last executing test programs: 2m8.966705213s ago: executing program 0 (id=75): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000010000000000000000000000000000000000000000000400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$sysctl(r4, &(0x7f0000000400)='0\x00', 0x2) r5 = fanotify_init(0x8, 0x80000) fanotify_mark(r5, 0x1, 0x8001021, r4, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000040)="a6f472d4516ff6e67907e87eaf6ff12037ae9abf4f9d1aae60ed46257759", &(0x7f00000000c0)=""/245}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0500000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000010000000000000000000000000000000000000000000400"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r2}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) (async) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) dup(r3) (async) write$sysctl(r4, &(0x7f0000000400)='0\x00', 0x2) (async) fanotify_init(0x8, 0x80000) (async) fanotify_mark(r5, 0x1, 0x8001021, r4, 0x0) (async) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000040)="a6f472d4516ff6e67907e87eaf6ff12037ae9abf4f9d1aae60ed46257759", &(0x7f00000000c0)=""/245}, 0x20) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) getsockname$l2tp6(r0, 0x0, &(0x7f0000000080)) (async) 2m8.871205922s ago: executing program 0 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0xfffffe3d}], 0x1, 0x4, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002c40), 0x8000, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002cc0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002d00)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000002e00)={&(0x7f0000002c80), 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002bbd7000fedbdf251000000008000900ffffffff4800018014000200626f6e645f736c6176655f30000300000000020064766d7270310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002006970365f767469300000000000000000080007000000000008000600000000000800090010000000"], 0x7c}, 0x1, 0x0, 0x0, 0x1010}, 0x88) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r2, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000c80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f40)=@newtaction={0x1ce0, 0x30, 0x12f, 0x0, 0x0, {}, [{0x670, 0x1, [@m_mirred={0x104, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x3a, 0x6, 0x800, 0x80000001}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5, 0x20000000, 0xa, 0x7}, 0x1, r12}}]}, {0x95, 0x6, "462df9afbde9c78ccfbc178094b6f363c71d51a800dfb7d2230302aa714c8613c54e31c6a2130ded7382eda1f058eb41e55d78eda18fc504f8ffb8ad3df624a266fc6a524d88d05eff73a4ca92970013a2200b9494e184e5de9607e5326a69fe5c263c42fa01360b7091232aa38f4f0d72412685d23814cec870d559e96a651f13b1378f3ded4f228176fa6705f864e53a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe4, 0x1d, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7fff, 0x2, 0xfffffff7, 0x2}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xd7a}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xd}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x1, 0x5, 0x4cda, 0x79f}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xa}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x90}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x17fe, 0x0, 0x10000000, 0x5, 0x2}, 0x1}}]}, {0x26, 0x6, "14d7f76a08f82acc59c64119d5de6cd1bdb55c1a4212b8d52dc2e0a5b3f47994f309"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xa0, 0x14, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x184e, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x9bb, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x24b6}}]}, {0x4e, 0x6, "e71302a33aba9e3f9e79b25bd7c104733309d61622cf9fe2e8760f3f52e67f276eda53f05eb189d9878eded39386dc6d957c474978743da69a56d96886ca47bd6d791da8fede7fea9840"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_csum={0x104, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0x6, 0x5, 0x5}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x2, 0xfffffffd, 0xffffcf71}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff6144, 0x6bef, 0xffffffffdffffff0, 0x9}, 0x11}}]}, {0x82, 0x6, "421fad18952ea769f78e5f6b637de370bedd8544bbec75d9234ba401490edb1d1133988ffb47a8654207a3cdf348b0c9dc605a81c0262992291363ca2571b3d7daa89c85a8b9b5bfb45e4268c6d434bc2142e3cd106d46dcfe44af432745e0b9a35fb51ad1774a1d2455ec77754833d4c4763f54c192c523abb7cd617051"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x11c, 0x18, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xc0, 0xfffffff7, 0x5, 0x7, 0x5ee}}]}, {0xd8, 0x6, "576977a7d3f70706bb3f5cc7a5d3f8c923b9afe1820acd90f5921a07bd6f98449d71b9b97262f6781d56b499d7742fade7508b67b1fe07095421cda40880a3d65b3c38d71a2956e121fb69b7522fdc7118a5a781fc6980e75932506af1bae24a6586439f9e5db6229cad607389e546dbeb150c84b57b14623bc54732681b8b2046dcfadd0bd2431283b0f9e3551c502b2f6b961f34a902113ef3580528f1b8dcc9e50bc57b1d3ceb7dfa5be89e8c3182151edecb92139db477eaac40a22557344e14680353fc8c722cea685429dbb87d98aa9fe5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x1c4, 0x7, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x5, 0x10000000, 0x2, 0x1}, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8f, 0x1, 0x3, 0x380000}, @broadcast, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x6, 0x2, 0x3, 0x2}, @loopback, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x10000000, 0x3, 0x5}, @remote, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xff, 0x0, 0x4, 0x8}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0xc664bb258d17070e, 0xf423, 0x48}, @multicast1, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfdb, 0xd08, 0x8, 0x0, 0x100}, @rand_addr=0x64010100, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x100, 0x8, 0x9, 0xd1}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x70000, 0x6, 0x7fffffff, 0x7fffffff}, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xff, 0x5, 0x185, 0x1}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}]}, {0xb, 0x6, "c0424e939d0311"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x165c, 0x1, [@m_xt={0x220, 0x8, 0x0, 0x0, {{0x7}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xc6, 0x6, {0x7, 'nat\x00', 0x8, 0x1, "ae04c38b79d797c0330a2a2472dd9bea290032272eeda6ad1d72d3ebb594e30024108deba5c700be8c544c976cb415d16f957c020e11601eede0c24e4a6c38a06928544ad9f3fd66ca8d6b5a126be1c9f4c8c04f5e0f50b266db545ed444c9dc89721c2547317203b268edfef51898bff13ed25d59e7945555548cff0177a5735c5f9b3c4ff176d3304f832722f60df7afee2e26461e1445de0cdbcd"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0xa1, 0x6, "328dd71e65d468c9259f1add1accc9be14ed9abcb30e44cea4ed9e6c2dabb8872275621ca0f2ab3f40f5a571a0947921ea5ec752e5f0031617969ae7c3b7e2930245897d0d69ae1d35110210d465fdfa3e5cf51e9fac1569216e03096e7e54552d0b60195956733fc97864a908a942a120148a4cb26c8e1cb81a57e5d8100dd113f9ac5b706896adb4fffbbc761b11728d15c0da348e1ab6b6a70646ac"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x80, 0xd, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1, 0x20000000, 0xdc, 0x80000000}}]}, {0x3b, 0x6, "fa6267ba8b2eab33d7deb3d473abdff4949b353b29e251ee2bc938d44555c988c1a0f45bff01a1e1d1b5409137e8fc5f0be1201abac000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x10b4, 0x1a, 0x0, 0x0, {{0xf}, {0x84, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x10001}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x373bb94e, 0x1, 0x0, 0xfd10, 0xfffffffe}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1ff, 0x101, 0x10000000, 0x3, 0x893}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x1004, 