last executing test programs: 4.007586848s ago: executing program 2 (id=312): r0 = userfaultfd(0x801) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x103100, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x781}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 64) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) 3.936581598s ago: executing program 2 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090025bd7000000000000400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="76c11600d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="684ed3820285"}, 0xffffffffffffff86) 3.935266783s ago: executing program 2 (id=314): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000200)={0x0, 0x9d0, 0x5}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000600)={0x0, 0x4, 0x4, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) mkdir(&(0x7f0000000180)='./file0\x00', 0xdc) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0x10, 0x2, {0x4, @usage=0x300, r1, 0x4, 0x1, 0x6fa, 0x5, 0x100000001, 0x48, @struct={0x0, 0x5}, 0x2, 0x938e, [0x1ff, 0xc6, 0x25b1, 0x1, 0x5, 0x3]}, {0x1, @struct={0xfffffffc, 0x56b}, 0x0, 0x2000000000000, 0xffff, 0xb, 0x3, 0xfffffffffffffffa, 0x10, @struct={0xd4, 0x88}, 0x1, 0x101, [0x7a, 0x7, 0x5, 0x4, 0x6, 0xc62]}, {0x6, @struct={0x4, 0x101}, r2, 0x10000, 0xffffffffffffccf6, 0x7, 0x9, 0x2, 0x0, @usage=0xc, 0x100, 0xfa69, [0xfffffffffffffffd, 0x1ff, 0x6, 0x3, 0x2, 0x4]}, {0x1, 0x3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x208004, 0x0) 3.0064101s ago: executing program 2 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async, rerun: 32) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async, rerun: 32) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000340), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0x9362, 0x0) (async, rerun: 64) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async, rerun: 64) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x42802) (async, rerun: 64) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) (async, rerun: 32) write$sndseq(r5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f00000054c0)={0x2020}, 0x2020) 2.931901436s ago: executing program 2 (id=321): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xfc, 0x5, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7, 0x80, 0x3ff, 0xfffffff7}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0xfffffff8, 0x0}, 0x8) (async) r9 = syz_open_dev$mouse(&(0x7f0000000780), 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x13, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47e, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x2, 0xa, 0x3, 0x2, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001080)=""/4096, 0x40f00, 0x31, '\x00', r7, @sk_skb=0x26, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0x9, 0x0, 0x5}, 0x10, r8, r3, 0x8, &(0x7f00000007c0)=[r5, r4, r4, r4, r9, r4], &(0x7f0000000800)=[{0x8, 0x1, 0x7, 0x2}, {0x2, 0x4, 0x6, 0x3}, {0x0, 0x4, 0x3, 0x2}, {0x1, 0x5, 0x1, 0x9}, {0x5, 0x3, 0xd}, {0x0, 0x1, 0x0, 0x2}, {0x2, 0x3, 0xa, 0x2}, {0x2, 0x5, 0x1, 0x1}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r2, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}}, 0x404c040) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xe, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0xe, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 2.931611393s ago: executing program 2 (id=322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a9283, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6080000000140600fc000000000000000000000000000000ff020000000000000000000000000001000040010c60f61900313619814fe872209de69949f50a69c5f7699c725509fc831344c2b74dedb85ed95d9b61b54bfec22c3181e2f45565ca9707391fce9163edfdf593b2d5319e33f7689d4343e4209fb94cd6be2b7213bc557eb846d7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'batadv_slave_0\x00', {0x2, 0x4e23, @broadcast}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000005c0)={0xc0, 0x0, 0x12000}) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/63, 0x3f}], 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.000998104s ago: executing program 1 (id=355): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000240)="e02742e8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000080)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x39, 0x65]}}]}) write$P9_RREAD(r0, &(0x7f0000000280)={0x97, 0x75, 0x1, {0x8c, "4626a323e93340bc516dc53706a642f18bf34c7be1010f2a26dddf9d5406390c7c66e6b647375ed1e1f054ed60cdee0f94f5bc856be95e69314cc1e8d925534377158fff90c21732d5de4ce97c246663e5ad25fb11e80d546e508df567b7e69bcf0e2c93f1cdcf68ccdc68f07f6f715d08605ff73f54ad0a41751790d9319a06813496fbaf5aa91e240b2375"}}, 0x97) 2.000504608s ago: executing program 1 (id=356): r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x85}, "b5606ccb85193efce292bc7025b2040aa4d5bf5e0a0ed3fd39a138796dcce75dd6f206e2fdd0dd71143f7f701a19466af3f8324c3225ab60f74122cd87cbebea8a131761076039723df6a9f2085630a1fe43cbc62ef3290e8fb055cafdd311bc30b9e8eb650b4f400bca186ce321a338069679e1d13191a870449e93ac01ba6fc4d34dc377"}, 0x89) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000040)={0x18, r4, 0x1, 0x0, &(0x7f0000000100)=[{0x1d8cc00000000, 0xfffffffffffffff8}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r4, 0x0, &(0x7f0000000d40)='L', 0x1, 0x56149216}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000140)={0xc, r4}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000040)={0x18, r2, 0x1, 0x0, &(0x7f0000000100)=[{0x1d8cc00000000, 0xfffffffffffffff8}]}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000000d40)='L', 0x1, 0x56149216}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0xffffffffffffff22, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.947296333s ago: executing program 1 (id=357): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xd8d}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c050}, 0x18) 1.945298959s ago: executing program 1 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x1) close(0x3) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000002c0)=0x1) 1.870800873s ago: executing program 0 (id=361): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup\x00'}) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f00000000c0)={0x10000, 0x4, 0x401, 0x3, 0x9, 0x3, 0x9e2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x67c, 0x0}, 0x8) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000040)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='nfs4\x00', 0x208000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x6802, 0x0) r5 = socket$inet6(0x1c, 0x3, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0xfe, 0x0}, @private=0x8}, 0xc) getsockopt$inet_mreqn(r6, 0x0, 0x9, &(0x7f00000002c0)={@multicast2, @remote, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x2e, &(0x7f0000000000)={@local={0xfe, 0x80, '\x00', 0x0}, r7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 1.701437114s ago: executing program 0 (id=362): setuid(0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4048aec9, &(0x7f0000000040)={0x40000000000006, 0x0, 0xde0, 0x2000000, 0x40002}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ptrace$poke(0x4, r6, &(0x7f0000000240), 0x11) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x1, 'veth0\x00', {}, 0x8}) sendto$inet(r0, &(0x7f0000000000)="660b8fcf", 0x4, 0x24044084, 0x0, 0x0) 1.637276714s ago: executing program 0 (id=363): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @generic={0x304, 0x6005, 0x6, 0x0, 0x3, @broadcast, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}}}, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x27, 0x4, @thr={&(0x7f0000000100)="694045c03409100d458c7607d33e5bfecfc7f9382181d96cf35f62e51a4b7e1c451a8ce0da679ab2f6fc7ea25725597699a0e6a21e75723d58bbad6dca60145650af85ad7e1758320bf765756eaefbca4a16ee", &(0x7f0000000080)="5def77d96561ad67bbd583"}}, &(0x7f0000000240)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) close(0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8042, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, r2, 0x85b48000) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@arp={0x806, @generic={0x304, 0x6005, 0x6, 0x0, 0x3, @broadcast, "", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}}}}, 0x0) (async) timer_create(0x3, &(0x7f0000000180)={0x0, 0x27, 0x4, @thr={&(0x7f0000000100)="694045c03409100d458c7607d33e5bfecfc7f9382181d96cf35f62e51a4b7e1c451a8ce0da679ab2f6fc7ea25725597699a0e6a21e75723d58bbad6dca60145650af85ad7e1758320bf765756eaefbca4a16ee", &(0x7f0000000080)="5def77d96561ad67bbd583"}}, &(0x7f0000000240)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) (async) close(0x4) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8042, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000000)) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, r2, 0x85b48000) (async) 1.636526478s ago: executing program 1 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x143180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@delqdisc={0x2a4, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {0x0, 0xffe0}, {0x2, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffff3d1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffa, 0x3, 0x9, 0x6, 0x10001, 0xe7, 0x7, 0x3, 0x9}}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x228, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "5f4ddd37a779f54dbf58207ac6dfbfa6ce681adebbfcff12f488b198923eee67a844e4d742f5dc0e7f4206d4d6e36abb910b4e37f7afbcfb6fcaa6d6801ff753173b8520827811ae04cd3109fb0253bb1cc66433adf4436c86bbb2ef6805185459656fc2e11c5d68bddbd84f7b523a683c5688d1475601ec7087a13d0820d4dc20eedd4be571b04cc32a868c1c306b40b47fdc874e6f8ce71c83b72cf763833a5d94226f7a4e659a971ba59607096e1a07da65595a3eccdbb01da4bafd80099dfe4b87091e19c52249464e50a8e60d4394e99400fc2023d6db34c54b178aa949f87b0398b911b592c682d01f298ec7f08a0c62e435afa0ef3e6ddc02362301d6"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xcc}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7fffffff, 0x6, 0x9, 0xa, 0x19, 0x16, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0xfa, 0xa4}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.509016739s ago: executing program 0 (id=365): r0 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x6480, 0xb8) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x17) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff07120070000000"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (rerun: 32) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x38}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008050}, 0xc0) (async) read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020) (async, rerun: 32) syz_emit_ethernet(0x22, &(0x7f0000000400)={@local, @random="429e82311cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0x335b, @broadcast}}}}}, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r11}, 0x10) (async) r12 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCINQ(r12, 0x541b, &(0x7f0000000040)) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000300)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'fo\x00', 0x0, 0x0, 0x38}, {@multicast1, 0x4e21, 0x0, 0x6, 0x4, 0x7f}}, 0x44) 1.42355439s ago: executing program 1 