'hsr' [ 167.036341][T12961] Cannot create hsr debugfs directory [ 167.395739][T12961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 167.402459][T12961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 167.408322][T12961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 167.414475][T12961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.417271][ T40] audit: type=1400 audit(5299393187.911:1129): avc: denied { create } for pid=12984 comm="syz.1.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.443198][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.446265][T12961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.449639][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.452646][T12961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.502195][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.514688][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.518359][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.524527][ T40] audit: type=1400 audit(5299393188.021:1130): avc: denied { create } for pid=12995 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 167.532039][ T40] audit: type=1400 audit(5299393188.031:1131): avc: denied { listen } for pid=12995 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.542265][ T40] audit: type=1400 audit(5299393188.031:1132): avc: denied { setopt } for pid=12995 comm="syz.1.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 167.545382][T12961] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.555983][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.559011][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.568579][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.571815][T10287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.580051][T12999] lo speed is unknown, defaulting to 1000 [ 167.656965][T13011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2087'. [ 167.664873][T13011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2087'. [ 167.678296][T13014] x_tables: duplicate underflow at hook 2 [ 167.684150][ T40] audit: type=1400 audit(5299393188.181:1133): avc: denied { write } for pid=13013 comm="syz.1.2090" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.751277][T12961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.824989][T12961] veth0_vlan: entered promiscuous mode [ 167.831331][T12961] veth1_vlan: entered promiscuous mode [ 167.845353][T12961] veth0_macvtap: entered promiscuous mode [ 167.850454][T12961] veth1_macvtap: entered promiscuous mode [ 167.856617][ T40] audit: type=1400 audit(5299393188.351:1134): avc: denied { name_bind } for pid=13025 comm="syz.1.2094" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 167.859365][T12961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.871137][T12961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.878577][T10287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.881382][T10287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.893493][T10287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.897213][T10287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.931153][T13029] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 167.977601][T13029] 8021q: adding VLAN 0 to HW filter on device bond9 [ 167.997322][T13029] vlan1: entered allmulticast mode [ 167.999128][T13029] veth0_to_bond: entered allmulticast mode [ 168.004772][T13029] bond9: (slave vlan1): making interface the new active one [ 168.008736][T13029] bond9: (slave vlan1): Enslaving as an active interface with an up link [ 168.056630][T10287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.060127][T10287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.080326][T10287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.083576][T10287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.094538][ T40] audit: type=1400 audit(5299393188.591:1135): avc: denied { mounton } for pid=12961 comm="syz-executor" path="/syzkaller.uVbHlO/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 168.102105][ T40] audit: type=1400 audit(5299393188.591:1136): avc: denied { mount } for pid=12961 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 168.182097][T13040] tmpfs: Invalid gid '0x00000000ffffffff' [ 168.202838][T13042] binder: 13041:13042 unknown command 0 [ 168.204639][T13042] binder: 13041:13042 ioctl c0306201 2000000005c0 returned -22 [ 168.245216][T13042] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 168.271891][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.275460][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.279053][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.281846][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.289555][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2099'. [ 168.290396][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.325910][T13049] lo speed is unknown, defaulting to 1000 [ 168.353114][T13048] uprobe: syz.2.2099:13048 failed to unregister, leaking uprobe [ 168.364700][T13054] /dev/sg0: Can't lookup blockdev [ 168.458847][T13053] /dev/sr0: Can't open blockdev [ 168.461499][T13054] gfs2: gfs2 mount does not exist [ 168.527764][T13049] chnl_net:caif_netlink_parms(): no params data found [ 168.596618][T13072] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2104'. [ 168.608574][ T64] Bluetooth: hci1: command tx timeout [ 168.610042][T10569] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.614576][T10569] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.630919][T13049] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.633547][T13049] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.635858][T13049] bridge_slave_0: entered allmulticast mode [ 168.639919][T13049] bridge_slave_0: entered promiscuous mode [ 168.643165][T13049] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.645557][T13049] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.648117][T13049] bridge_slave_1: entered allmulticast mode [ 168.650846][T13049] bridge_slave_1: entered promiscuous mode [ 168.670200][T13049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.674752][T13049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.691127][T10569] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.694935][T10569] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.702220][T13049] team0: Port device team_slave_0 added [ 168.716237][T13049] team0: Port device team_slave_1 added [ 168.731300][T13078] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2107'. [ 168.732427][T13049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.736496][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.747689][T13049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.751588][T13078] 0: renamed from hsr0 (while UP) [ 168.754758][T13078] 0: entered allmulticast mode [ 168.756359][T13078] hsr_slave_0: entered allmulticast mode [ 168.759742][T13078] hsr_slave_1: entered allmulticast mode [ 168.762651][T13078] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 168.771348][T10569] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.774645][T13082] netlink: 'syz.5.2109': attribute type 11 has an invalid length. [ 168.777209][T10569] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.783572][T13049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.785876][T13049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.794730][T13049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.797858][ T838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 168.815642][T13082] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 168.827355][T13049] hsr_slave_0: entered promiscuous mode [ 168.829990][T13049] hsr_slave_1: entered promiscuous mode [ 168.832222][T13049] debugfs: 'hsr0' already exists in 'hsr' [ 168.834100][T13049] Cannot create hsr debugfs directory [ 168.845765][T10569] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.849010][T10569] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.917984][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.961362][ T838] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.964464][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 168.973405][ T838] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.976284][ T838] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.981806][ T838] usb 7-1: Product: syz [ 168.983493][ T838] usb 7-1: Manufacturer: syz [ 168.985050][ T838] usb 7-1: SerialNumber: syz [ 168.988386][ T838] usb 7-1: config 0 descriptor?? [ 168.993065][ T838] usb 7-1: selecting invalid altsetting 0 [ 168.998170][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.085624][T13089] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 169.191836][T13093] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.194831][T13093] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 169.203240][T13093] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.205743][T13093] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 169.206149][ T838] usb 7-1: USB disconnect, device number 3 [ 169.241844][T13096] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 169.244342][T13096] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2113'. [ 169.278802][T10569] team0: Port device bridge1 removed [ 169.411848][ T5942] IPVS: starting estimator thread 0... [ 169.509965][T13097] IPVS: using max 46 ests per chain, 110400 per kthread [ 169.553566][T10569] bond1 (unregistering): Released all slaves [ 169.568205][T10569] bond2 (unregistering): Released all slaves [ 169.588794][T13099] netlink: 75 bytes leftover after parsing attributes in process `syz.1.2114'. [ 169.642185][T10569] bond3 (unregistering): Released all slaves [ 169.653005][T10569] bond4 (unregistering): Released all slaves [ 169.721743][T10569] bond5 (unregistering): Released all slaves [ 169.728135][T10569] bond6 (unregistering): Released all slaves [ 169.734377][T10569] bond7 (unregistering): Released all slaves [ 169.740590][T10569] smc: removing net device bond0 with user defined pnetid SYZ2 [ 169.744550][T10569] bond0 (unregistering): Released all slaves [ 169.868766][T10569] : left promiscuous mode [ 169.943391][T10569] IPVS: stopping backup sync thread 9357 ... [ 169.963813][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2116'. [ 169.976056][T13104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.078689][T10569] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 170.180180][T13049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.186686][T13049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.193204][T13049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.199909][T13049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.280488][T10569] hsr_slave_0: left promiscuous mode [ 170.282818][T10569] hsr_slave_1: left promiscuous mode [ 170.290245][T10569] veth1_macvtap: left promiscuous mode [ 170.292115][T10569] veth0_macvtap: left promiscuous mode [ 170.293957][T10569] veth1_vlan: left promiscuous mode [ 170.295678][T10569] veth0_vlan: left promiscuous mode [ 170.336086][T13120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2119'. [ 170.370867][ T64] Bluetooth: hci0: command tx timeout [ 170.463628][T13128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.679166][ T64] Bluetooth: hci1: command tx timeout [ 170.903819][T13049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.915521][T13049] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.939384][ T1208] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.942673][ T1208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.953807][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.956871][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.122819][T13049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.139212][T13157] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 171.155732][T13157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25881 sclass=netlink_route_socket pid=13157 comm=syz.5.2127 [ 171.164221][T13049] veth0_vlan: entered promiscuous mode [ 171.174188][T13049] veth1_vlan: entered promiscuous mode [ 171.191375][T13049] veth0_macvtap: entered promiscuous mode [ 171.200425][T13049] veth1_macvtap: entered promiscuous mode [ 171.214579][T13049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.232168][T13049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.243483][ T1208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.260051][ T1208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.262829][ T1208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.272815][T13167] gtp0: entered promiscuous mode [ 171.275356][ T1208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.286775][T13167] netlink: 'syz.5.2129': attribute type 13 has an invalid length. [ 171.318170][T10290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.321000][T10290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.337336][T10290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.339947][T10290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.524298][T13183] cgroup2: Unknown parameter 'euid' [ 171.528193][T13183] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 171.571773][T13192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13192 comm=syz.3.2138 [ 171.867698][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 171.867708][ T40] audit: type=1400 audit(5299393192.369:1168): avc: denied { ioctl } for pid=13208 comm="syz.5.2142" path="socket:[42924]" dev="sockfs" ino=42924 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.868555][ T64] Bluetooth: hci4: hardware error 0x01 [ 171.899309][T13211] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 171.911812][T13211] MINIX-fs: unable to read superblock [ 171.915694][T13213] MINIX-fs: unable to read superblock [ 171.956038][T13218] lo: entered promiscuous mode [ 172.131250][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.147466][ T40] audit: type=1400 audit(5299393192.649:1169): avc: denied { mounton } for pid=13225 comm="syz.2.2148" path="/10/file0" dev="9p" ino=72095623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.147515][T13226] overlayfs: missing 'lowerdir' [ 172.172178][ T40] audit: type=1400 audit(5299393192.679:1170): avc: denied { unmount } for pid=12961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 172.280136][ T6016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.352598][ T40] audit: type=1400 audit(5299393192.859:1171): avc: denied { associate } for pid=13230 comm="syz.2.2151" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 172.388108][ T5944] Bluetooth: hci1: ISO packet too small [ 172.439907][ T5944] Bluetooth: hci0: command tx timeout [ 172.472008][T13235] __nla_validate_parse: 1 callbacks suppressed [ 172.472024][T13235] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2153'. [ 172.478717][T13235] tipc: Invalid UDP bearer configuration [ 172.478758][T13235] tipc: Enabling of bearer rejected, failed to enable media [ 172.495084][ T40] audit: type=1400 audit(5299393192.999:1172): avc: denied { create } for pid=13236 comm="syz.1.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 172.504573][ T40] audit: type=1400 audit(5299393193.009:1173): avc: denied { ioctl } for pid=13236 comm="syz.1.2150" path="socket:[45149]" dev="sockfs" ino=45149 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 172.531976][ T40] audit: type=1400 audit(5299393193.009:1174): avc: denied { accept } for pid=13236 comm="syz.1.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 172.541474][ T40] audit: type=1400 audit(5299393193.049:1175): avc: denied { read } for pid=13239 comm="syz.1.2155" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.560193][ T40] audit: type=1400 audit(5299393193.049:1176): avc: denied { open } for pid=13239 comm="syz.1.2155" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.570338][ T40] audit: type=1400 audit(5299393193.059:1177): avc: denied { ioctl } for pid=13239 comm="syz.1.2155" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xaf78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 172.726903][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2158'. [ 172.732685][T13249] netlink: 'syz.5.2158': attribute type 11 has an invalid length. [ 172.741367][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2158'. [ 172.745165][T13249] netlink: 'syz.5.2158': attribute type 11 has an invalid length. [ 172.750312][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'. [ 172.760072][ T5944] Bluetooth: hci1: command tx timeout [ 172.810004][T13254] netlink: 'syz.5.2160': attribute type 2 has an invalid length. [ 172.812575][T13254] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2160'. [ 172.860017][ T54] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 172.874463][T13258] hugetlbfs: syz.5.2162 (13258): Using mlock ulimits for SHM_HUGETLB is obsolete [ 173.010242][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 173.013456][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 97, changing to 7 [ 173.016893][ T54] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24929, setting to 1024 [ 173.022425][ T54] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 173.025603][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.028914][ T54] usb 6-1: Product: syz [ 173.031148][ T54] usb 6-1: Manufacturer: syz [ 173.033111][ T54] usb 6-1: SerialNumber: syz [ 173.039682][ T54] usb 6-1: config 0 descriptor?? [ 173.046712][ T54] hub 6-1:0.0: bad descriptor, ignoring hub [ 173.049592][ T54] hub 6-1:0.0: probe with driver hub failed with error -5 [ 173.055536][ T54] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 173.192348][T13285] Bluetooth: MGMT ver 1.23 [ 173.496537][T13312] 9pnet_virtio: no channels available for device syz [ 173.500024][T13309] 9p filesystem being mounted at /17/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 173.702865][T13334] netlink: 'syz.5.2186': attribute type 4 has an invalid length. [ 173.721962][ T1123] sr 2:0:0:0: [sr0] tag#28 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 173.725463][ T1123] sr 2:0:0:0: [sr0] tag#28 Sense Key : Illegal Request [current] [ 173.729020][ T1123] sr 2:0:0:0: [sr0] tag#28 Add. Sense: Invalid command operation code [ 173.732374][ T1123] sr 2:0:0:0: [sr0] tag#28 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 173.735272][ T1123] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 173.739520][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.742763][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.745469][ T1123] buffer_io_error: 313 callbacks suppressed [ 173.745476][ T1123] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 173.746602][T13340] team0: No ports can be present during mode change [ 173.761677][T13341] team0: No ports can be present during mode change [ 173.767230][T13340] team0: Device is already in use. [ 173.894937][T13357] tls_set_device_offload: netdev not found [ 173.963228][T13363] program syz.2.2195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.970572][ T64] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 173.977453][T13363] mkiss: ax0: crc mode is auto. [ 173.980605][ T5995] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 174.097623][T13380] XFS (nbd3): SB validate failed with error -5. [ 174.208711][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 174.215313][T13396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2205'. [ 174.226272][T13396] erspan0: entered promiscuous mode [ 174.402677][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'. [ 174.408334][T13411] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 174.523331][ T5944] Bluetooth: hci0: command tx timeout [ 174.534764][T13419] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 174.543765][T13424] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2214'. [ 174.602960][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 174.634037][T13432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13432 comm=syz.1.2217 [ 174.842276][ T5944] Bluetooth: hci1: command tx timeout [ 175.019710][T13437] SELinux: Context is not valid (left unmapped). [ 175.338843][T13455] use of bytesused == 0 is deprecated and will be removed in the future, [ 175.343646][T13455] use the actual size instead. [ 176.172195][T13464] dlm: no local IP address has been set [ 176.174484][T13464] dlm: cannot start dlm midcomms -107 [ 176.283107][ T64] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 176.432052][T13501] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 