0x6, "4e12a295534afc0fe1823832d9555947d00a7a30e48cac0e5a31d5164dc045ccf544f7ae07bf08a1dd0d7caf6a4d62969877eee0065e77767cce21213fdb8ba8fd7e3fd2100c1528091cb927f8050836e0d9f66663e68c991c5b617fc7f4a1bd17f806e1ae69cc8333299c787b1319d05018417edfc4881f2d5cba6a62ed82569f3f9d858f23a6426548dd34e34290bd0604dd29d6c1f802b1f7a9c25b41e31f561f5e31f3258b04afd0bab2de31f320852b8dd8fcc8d5e7b65ca81c1428ee0110970118ef26f7fcc70ba7f3be8a8022df68d780313222058bd1ee25148c3d208a86167a41a6b59249f6f10d0aaa7e7b5f5772052effef32650d15dc3e2619e2e6a7db4f4982de8d9f6a03536bd5bae99dd0da43d12a815672ad0792feb100b95707fe0837ae025a0903823c5049af6d83e950d823eaa279d74a9181f7fdf1974d2d3739601547dbeaecae9b4312375f783478a139ca9843d43cf498dbcd78b315d56e929c9e0f6eea0b872bb79c3af7869fb9a7d60969ce2514fb52b80d4b01ccaf24229efa7e491fbaa44ad7453b36eea88007116f01729dfa1b0c863a82cc82e08fa4509b768a3d92a4c0494c8f1d114b330b4b6813e6fb3bae629e03c9843e8da935c0294bf2612b1824fed64e0bb3375fd3d9408728c1655303c1c4aef1fdc3b41b6bca35fc793c2a2034cee6613f5f851c6698411d2b8ed01992acdb54db2cf32181bf420b1109bd93c295f40ec3eb0db594d9bbcd7c79d1a7fb7da651ac2455b1f66e20a59098c7d758032a1343bc88ca8a3bdd42956f06e60e6c0e935ffa2dbac8e97febc56114e9ca096c1e3e1fe840b65328e2a64c5c842dfea586711ac9cceb36da7ac60d6ecdee341449be9006531e48ac69a0bf22d5ebfd682f3c7e4ec166dfaa47dba2c3659f1ba4e378bb902a801671fa1741dce32563ed38b52d7a901426980b8e562114118e7163a57946f28bdd3493e69f116bb4ea09a715172ce27418ec461098b32a75b7d41a9d7f0b89f94948784f1b967a12802ced4a51bdeff78083ec709f9936465182b5f5daed8bdd64cce6f323ff866117ee3d819e907841f19cf1eee540af4b86cc60806805efea57a7f867b925d2bcb09605a5c504fcdb8bd582d9246d90317ba085ba83a586e31974ac777fbddb649523b49a5a37c97140cd2738867d10908ce86eead1005bb9b71be4f9db3e520fe4ec52c6196f32c295e0c84ca9a0c759e7e842564b5e9af76d8c4d27cd9f6d7feeee6c50bc993d0121a2b66c22fb731f9b6bec188c5671ab085881916c23bb6290b2f111b0f4f03fc8f25be7c5dc1ff65dc2666c2ecfb45aac6a6c4782effce189418638140be2919a4c1e9e6dcac908eee18f46cebe03ebdee6115b0cea6b37c0b9a1c9c1a2aa8378926833f3656dc04db71a96cb58ce5ef9f221e68cab1f71c81d0595847f3d2653ef097897e348d2f134ff88b4a9dce155d8982c9c48deb2150a0bee299dc6193649082380de24a80abc4a3d0598dd3d62b497e72c272e55e06c9d486e9f11501916eee9a29ff1aa4bf763141f769d61b35df9b609a00fbd6be0c39bdef3821bfbc32ceeb66e01e804f2af3dd3cf030b7e635d411e519b4500399467abfd550918121ce5eea5f870aa023129d8872379df643825730909df2e2ecae745461f5b2bf41ee3a656eec5ceaff111f9f0ab4468aa98a8434a0a1e9ce3348036fabaea35263079b650dd30f6d200173f672a2b3d04ecdec143b5c7701d1d0e949025e29625c2b31f718987dba4315c5aeb23c1f473aaa90fd78ad1ae856d48105b6cf5f704817808a0bcade22bc37fdb770a1b5ae7d5a88a039732dc984a17b5971ef4ce9ce930e0c6bd95872fa88bfab2970f61af9824b9fbf0a5d5f8079bfaf4905ec04f253781636e80d795627835f97d761c000911e828010999887901a598b88ffea54bdff6b8eb968acc602ca0ceded9c3f42ae513882bb17e09987541d0aa8ee1003c81aeae8316e586f3180d32e06f7ec48a9ba2ca098e945f9c8b60a1f96346079cbea3849996c89c199ce7a1ffd67610edf922f866d2b121760a802cb3402431f642480ba4f206df3980dfd1f22876824efe1924cfcb1e6323bdb07c684ccdf4710fda346250325d36a965063c2d3a18b62fd7dbd4193acdb5e2514b2bebb3505a70862fcde89414f29b17c5b6195f644b0367048146ef6964d88abe08a56879864373540b86146bdf18d5b982fcdae0f8f51a4cfe7e4f28f9692ea5350fa2cae28c8927bb3d5cf08ed2f4c8538951e235b1e2a0d5369edd2ae6f77320d1652679a1f430fbf23e98112dab81790e6796d1e827d46b00a095bb89ca66e71423cb18abc33731356dc9469d0e1f0d0d4278e869a9dd03638382cf62b81f82f9856cad2c3a94755485f773bc02fe03adc040bda55eb34205768b37f78f6abdfa9aa2fea36823e16ac4615f49d9833731a382721593e350a42b9b47e57d35db0a3a93673ca311947acd508cfb45d3f548b00519e518e414907efc447cf08461672158fc5c85c5a0a3c92bdeafd2fc8f94954cf89eba914e6acbc8952996d2afeb4090de025344357819ef81a340b5e946aa55584786291b7ca4327a73a9fb9b19219c931767a4d3da228084535551672a824d73f26314f869c3c9389f2d60be4a8dd25a3e529f4eb762615c065e018f7ab83acf03a58c63d78b88afc7c4c97547aa51c7b1aee56af2304921b53b617648c3bcefd2a6b3dc062e746440919e7ece5c67b069cc185ddbf9e5fa055c35959ff98f7d96543c9d0eddfef91854ba8d01520c1fb35e4a49ccd2d7b8d7c56d4380eec588122c93d560735dd7a11a84121831e00421c417fa352b1fb454175ea459cfc42f0a06ac9f28d96adbed9d3e363c4f4cc4bd6ab27adc2c98982c1def5bd7770e511e55eb9852c53f365edb863cb3c58c8e40a95e835549054874fa88fa266d8e8ef726230f54db3cac3120a901b73a1c64327ce8794ddadadcdf7ae528d631d8cb6bf23cbd0da7d863d59e803d1b7bddbdfa2231fc8c7db5655064e37a1daed8d5c142d3e53d21c63ae7c466a7f7f43e7e4258b11278436aa1858047c55027a246e2fdad63b91b29b24f5b71711912a64879f961f139f6bc465809e527cfb09219920aa14efbb923ccf2797c06fbc5723071c64f2edba7ee2ca499cec9f59824f44688ca4bea618d60823eac82674c07704c495dc84329bafae5c1279154911a49adffc87a7db8fa816c749a5829c57df16a9e7b0125204c26deeca0ebf77c0cf22270acb8f068648f2897dbeaf57a76b2b94236565db3258910e213b7e03538a22224fa03aef190eac6aad59335b9d5ca3109bb9ddda46837f10515f1b2bc54017d169079f84a1f56cc63dc4d4a2f2d35513193df8638858736d12d14d267747c778b709bc85513defb2214cebbad8cdb2905784cfe2da26a7a9cadac514c4c85056b732db6aabdde4a811b61e7edbbbaae86d187863a9f7c07a0c29cf4668698ab8df2cbb4032e5b74b9c82fb4a20bd06b325859b15d152a2af409f7bf369576d5fd2a26ba6457b5f16d0e1573465fd6a32bf3bd7b3382429ce4b4f545233bd916002663f6b78efb8c843ff6eebc418415c65ca37463b300dda20a3952b8421345a63c8ade2419657a9979a13e039cc0516cb9788ac7203c5496db5cd9ba0288df4d1796c9ba8bc6a394f42be9c0395966391e302ecda5e502244e2f62fae9dfd1dea8e477488056d4303b5240ff81116c30906da690e34c74bcbeb3c559814c8a3dc9e5a5c66fe463bc0ee1d95ff6b526d60ec5e4cd9e87d9841d3a3c493c83014d15cc273ad9d38a239e64e66eb17e01eee5c10791879c5930a9f192c0b927adea44de2f5e9d751b88dddd18d22381badc8a7f496a687ec05734e5dd8d78cc133f17967a7797fcee909b00ebfdb4d7ce8610a2692505dd3539335f3d168d42d4508fadd8a4e5d19d0e55cd08eb6cb5d278f1605ab3fee70571ab0fa780d5d48eb714585d982fa5795aa905fec5e9b4da95d41831cd51bdff48626e3a62f7e2481bb8a3d91728a37a011842a8e02b4fd13d155ac084b57088cb2649bd0309e7582eb49be8294f12599c7c78f4dfeb537e4ddfce04c46e5e42741c33cf4df1a38118e881d50a200be34fa6b42e3b0c3a8ec1932699ca4f7fc67673ee16120118d920d9bdb774b86432af1752f411146d8cbdebf2708f72cbd8a01450213a702f959267de0b27e753ff357df420c0f50a5840cacb17b4e5d347489db0458c4e9a0d2a7752d45c4964a1d426ef936a69a1d28b8b16c31de212999c3ded4d3783b94342b4c64d2604505e519a1b4cf9d13bc8a5d815e77721ed7260aa4a338e841743c543a564880f72a1cda160b2b2514107e711c6b572c259998251683b933bbfb204bc8f7c8882422b0d5ed6b59a389a0e3cd833d75c59c4872ef65d66e4b9414ff8a00c124e7f41f4c7c11405ff881fadb5d228fe9b292db564d5cf3137f231f9bbd7bdf21e29e9f8bc165a376b0d43103b907248f64775a1beab806f31c3eb88a5585de02490f213baa15caf506b6751f750088b5c59bb8980de794dddf1e64b35a1623af1e546fc14f3554fa24bdc5f26000d6fee735c0fbee9434da10c804822266f9186984890552977103b4174701bf05c2072e422e8be0e6239d0ee6beee758b2519df16c353700235bffb685a72803bc58d4c35d8007422ddb05217e260c84077385ed3c754f3dc21c57103ef4cd448d0fcc07cfcad5b37eee2a7e64801f7d8c3d4d6eb1ea35833d66f06b0a46c2a725b48265b87b5e6d9cec42dc0deb9de9b0d8bc2ef7d3ddfcfe49d2998cb94059fbc0103584b3a0d76894dbd416d6c20d2fc02e41a3885e69d4941becccc6ced4098b43db28325a2b51bd2e4e565ec9df6a897199c176ba0054609a8095289dff18e1959518be3a045f60b838c49505933932db6fb35705f9d35938306f332a03a626a95027bb1948c2a34146cdf447a7d5188ff956acb673177e59dc9b41db48bf3ae0065fbf0344408911531b944ad9a8d0d9d716d1ff1103744d3d7b28d9dac941c368ca0d4a88225ecb2e4c180f070fe33f28c392fefc63edd11079bef0d89bbb595934851300834f6bf11d696c2019e95831a9a4f0c546e957cb50f00c3540a9205f084d2723d174eaaaae4dfb89f54cb8d2c3091679b996bd7da5b2c3b2d028faaaa0577d28308dcdeadc51fde6bd84cf83d6515401891be61ddbfde788c3a18387db25d9c7a568d0da9ed1825d51910d8606369130e0ebf6c95c9237fcb6c7e33521f06c1867381adbcf8ec9aa116661d789e07f4e0a5fe8d7e67a682e92d55c0824172dd52b0b4c6a292b0be8f6c4509248e3d2747f2eb084570885b9f0cc60049b145836e249414564409a3929e4cbd31a1a6060f391f579a513e55365052a946097b0795ee0653389b0ca3c15ba270a65de00a0d8c4aaa88e72181c76fd569c38817c414905fa51589be560692254a2e98aaf8a10be91df62395ac8418ccd7b1967b253fe17d7c2ba3848be87dd9a8c953f4d4b7ed02b7051d750b7e1c9101653cb4c4355beb73ca3b237ca2656153620f0954044879d0cdfaa958af68a8b9f4eac05d3efb3994b9dfa7b73c61110347110a9162e95d4db216179a812d3f7c60265a32d1d22c803b4fa7be8d573f5da08feed6b6139d2a69510e7c46b229ce58a2ab8e8e3e533ffaea98897eec016ff908381016946f71930f7ff14733aa079c5a20e2331ae7c07e320e7f0436165217a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xac, 