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0x80000000}) socket$alg(0x26, 0x5, 0x0) (async) ioprio_get$uid(0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.423339333s ago: executing program 0 (id=367): syz_emit_ethernet(0x138, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.423042205s ago: executing program 0 (id=368): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000780)="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", 0xff5}], 0x1, 0x9, 0x38a4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0xe4}}, 0x0) 449.656544ms ago: executing program 3 (id=381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r3 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f00000000c0)={r5, r0, 0x6}) 449.303863ms ago: executing program 3 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00040000000000000055822f0056f4fa41ca85a84feb9d9dea443667f414ba8df74f0da358ac9af13f53eaee24361c6d4bee26ca114f9eb2b1ca5658db9614ab50", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 383.579494ms ago: executing program 3 (id=383): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) (async) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x1, 0x4) sendmmsg(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="aef0fe41808ef661dd0340f58b291b541316bc29f791d00112a2278cb935004d8d5d8d6e5acab60d56696501058f3aa9b1a44dc6d38135da78fc46111978d88eb30caf34fbd1a29ae05a732c65bb9d26ffe71619cea1c3a8b8276f4ce3bb0729347bb8e60dde14211399", 0x6a}], 0x1, &(0x7f0000000200)=[{0x1010, 0x10f, 0x5, "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"}, {0xd0, 0x103, 0x46d, "43aa0f107cd8ec70670d4c7e1d0c23691be5270c4ebdde502b038ea67eda3d2fb8f549afa8c79b705652fac39930f699a37fad9775ebab96208f3e90cfe084a2c422523788990c44a4d0db2a12298f49d973662ac92b983b010d80687350078cebb4a7b0e43cb05f6b0ead9395c2f8ad1cc370c42943263f40bfd3764488deff12091a5fd0920119330e38c4554f84cf46bece1d37c803ee434d90fa2d276c676659cb089a85ac5d7884b9340346faa270d68f33469dbb859a74f08a7238cb89"}, {0xf0, 0x10c, 0x9, "fcc0c984a2e93eb4f2a6233c19a43788d871d91182c7149a42fd7ee4ed2ec7cdc9a7e32aabf1494a61d47614e82a6b558a987f037dcc7ac3d6951c15e0c4b4471ecb5fcf86d878300bc18bfcec905eea23f79dbd184e159725c5c3fc33d7565932fd124c069f962cdaa24d9adaf6c83fe11a69ddebfec31ae6d5ac6525a3cc01b899fca21af20ce1a716afa6c4d7c40381cf11d608e83389332997ac4e35caf7fe87f993ac8b860c43430786e001a0672501da4e35c30d9227c8fdf48b570d2fd35e5328b8891454ff013def7a96c09669ce29341d86d5553d711b27"}, {0xe0, 0x109, 0x2, "48b2f86fdb25d26e5090add83a85007ba4051ef8720078f805781ff2237c95c72e22438eb0cdd58bec8e974d5c189d18b7711730ae6a69e9a819b6908e3f2dec61460ab18e7a307c248fb0ffffbfa5a3108864675666c52542a0ee9965372ca34aaae613d6f1aff18ba8d17a9ae2d601a435d400a3d375a9717f36ea5f151e0b653af23575d1564ad0819ccde0394219ee6b6c7c715e7575acd37c995a08132045d144f94b18bb7e97b678bdd19c635e9c1bf123ee9b172ce510819edb344024cd5a9581e675fd7939599e7c62"}, {0x68, 0x10a, 0x91, "9b2abe32d1e7d842bb299db3a88aace74cbfa23ed8cb7dac678c879a49341e679bc17cf7b97df6f93c7f079cb3620635cfe20684cb435b81ef62dcab8c843e7cfd24439a33321d3f15c9473b9840b8b8d8ef63"}], 0x1318}}], 0x1, 0xc0) (async) r2 = open(&(0x7f0000001580)='./file0\x00', 0x205000, 0x4) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001680)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000016c0)={'vxcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001700)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001840)={'sit0\x00', &(0x7f0000001740)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x5, 0x0, {{0x34, 0x4, 0x2, 0x1e, 0xd0, 0x68, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @loopback, {[@cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x5, 0xf, "3e9d2f3b14c7b8964a567fcb80"}, {0x1, 0x5, "38ca2e"}]}, @lsrr={0x83, 0xb, 0x8, [@dev={0xac, 0x14, 0x14, 0x22}, @broadcast]}, @rr={0x7, 0x13, 0xd2, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}]}, @ssrr={0x89, 0x7, 0xf1, [@dev={0xac, 0x14, 0x14, 0x18}]}, @cipso={0x86, 0x5e, 0x0, [{0x1, 0x4, '$n'}, {0x2, 0x11, "22869db1b9125d97d79922b13e0c59"}, {0x0, 0x11, "31d079a839fcd8049170c773d79aa7"}, {0x7, 0x12, "8858e40a38baae43617fea359eb161f9"}, {0x1, 0xa, "7908cff1a2de8249"}, {0x2, 0xa, "25255ef150326c64"}, {0x5, 0xc, "36c2cac71ca151590fc9"}]}, @generic={0x88, 0x12, "61015372a69a812b0a141dbf3cbb53dd"}, @ssrr={0x89, 0xb, 0x6f, [@multicast1, @rand_addr=0x64010102]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000018c0)={'syztnl2\x00', &(0x7f0000001880)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0x2, 0x2, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x7, 0x47, [@local]}]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001900)={0x0, @initdev, @initdev}, &(0x7f0000001940)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000019c0)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000001ac0)=[{}], 0x8, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000001f80)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x240, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4008800}, 0x50084) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r12, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}}, 0x0) (async) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r13, 0x6, 0x2, &(0x7f0000002100), &(0x7f0000002140)=0x4) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000002180)) (async) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f00000021c0)=@gcm_128={{0x304}, "fa37b477dfc343e1", "a6d529b8efac7b8dcd81b95310be334a", "2e7e208b", "d7bc07faefd316b9"}, 0x28) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000002240), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x28, r14, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) read$FUSE(r2, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x11, r15) dup2(r1, r0) (async) r16 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000004380), 0x8000, 0x0) getsockopt$WPAN_SECURITY(r16, 0x0, 0x1, &(0x7f00000043c0), &(0x7f0000004400)=0x4) 383.022573ms ago: executing program 3 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = eventfd2(0x200, 0x80000) r5 = eventfd(0xffffffc0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x5, 0x0, r5}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c001}, 0x4008000) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_vhci(0x0, 0x22) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x13}, {0x0, 0x6}, {0xc0000000, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r9) 520.429µs ago: executing program 3 (id=385): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x2f25, "99bdb1b826641b0894d002060074b7b94d3c10db57c3f7484d9ed4190db800f3"}) (async) ioctl$SW_SYNC_IOC_INC(r0, 0xc0285700, &(0x7f0000000180)=0x8) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) (async) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, '_\x00\x00\x00\x00\x00'}}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101}) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000e, 0x810, 0xffffffffffffffff, 0x8000000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRESOCT=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES16=r6, @ANYRES32=r6, @ANYBLOB="53d227dee46f9eb0bbe3f560be60a12a3380bf173457533979162f8a1a4b0a0c4695aa1a05bbcbacbb199193935a9f8dbee459e73f05"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001480350064756d4d7930000000000022889c2effbb00060000000a4a1466870e00", @ANYRES16=r4, @ANYRES64=r1], 0x3c}}, 0xc080) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0xc0) (async) r8 = accept(0xffffffffffffffff, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) (async, rerun: 32) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0xb, 0x0, r8, 0x0, &(0x7f00000000c0)="57aad6718e27d12ecbf6ac902f7060fae2246b2bb056654d4dac56c5c7e32052f447a375ad327f21ea2af2178c1589067de62c41f2025a5646556f9bca7a6d46e3728d63e81f45100e91c30d63de9044403676f6072063d9cb160053d781d1cc7739f97e969b67458e7aefd2223d8382de569fc0", 0x74, 0x94, 0x1, {0x0, r9}}) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000180)={0xfa, 0x800, 0x54, 0x1000, 0x14, "423dce1a87a851b8"}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040fb5d51f7c56"], 0x7) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, 0x0, 0x800) (rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/key-users\x00', 0x0, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r10, r2, 0x0) 0s ago: executing program 3 (id=386): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080ac5833c80000000070000"], 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000008c00000000000000005f"], 0x0, 0x2a}, 0x20) write$UHID_INPUT(r3, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000011c0)={0x0, 0xfffffffffffffe02, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r0, 0x121, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040885}, 0x44000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x88, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ':]^\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '[[])\a*%${.\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 0s ago: executing program 1 (id=387): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010040", 0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10001, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaa06000000000000000000b00000000000019078ac1e0001ac1414aa0300907800000000450000000800000000890000ac141400ac1414aa01860dc045d45768dc37efa0fc58440c00037f00000100000000890f0000000000ffffffffffffffff444c000100000000000000000000000000000000000000000000aa3aac1414aa000000007f000001000000000000000000000000e0000002e2ff0000ffffffff00000000ffffffff000000004408000000000000000000"], 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d75eff653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f00000002c0)={0x6, 0x0, 0xaeb9, 0x1, 0x5, "bc5b074c4db033c6c944f255936c03cd092123", 0x5, 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000810000001b"]) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x2000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xdddd1000, 0x4000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xe, 0x3, 0xc0}, {0xffff1000, 0xdddd1000, 0xb, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x8, 0x8, 0x1}, {0x9000, 0x4000, 0x9, 0x9, 0x3, 0x8, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x8000000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x13, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x0, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x35c, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea7ca6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1baa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a772b08ea90f63f5c4851df9aef747a4e240cec55ce1659c08d387142c5835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe00000000000000011a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a29eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000500d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e000000000957a98a840111c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fd1e796afeac2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f600000000dbfae6788549e6000000000000d7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dcca000000d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbeedf263779ba2e402d7db15804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb72d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca0d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff1}, {0xfff3, 