176.451446][T13497] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.614316][T13531] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 176.755099][ T6022] usb 6-1: USB disconnect, device number 20 [ 177.092255][ T6022] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 177.244199][ T6022] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 177.248715][ T6022] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.252913][ T6022] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.256693][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.266128][T13538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.272407][ T6022] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.423385][ T40] kauditd_printk_skb: 106 callbacks suppressed [ 177.423395][ T40] audit: type=1400 audit(6892562939.666:1284): avc: denied { map } for pid=13546 comm="syz.3.2251" path="socket:[44751]" dev="sockfs" ino=44751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 177.435540][ T40] audit: type=1400 audit(6892562939.666:1285): avc: denied { setopt } for pid=13548 comm="syz.2.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.442248][ T40] audit: type=1400 audit(6892562939.666:1286): avc: denied { write } for pid=13548 comm="syz.2.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 177.455554][T13551] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.457975][T13551] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 177.460598][T13551] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.464731][T13551] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 177.549954][ T40] audit: type=1400 audit(6892562939.786:1287): avc: denied { write } for pid=13559 comm="syz.5.2255" name="dev" dev="proc" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 177.606099][ T40] audit: type=1400 audit(6892562939.846:1288): avc: denied { ioctl } for pid=13571 comm="syz.3.2258" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 177.628111][T13575] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 177.700269][ T40] audit: type=1400 audit(6892562939.936:1289): avc: denied { read append } for pid=13583 comm="syz.5.2261" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.713215][ T40] audit: type=1400 audit(6892562939.936:1290): avc: denied { open } for pid=13583 comm="syz.5.2261" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.721281][ T40] audit: type=1400 audit(6892562939.936:1291): avc: denied { ioctl } for pid=13583 comm="syz.5.2261" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 177.725417][T13584] loop6: detected capacity change from 0 to 524279808 [ 177.846065][ T40] audit: type=1400 audit(6892562940.086:1292): avc: denied { append } for pid=13583 comm="syz.5.2261" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.864251][T13538] __nla_validate_parse: 4 callbacks suppressed [ 177.864322][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2248'. [ 177.903958][ T6014] usb 6-1: USB disconnect, device number 21 [ 178.024057][ T40] audit: type=1400 audit(6892562940.266:1293): avc: denied { write } for pid=13589 comm="syz.1.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.024899][T13590] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 178.196192][T13602] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 178.198793][T13601] ISOFS: Unable to identify CD-ROM format. [ 178.532898][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2270'. [ 178.552736][T13612] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.589716][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2270'. [ 178.688879][T13633] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 178.694649][T13633] VFS: Can't find a romfs filesystem on dev nullb0. [ 178.694649][T13633] [ 178.699216][T13633] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 178.714219][T13633] veth0_vlan: left promiscuous mode [ 178.716952][T13633] veth0_vlan: entered promiscuous mode [ 178.720949][T13633] team0: Device veth0_vlan failed to register rx_handler [ 178.728658][T13633] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 178.740570][T13633] veth0_vlan: left promiscuous mode [ 178.743914][T13633] veth0_vlan: entered promiscuous mode [ 178.749515][T13633] team0: Device veth0_vlan failed to register rx_handler [ 178.797541][T13639] sit0: entered promiscuous mode [ 178.805648][T13639] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 178.809015][T13639] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2280'. [ 179.062433][T13666] netlink: 26 bytes leftover after parsing attributes in process `syz.5.2288'. [ 179.101851][T13677] ufs: You didn't specify the type of your ufs filesystem [ 179.101851][T13677] [ 179.101851][T13677] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 179.101851][T13677] [ 179.101851][T13677] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 179.115761][T13677] ufs: failed to set blocksize [ 179.116317][T13679] xt_l2tp: invalid flags combination: 8 [ 179.120983][T13677] ufs: You didn't specify the type of your ufs filesystem [ 179.120983][T13677] [ 179.120983][T13677] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 179.120983][T13677] [ 179.120983][T13677] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 179.131262][T13677] ufs: failed to set blocksize [ 179.271462][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2296'. [ 179.316219][T13694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13694 comm=syz.5.2296 [ 179.329960][T13694] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 179.498204][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2301'. [ 179.543290][ T6014] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 179.693346][ T6014] usb 7-1: Using ep0 maxpacket: 16 [ 179.697001][ T6014] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.701242][ T6014] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 179.708232][ T6014] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 179.712775][ T6014] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.717280][T13716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2305'. [ 179.723437][ T6014] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 179.727211][ T6014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.730505][ T6014] usb 7-1: Product: syz [ 179.732260][ T6014] usb 7-1: Manufacturer: syz [ 179.735375][ T6014] usb 7-1: SerialNumber: syz [ 179.739572][ T6014] usb 7-1: config 0 descriptor?? [ 179.862603][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2308'. [ 179.927255][T13732] netlink: 'syz.5.2309': attribute type 1 has an invalid length. [ 179.932466][T13731] netlink: 'syz.5.2309': attribute type 1 has an invalid length. [ 179.979517][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2311'. [ 179.983594][T13735] loop6: detected capacity change from 0 to 524287999 [ 