0x14, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x13, 0x3, 'batadv_slave_0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7fffffff, 0x2, 0xf2f, 0x8}}]}, {0x51, 0x6, "1979b5c74c5453eb941211004a46649ae0c86fa94aff788860de5f9b21f2d3a951c7af3026cf30fa948ad2867fb04abc33f0188faf79ba754bcbaf744fbb35433e714bbc477fea3ba930bb1de6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xf0, 0x1c, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffa}]}, {0xaa, 0x6, "81c0a7af56d3ef0f2877d99a1a1d9eb826978612e76d7ce5b158986537ad521a7c9603c411a2281fa984b03477d939f4e14999f6193bbb8f1e003a00739dab35b352523298f2a6f0f49e6280228f0aba950a93c1a025d7dd01e947d62e6d0d89661e42cec24dc281089bb7bf59007707c4afc47bfe92d7962c80dd03b5d028cc2755ab439a81a03454f28deaa17d555df2be2b55259211b52b7827ccdff5f4f5db2199d46bbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x168, 0x1, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xa863b6d, 0x2, 0x7, 0x6e5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0xffffffffffffffff, 0x1000, 0x400}}, @TCA_DEF_DATA={0x17, 0x3, './binderfs/binder0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6b8, 0x2, 0x0, 0x4, 0x4}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0xc, 0x3, '%$+.#%#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x5, 0x4, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd3, 0x9, 0x10000000, 0x80, 0xe32d}}]}, {0x8d, 0x6, "06d2ad289f2618ee16ac59bcb7e7f5ce35966802df1c0de7203e8efd4a2f12f239d870ee2ad98a4a4ecb8c5cebac12d9aac0c8535370c27177e0571b1d50b14e253d923ce9091e3390886d637687504a393327dfcd62275336480c93fcc13d5fe2d25232ca5817dbecb148ccb245e3a3816313c12f443326ab1c4bfeda664f819ff044531b299aff59"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1ce0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r16, @ANYBLOB="cafbee16c0e139ddc0dda08d1f182d1048d7b075b69b64b26b1dd3836490e0fcffd4c5e35ac3f465158641ef75ccda688a2ff1b941a379f81baca0931879fba22bc9bf2509e9c69ae88a8a0fdeb16783338cbcbf25f55f2555b22f059a7848da3310cf17c999bba01502e3404931126900ead037f4fd753d2d279b6804f4d60f365713728dac98e65cea872527a3d0d344390673b5cb042d7ab3af803b1e4323e98a01b370786930151878e06e29765edcd433f774e888ff9ca045ae824b54105b18fa1fadbdc11dbda3e9627fdf6a1bf3acfd60bcdb35c7e6ddf22f7f558fa39e3531"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff02000000000000110000000000000102009078ddff000060fd906300003a00000000000100000000c8b920d0084e3376ac1414aa1e520b4c951ee12e0000"], 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0x0, 0x7f, 0x44233, 0x7, 0x5, 0x941, 0x8001, 0x1005, 0xc, 0x200000000000005, 0x0, 0xfffffdfffffffffd], 0x200000, 0x80300}) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m8.361340383s ago: executing program 0 (id=77): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) 2m5.341628269s ago: executing program 0 (id=121): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110140000fcffffffffffffff00000095eb090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x1a1046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002020, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) fallocate(r0, 0x2, 0x8, 0x3) setrlimit(0x7, &(0x7f0000000400)) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 2m5.280862233s ago: executing program 0 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random="c6fb29748316"}) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000280)={r3, 0x3, &(0x7f0000000180)=[0x7, 0xafce, 0x7fff], &(0x7f00000001c0)=[0x2c, 0x7fffffff, 0x832, 0xa749], 0x20, 0x2, 0x81, &(0x7f0000000200)=[0x8000, 0xfff], &(0x7f0000000240)=[0x4, 0x10001, 0x0, 0x9, 0x8, 0x0]}) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random="c6fb29748316"}) (async) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000280)={r3, 0x3, &(0x7f0000000180)=[0x7, 0xafce, 0x7fff], &(0x7f00000001c0)=[0x2c, 0x7fffffff, 0x832, 0xa749], 0x20, 0x2, 0x81, &(0x7f0000000200)=[0x8000, 0xfff], &(0x7f0000000240)=[0x4, 0x10001, 0x0, 0x9, 0x8, 0x0]}) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) (async) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) (async) 2m4.941531385s ago: executing program 0 (id=128): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42850804}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x84000}) 2m4.874192004s ago: executing program 32 (id=128): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42850804}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000240)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x84000}) 3.978443457s ago: executing program 2 (id=1409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xfff, @bearer=@l2={'ib', 0x3a, 'pim6reg0\x00'}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20008844) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x62}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x84, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x4e, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x5, 0x8, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x7, 0x20, 0x1, 0x81}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000a00)={@remote, @empty, 0x0}, &(0x7f0000000a40)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xe4, 0x0, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x20, 0xb, 0x7}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000bc0)={'erspan0\x00', 0x0, 0x700, 0x700, 0xffffffff, 0x9, {{0x7, 0x4, 0x3, 0x14, 0x1c, 0x64, 0x0, 0x81, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @empty, {[@lsrr={0x83, 0x7, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @rand_addr, @broadcast}, &(0x7f0000000d00)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)={0x1f0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4}, 0x3d4af0e84583e484) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x168, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2214a505c8"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_SSID={0x15, 0x34, @random="791af766c40651fca1d1be9fabcb100479"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ccf554966cee33c2aca8b3c70a"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0xc040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001340)={&(0x7f0000001200), 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r1, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x408c0) r15 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001380), 0x620941, 0x0) ioctl$SIOCPNENABLEPIPE(r15, 0x89ed, 0x0) syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f00000013c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x40, 0x89, 0x7, 0x4}, {0x9, 0x5, 0x0, 0x2, 0x460, 0x81, 0x1d, 0xe6}, {0x9, 0x5, 0xc, 0x3, 0x40, 0x6, 0x7, 0xab}}}}}}]}}, 0x0) listen(r15, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r15, 0xc0189379, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(r15, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)=@ipv6_delroute={0x24, 0x19, 0x0, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, 0x1, 0xfd, 0x2, 0xc8, 0x2, 