0x9}, {0xc, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) kernel console output (not intermixed with test programs): [ 53.172292][ T40] audit: type=1400 audit(1766678722.779:61): avc: denied { siginh } for pid=5911 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:1926' (ED25519) to the list of known hosts. [ 55.435323][ T40] audit: type=1400 audit(1766678725.069:62): avc: denied { name_bind } for pid=5920 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.460604][ T40] audit: type=1400 audit(1766678725.099:63): avc: denied { execute } for pid=5921 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.468902][ T40] audit: type=1400 audit(1766678725.099:64): avc: denied { execute_no_trans } for pid=5921 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.508548][ T40] audit: type=1400 audit(1766678727.139:65): avc: denied { mounton } for pid=5921 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.517104][ T40] audit: type=1400 audit(1766678727.149:66): avc: denied { mount } for pid=5921 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.518822][ T5921] cgroup: Unknown subsys name 'net' [ 57.664005][ T5921] cgroup: Unknown subsys name 'cpuset' [ 57.668401][ T5921] cgroup: Unknown subsys name 'rlimit' [ 57.952365][ T5926] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.639439][ T5921] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.744794][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 61.744808][ T40] audit: type=1400 audit(1766678731.379:82): avc: denied { execmem } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.869947][ T40] audit: type=1400 audit(1766678731.499:83): avc: denied { create } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.876371][ T40] audit: type=1400 audit(1766678731.499:84): avc: denied { read write } for pid=5934 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.907830][ T40] audit: type=1400 audit(1766678731.499:85): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 61.916167][ T40] audit: type=1400 audit(1766678731.529:86): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="socket:[7285]" dev="sockfs" ino=7285 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.918161][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.928630][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.932443][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.936383][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.938281][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.939431][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.940780][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.941548][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.942304][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.942376][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.943254][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.943675][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.944591][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.945119][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.946020][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.949582][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.950791][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.950831][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.951107][ T40] audit: type=1400 audit(1766678731.579:87): avc: denied { read } for pid=5934 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.951145][ T40] audit: type=1400 audit(1766678731.579:88): avc: denied { open } for pid=5934 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.951621][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.952292][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.954388][ T40] audit: type=1400 audit(1766678731.589:89): avc: denied { mounton } for pid=5934 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.239444][ T40] audit: type=1400 audit(1766678731.869:90): avc: denied { module_request } for pid=5943 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.258691][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 62.277929][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 62.297114][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 62.306963][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 62.503795][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.506788][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.509673][ T5935] bridge_slave_0: entered allmulticast mode [ 62.513399][ T5935] bridge_slave_0: entered promiscuous mode [ 62.532746][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.535722][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.538749][ T5943] bridge_slave_0: entered allmulticast mode [ 62.542715][ T5943] bridge_slave_0: entered promiscuous mode [ 62.548263][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.551398][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.554342][ T5935] bridge_slave_1: entered allmulticast mode [ 62.557920][ T5935] bridge_slave_1: entered promiscuous mode [ 62.576908][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.579330][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.581935][ T5934] bridge_slave_0: entered allmulticast mode [ 62.584503][ T5934] bridge_slave_0: entered promiscuous mode [ 62.587246][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.589568][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.592077][ T5943] bridge_slave_1: entered allmulticast mode [ 62.594693][ T5943] bridge_slave_1: entered promiscuous mode [ 62.624818][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.627776][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.630223][ T5934] bridge_slave_1: entered allmulticast mode [ 62.633151][ T5934] bridge_slave_1: entered promiscuous mode [ 62.641590][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.644426][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.646880][ T5938] bridge_slave_0: entered allmulticast mode [ 62.649623][ T5938] bridge_slave_0: entered promiscuous mode [ 62.654042][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.664478][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.668835][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.672082][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.674390][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.677703][ T5938] bridge_slave_1: entered allmulticast mode [ 62.680474][ T5938] bridge_slave_1: entered promiscuous mode [ 62.701722][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.705870][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.728477][ T5943] team0: Port device team_slave_0 added [ 62.732056][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.742089][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.746684][ T5943] team0: Port device team_slave_1 added [ 62.756581][ T5935] team0: Port device team_slave_0 added [ 62.760832][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.784235][ T5935] team0: Port device team_slave_1 added [ 62.803948][ T5934] team0: Port device team_slave_0 added [ 62.815272][ T5934] team0: Port device team_slave_1 added [ 62.818005][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.821122][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.831651][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.837851][ T5938] team0: Port device team_slave_0 added [ 62.848908][ T5938] team0: Port device team_slave_1 added [ 62.865906][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.868212][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.878047][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.883112][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.885433][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.893844][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.905284][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.907534][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.915994][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.925284][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.927584][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.937052][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.953870][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.956169][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.964863][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.973838][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.976736][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.987406][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.994018][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.997022][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.006729][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.041074][ T5943] hsr_slave_0: entered promiscuous mode [ 63.044108][ T5943] hsr_slave_1: entered promiscuous mode [ 63.071751][ T5934] hsr_slave_0: entered promiscuous mode [ 63.074936][ T5934] hsr_slave_1: entered promiscuous mode [ 63.077938][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 63.080731][ T5934] Cannot create hsr debugfs directory [ 63.102655][ T5935] hsr_slave_0: entered promiscuous mode [ 63.105722][ T5935] hsr_slave_1: entered promiscuous mode [ 63.108516][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 63.111123][ T5935] Cannot create hsr debugfs directory [ 63.136478][ T5938] hsr_slave_0: entered promiscuous mode [ 63.139007][ T5938] hsr_slave_1: entered promiscuous mode [ 63.141817][ T5938] debugfs: 'hsr0' already exists in 'hsr' [ 63.144062][ T5938] Cannot create hsr debugfs directory [ 63.505636][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.513828][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.524145][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.528724][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.564085][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.574374][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.580658][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.587046][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.653453][ T5935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.662899][ T5935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.668143][ T5935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.681274][ T5935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.716867][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.726470][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.733426][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.738158][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.794718][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.817606][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.834067][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.836629][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.851963][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.854970][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.886278][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.930604][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.945935][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.948359][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.957336][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.959706][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.969113][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.976256][ T40] audit: type=1400 audit(1766678733.609:91): avc: denied { sys_module } for pid=5943 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.981413][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.991151][ T5945] Bluetooth: hci2: command tx timeout [ 63.991155][ T64] Bluetooth: hci0: command tx timeout [ 63.991370][ T5947] Bluetooth: hci3: command tx timeout [ 63.991374][ T64] Bluetooth: hci1: command tx timeout [ 64.002342][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.022569][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.032700][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.035285][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.048392][ T5934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.052075][ T5934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.062631][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.065710][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.083767][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.086948][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.098019][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.101119][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.148657][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.197511][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.215148][ T5943] veth0_vlan: entered promiscuous mode [ 64.241380][ T5943] veth1_vlan: entered promiscuous mode [ 64.275556][ T5934] veth0_vlan: entered promiscuous mode [ 64.283026][ T5943] veth0_macvtap: entered promiscuous mode [ 64.288476][ T5934] veth1_vlan: entered promiscuous mode [ 64.293728][ T5943] veth1_macvtap: entered promiscuous mode [ 64.299412][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.327372][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.344412][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.350500][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.357956][ T5934] veth0_macvtap: entered promiscuous mode [ 64.367742][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.374251][ T5934] veth1_macvtap: entered promiscuous mode [ 64.382999][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.385873][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.402277][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.409086][ T5935] veth0_vlan: entered promiscuous mode [ 64.422702][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.440554][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.445897][ T5935] veth1_vlan: entered promiscuous mode [ 64.471954][ T5938] veth0_vlan: entered promiscuous mode [ 64.476089][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.487041][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.498475][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.505390][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.505646][ T5935] veth0_macvtap: entered promiscuous mode [ 64.508829][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.514988][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.526157][ T5938] veth1_vlan: entered promiscuous mode [ 64.538536][ T5935] veth1_macvtap: entered promiscuous mode [ 64.546770][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.549367][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.583849][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.587823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.591572][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.602910][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.616826][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.628439][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.632212][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.638167][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.643974][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.647237][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.648457][ T5938] veth0_macvtap: entered promiscuous mode [ 64.649820][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.653982][ T5938] veth1_macvtap: entered promiscuous mode [ 64.674844][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.679166][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.696989][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.713142][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.717151][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.726835][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.738252][ T6026] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 64.743933][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.746491][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.780463][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.783172][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.804490][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.811121][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.837379][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.840647][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.893999][ T6026] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2'. [ 64.976288][ T6041] lo speed is unknown, defaulting to 1000 [ 64.980806][ T6041] lo speed is unknown, defaulting to 1000 [ 64.984731][ T6041] lo speed is unknown, defaulting to 1000 [ 64.987080][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 64.993963][ T6039] macvlan2: entered promiscuous mode [ 64.995708][ T6039] macvlan2: entered allmulticast mode [ 64.997897][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.160650][ T6041] infiniband syz1: set active [ 65.163626][ T6022] lo speed is unknown, defaulting to 1000 [ 65.166289][ T6041] infiniband syz1: added lo [ 65.179843][ T6054] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 65.189334][ T6058] netlink: 'syz.1.11': attribute type 13 has an invalid length. [ 65.219642][ T6041] RDS/IB: syz1: added [ 65.226070][ T6041] smc: adding ib device syz1 with port count 1 [ 65.230846][ T6041] smc: ib device syz1 port 1 has no pnetid [ 65.234582][ T6001] lo speed is unknown, defaulting to 1000 [ 65.239297][ T6041] lo speed is unknown, defaulting to 1000 [ 65.292668][ T6071] process 'syz.1.16' launched './file1' with NULL argv: empty string added [ 65.297259][ T6071] ======================================================= [ 65.297259][ T6071] WARNING: The mand mount option has been deprecated and [ 65.297259][ T6071] and is ignored by this kernel. Remove the mand [ 65.297259][ T6071] option from the mount to silence this warning. [ 65.297259][ T6071] ======================================================= [ 65.399261][ T6041] lo speed is unknown, defaulting to 1000 [ 65.452193][ T6077] bridge1: entered promiscuous mode [ 65.533563][ T6041] lo speed is unknown, defaulting to 1000 [ 65.618396][ T6041] lo speed is unknown, defaulting to 1000 [ 65.954086][ T6100] input: syz0 as /devices/virtual/input/input6 [ 66.034249][ T6105] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 66.048685][ T6105] veth0_vlan: left promiscuous mode [ 66.053409][ T6105] veth0_vlan: entered promiscuous mode [ 66.059229][ T6105] team0: Device veth0_vlan failed to register rx_handler [ 66.070984][ T5947] Bluetooth: hci0: command tx timeout [ 66.071045][ T5941] Bluetooth: hci1: command tx timeout [ 66.076113][ T64] Bluetooth: hci2: command tx timeout [ 66.078494][ T5945] Bluetooth: hci3: command tx timeout [ 66.145771][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.257772][ T6116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.565267][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6144 comm=syz.0.34 [ 66.569425][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6144 comm=syz.0.34 [ 66.574072][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6144 comm=syz.0.34 [ 66.578753][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6144 comm=syz.0.34 [ 66.584404][ T6144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=6144 comm=syz.0.34 [ 66.764627][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 66.764638][ T40] audit: type=1400 audit(1766678736.399:251): avc: denied { connect } for pid=6147 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.776142][ T6148] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.35'. [ 66.823229][ T40] audit: type=1400 audit(1766678736.459:252): avc: denied { name_bind } for pid=6149 comm="syz.0.36" src=19997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.840438][ T6150] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 66.848653][ T40] audit: type=1400 audit(1766678736.479:253): avc: denied { read } for pid=6149 comm="syz.0.36" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.859649][ T40] audit: type=1400 audit(1766678736.479:254): avc: denied { open } for pid=6149 comm="syz.0.36" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.864494][ T6150] syzkaller1: entered promiscuous mode [ 66.868876][ T40] audit: type=1400 audit(1766678736.479:255): avc: denied { ioctl } for pid=6149 comm="syz.0.36" path="/dev/video2" dev="devtmpfs" ino=957 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 66.870413][ T6150] syzkaller1: entered allmulticast mode [ 66.879654][ T40] audit: type=1400 audit(1766678736.499:256): avc: denied { read write } for pid=6149 comm="syz.0.36" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.890004][ T40] audit: type=1400 audit(1766678736.499:257): avc: denied { open } for pid=6149 comm="syz.0.36" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.898286][ T40] audit: type=1400 audit(1766678736.499:258): avc: denied { ioctl } for pid=6149 comm="syz.0.36" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.907383][ T40] audit: type=1400 audit(1766678736.499:259): avc: denied { ioctl } for pid=6149 comm="syz.0.36" path="socket:[9050]" dev="sockfs" ino=9050 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.038522][ T40] audit: type=1400 audit(1766678736.669:260): avc: denied { mounton } for pid=6155 comm="syz.3.38" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.212242][ T6168] binder: 6167:6168 ioctl c0306201 200000000540 returned -14 [ 67.420212][ T6185] zonefs (loop2) ERROR: Not a zoned block device [ 67.482543][ T6187] cgroup: release_agent respecified [ 67.521170][ T6191] trusted_key: syz.2.48 sent an empty control message without MSG_MORE. [ 67.524315][ T6191] Zero length message leads to an empty skb [ 67.647384][ T6116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.680566][ T34] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 67.854011][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.857324][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.861712][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.865155][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.909624][ T6116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.982420][ T6116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.084946][ T1150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.091131][ T34] usb 5-1: usb_control_msg returned -71 [ 68.093946][ T34] usbtmc 5-1:16.0: can't read capabilities [ 68.107275][ T1150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.112611][ T34] usb 5-1: USB disconnect, device number 2 [ 68.121340][ T62] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.136087][ T1150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.215908][ T5945] Bluetooth: hci2: command tx timeout [ 68.225926][ T5945] Bluetooth: hci0: command tx timeout [ 68.258579][ T6202] program syz.3.