180.014954][ T6014] usb 7-1: Can not set alternate setting to 1, error: -71 [ 180.017292][ T6014] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 180.027868][ T6014] usb 7-1: USB disconnect, device number 4 [ 180.287092][T13750] ntfs3(nullb0): Primary boot signature is not NTFS. [ 180.289963][T13750] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 180.294737][T13750] IPv6: addrconf: prefix option has invalid lifetime [ 180.336139][T13753] bridge_slave_1: default FDB implementation only supports local addresses [ 180.340619][T13754] xt_connbytes: Forcing CT accounting to be enabled [ 180.343743][T13754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.347827][T13753] i2c i2c-1: Invalid block write size 34 [ 180.784188][ T6022] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 180.847449][ T6014] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.896109][T13776] hpfs: Bad magic ... probably not HPFS [ 180.898935][T13779] hpfs: Bad magic ... probably not HPFS [ 180.951720][ T6022] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 180.956685][ T6022] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 180.959749][ T6022] usb 10-1: Product: syz [ 180.961528][ T6022] usb 10-1: Manufacturer: syz [ 180.963505][ T6022] usb 10-1: SerialNumber: syz [ 180.971773][ T6022] usb 10-1: config 0 descriptor?? [ 180.981645][ T6022] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 180.987588][ T6022] dvb-usb: bulk message failed: -22 (2/0) [ 180.994251][ T6022] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.000743][ T6022] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 181.003315][ T6022] usb 10-1: media controller created [ 181.011808][ T6022] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.090571][T13790] netlink: 'syz.3.2326': attribute type 7 has an invalid length. [ 181.093118][T13790] netlink: 'syz.3.2326': attribute type 8 has an invalid length. [ 181.189190][T13766] cxusb: i2c rd: len=4096 is too big! [ 181.189190][T13766] [ 181.381108][T13808] 9pnet_fd: Insufficient options for proto=fd [ 181.484860][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.962182][T13823] MINIX-fs: blocksize too small for device [ 182.469160][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 182.469299][ T40] audit: type=1400 audit(6892562944.703:1315): avc: denied { ioctl } for pid=13832 comm="syz.1.2338" path="socket:[47798]" dev="sockfs" ino=47798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.506885][ T6022] cxusb: set interface failed [ 183.508739][ T6022] dvb-usb: bulk message failed: -22 (1/0) [ 183.536529][ T6022] DVB: Unable to find symbol mt352_attach() [ 183.539096][ T6022] dvb-usb: bulk message failed: -22 (5/0) [ 183.541439][ T6022] zl10353_read_register: readreg error (reg=127, ret==-121) [ 183.544854][ T6022] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 183.605526][ T6022] rc_core: IR keymap rc-dvico-mce not found [ 183.608145][ T6022] Registered IR keymap rc-empty [ 183.617662][ T6022] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 183.631466][ T6022] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input17 [ 183.637933][ T6022] dvb-usb: schedule remote query interval to 100 msecs. [ 183.640850][ T6022] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 183.649976][ T6022] usb 10-1: USB disconnect, device number 5 [ 183.689276][ T40] audit: type=1400 audit(6892562945.923:1316): avc: denied { getattr } for pid=13847 comm="syz.5.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.704572][ T40] audit: type=1400 audit(6892562945.923:1317): avc: denied { ioctl } for pid=13847 comm="syz.5.2342" path="socket:[47813]" dev="sockfs" ino=47813 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.720109][ T6022] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 184.502796][ T40] audit: type=1800 audit(6892562946.732:1318): pid=13888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2352" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 184.507066][T13893] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 184.510112][ T40] audit: type=1400 audit(6892562946.742:1319): avc: denied { write } for pid=13891 comm="syz.2.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.536986][ T40] audit: type=1400 audit(6892562946.772:1320): avc: denied { setopt } for pid=13895 comm="syz.5.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 184.551808][ T40] audit: type=1400 audit(6892562946.782:1321): avc: denied { getopt } for pid=13895 comm="syz.5.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.654080][ T40] audit: type=1400 audit(6892562946.882:1322): avc: denied { lock } for pid=13911 comm="syz.1.2361" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 184.655094][T13912] /dev/sg0: Can't lookup blockdev [ 184.711415][ T40] audit: type=1400 audit(6892562946.942:1323): avc: denied { write } for pid=13917 comm="syz.2.2365" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 184.723186][ T40] audit: type=1400 audit(6892562946.942:1324): avc: denied { open } for pid=13917 comm="syz.2.2365" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 184.810032][T13936] __nla_validate_parse: 2 callbacks suppressed [ 184.810044][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2369'. [ 184.811062][T13937] ufs: You didn't specify the type of your ufs filesystem [ 184.811062][T13937] [ 184.811062][T13937] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 184.811062][T13937] [ 184.811062][T13937] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 184.815676][T13936] bridge0: entered promiscuous mode [ 184.817975][T13937] ufs: failed to set blocksize [ 184.827601][T13936] macsec1: entered allmulticast mode [ 184.831339][T13936] bridge0: entered allmulticast mode [ 184.833876][T13936] bridge0: port 3(macsec1) entered blocking state [ 184.836169][T13936] bridge0: port 3(macsec1) entered disabled state [ 184.841304][T13936] bridge0: left allmulticast mode [ 184.843792][T13936] bridge0: left promiscuous mode [ 184.859892][T13932] netem: incorrect gi model size [ 184.862522][T13932] netem: change failed [ 184.954763][T13947] netlink: 'syz.1.2374': attribute type 10 has an invalid length. [ 184.962641][T13947] nvme_fabrics: missing parameter 'transport=%s' [ 184.965466][T13947] nvme_fabrics: missing parameter 'nqn=%s' [ 185.003335][T13952] netlink: 'syz.1.2375': attribute type 5 has an invalid length. [ 185.072696][T13956] Bluetooth: MGMT ver 1.23 [ 185.151069][T13966] trusted_key: encrypted_key: insufficient parameters specified [ 185.376332][ T6014] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 185.466288][ T6045] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 185.495219][T13989] tmpfs: Bad value for 'mpol' [ 185.536389][ T6014] usb 7-1: Using ep0 maxpacket: 8 [ 185.540248][ T6014] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 