0x1800}, [@RTA_PRIORITY={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000400}, 0x4000) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r15, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, r17, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008021}, 0x20004000) setsockopt$RDS_GET_MR_FOR_DEST(r16, 0x114, 0x7, &(0x7f0000001740)={@pptp={0x18, 0x2, {0x3, @empty}}, {&(0x7f0000001680)=""/103, 0x67}, &(0x7f0000001700), 0x33}, 0xa0) 3.070591468s ago: executing program 3 (id=1420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000040)={0x1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) close(0x3) openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000000)={[{0x1, 0x3, 0x3, 0xc, 0x5, 0x2, 0xbe, 0xa, 0x5, 0xf, 0x7, 0x0, 0x303b}, {0x2, 0xcf45, 0xd, 0x72, 0xa, 0xd, 0x2, 0x86, 0x7, 0x7, 0xff, 0xdf, 0x7f}, {0xff, 0xfbff, 0x7, 0x83, 0xd5, 0x10, 0x9, 0x7, 0x9, 0x2a, 0x9a, 0x3, 0x100000001}], 0x2}) 2.450541395s ago: executing program 3 (id=1423): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000040f300800000000000000000000000007153e18460abde3578f30000000000002c00e5960000000000000000"], 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x2c}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006800010002000000fcffff7f00000000040000000c000200810000000400000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1000]}, 0x8, 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x25, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/224, 0xe0, 0x0, &(0x7f00000005c0)}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r5, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) preadv2(r7, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1, 0x1, 0x5, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x1f, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ce}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_reuseport=0x28, r2, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x1, 0xfffffff8, 0x6}, 0x10, r4, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[r5, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x5, 0x9, 0x6}, {0x1, 0x2, 0x5, 0x2}, {0x3, 0x5, 0xf, 0x8}, {0x0, 0x4, 0x6, 0x8}, {0x1, 0x3, 0xe, 0x2}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0xffffffff}, 0x94) 2.365031008s ago: executing program 3 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) unshare(0x2c040000) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x20000800) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) mlockall(0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) 1.918953713s ago: executing program 4 (id=1431): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = timerfd_create(0x0, 0x80800) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000090000104fcffffdbdf25000000000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) (async) clock_adjtime(0x0, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd, 0x801, 0x0, 0x20000000000}) (async) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffa000/0x4000)=nil) (async) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001cc000/0x4000)=nil, &(0x7f00001cf000/0x2000)=nil, 0x10000, 0x0, 0x0, 0x23a, 0x1, 0x1d, 0x46, 0xb}) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x174a41, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) 1.850895071s ago: executing program 4 (id=1433): r0 = syz_open_dev$vim2m(&(0x7f0000000b40), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000400)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f049}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x1, 0xf, 0x880}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) ioctl$CDROMVOLCTRL(r3, 0x30d, &(0x7f0000000080)={0xa2, 0x10, 0x8, 0xd}) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000000c0)={0xca, 0x7f, 0x2, 0x6, 0x1d, 0x7f}) 1.711114447s ago: executing program 4 (id=1435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000080) (async) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f00000001c0)=0x8001) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25df9bfc, {0x7, r9}}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x5) 1.710258059s ago: executing program 1 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) syz_emit_vhci(&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1004) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x600800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x5, 0xa, 0x0, 0x3}) 1.649791021s ago: executing program 1 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100001d0f7753f950b4c32e355611b1e8a2a0001000000ffdbdf2580000000", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1.649388228s ago: executing program 1 (id=1438): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x12) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "ef5204a8a865ccd28698de87b8225d2f979f576184d8c949598a9358796451b928c523e323587e02000000000000003132c7b13765ad45a390ab73f1b70ae861", 0x3e}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="eebf0745a6b3a388ca6c29d5d7988629", 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2a43008, &(0x7f0000000300)={[{@xino_off}, {@xino_on}], [{@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'FILE_C\x93ECK'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@uid_gt={'uid>', r0}}, {@subj_user={'subj_user', 0x3d, '&\x06\x00\x00\x00\x00\x00\x00'}}, {@uid_gt={'uid>', r0}}]}) 1.519964284s ago: executing program 4 (id=1439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x8fe, 0x3ff}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)={r6, 0xd9, "da596c91a65a83797c802ac7b1b6470afcdb11188897386fb33908b48d031e559e6a802908af178dc4de196508626af43e6808e76dade92ad85e3381439d4aecb216aa862277c17e3cd9003431ce78761a064e09ada209304462aff4203784f165f81cb8684bee009a308981d93f6b7703f49b4785e5a1a6a14780cfbe44cb08dae878405a89d7e8ffb186ef532967c24add29da8159da1f95cb2f25858ec9057794f922c286ad0e13ba65b2c8d256ca679ef0fd9193b001a1de1a4ea3c6d45841995ad513b4e1403bbfd101c157e18ed40b5ddd5633a531bf"}, &(0x7f0000000440)=0xe1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x8d, 0x0, 0x1}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.364652741s ago: executing program 1 (id=1440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000140)={0x17e}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0xfc, 0x200000000000000, 0x0}) 1.364344175s ago: executing program 1 (id=1441): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x71c}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$incfs(r3, &(0x7f00000021c0)='.pending_reads\x00', 0x10001, 0x0) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x208002, 0x48) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000003880)={0xe, 0x0, &(0x7f0000003740)=[{&(0x7f0000002240)=""/255, 0xff}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/36, 0x24}, {&(0x7f0000003380)=""/46, 0x2e}, {&(0x7f00000033c0)=""/69, 0x45}, {&(0x7f0000003440)=""/252, 0xfc}, {&(0x7f0000003540)=""/106, 0x6a}, {&(0x7f00000035c0)=""/178, 0xb2}, {&(0x7f0000003680)=""/154, 0x9a}], &(0x7f0000003800)=[0x8, 0xfffffffffffffffa, 0x68, 0x16, 0x1, 0xb, 0x8, 0x4, 0x9], 0x9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003c40)={0xffffffffffffffff, 0x0, 0xa9, 0xb3, &(0x7f00000038c0)="3f963b6c1982f0d6ede935e88f6e5470549662ae47edb7e9fb54b6b001efbd5c46b53d272728bd9fe362ac983ad9f1809a3a184d29d36761c080044b32c811d2e47c8e8a5422a90921a0389b92adf48074935a9c4e85baf1d9fd3fafeb712c47b3aca38228cfd46a34ae8cfbee975e704ecf5c507d08386771fa8a14a9f497d8de8eea921dbe45803d41e42d6e3b6b3749e680f6140aa1c74913540b8a33f24114fde53444d11afb6c", &(0x7f0000003980)=""/179, 0x3, 0x0, 0xe3, 