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.482604][ T5945] Bluetooth: hci3: command tx timeout [ 68.488137][ T6209] syzkaller0: entered promiscuous mode [ 68.491302][ T6209] syzkaller0: entered allmulticast mode [ 69.204884][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 69.312101][ T6262] qnx4: unable to read the superblock [ 69.584250][ T6083] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.657420][ T6293] tmpfs: Group quota inode hardlimit too large. [ 69.691980][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.697705][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.700930][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.704379][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.707537][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.707567][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.707587][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.707607][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.712342][ T6007] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 69.713499][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.720318][ T6296] SELinux: Context system_u:object_r:lib_t:s0 is not valid (left unmapped). [ 69.722928][ T6001] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 69.727350][ T6296] tmpfs: Group quota inode hardlimit too large. [ 69.733804][ T6083] usb 5-1: device descriptor read/64, error -71 [ 69.760110][ T6001] hid-generic 0005:00B6:0009.0002: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 69.805569][ T6301] fido_id[6301]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.813095][ T6303] 9p: Bad value for 'aname' [ 69.905497][ T6021] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.002404][ T6007] usb 7-1: unable to get BOS descriptor or descriptor too short [ 70.007104][ T6007] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 70.010408][ T6007] usb 7-1: can't read configurations, error -71 [ 70.014450][ T6083] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.126138][ T6313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=6313 comm=syz.3.84 [ 70.161680][ T6083] usb 5-1: device descriptor read/64, error -71 [ 70.280533][ T6083] usb usb5-port1: attempt power cycle [ 70.439863][ T64] Bluetooth: hci2: command tx timeout [ 70.441757][ T5945] Bluetooth: hci0: command tx timeout [ 70.653874][ T6083] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.675580][ T6083] usb 5-1: device descriptor read/8, error -71 [ 70.942783][ T6083] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.977218][ T6083] usb 5-1: device descriptor read/8, error -71 [ 70.982495][ T6326] overlayfs: failed to resolve './file0/file0': -2 [ 71.093257][ T6083] usb usb5-port1: unable to enumerate USB device [ 71.198975][ T6338] syzkaller0: entered promiscuous mode [ 71.202284][ T6338] syzkaller0: entered allmulticast mode [ 71.218801][ T6340] overlay: ./file0 is not a directory [ 71.222685][ T6340] overlay: ./file0 is not a directory [ 71.225860][ T6340] overlay: ./file0 is not a directory [ 71.228651][ T6340] overlay: ./file0 is not a directory [ 71.232145][ T6340] overlay: ./file0 is not a directory [ 71.234457][ T6340] overlay: ./file0 is not a directory [ 71.236879][ T6340] overlay: ./file0 is not a directory [ 71.239054][ T6340] overlay: ./file0 is not a directory [ 71.241270][ T6340] overlay: ./file0 is not a directory [ 71.244234][ T6340] overlay: ./file0 is not a directory [ 71.246578][ T6340] overlay: ./file0 is not a directory [ 71.248887][ T6340] overlay: ./file0 is not a directory [ 71.251421][ T6340] overlay: ./file0 is not a directory [ 71.255018][ T6340] overlay: ./file0 is not a directory [ 71.257292][ T6340] overlay: ./file0 is not a directory [ 71.259608][ T6340] overlay: ./file0 is not a directory [ 71.261915][ T6340] overlay: ./file0 is not a directory [ 71.264291][ T6340] overlay: ./file0 is not a directory [ 71.266485][ T6340] overlay: ./file0 is not a directory [ 71.268618][ T6340] overlay: ./file0 is not a directory [ 71.270852][ T6340] overlay: ./file0 is not a directory [ 71.272981][ T6340] overlay: ./file0 is not a directory [ 71.275508][ T6340] overlay: ./file0 is not a directory [ 71.277732][ T6340] overlay: ./file0 is not a directory [ 71.280182][ T6340] overlay: ./file0 is not a directory [ 71.282378][ T6340] overlay: ./file0 is not a directory [ 71.284709][ T6340] overlay: ./file0 is not a directory [ 71.288290][ T6340] overlay: ./file0 is not a directory [ 71.290586][ T6340] overlay: ./file0 is not a directory [ 71.292876][ T6340] overlay: ./file0 is not a directory [ 71.295329][ T6340] overlay: ./file0 is not a directory [ 71.298097][ T6340] overlay: ./file0 is not a directory [ 71.300407][ T6340] overlay: ./file0 is not a directory [ 71.302646][ T6340] overlay: ./file0 is not a directory [ 71.304955][ T6340] overlay: ./file0 is not a directory [ 71.307763][ T6340] overlay: ./file0 is not a directory [ 71.310476][ T6340] overlay: ./file0 is not a directory [ 71.313201][ T6340] overlay: ./file0 is not a directory [ 71.315974][ T6340] overlay: ./file0 is not a directory [ 71.319866][ T6340] overlay: ./file0 is not a directory [ 71.322540][ T6340] overlay: ./file0 is not a directory [ 71.325332][ T6340] overlay: ./file0 is not a directory [ 71.328503][ T6340] overlay: ./file0 is not a directory [ 71.331258][ T6340] overlay: ./file0 is not a directory [ 71.333997][ T6340] overlay: ./file0 is not a directory [ 71.336670][ T6340] overlay: ./file0 is not a directory [ 71.340086][ T6340] overlay: ./file0 is not a directory [ 71.342769][ T6340] overlay: ./file0 is not a directory [ 71.345451][ T6340] overlay: ./file0 is not a directory [ 71.348165][ T6340] overlay: ./file0 is not a directory [ 71.351843][ T6340] overlay: ./file0 is not a directory [ 71.354554][ T6340] overlay: ./file0 is not a directory [ 71.357328][ T6340] overlay: ./file0 is not a directory [ 71.360311][ T6340] overlay: ./file0 is not a directory [ 71.364162][ T6340] overlay: ./file0 is not a directory [ 71.366927][ T6340] overlay: ./file0 is not a directory [ 71.369782][ T6340] overlay: ./file0 is not a directory [ 71.372890][ T6340] overlay: ./file0 is not a directory [ 71.375622][ T6340] overlay: ./file0 is not a directory [ 71.378362][ T6340] overlay: ./file0 is not a directory [ 71.381091][ T6340] overlay: ./file0 is not a directory [ 71.384073][ T6340] overlay: ./file0 is not a directory [ 71.386805][ T6340] overlay: ./file0 is not a directory [ 71.389642][ T6340] overlay: ./file0 is not a directory [ 71.392555][ T6340] overlay: ./file0 is not a directory [ 71.466963][ T6083] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.508778][ T6348] Cannot find add_set index 0 as target [ 71.553474][ T5945] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.556331][ T5945] Bluetooth: hci1: Injecting HCI hardware error event [ 71.558265][ T6350] netlink: 108 bytes leftover after parsing attributes in process `syz.3.96'. [ 71.559179][ T5945] Bluetooth: hci1: hardware error 0x00 [ 71.567705][ T6350] netlink: 108 bytes leftover after parsing attributes in process `syz.3.96'. [ 71.571640][ T6350] netlink: 84 bytes leftover after parsing attributes in process `syz.3.96'. [ 71.641794][ T6083] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 71.644562][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.648546][ T6083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.652319][ T6083] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.655930][ T6083] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.660248][ T6083] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.663039][ T6354] netlink: 52 bytes leftover after parsing attributes in process `syz.3.98'. [ 71.663349][ T6083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.667191][ T6354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.98'. [ 71.672102][ T6083] usb 7-1: config 0 descriptor?? [ 71.677208][ T6338] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.687141][ T6354] netlink: 52 bytes leftover after parsing attributes in process `syz.3.98'. [ 72.325618][ T40] kauditd_printk_skb: 238 callbacks suppressed [ 72.325629][ T40] audit: type=1400 audit(1767203029.632:499): avc: denied { write } for pid=6337 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.337015][ T6083] usbhid 7-1:0.0: can't add hid device: -71 [ 72.340105][ T6083] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 72.343771][ T40] audit: type=1400 audit(1767203029.641:500): avc: denied { create } for pid=6337 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 72.351720][ T6083] usb 7-1: USB disconnect, device number 4 [ 72.356737][ T40] audit: type=1400 audit(1767203029.641:501): avc: denied { write } for pid=6337 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 72.364189][ T40] audit: type=1400 audit(1767203029.660:502): avc: denied { read } for pid=6367 comm="syz.1.102" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.372068][ T40] audit: type=1400 audit(1767203029.660:503): avc: denied { open } for pid=6367 comm="syz.1.102" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.399873][ T40] audit: type=1400 audit(1767203029.697:504): avc: denied { create } for pid=6372 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.408564][ T40] audit: type=1400 audit(1767203029.707:505): avc: denied { setopt } for pid=6372 comm="syz.1.103" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.411627][ T6373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.415228][ T40] audit: type=1400 audit(1767203029.707:506): avc: denied { getopt } for pid=6372 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.570662][ T40] audit: type=1400 audit(1767203029.856:507): avc: denied { bind } for pid=6372 comm="syz.1.