185.543651][ T6014] usb 7-1: config 0 has no interface number 0 [ 185.546510][ T6014] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.551055][ T6014] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 185.555920][ T6014] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.562133][ T6014] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.568002][ T6014] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 185.571917][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.584711][ T6014] usb 7-1: config 0 descriptor?? [ 185.594205][ T6014] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 185.616318][ T6045] usb 10-1: Using ep0 maxpacket: 16 [ 185.623146][ T6045] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 185.626854][ T6045] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9 [ 185.631597][ T6045] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024 [ 185.636136][ T6045] usb 10-1: config 0 interface 0 has no altsetting 0 [ 185.642919][ T6045] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 185.646750][ T6045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.649558][ T6045] usb 10-1: Product: syz [ 185.650913][ T6045] usb 10-1: Manufacturer: syz [ 185.652998][ T6045] usb 10-1: SerialNumber: syz [ 185.656774][ T6045] usb 10-1: config 0 descriptor?? [ 185.869651][ T6045] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input18 [ 186.146080][ T6014] usb 10-1: USB disconnect, device number 6 [ 186.243707][T14014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14014 comm=syz.3.2397 [ 186.307179][T14017] lo speed is unknown, defaulting to 1000 [ 186.366846][ T5996] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 186.539059][ T5996] usb 6-1: config 7 has an invalid interface number: 131 but max is 2 [ 186.541864][ T5996] usb 6-1: config 7 has an invalid interface number: 216 but max is 2 [ 186.544565][ T5996] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 186.548247][ T5996] usb 6-1: config 7 has an invalid descriptor of length 162, skipping remainder of the config [ 186.551520][ T5996] usb 6-1: config 7 has 2 interfaces, different from the descriptor's value: 3 [ 186.554431][ T5996] usb 6-1: config 7 has no interface number 0 [ 186.556498][ T5996] usb 6-1: config 7 has no interface number 1 [ 186.559038][ T5996] usb 6-1: config 7 interface 131 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 16 [ 186.562814][ T5996] usb 6-1: config 7 interface 131 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 186.566220][ T5996] usb 6-1: config 7 interface 131 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 186.571471][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0x7 has an invalid bInterval 66, changing to 7 [ 186.575157][ T5996] usb 6-1: config 7 interface 131 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 186.579297][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 186.583113][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 186.587230][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 186.590926][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 186.594490][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 186.598310][ T5996] usb 6-1: config 7 interface 131 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 186.601871][ T5996] usb 6-1: config 7 interface 131 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 186.605419][ T5996] usb 6-1: config 7 interface 216 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 186.610334][ T5996] usb 6-1: config 7 interface 131 has no altsetting 0 [ 186.612490][ T5996] usb 6-1: config 7 interface 216 has no altsetting 0 [ 186.616872][ T5996] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0117, bcdDevice=1a.a2 [ 186.618904][T14021] /dev/sg0: Can't lookup blockdev [ 186.619786][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.624005][ T5996] usb 6-1: Product: syz [ 186.625445][ T5996] usb 6-1: Manufacturer: Н [ 186.627026][ T5996] usb 6-1: SerialNumber: syz [ 186.632205][T14008] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.635370][T14008] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.691760][T14024] netlink: 'syz.5.2400': attribute type 10 has an invalid length. [ 186.699929][T14024] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 186.703702][T14024] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 186.709378][T14024] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 186.825430][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 186.828334][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 186.828956][T14031] lo speed is unknown, defaulting to 1000 [ 186.831386][T14034] netlink: 'syz.5.2403': attribute type 20 has an invalid length. [ 186.836087][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 186.839010][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2403'. [ 186.841808][T14034] netlink: 'syz.5.2403': attribute type 20 has an invalid length. [ 186.848399][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.852043][T14008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=14008 comm=syz.1.2394 [ 186.853426][T14034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64789 sclass=netlink_route_socket pid=14034 comm=syz.5.2403 [ 186.895505][ T5996] ftdi_sio 6-1:7.131: FTDI USB Serial Device converter detected [ 186.901239][ T5996] ftdi_sio ttyUSB0: unknown device type: 0x1aa2 [ 186.916133][ T5996] ftdi_sio 6-1:7.216: FTDI USB Serial Device converter detected [ 186.920168][ T5996] ftdi_sio ttyUSB1: unknown device type: 0x1aa2 [ 186.926354][ T5996] usb 6-1: USB disconnect, device number 22 [ 186.937727][ T5996] ftdi_sio 6-1:7.131: device disconnected [ 186.952627][ T5996] ftdi_sio 6-1:7.216: device disconnected [ 187.003009][T14032] lo speed is unknown, defaulting to 1000 [ 187.257533][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.556971][T14060] devpts: Unknown parameter '\ ׄ><}/ʶ*I`4+t"Jd39' [ 187.697773][ T5996] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 187.849676][ C1] ------------[ cut here ]------------ [ 187.852771][ C1] WARNING: net/mptcp/subflow.c:1527 at subflow_data_ready+0x40b/0x790, CPU#1: kworker/u32:10/6019 [ 187.856118][ C1] Modules linked in: [ 187.857994][ C1] CPU: 1 UID: 0 PID: 6019 Comm: kworker/u32:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.861651][ C1] Tainted: [L]=SOFTLOCKUP [ 187.863097][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 187.866458][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 187.867456][ T5996] usb 6-1: Using ep0 maxpacket: 8 [ 187.868245][ C1] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 187.871703][ C1] Code: 89 ee e8 78 37 5b f6 40 84 ed 75 21 e8 2e 3d 5b f6 44 89 fe bf 07 00 00 00 e8 c1 37 5b f6 41 83 ff 07 74 09 e8 16 3d 5b f6 90 <0f> 0b 90 e8 0d 3d 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 