0xc2, &(0x7f0000003a40)="71a25081ccafd518fce7c1541c1b55ca74653530853d1fef746de8c5e6eb78630b2acf27dd22c6a1f1ee3633ad1ada3f5423c554b59d59e4f8ddafc58be5196a2659172ac45b52e12315404d96bab59f19e97064eac25162d8289f189dcef07fda2df57191268e19e92021e28fd72189a32b54304b8117b901e725db344c8d2327374da2e02942b48df0cccd443cbf9a8f90b4ca6a61c30c065a25bc3840df6c0418d54bb03f8562ad68a9f6090ce1b2f673a62f2058e1c589d0241a2321313cb57cb50a179b20fec8dc2a6f64d7b21327112ab46de14b710843d40576c759c8a2c6f3", &(0x7f0000003b40)="7c0111f715121304ce204f1d7eae118bf924f284a0e744a338c7e816e07124d124886543be0a665081e3d0ee6dbb59f78dfc5d5161705203271157df4b587f9de73683125e8b06beaa85df1338f6bf2c40f2ca4a072d048bc5d710a641b7e27447c3e16edd5be94ca6ccc74b1df37e2227072f845c3f24756405763dbe079212b49633f124da7008f9253268b9903e67e6f925428c2403a8e2acfd7af7f5f632026f41271aab32e2f4e234a502b943cb51c03c247ee5690a2032c4de8480170bd0ca", 0x0, 0x0, 0xc}, 0x50) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000003cc0)={0x8f18, "ede696a4d055a7e9f256e41cc470fd4b21fb1893bfec9687a75e6a6ed4d76f88", 0x2, 0x1}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) ptrace$cont(0x3f, r2, 0x3, 0xffffffff) poll(&(0x7f0000003d00)=[{r4, 0x1000}, {r3, 0x8}, {r5, 0x100}, {r6, 0x160a}, {r6, 0xa}, {r6, 0x21}, {r3, 0x62}, {r5, 0x4285}], 0x8, 0x7) write$dsp(r4, &(0x7f0000003d40)="5afdf110203dd083a9803cb5f5a3685a55de1504f7c86ad45379337ed509cc2dfd36a5c202e6c7d026fda16d05050b49d4e38b8c94b678c68ae47b575f00a8a89081223fa68e12c2940dbad19199a30d8ebd1898c68b39f672d01de682ec7a", 0x5f) io_uring_enter(r0, 0x3c77, 0x7df4, 0x24, &(0x7f0000003dc0)={[0x6]}, 0x8) r7 = syz_open_dev$radio(&(0x7f0000003e00), 0x1, 0x2) ioctl$XFS_IOC_FSGROWFSDATA(r7, 0x4010586e, &(0x7f0000003e40)={0xffffffffffffffe5, 0x1}) fchdir(r7) landlock_restrict_self(r4, 0x355882dcd5fcd3e0) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000003e80), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r8, 0xc0485619, &(0x7f0000003ec0)={0x3, 0xb000, "be330b3802b9c1d8a11b3602f5d419278db2440ba914b26f", {0x3, 0x6}, 0x7}) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000005300)={&(0x7f0000005280)=[{&(0x7f0000003f40)="bd0304f8a89a895c6314e4e2069d49bab33e75c63c56019611f7543909a52f6cd7fc9ccc07b5dfae682591db70fab07d2f8009c7cb4c78a4f50b86d05c1701819c0f6b5a3a234052568dc555f2208ac7892a5653f9515939f80d7b63958720d555e206d6810581733435b911fb48fab86c6952e7e0e8cdb22c3c34d92db0007c63d1f6ea5f8ab10b6b3dbaacde829aaf64428d44b9f77ba908100834cd893821433e74d36038cb7c35fdd2da9f4e9e05a5d51062805834c62250862e3343e1a125618aced2ac170fcbde8fcce61e8287832005bc5022497dca9c62844ec9be3d0b91a934165675e1dd0ce9ea5c5ed7", 0xef}, {&(0x7f0000004040)="fe5f253b29d3f2db0d7cfc5b7e5892", 0xf}, {&(0x7f0000004080)="6b3d8af8c6431832a085b3475d66f6ae1cfe3875acba8e60dba070116d12cd87c589476dc024b2a34d7fb7729ae9768920c982ceabefb6415c8b78e0ac042a0e37de3443dd759c77953f053a7b890036e7c70b09b1b18ab766125d5b4b33aa9309eff4c1934dec91678c508aaaa95c3a54570e4ea1326b5ed3fe2fc1889266f454e6eed8fb0120c066c2667942edb67141be8a59b4fcbeddeb8410ac72f95048164b911eb697ce20cd94157118b60f91b9e22546458e0dce2e855de7e28f14cad6fdd79f9a225763015a2411f1bed7db30fe299a9a629745d1d500b06f095c67630debb9eb15b4eb", 0xe8}, {&(0x7f0000004180)="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", 0x1000}, {&(0x7f0000005180)="a1da5f39e5a2be44135b9365125221f3b7bbafd7fcd0f19cb1741db73ec255e8e34c0b0ab965780dc411fd028c0074e38f6dfe4ddfac83419fe558c6519085681ff99a1623e476905ac390fdc306ff7bc47b5accfe00ca5f5a883e2cacd515da75269f1c9a54b661f4467da6056182edd050c1ee9a0cf4625b526862f0226c90e739e89cb055c2f54a6dc1f91992723bf9826f8e53b1f62e81170005d26e80527ca7841117554b84497a1d87b8d60ed1b449b753b486469f9d43e3ca5e677702187f2520bf996f9e4eb1a13481eb", 0xce}], 0x5, 0xffff, 0x0, 0x2, 0xd72, 0x0, 0x2, 0x9}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000005380)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000005480)={&(0x7f00000053c0)=""/144, 0x90}) ptrace$getregs(0xc, r2, 0x7, &(0x7f00000054c0)=""/124) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000005580)={0x80000000, 0x0, &(0x7f0000005540)=[r9, r7, r4]}, 0x3) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000055c0)={0x100000, 0x0, {[0x25c3, 0x0, 0x2, 0x1000, 0x8, 0x6, 0x5, 0x7f]}}) renameat(r3, &(0x7f0000005640)='./file0\x00', 0xffffffffffffffff, &(0x7f00000056c0)='./file0\x00') 1.240475941s ago: executing program 1 (id=1442): r0 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_usb_control_io$lan78xx(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x0, 0x6, 0x67, {0x67, 0x22, "9d12cf198967c25696cdac623233aa3de211fa2adf5d05144bcfac2200bac85886617204b3388cb2e2d7cb2a304b932e001c81d0c85fb1e7b9274d8f1249c2df0dfe048289907d0d0ba9faab6e7668662990cd38b63471e462d0b9e7e42f4d2bfb3680c78f"}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="00034a0000004a0384628c78261004fed115405d2df1efc60f19918772f6ec75cbf60269f419452841d88df27225916b3fd5f115a69385e68ff6a291f295e005737b3b89ca5dab513c620bab4f376c70991a0cc0f0068a0c7099a856f5de945d9fbbcd7d6f65549a5cebec1b168a602fc4daad4624403b05859d589f5a37c14c93c65579d49e3e490000000000000006"]}, &(0x7f0000000680)={0x34, &(0x7f0000000400)={0x20, 0x18, 0xdf, "9f0662804170f38476072be8ee51ecbfa427958a948db2c03445a01f3a8d4ea76416d85c662a4068a0b98d5f6ea60b5e8a7a49d3e767445bcfcd694ccd11bbf07b27afe20a77927d527ae14033e1344229f6fc42d8406cddf7fbbffe2e773a64b661dbb46710e42610f75695ccae1c51bfdae2f2e1204dad3ea0e9c09d8f6806e001316e938e49c88805bd409bfd62e2404289934b8cca343f7213809cae1a5d262ccffda7d5414a27c3427a26982ff4bd6ce37575b14840e1f5b314dcf3cffe464b758b028ac876ed0170e53c6615ef4ec8f31af23bb9708950068b8f0ff1"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x2b}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0xf}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "893522a27775392e04069c6300d69813b65d68d5608d654f45d70a9426bad2e61fe15e3dbdffb122d917537ce5aaa2"}}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x202) write$dsp(r5, &(0x7f00000007c0)="5312a21db24e20cb0d1e75b2cf59583f3726fadd05da5595f770657ae161877b1fdee829ad3dfa23b8c1dd452786feff62cc4653623caf2f144efff88528f5fc4ccd75a482b9c67b334ab1f90578589199aaa7c000f94420183781a82cc2a35ab41abc9d3c957e70ea46720445b04626a0488a7a8c32f88b290fef299b285455", 0x80) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r7, &(0x7f0000000000)=""/35, 0x23) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000000a00)="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", 0x200, 0x200}]) 909.936076ms ago: executing program 2 (id=1443): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x200000, 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000040)=[0x7fff, 0x9], 0x2) (async) io_uring_setup(0x6dcb, &(0x7f0000000080)={0x0, 0x7846, 0x8000, 0x3, 0x18c, 0x0, r0}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0xe}) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000180)={0x3, 0x47f, @value=0x7}) (async) r1 = pidfd_getfd(r0, r0, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000001c0)={0x3, 0x2, 0x17}) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x1000) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000240)={0x2, 0x8, 0x2}) r3 = syz_open_dev$admmidi(&(0x7f0000000280), 0x17, 0x200100) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000003c0)=0x1, 0x4) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x6) (async) fstatfs(r2, &(0x7f0000000400)=""/37) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000900)={0x0, &(0x7f0000000440)=[@out_dx={0x6a, 0x28, {0xecae, 0x2}}, @cpuid={0x64, 0x18, {0x1000, 0x4}}, @nested_load_code={0x12e, 