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.581733][ T40] audit: type=1400 audit(1767203029.856:508): avc: denied { name_bind } for pid=6372 comm="syz.1.103" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 72.678803][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 72.774480][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 72.778472][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 72.966837][ T6389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6389 comm=syz.3.106 [ 73.140908][ T6382] bond1: option xmit_hash_policy: invalid value (6) [ 73.145704][ T6382] bond1 (unregistering): Released all slaves [ 73.179709][ T6388] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.209586][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 73.390859][ T6402] XFS (nbd0): no-recovery mounts must be read-only. [ 73.514578][ T6409] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 73.523650][ T6409] bond1: (slave lo): speed changed to 0 on port 1 [ 73.527775][ T6409] bond1: (slave lo): Enslaving as a backup interface with an up link [ 73.533615][ T6409] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 73.540240][ T6083] lo speed is unknown, defaulting to 1000 [ 73.544027][ T6007] lo speed is unknown, defaulting to 1000 [ 73.553708][ T6007] lo speed is unknown, defaulting to 1000 [ 73.596404][ T6415] XFS (nullb0): Invalid superblock magic number [ 73.777726][ T5945] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.835773][ T6444] blkio.reset_stats is deprecated [ 73.882862][ T6448] IPv6: addrconf: prefix option has invalid lifetime [ 73.932877][ T6458] random: crng reseeded on system resumption [ 73.964813][ T6460] tipc: Enabling of bearer rejected, media not registered [ 73.968701][ T6460] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 73.987807][ T6460] bond1: entered promiscuous mode [ 73.990620][ T6460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.009915][ T6460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56507 sclass=netlink_route_socket pid=6460 comm=syz.3.129 [ 74.068410][ T6460] bond1 (unregistering): Released all slaves [ 74.071640][ T6467] SELinux: failed to load policy [ 74.086631][ T6465] wg2: entered promiscuous mode [ 74.089519][ T6465] wg2: entered allmulticast mode [ 74.140770][ T6469] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.255877][ T6480] program syz.2.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.346961][ T6490] capability: warning: `syz.2.139' uses deprecated v2 capabilities in a way that may be insecure [ 74.467435][ T6505] kernel profiling enabled (shift: 0) [ 74.498486][ T6507] netlink: 'syz.0.144': attribute type 5 has an invalid length. [ 74.732878][ T6519] bridge_slave_0: left allmulticast mode [ 74.735423][ T6519] bridge_slave_0: left promiscuous mode [ 74.738231][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.758335][ T6519] bridge_slave_1: left allmulticast mode [ 74.762088][ T6519] bridge_slave_1: left promiscuous mode [ 74.764834][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.773568][ T6519] bond0: (slave bond_slave_0): Releasing backup interface [ 74.780995][ T6519] bond0: (slave bond_slave_1): Releasing backup interface [ 74.790359][ T6519] team0: Port device team_slave_0 removed [ 74.795848][ T6519] team0: Port device team_slave_1 removed [ 74.798249][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.800642][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.804414][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.809969][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.814057][ T6519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.822948][ T6520] vlan0: entered promiscuous mode [ 74.830087][ T6520] team0: Port device vlan0 added [ 74.837205][ T6519] tipc: Started in network mode [ 74.839385][ T6519] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 74.842533][ T6519] tipc: Enabled bearer , priority 0 [ 74.885249][ T6522] overlayfs: failed to resolve './bus': -2 [ 74.890061][ T6523] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 74.896456][ T29] cfg80211: failed to load regulatory.db [ 74.912550][ T1330] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 74.965633][ T6528] netlink: 'syz.1.151': attribute type 9 has an invalid length. [ 74.969402][ T6528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6528 comm=syz.1.151 [ 75.032811][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.039037][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.043628][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.051350][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.072364][ T1330] usb 5-1: Using ep0 maxpacket: 8 [ 75.078684][ T1330] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 75.084771][ T1330] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 75.088820][ T1330] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.092724][ T1330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.162545][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6540 comm=syz.3.155 [ 75.171144][ T6540] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 75.184417][ T6546] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 75.379594][ T6022] usb 5-1: USB disconnect, device number 7 [ 75.910076][ T6022] tipc: Node number set to 11578026 [ 76.300171][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803db9c800: rx timeout, send abort [ 76.331353][ T6580] overlayfs: failed to resolve './bus': -2 [ 76.332139][ T6579] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 76.514600][ T6596] loop6: detected capacity change from 0 to 7 [ 76.555412][ T5942] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.557591][ T5942] loop6: partition table partially beyond EOD, truncated [ 76.562277][ T5942] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 76.575712][ T6596] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.577891][ T6596] loop6: partition table partially beyond EOD, truncated [ 76.581431][ T6596] loop6: p1 size 2989602745 extends beyond EOD, truncated [ 76.838441][ C3] vcan0: j1939_tp_rxtimer: 0xffff88803db9c800: abort rx timeout. Force session deactivation [ 76.869529][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 76.946634][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.961128][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.964000][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.973745][ T6615] __nla_validate_parse: 16 callbacks suppressed [ 76.973761][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 77.042700][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 77.046754][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.051683][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.058889][ T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 77.063575][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.069986][ T24] usb 8-1: config 0 descriptor?? [ 77.481711][ T6629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.484905][ T6629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.489004][ T6629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.492271][ T6629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.515082][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 77.517087][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 77.526913][ T24] usb 8-1: USB disconnect, device number 2 [ 77.711042][ T40] kauditd_printk_skb: 269 callbacks suppressed [ 77.711057][ T40] audit: type=1400 audit(1767203034.661:778): avc: denied { read } for pid=6631 comm="syz.2.183" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.724121][ T40] audit: type=1400 audit(1767203034.670:779): avc: denied { open } for pid=6631 comm="syz.2.183" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.735648][ T40] audit: type=1400 audit(1767203034.670:780): avc: denied { ioctl } for pid=6631 comm="syz.2.183" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.744830][ T40] audit: type=1400 audit(1767203034.670:781): avc: denied { set_context_mgr } for pid=6631 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.751244][ T40] audit: type=1400 audit(1767203034.670:782): avc: denied { read write } for pid=6631 comm="syz.2.183" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.759498][ T40] audit: type=1400 audit(1767203034.670:783): avc: denied { open } for pid=6631 comm="syz.2.183" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 77.769977][ T40] audit: type=1400 audit(1767203034.670:784): avc: denied { append } for pid=6631 comm="syz.2.183" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.778505][ T40] audit: type=1400 audit(1767203034.717:785): avc: denied { map } for pid=6631 comm="syz.2.183" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.789713][ T40] audit: type=1400 audit(1767203034.735:786): avc: denied { mount } for pid=6631 comm="syz.2.183" name="/" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.799661][ T40] audit: type=1400 audit(1767203034.735:787): avc: denied { setattr } for pid=6631 comm="syz.2.183" name="/" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.812242][ T6632] binder: 6631:6632 ioctl 4140aecd 200000000700 returned -22 [ 77.820743][ T6632] binder: 6631:6632 ioctl c0306201 200000000680 returned -14 [ 77.935311][ T6022] IPVS: starting estimator thread 0... [ 77.938761][ T6648] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20001 [ 77.944451][ T6654] mmap: syz.2.187 (6654) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.962945][ T6654] netlink: 6 bytes leftover after parsing attributes in process `syz.2.187'. [ 77.966650][ T6654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.025702][ T6660] netlink: 1 bytes leftover after parsing attributes in process `syz.2.191'. [ 78.035709][ T6652] IPVS: using max 47 ests per chain, 112800 per kthread [ 78.050636][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.192'. [ 78.075362][ T6664] netlink: 68 bytes leftover after parsing attributes in process `syz.0.192'. [ 78.135518][ T6671] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 78.160246][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 78.521690][ T6690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.659275][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 78.661404][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 78.766394][ T6705] lo speed is unknown, defaulting to 1000 [ 78.773939][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.031570][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.223447][ T1330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.255447][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.258856][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.287643][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.512185][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.196929][ T6022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.624623][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.624707][ T6678] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.516524][ T6678] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.522395][ T6678] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.526247][ T6678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.529004][ T6678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.533998][ T6678] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.538602][ T6678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.541605][ T6678] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.546936][ T6678] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.743613][ T6752] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.218'. [ 81.905231][ T6763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 81.937195][ T6774] tmpfs: Unknown parameter 'grpquota‚block_hardlimit' [ 82.006486][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 82.009902][ T6780] program syz.2.