187.872740][ T5996] usb 6-1: config 16 has an invalid interface number: 65 but max is 0 [ 187.877747][ C1] RSP: 0018:ffffc900006a0588 EFLAGS: 00010246 [ 187.877760][ C1] RAX: 0000000000000000 RBX: ffff888039b40000 RCX: ffffffff8b63a96f [ 187.877768][ C1] RDX: ffff888027dc8000 RSI: ffffffff8b63a97a RDI: 0000000000000005 [ 187.877774][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 187.877781][ C1] R10: 0000000000000008 R11: 0000000000000000 R12: ffff888057d17080 [ 187.877787][ C1] R13: 1ffff920000d40b1 R14: ffff88802a018000 R15: 0000000000000008 [ 187.877794][ C1] FS: 0000000000000000(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 187.877815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.880632][ T5996] usb 6-1: config 16 has an invalid interface descriptor of length 2, skipping [ 187.882191][ C1] CR2: 00007fef892a9f98 CR3: 00000000132a0000 CR4: 0000000000352ef0 [ 187.882201][ C1] Call Trace: [ 187.882206][ C1] [ 187.882212][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 187.882229][ C1] ? __pfx_subflow_sched_work_if_closed+0x10/0x10 [ 187.882249][ C1] tcp_data_ready+0x114/0x5a0 [ 187.884882][ T5996] usb 6-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 187.887285][ C1] ? tcp_fin+0x3b7/0x500 [ 187.887305][ C1] tcp_data_queue+0x1ac2/0x4ff0 [ 187.887370][ C1] ? tcp_urg+0x10f/0xb80 [ 187.887385][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 187.887808][T10569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.890005][ T5996] usb 6-1: config 16 has no interface number 0 [ 187.892387][ C1] ? tcp_try_undo_loss+0x7b0/0x860 [ 187.892408][ C1] tcp_rcv_established+0xa7f/0x36e0 [ 187.892425][ C1] ? sk_filter_trim_cap+0x11a/0xde0 [ 187.892440][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 187.892455][ C1] ? lock_acquire+0x179/0x330 [ 187.892470][ C1] tcp_v6_do_rcv+0x11cd/0x1dc0 [ 187.895096][ T5996] usb 6-1: config 16 interface 65 altsetting 27 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 187.897817][ C1] tcp_v6_rcv+0x2ab5/0x48f0 [ 187.897843][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 187.897857][ C1] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 187.897879][ C1] ? __pfx_raw6_local_deliver+0x10/0x10 [ 187.897892][ C1] ? find_held_lock+0x2b/0x80 [ 187.900097][ T5996] usb 6-1: config 16 interface 65 has no altsetting 0 [ 187.903498][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 187.903526][ C1] ip6_protocol_deliver_rcu+0x188/0x1520 [ 187.903559][ C1] ip6_input_finish+0x1e4/0x4b0 [ 187.909894][ T5996] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030c, bcdDevice=f6.7d [ 187.910443][ C1] ip6_input+0x105/0x2f0 [ 187.910458][ C1] ipv6_rcv+0x264/0x650 [ 187.910468][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 187.910477][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 187.910494][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 187.912684][ T5996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.914103][ C1] ? lock_acquire+0x179/0x330 [ 187.914122][ C1] ? process_backlog+0x450/0x1650 [ 187.914136][ C1] __netif_receive_skb+0x1d/0x160 [ 187.914152][ C1] process_backlog+0x4a2/0x1650 [ 187.917562][ T5996] usb 6-1: Product: 霙墠䱫檈꿌뉿॓㗲ᔏ€ṷ̋ⴼ⮞⹁悚 [ 187.918768][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 187.918795][ C1] net_rx_action+0x9f9/0xfa0 [ 187.920443][ T5996] usb 6-1: Manufacturer: 㷝ꄻ䯓㤤쁫궾ɰꠥ컍팺尮ᬊ옕櫕䒌㌖待೔苮ꂽꛆﻨ䏯귇䮔儵ꢴ鬴䆠쁹⿁큎䓮ଈ㤪Ⓘ㊍鮕쫳묊 [ 187.921714][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 187.921733][ C1] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 187.921748][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 187.921762][ C1] ? sched_clock+0x38/0x60 [ 187.921772][ C1] ? sched_clock_cpu+0x6c/0x530 [ 187.923451][ T5996] usb 6-1: SerialNumber: ࡠ [ 187.926691][ C1] ? mark_held_locks+0x49/0x80 [ 187.926710][ C1] handle_softirqs+0x219/0x950 [ 187.926728][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 187.926743][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 188.002796][ C1] ? __dev_queue_xmit+0x782/0x4650 [ 188.004416][ C1] do_softirq+0xb2/0xf0 [ 188.005794][ C1] [ 188.006776][ C1] [ 188.007776][ C1] __local_bh_enable_ip+0x100/0x120 [ 188.009532][ C1] ? __dev_queue_xmit+0x782/0x4650 [ 188.011259][ C1] __dev_queue_xmit+0x797/0x4650 [ 188.012848][ C1] ? selinux_ip_postroute+0x739/0xdd0 [ 188.014560][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 188.016277][ C1] ? __lock_acquire+0x436/0x2890 [ 188.017916][ C1] ip6_finish_output2+0x1184/0x1cf0 [ 188.019597][ C1] __ip6_finish_output+0x3cd/0x1010 [ 188.021261][ C1] ip6_output+0x253/0x710 [ 188.022634][ C1] ip6_xmit+0x1512/0x23f0 [ 188.024010][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 188.025552][ C1] ? __sk_dst_check+0x120/0x350 [ 188.027171][ C1] inet6_csk_xmit+0x444/0x7f0 [ 188.028790][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 188.030683][ C1] ? csum_ipv6_magic+0x299/0x320 [ 188.032728][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 188.034746][ C1] __tcp_transmit_skb+0x1d67/0x48b0 [ 188.036353][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 188.037978][ C1] ? ktime_get+0x200/0x310 [ 188.039328][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.040769][ C1] tcp_write_xmit+0x12aa/0x8710 [ 188.042304][ C1] __tcp_push_pending_frames+0xaf/0x3c0 [ 188.044035][ C1] tcp_send_fin+0x11f/0x10e0 [ 188.045877][ C1] __tcp_close+0xa46/0x1120 [ 188.047748][ C1] tcp_close+0x28/0x120 [ 188.049227][ C1] inet_release+0xed/0x200 [ 188.050644][ C1] inet6_release+0x4f/0x70 [ 188.052067][ C1] sock_release+0x91/0x1d0 [ 188.053497][ C1] rds_tcp_accept_one+0x31c/0xac0 [ 188.055077][ C1] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 188.057182][ C1] rds_tcp_accept_worker+0x59/0x80 [ 188.059434][ C1] process_one_work+0x9ba/0x1b20 [ 188.061468][ C1] ? __pfx_process_one_work+0x10/0x10 [ 188.063363][ C1] ? assign_work+0x1a0/0x250 [ 188.064829][ C1] worker_thread+0x6c8/0xf10 [ 188.066383][ C1] ? __kthread_parkme+0x19e/0x250 [ 188.068088][ C1] ? __pfx_worker_thread+0x10/0x10 [ 188.069696][ C1] kthread+0x3c5/0x780 [ 188.071042][ C1] ? __pfx_kthread+0x10/0x10 [ 188.072505][ C1] ? rcu_is_watching+0x12/0xc0 [ 188.074027][ C1] ? __pfx_kthread+0x10/0x10 [ 188.075521][ C1] ret_from_fork+0x983/0xb10 [ 188.077019][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 188.079125][ C1] ? __switch_to+0x7af/0x10d0 [ 188.080862][ C1] ? __pfx_kthread+0x10/0x10 [ 188.082380][ C1] ret_from_fork_asm+0x1a/0x30 [ 188.083911][ C1] [ 188.084925][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.087182][ C1] CPU: 1 UID: 0 PID: 6019 Comm: kworker/u32:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.090901][ C1] Tainted: [L]=SOFTLOCKUP [ 188.092221][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.095458][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 188.097277][ C1] Call Trace: [ 188.098385][ C1] [ 188.099498][ C1] dump_stack_lvl+0x3d/0x1f0 [ 188.101327][ C1] vpanic+0x640/0x6f0 [ 188.102923][ C1] ? subflow_data_ready+0x40b/0x790 [ 188.104722][ C1] panic+0xca/0xd0 [ 188.105945][ C1] ? __pfx_panic+0x10/0x10 [ 188.107394][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 188.109163][ C1] check_panic_on_warn+0xab/0xb0 [ 188.110847][ C1] __warn+0x108/0x3c0 [ 188.112217][ C1] __report_bug+0x2a0/0x520 [ 188.113708][ C1] ? subflow_data_ready+0x40b/0x790 [ 188.115371][ C1] ? __pfx___report_bug+0x10/0x10 [ 188.117021][ C1] ? __smp_call_single_queue+0x161/0x2f0 [ 188.118976][ C1] ? __pfx___smp_call_single_queue+0x10/0x10 [ 188.121134][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 188.122878][ C1] ? __pfx_select_task_rq_fair+0x10/0x10 [ 188.124892][ C1] ? find_held_lock+0x2b/0x80 [ 188.126435][ C1] ? try_to_wake_up+0xa5d/0x1860 [ 188.128188][ C1] ? subflow_data_ready+0x40b/0x790 [ 188.130367][ C1] report_bug+0xb2/0x220 [ 188.132074][ C1] ? subflow_data_ready+0x40b/0x790 [ 188.134122][ C1] handle_bug+0x127/0x260 [ 188.135773][ C1] exc_invalid_op+0x17/0x50 [ 188.137257][ C1] asm_exc_invalid_op+0x1a/0x20 [ 188.138854][ C1] RIP: 0010:subflow_data_ready+0x40b/0x790 [ 188.141005][ C1] Code: 89 ee e8 78 37 5b f6 40 84 ed 75 21 e8 2e 3d 5b f6 44 89 fe bf 07 00 00 00 e8 c1 37 5b f6 41 83 ff 07 74 09 e8 16 3d 5b f6 90 <0f> 0b 90 e8 0d 3d 5b f6 48 89 df e8 f5 ac ff ff 31 ff 89 c5 89 c6 [ 188.147001][ C1] RSP: 0018:ffffc900006a0588 EFLAGS: 00010246 [ 188.149027][ C1] RAX: 0000000000000000 RBX: ffff888039b40000 RCX: ffffffff8b63a96f [ 188.151479][ C1] RDX: ffff888027dc8000 RSI: ffffffff8b63a97a RDI: 0000000000000005 [ 188.153944][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 188.156422][ C1] R10: 0000000000000008 R11: 0000000000000000 R12: ffff888057d17080 [ 188.158985][ C1] R13: 1ffff920000d40b1 R14: ffff88802a018000 R15: 0000000000000008 [ 188.161467][ C1] ? subflow_data_ready+0x3ff/0x790 [ 188.163107][ C1] ? subflow_data_ready+0x40a/0x790 [ 188.164774][ C1] ? subflow_data_ready+0x40a/0x790 [ 188.166440][ C1] ? __pfx_subflow_data_ready+0x10/0x10 [ 188.168196][ C1] ? __pfx_subflow_sched_work_if_closed+0x10/0x10 [ 188.170299][ C1] tcp_data_ready+0x114/0x5a0 [ 188.171816][ C1] ? tcp_fin+0x3b7/0x500 [ 188.173174][ C1] tcp_data_queue+0x1ac2/0x4ff0 [ 188.175130][ C1] ? tcp_urg+0x10f/0xb80 [ 188.176927][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 188.179119][ C1] ? tcp_try_undo_loss+0x7b0/0x860 [ 188.181211][ C1] tcp_rcv_established+0xa7f/0x36e0 [ 188.183392][ C1] ? sk_filter_trim_cap+0x11a/0xde0 [ 188.185601][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 188.187951][ C1] ? lock_acquire+0x179/0x330 [ 188.189966][ C1] tcp_v6_do_rcv+0x11cd/0x1dc0 [ 188.191984][ C1] tcp_v6_rcv+0x2ab5/0x48f0 [ 188.193920][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 188.195958][ C1] ? __pfx_ipvlan_skb_to_addr+0x10/0x10 [ 188.198276][ C1] ? __pfx_raw6_local_deliver+0x10/0x10 [ 188.200517][ C1] ? find_held_lock+0x2b/0x80 [ 188.202466][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 188.204515][ C1] ip6_protocol_deliver_rcu+0x188/0x1520 [ 188.206890][ C1] ip6_input_finish+0x1e4/0x4b0 [ 188.209000][ C1] ip6_input+0x105/0x2f0 [ 188.210792][ C1] ipv6_rcv+0x264/0x650 [ 188.212544][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 188.214533][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 188.217016][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 188.219711][ C1] ? lock_acquire+0x179/0x330 [ 188.221618][ C1] ? process_backlog+0x450/0x1650 [ 188.223630][ C1] __netif_receive_skb+0x1d/0x160 [ 188.225690][ C1] process_backlog+0x4a2/0x1650 [ 188.227665][ C1] __napi_poll.constprop.0+0xb3/0x540 [ 188.229825][ C1] net_rx_action+0x9f9/0xfa0 [ 188.231582][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 188.233650][ C1] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 188.236459][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 188.238687][ C1] ? sched_clock+0x38/0x60 [ 188.240430][ C1] ? sched_clock_cpu+0x6c/0x530 [ 188.242462][ C1] ? mark_held_locks+0x49/0x80 [ 188.244239][ C1] handle_softirqs+0x219/0x950 [ 188.246083][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 188.248188][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 188.250332][ C1] ? __dev_queue_xmit+0x782/0x4650 [ 188.252389][ C1] do_softirq+0xb2/0xf0 [ 188.254160][ C1] [ 188.255417][ C1] [ 188.256660][ C1] __local_bh_enable_ip+0x100/0x120 [ 188.258860][ C1] ? __dev_queue_xmit+0x782/0x4650 [ 188.261029][ C1] __dev_queue_xmit+0x797/0x4650 [ 188.263105][ C1] ? selinux_ip_postroute+0x739/0xdd0 [ 188.265375][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 188.267625][ C1] ? __lock_acquire+0x436/0x2890 [ 188.269701][ C1] ip6_finish_output2+0x1184/0x1cf0 [ 188.271857][ C1] __ip6_finish_output+0x3cd/0x1010 [ 188.274048][ C1] ip6_output+0x253/0x710 [ 188.275871][ C1] ip6_xmit+0x1512/0x23f0 [ 188.277720][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 188.279726][ C1] ? __sk_dst_check+0x120/0x350 [ 188.281812][ C1] inet6_csk_xmit+0x444/0x7f0 [ 188.283789][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 188.286002][ C1] ? csum_ipv6_magic+0x299/0x320 [ 188.288090][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 188.290320][ C1] __tcp_transmit_skb+0x1d67/0x48b0 [ 188.292519][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 188.294850][ C1] ? ktime_get+0x200/0x310 [ 188.296725][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.298952][ C1] tcp_write_xmit+0x12aa/0x8710 [ 188.301039][ C1] __tcp_push_pending_frames+0xaf/0x3c0 [ 188.303353][ C1] tcp_send_fin+0x11f/0x10e0 [ 188.305317][ C1] __tcp_close+0xa46/0x1120 [ 188.307282][ C1] tcp_close+0x28/0x120 [ 188.309048][ C1] inet_release+0xed/0x200 [ 188.310944][ C1] inet6_release+0x4f/0x70 [ 188.312828][ C1] sock_release+0x91/0x1d0 [ 188.314713][ C1] rds_tcp_accept_one+0x31c/0xac0 [ 188.316832][ C1] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 188.319157][ C1] rds_tcp_accept_worker+0x59/0x80 [ 188.321258][ C1] process_one_work+0x9ba/0x1b20 [ 188.323321][ C1] ? __pfx_process_one_work+0x10/0x10 [ 188.325562][ C1] ? assign_work+0x1a0/0x250 [ 188.327484][ C1] worker_thread+0x6c8/0xf10 [ 188.329442][ C1] ? __kthread_parkme+0x19e/0x250 [ 188.331553][ C1] ? __pfx_worker_thread+0x10/0x10 [ 188.333708][ C1] kthread+0x3c5/0x780 [ 188.335427][ C1] ? __pfx_kthread+0x10/0x10 [ 188.337390][ C1] ? rcu_is_watching+0x12/0xc0 [ 188.339410][ C1] ? __pfx_kthread+0x10/0x10 [ 188.341338][ C1] ret_from_fork+0x983/0xb10 [ 188.343206][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 188.345253][ C1] ? __switch_to+0x7af/0x10d0 [ 188.347156][ C1] ? __pfx_kthread+0x10/0x10 [ 188.349091][ C1] ret_from_fork_asm+0x1a/0x30 [ 188.351055][ C1] [ 188.353124][ C1] Kernel Offset: disabled [ 188.354852][ C1] Rebooting in 86400 seconds..