0x7d, {0x1, "f20f30c4e191fd0fb9800000c00f3235002000000f30460f38c9ad0f000000c74424001b000000c744240286d2bb75ff2c24f08381345b65110b2ef30f18c20f350fc7ac4600200000c744240000100000c74424027cfe0000c7442406000000000f011424"}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x0, 0x305}}, @code={0xa, 0x4d, {"36440fc75c6ef1c4e11dc6de0a0f00d4440f99a60c000000c4210d55d6f3470f2a0366b898000f00d00f01ca65670f01f70f20d835080000000f22d8"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x400, 0x807b}}, @wr_drn={0x68, 0x20, {0x7, 0x10000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x2808, 0x5, 0x6, 0x7}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_code={0x12e, 0x87, {0x1, "66b839018ed0460f0866baf80cb87ab69a8bef66bafc0c66ed48b8e3340000000000000f23d80f21f835800000900f23f8660f38240966baf80cb847357586ef66bafc0cb082eec4a23502744a00c483fd08a2001800009c36660f7d157a000000b9800000c00f3235000400000f30"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0xd9d5}}, @code={0xa, 0x62, {"400f01c2660f7e9200500000b9800000c00f3235000800000f30b805000000b9003000000f01d9b805000000b9000000000f01c1660fc7345366410f3880851f56feab36450f22c345f466b8ca000f00d0"}}, @set_irq_handler={0xc8, 0x20, {0xb9}}, @cpuid={0x64, 0x18, {0x2, 0xfff}}, @cpuid={0x64, 0x18, {0xe, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x35, 0x4, 0x9, 0x3}}, @wr_drn={0x68, 0x20, {0x7, 0xf}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @ro64=0x2400, 0x6, 0x7, 0x5355}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xb2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x493}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000940)={0x100000, 0x0, {[0xa000000000, 0x9, 0x200, 0x406, 0x0, 0x9, 0xa, 0x4]}}) (async) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000009c0)) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x80, 0x8, 0x4}, 0x18) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000c00)={r3, &(0x7f0000000b00)='^\x00', 0x228140, &(0x7f0000000b40)={@align=0x7d, {0x9, 0x1, 0x0, 0x1ce}}, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=0x1000}) move_mount(r5, &(0x7f0000000ac0)='./file0\x00', r6, &(0x7f0000000c40)='./file0\x00', 0x300) (async) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000c80)={0xff, 0x8, 0xff, 0x5a, 0x9400, 0x81}) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000cc0), 0x80000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r7, 0x2, &(0x7f0000000d00)=0xe56f) (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d80), r0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 909.332076ms ago: executing program 2 (id=1444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="080203000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000e002c"], 0x34}}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0xffffff63) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1", 0x54, 0x840, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000640)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b66b818000f00d82e0f08f2360f217a0f07", 0x31}], 0x1, 0x1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="937a18d72ed11f910c0300000000000000a21274f93be0103bbd878b577cfc1f0b05b1228a1670a69797167646a3395350e2fde0d01f3469ee36910ccceb6107e21a3b4bc68375d3101b2c32d1d8b324d67f0ca0cb06d42f69f0a624133d184a25fd1888e50f"], 0x24}], 0x1}, 0x0) 670.751496ms ago: executing program 2 (id=1445): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001ffffa4901fc18000000000100000000000000", @ANYRESDEC=r0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x71, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, 0x0, 0x0, 0x28, 0x0, "e541bd3d3aa6a0bf75e9671e8aa4b31c134f3a9db8f52e7300fe6e079f35ac2318dc045b4b9f54061f9f15abd9fd7e5550345bce05c13ed90158fbdeb70322ea3188f81890e3d200"}, 0xd8) (async) listen(r2, 0x7c2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nofsc']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 669.865572ms ago: executing program 2 (id=1446): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0x7fff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x31000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x48050) 606.591434ms ago: executing program 4 (id=1447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x44}, 0x1, 0x8100, 0x0, 0x4010}, 0xc00004e) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x44}, 0x1, 0x8100, 0x0, 0x4010}, 0xc00004e) (async) 540.561159ms ago: executing program 4 (id=1448): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000180)='./file1\x00', 0xa4000970) rmdir(&(0x7f0000000280)='./control\x00') syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) 540.310756ms ago: executing program 3 (id=1449): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x642480, 0x0) 446.295607ms ago: executing program 3 (id=1450): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r9, 0x0, 0x0, 0x4000, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ff80bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 599.864µs ago: executing program 2 (id=1451): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x6}, 0x18) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4a8d4cd8c16fb444}, 0x20000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'rose0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f00000002c0)=@expire={0x1144, 0x18, 0x200, 0x70bd2d, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x4e23, 0x7, 0x4e20, 0x0, 0x2, 0xb378c9d035d6d387, 0xa0, 0x32, r8, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4d4, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0xdb, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x7, 0xb8b, 0x1, 0x7ff}, {0x2, 0xb, 0x1, 0x3}, {0x7, 0x9, 0xffffffff}, 0x70bd2a, 0x3505, 0xa, 0x4, 0x3, 0x20}, 0x9}, [@algo_auth_trunc={0x104c, 0x14, {{'sha1-generic\x00'}, 0x8000, 0x100, "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"}}]}, 0x1144}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000001c0)={0x5, @raw_data="7be854c3419e9ee1a2f632adac63f1254845aa6ab2202650aae48c794214d91bf0483c168d64ca79c34743392d972a8770009a6b6bf7b793d2de7dd21eb326308e9293bb8f35679722e9eaf987c4790984d814851563b2f206a0a225fbd06d156e8b2c9b0a1dbf6120aa5108af4e03ede05286d963420f7cb9186a96405b6b01964439c3da4b81d67383b74390e716af1616d7d94692cc29f1c31089658971dee3a0e796e9debcea5498ddfa10d88e8de36d308035786b440111343f8f1de2a2dc60588927914531"}) 0s ago: executing program 3 (id=1452): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x1000}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x1000}) close(0x3) (async) close(0x3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x40047452, &(0x7f0000000240)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bridge\x00'}}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) kernel console output (not intermixed with test programs): he descriptor's value: 66 [ 130.086619][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.090821][ T5656] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32954, setting to 1024 [ 130.094911][ T5656] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.101368][ T5656] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.103874][ T5656] usb 6-1: Product: syz [ 130.105184][ T5656] usb 6-1: Manufacturer: syz [ 130.159682][ T5656] cdc_wdm 6-1:1.0: skipping garbage [ 130.161549][ T5656] cdc_wdm 6-1:1.0: skipping garbage [ 130.177684][ T5656] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 130.179632][ T5656] cdc_wdm 6-1:1.0: Unknown control protocol [ 130.185440][ T8192] NILFS (loop2): device size too small [ 130.431554][ T8198] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.744347][ T7066] usb 6-1: USB disconnect, device number 8 [ 130.809484][ T8203] devpts: Bad value for 'max' [ 130.845024][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 130.896362][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'. [ 130.927177][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 131.011767][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 131.029385][ T8201] mkiss: ax0: crc mode is auto. [ 131.030286][ T73] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.036306][ T73] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.046134][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.053092][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.128892][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.169088][ T8216] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 131.185410][ T8216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.235377][ T8221] xt_hashlimit: size too large, truncated to 1048576 [ 131.289670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.460059][ T8234] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 131.988876][ T8264] __vm_enough_memory: pid: 8264, comm: syz.4.639, bytes: 4503599627366400 not enough memory for the allocation [ 132.087583][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 132.158995][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.245373][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.259141][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.265817][ T8276] Cannot find del_set index 1 as target [ 132.272580][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.275342][ T8267] sctp: [Deprecated]: syz.2.640 (pid 8267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.275342][ T8267] Use struct sctp_sack_info instead [ 132.290083][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32954, setting to 1024 [ 132.317627][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.322905][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.325772][ T34] usb 8-1: Product: syz [ 132.328888][ T34] usb 8-1: Manufacturer: syz [ 132.331574][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 132.331585][ T40] audit: type=1400 audit(1776759726.674:54342): avc: denied { mounton } for pid=8277 comm="syz.1.645" path="/proc/470/cgroup" dev="proc" ino=22431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 132.356149][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 132.360431][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 132.365397][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 132.367379][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 132.406248][ T8281] netlink: 'syz.2.646': attribute type 15 has an invalid length. [ 132.415170][ T8282] netlink: 'syz.2.646': attribute type 15 has an invalid length. [ 132.428212][ T40] audit: type=1400 audit(1776759726.774:54343): avc: denied { setopt } for pid=8280 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.471864][ T8286] can: request_module (can-proto-0) failed. [ 132.504946][ T40] audit: type=1400 audit(1776759726.844:54344): avc: denied { bind } for pid=8291 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.608945][ T8262] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 132.623900][ T34] usb 8-1: USB disconnect, device number 9 [ 132.625364][ T8300] futex_wake_op: syz.2.650 tries to shift op by -1; fix this program [ 132.647749][ T8300] No control pipe specified [ 132.748555][ T8306] xt_l2tp: v2 doesn't support IP mode [ 132.861469][ T40] audit: type=1400 audit(1776759727.204:54345): avc: denied { getopt } for pid=8309 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.210350][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.218391][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.224124][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.635650][ T8308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.637828][ T8308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.640062][ T8308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.642376][ T8308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.712259][ T8322] overlayfs: missing 'lowerdir' [ 133.888411][ T8335] __nla_validate_parse: 10 callbacks suppressed [ 133.888428][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.4.662'. [ 134.044725][ T40] audit: type=1400 audit(1776759728.384:54346): avc: denied { bind } for pid=8333 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.317928][ T231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.326453][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.333153][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.608047][ T8328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.613731][ T8328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.617723][ T8328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.620654][ T8328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.625608][ T8328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.669747][ T8329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.672668][ T8329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.675312][ T8329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.677997][ T8329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.732103][ T5308] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 134.732330][ T8350] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 134.760216][ T8350] cramfs: wrong magic [ 134.782023][ T8353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.819031][ T8359] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.668'. [ 134.878829][ T40] audit: type=1400 audit(1776759729.224:54347): avc: denied { create } for pid=8365 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.887354][ T8366] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 134.887584][ T40] audit: type=1400 audit(1776759729.224:54348): avc: denied { create } for pid=8365 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.889701][ T8366] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 134.889793][ T8367] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 134.898941][ T40] audit: type=1400 audit(1776759729.224:54349): avc: denied { setopt } for pid=8365 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.901581][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 134.904716][ T8366] vhci_hcd vhci_hcd.0: Device attached [ 134.904839][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 134.913036][ T8369] vhci_hcd: connection closed [ 134.913054][ T8368] vhci_hcd: connection closed [ 134.916467][ T12] vhci_hcd vhci_hcd.2: stop threads [ 134.916962][ T40] audit: type=1400 audit(1776759729.224:54350): avc: denied { getopt } for pid=8365 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.917005][ T40] audit: type=1400 audit(1776759729.244:54351): avc: denied { accept } for pid=8365 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 134.942791][ T12] vhci_hcd vhci_hcd.2: release socket [ 134.943772][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 134.947655][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 134.949906][ T12] vhci_hcd vhci_hcd.2: stop threads [ 134.951865][ T12] vhci_hcd vhci_hcd.2: release socket [ 134.953734][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 135.059229][ T8379] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.673'. [ 135.098871][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 135.103141][ T8387] nfs4: Bad value for 'source' [ 135.103728][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'. [ 135.106823][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 135.119439][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.675'. [ 