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.071589][ T6007] kernel write not supported for file /amidi2 (pid: 6007 comm: kworker/3:3) [ 82.080405][ T1112] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 82.083372][ T1112] ata1.00: irq_stat 0x40000000 [ 82.091182][ T1112] ata1.00: failed command: ZAC MANAGEMENT OUT [ 82.093277][ T1112] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 15 [ 82.093277][ T1112] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 82.096227][ T6788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61000 sclass=netlink_route_socket pid=6788 comm=syz.0.230 [ 82.098714][ T1112] ata1.00: status: { DRDY ERR } [ 82.104450][ T6788] tipc: Enabling not permitted [ 82.105796][ T1112] ata1.00: error: { ABRT } [ 82.106956][ T6788] tipc: Enabling of bearer rejected, failed to enable media [ 82.108804][ T1112] ata1.00: device reported invalid CHS sector 0 [ 82.206852][ T6798] lo speed is unknown, defaulting to 1000 [ 82.210475][ T6798] lo speed is unknown, defaulting to 1000 [ 82.214272][ T6798] lo speed is unknown, defaulting to 1000 [ 82.214877][ T6799] xt_ecn: cannot match TCP bits for non-tcp packets [ 82.219751][ T6800] xt_ecn: cannot match TCP bits for non-tcp packets [ 82.220959][ T6798] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.232345][ T6798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.252019][ T6798] lo speed is unknown, defaulting to 1000 [ 82.254723][ T6802] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 82.259538][ T6802] overlayfs: missing 'lowerdir' [ 82.260812][ T6798] lo speed is unknown, defaulting to 1000 [ 82.271277][ T6798] lo speed is unknown, defaulting to 1000 [ 82.274325][ T6804] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.274341][ T6804] overlayfs: missing 'lowerdir' [ 82.283421][ T6798] lo speed is unknown, defaulting to 1000 [ 82.286618][ T6805] smc: removing ib device syz1 [ 82.348308][ T6798] netlink: 'syz.2.233': attribute type 29 has an invalid length. [ 82.454024][ T6022] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.614490][ T6022] usb 6-1: Using ep0 maxpacket: 32 [ 82.618164][ T6022] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 82.620998][ T6022] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 82.625733][ T6022] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 82.629790][ T6022] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 82.633177][ T6022] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 82.637890][ T6022] usb 6-1: config 0 interface 0 has no altsetting 0 [ 82.641922][ T6022] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 82.645096][ T6022] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 82.648073][ T6022] usb 6-1: Product: syz [ 82.649593][ T6022] usb 6-1: Manufacturer: syz [ 82.651250][ T6022] usb 6-1: SerialNumber: syz [ 82.659998][ T6022] usb 6-1: config 0 descriptor?? [ 82.675266][ T6022] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 82.686156][ T6022] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 82.811253][ T6817] __nla_validate_parse: 1 callbacks suppressed [ 82.811265][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 82.822247][ T1150] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.822283][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 82.825280][ T1150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.831861][ T1150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.835145][ T1150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.860693][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.973024][ T6822] ptrace attach of "/syz-executor exec"[5943] was attempted by "/syz-executor exec"[6822] [ 83.229193][ T6831] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.249376][ T40] kauditd_printk_skb: 174 callbacks suppressed [ 83.249387][ T40] audit: type=1400 audit(1767203039.839:962): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.259750][ T40] audit: type=1400 audit(1767203039.839:963): avc: denied { read } for pid=6832 comm="syz.2.243" dev="nsfs" ino=4026532944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.269110][ T40] audit: type=1400 audit(1767203039.839:964): avc: denied { open } for pid=6832 comm="syz.2.243" path="ipc:[4026532944]" dev="nsfs" ino=4026532944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.280057][ T40] audit: type=1400 audit(1767203039.848:965): avc: denied { create } for pid=6832 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.289677][ T40] audit: type=1400 audit(1767203039.848:966): avc: denied { ioctl } for pid=6832 comm="syz.2.243" path="socket:[14470]" dev="sockfs" ino=14470 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.300541][ T40] audit: type=1400 audit(1767203039.848:967): avc: denied { write } for pid=6832 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.309278][ T40] audit: type=1400 audit(1767203039.848:968): avc: denied { nlmsg_write } for pid=6832 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.318983][ T40] audit: type=1401 audit(1767203039.876:969): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 83.319256][ T40] audit: type=1400 audit(1767203039.895:970): avc: denied { prog_run } for pid=6837 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.359154][ T40] audit: type=1400 audit(1767203039.923:971): avc: denied { create } for pid=6837 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.363432][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.502218][ T6853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.505805][ T6853] block device autoloading is deprecated and will be removed. [ 83.528365][ T6847] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 83.621612][ T6867] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 83.647814][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 83.717002][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.717057][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 83.919759][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 84.080952][ T10] usb 8-1: no configurations [ 84.083156][ T10] usb 8-1: can't read configurations, error -22 [ 84.219251][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 84.229932][ T6022] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.367160][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 84.380406][ T10] usb 8-1: no configurations [ 84.382101][ T10] usb 8-1: can't read configurations, error -22 [ 84.384628][ T10] usb usb8-port1: attempt power cycle [ 84.401098][ T6022] usb 5-1: Using ep0 maxpacket: 8 [ 84.405689][ T6022] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 84.409023][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.411921][ T6022] usb 5-1: Product: syz [ 84.413446][ T6022] usb 5-1: Manufacturer: syz [ 84.415071][ T6022] usb 5-1: SerialNumber: syz [ 84.420240][ T6022] usb 5-1: config 0 descriptor?? [ 84.639451][ T6022] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.738615][ T6890] openvswitch: netlink: Message has 8 unknown bytes. [ 84.754214][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.776603][ T10] usb 8-1: no configurations [ 84.778514][ T10] usb 8-1: can't read configurations, error -22 [ 84.786565][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 84.836045][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 84.840359][ T6894] netlink: 52 bytes leftover after parsing attributes in process `syz.2.263'. [ 84.843371][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 84.887742][ T6898] syzkaller0: entered promiscuous mode [ 84.889825][ T6898] syzkaller0: entered allmulticast mode [ 84.914630][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.937062][ T10] usb 8-1: no configurations [ 84.938666][ T10] usb 8-1: can't read configurations, error -22 [ 84.940831][ T10] usb usb8-port1: unable to enumerate USB device [ 85.075319][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.263903][ T60] usb 6-1: USB disconnect, device number 2 [ 85.270498][ T60] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 85.644027][ T6917] program syz.2.271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.738419][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.772428][ T6022] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 85.931065][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.931089][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 85.936609][ T60] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.940311][ T60] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.943587][ T60] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.946509][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.950959][ T6914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.956077][ T60] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.178581][ T10] usb 6-1: USB disconnect, device number 3 [ 86.593586][ T6933] overlayfs: conflicting options: userxattr,metacopy=on [ 86.710317][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 86.730188][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 86.986032][ T6083] usb 5-1: USB disconnect, device number 8 [ 87.012168][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 87.014404][ T1112] ata1: failed to read log page 10h (errno=-5) [ 87.016420][ T1112] ata1.00: exception Emask 0x1 SAct 0x200000 SErr 0x0 action 0x0 [ 87.019078][ T1112] ata1.00: irq_stat 0x40000000 [ 87.020685][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 87.022800][ T1112] ata1.00: cmd 61/18:a8:6e:06:10/00:00:00:00:00/40 tag 21 ncq dma 12288 out [ 87.022800][ T1112] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 87.028543][ T1112] ata1.00: status: { DRDY } [ 87.030859][ T1112] ata1.00: configured for UDMA/100 [ 87.032973][ T1112] ata1: EH complete [ 87.199704][ T6985] syz.0.291 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.225876][ T6022] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.281175][ T6991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41515 sclass=netlink_route_socket pid=6991 comm=syz.2.294 [ 87.407347][ T6022] usb 6-1: Using ep0 maxpacket: 8 [ 87.410607][ T6022] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 87.414512][ T6022] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.418754][ T6022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.422511][ T6022] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.435163][ T6022] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.440634][ T6022] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.444161][ T6022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.665272][ T6022] usb 6-1: GET_CAPABILITIES returned 0 [ 87.667264][ T6022] usbtmc 6-1:16.0: can't read capabilities [ 87.696223][ T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 87.879469][ T60] usb 7-1: config index 0 descriptor too short (expected 12848, got 45) [ 87.885147][ T60] usb 7-1: config 109 has an invalid descriptor of length 105, skipping remainder of the config [ 87.889865][ T60] usb 7-1: config 109 has 0 interfaces, different from the descriptor's value: 10 [ 87.893800][ T60] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 87.897668][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.982342][ T10] usb 6-1: USB disconnect, device number 4 [ 88.074559][ T7009] kAFS: No cell specified [ 88.081711][ T7009] overlay: Bad value for 'nfs_export' [ 88.131519][ T60] usb 7-1: string descriptor 0 read error: -71 [ 88.135803][ T60] usb 7-1: USB disconnect, device number 5 [ 88.156348][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 88.166952][ T5945] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.618803][ T40] kauditd_printk_skb: 188 callbacks suppressed [ 88.618817][ T40] audit: type=1400 audit(1767203044.858:1160): avc: denied { ioctl } for pid=7022 comm="syz.3.305" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16831 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.631991][ T40] audit: type=1400 audit(1767203044.868:1161): avc: denied { perfmon } for pid=7022 comm="syz.3.305" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.640255][ T40] audit: type=1400 audit(1767203044.868:1162): avc: denied { prog_run } for pid=7022 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.660669][ T7023] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.699312][ T40] audit: type=1400 audit(1767203044.933:1163): avc: denied { create } for pid=7029 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.707498][ T40] audit: type=1400 audit(1767203044.933:1164): avc: denied { getopt } for pid=7029 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.717609][ T40] audit: type=1400 audit(1767203044.943:1165): avc: denied { mount } for pid=7028 comm="syz.2.306" name="/" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.729470][ T40] audit: type=1400 audit(1767203044.943:1166): avc: denied { module_request } for pid=7029 comm="syz.3.307" kmod="tcp-ulp-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 88.738427][ T40] audit: type=1400 audit(1767203044.952:1167): avc: denied { unmount } for pid=7028 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 88.744923][ T40] audit: type=1400 audit(1767203044.952:1168): avc: denied { map } for pid=7028 comm="syz.2.306" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.752334][ T40] audit: type=1400 audit(1767203044.952:1169): avc: denied { execute } for pid=7028 comm="syz.2.306" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.847484][ T7043] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 88.920458][ T7052] __nla_validate_parse: 4 callbacks suppressed [ 88.920469][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 89.147936][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 89.152299][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 90.127735][ T7095] lo speed is unknown, defaulting to 1000 [ 90.134509][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.325'. [ 90.231697][ T6022] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.396433][ T6022] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.400409][ T6022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.409388][ T6022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.412681][ T6022] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.419274][ T6022] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.422295][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.430281][ T6022] usb 7-1: config 0 descriptor?? [ 90.476643][ T7130] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.515174][ T7140] syz.0.340: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 90.633859][ T7162] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.646908][ T7165] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.735245][ T7176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 90.740211][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 90.779283][ T7184] qnx6: unable to set blocksize [ 90.846448][ T7192] tmpfs: Group quota inode hardlimit too large. [ 90.866752][ T6022] hid_parser_main: 4086 callbacks suppressed [ 90.866769][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.872765][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.876027][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.877098][ T5945] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 90.879249][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.885616][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.888608][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.891042][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.893545][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.896440][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.898880][ T6022] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 90.908778][ T6022] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 91.113125][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 91.116180][ T7207] netlink: 6 bytes leftover after parsing attributes in process `syz.0.361'. [ 91.256242][ T7219] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 91.260771][ T7219] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 91.398556][ T7228] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 91.705949][ T7270] usb usb8: usbfs: process 7270 (syz.3.369) did not claim interface 0 before use [ 91.857992][ T54] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 91.858064][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 91.938931][ T5945] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 92.008203][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.039765][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 92.039770][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 92.043634][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 92.046708][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.049436][ T10] usb 6-1: Product: syz [ 92.051125][ T10] usb 6-1: Manufacturer: syz [ 92.051962][ T54] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.052787][ T10] usb 6-1: SerialNumber: syz [ 92.056239][ T54] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.060214][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 92.061690][ T54] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.065111][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 92.067630][ T54] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.076082][ T54] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.080033][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.207572][ T7300] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 92.211053][ T7300] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 92.217521][ T7301] tipc: Started in network mode [ 92.219580][ T7301] tipc: Node identity 080211000001, cluster identity 4711 [ 92.222639][ T7301] tipc: Enabled bearer , priority 0 [ 92.285765][ T5945] Bluetooth: hci0: Unknown advertising packet type: 0x17 [ 92.285801][ T5945] Bluetooth: hci0: Malformed LE Event: 0x0d [ 92.286025][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 92.293024][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 92.295390][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 92.297879][ T10] r8152-cfgselector 6-1: bad CDC descriptors [ 92.303335][ T54] usb 5-1: GET_CAPABILITIES returned 0 [ 92.305168][ T10] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 92.309467][ T54] usbtmc 5-1:16.0: can't read capabilities [ 92.318180][ T29] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 92.531175][ T7245] netlink: 152 bytes leftover after parsing attributes in process `syz.0.368'. [ 92.540765][ T10] usb 5-1: USB disconnect, device number 9 [ 92.742852][ T7320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 92.745118][ T7320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 92.747795][ T7320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 92.926555][ T7331] Bluetooth: MGMT ver 1.23 [ 92.926791][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 92.938982][ T7331] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 92.943509][ T7331] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 92.946745][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.1.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.950811][ T7331] Tainted: [L]=SOFTLOCKUP [ 92.952529][ T7331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.956589][ T7331] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 92.958807][ T7331] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 92.966067][ T7331] RSP: 0018:ffffc90004affae0 EFLAGS: 00010202 [ 92.968539][ T7331] RAX: dffffc0000000000 RBX: ffff88802c36d780 RCX: ffffc9000c001000 [ 92.971645][ T7331] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 92.974639][ T7331] RBP: ffff88802c36d818 R08: 0000000000000005 R09: 0000000000000000 [ 92.977748][ T7331] R10: 00000000ffffffea R11: ffff888056592ff0 R12: 1ffff9200095ff6b [ 92.980692][ T7331] R13: 0000000000000000 R14: ffff88802a3dce40 R15: 0000000000000038 [ 92.983742][ T7331] FS: 00007f1706d816c0(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 92.987218][ T7331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.989788][ T7331] CR2: 000000110c2aa1d9 CR3: 000000003c741000 CR4: 0000000000352ef0 [ 92.992866][ T7331] Call Trace: [ 92.994174][ T7331] [ 92.995302][ T7331] __kernfs_new_node+0x7b4/0x990 [ 92.997261][ T7331] ? __pfx___kernfs_new_node+0x10/0x10 [ 92.999330][ T7331] ? find_held_lock+0x2b/0x80 [ 93.001200][ T7331] ? kernfs_root+0xee/0x2a0 [ 93.002944][ T7331] kernfs_new_node+0x13c/0x1e0 [ 93.004783][ T7331] ? kasan_save_track+0x14/0x30 [ 93.006754][ T7331] kernfs_create_dir_ns+0x4c/0x1a0 [ 93.008881][ T7331] cgroup_mkdir+0x40f/0x12e0 [ 93.010633][ T7331] ? __pfx_cgroup_mkdir+0x10/0x10 [ 93.012618][ T7331] kernfs_iop_mkdir+0x111/0x190 [ 93.014519][ T7331] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 93.016531][ T7331] vfs_mkdir+0x731/0xb60 [ 93.018165][ T7331] do_mkdirat+0x442/0x5e0 [ 93.019868][ T7331] ? __pfx_do_mkdirat+0x10/0x10 [ 93.021848][ T7331] ? getname_flags.part.0+0x1c5/0x550 [ 93.023929][ T7331] __x64_sys_mkdirat+0x83/0xb0 [ 93.025743][ T7331] do_syscall_64+0xcd/0xf80 [ 93.027626][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.029925][ T7331] RIP: 0033:0x7f1705f8f7c9 [ 93.031608][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.038995][ T7331] RSP: 002b:00007f1706d81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 93.042288][ T7331] RAX: ffffffffffffffda RBX: 00007f17061e5fa0 RCX: 00007f1705f8f7c9 [ 93.045273][ T7331] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 93.048340][ T7331] RBP: 00007f1706013f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.051406][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.054365][ T7331] R13: 00007f17061e6038 R14: 00007f17061e5fa0 R15: 00007ffc73e52f38 [ 93.057508][ T7331] [ 93.058836][ T7331] Modules linked in: [ 93.061031][ T7331] ---[ end trace 0000000000000000 ]--- [ 93.064267][ T7333] program syz.1.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.066583][ T7331] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 93.069682][ T7331] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 93.077139][ T7331] RSP: 0018:ffffc90004affae0 EFLAGS: 00010202 [ 93.079812][ T7331] RAX: dffffc0000000000 RBX: ffff88802c36d780 RCX: ffffc9000c001000 [ 93.082920][ T7331] RDX: 0000000000000007 RSI: ffffffff82494a4f RDI: 0000000000000038 [ 93.086245][ T7331] RBP: ffff88802c36d818 R08: 0000000000000005 R09: 0000000000000000 [ 93.089960][ T7331] R10: 00000000ffffffea R11: ffff888056592ff0 R12: 1ffff9200095ff6b [ 93.093456][ T7331] R13: 0000000000000000 R14: ffff88802a3dce40 R15: 0000000000000038 [ 93.096919][ T7331] FS: 00007f1706d816c0(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 93.101040][ T7331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.103634][ T7331] CR2: 000000110c2aa1d9 CR3: 000000003c741000 CR4: 0000000000352ef0 [ 93.107113][ T7331] Kernel panic - not syncing: Fatal exception [ 93.110593][ T7331] Kernel Offset: disabled [ 93.112519][ T7331] Rebooting in 86400 seconds..