135.121487][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.127151][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.132006][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.140690][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.144617][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.276710][ T8403] lo: entered promiscuous mode [ 135.338887][ T8406] sctp: [Deprecated]: syz.1.681 (pid 8406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.338887][ T8406] Use struct sctp_sack_info instead [ 135.357831][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.366534][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.433983][ T8410] /dev/sg0: Can't lookup blockdev [ 135.443612][ T8410] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 135.449501][ T8410] veth0_macvtap: left promiscuous mode [ 135.494629][ T8414] hfsplus: unable to find HFS+ superblock [ 135.514431][ T8415] hfsplus: unable to find HFS+ superblock [ 135.893351][ T8432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8432 comm=syz.1.689 [ 136.074209][ T8441] binder: 8440:8441 ioctl c0306201 200000000280 returned -14 [ 136.074502][ T8442] binder: 8440:8442 ioctl 400454ca 2000000002c0 returned -22 [ 136.186981][ T8446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8446 comm=syz.1.693 [ 136.717927][ T5308] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.718189][ T5960] Bluetooth: hci3: command 0x0419 tx timeout [ 136.723626][ T5308] Bluetooth: hci2: command 0x0401 tx timeout [ 136.723853][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.766503][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 136.770168][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 136.849697][ T10] usb 8-1: usb_control_msg returned -71 [ 136.853137][ T10] usbtmc 8-1:16.0: can't read capabilities [ 136.877565][ T10] usb 8-1: USB disconnect, device number 10 [ 136.927692][ T8470] loop5: detected capacity change from 0 to 7 [ 136.937195][ C0] blk_print_req_error: 35 callbacks suppressed [ 136.939392][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.942945][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.946222][ C0] buffer_io_error: 35 callbacks suppressed [ 136.946232][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.953151][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.956804][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.960570][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.963565][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.968368][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.971418][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 136.974621][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 136.979284][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 137.051141][ T8477] tmpfs: Unknown parameter 'usrquot' [ 137.139449][ T8483] erspan0: entered promiscuous mode [ 137.185538][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'. [ 137.598848][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.605508][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.613646][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.727440][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 137.820825][ T8503] hpfs: Bad magic ... probably not HPFS [ 137.853132][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 137.887669][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 137.891691][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 137.895814][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.900031][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.903481][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.907974][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.911348][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.951274][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 137.951289][ T40] audit: type=1400 audit(1776759732.294:54362): avc: denied { connect } for pid=8511 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.960057][ T40] audit: type=1400 audit(1776759732.294:54363): avc: denied { read } for pid=8511 comm="syz.3.712" path="socket:[24857]" dev="sockfs" ino=24857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.120834][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 138.122791][ T24] usbtmc 6-1:16.0: can't read capabilities [ 138.338179][ T8495] can0: slcan on ttyS3. [ 138.528738][ T40] audit: type=1400 audit(1776759732.874:54364): avc: denied { shutdown } for pid=8494 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.588746][ T8418] delete_channel: no stack [ 138.592775][ T8418] delete_channel: no stack [ 138.637831][ T8520] can0 (unregistered): slcan off ttyS3. [ 138.675428][ T2144] usb 6-1: USB disconnect, device number 9 [ 138.797551][ T5960] Bluetooth: hci3: command 0x0419 tx timeout [ 138.879731][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.057480][ T6015] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 139.207697][ T6015] usb 8-1: Using ep0 maxpacket: 32 [ 139.211905][ T6015] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 139.216262][ T6015] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 139.222321][ T6015] usb 8-1: string descriptor 0 read error: -22 [ 139.224410][ T6015] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 139.228250][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.235456][ T8535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.259012][ T6015] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.262557][ T6015] usb 8-1: MIDIStreaming interface descriptor not found [ 139.460438][ T34] usb 8-1: USB disconnect, device number 11 [ 139.517996][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.523360][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.528665][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.715007][ T40] audit: type=1400 audit(1776759734.054:54365): avc: denied { map } for pid=8557 comm="syz.3.720" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 139.736283][ T40] audit: type=1400 audit(1776759734.074:54366): avc: denied { read } for pid=8561 comm="syz.1.721" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 139.748210][ T40] audit: type=1400 audit(1776759734.074:54367): avc: denied { open } for pid=8561 comm="syz.1.721" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 139.758950][ T40] audit: type=1400 audit(1776759734.094:54368): avc: denied { ioctl } for pid=8561 comm="syz.1.721" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 139.804441][ T40] audit: type=1400 audit(1776759734.144:54369): avc: denied { getopt } for pid=8561 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.812892][ T40] audit: type=1400 audit(1776759734.144:54370): avc: denied { setattr } for pid=8561 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 139.864804][ T8567] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 140.028721][ T40] audit: type=1400 audit(1776759734.374:54371): avc: denied { ioctl } for pid=8571 comm="syz.1.724" path="socket:[23832]" dev="sockfs" ino=23832 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.187713][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 140.337475][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 140.341515][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.346893][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.351569][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.355981][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.359452][ T8582] netlink: 56 bytes leftover after parsing attributes in process `syz.2.727'. [ 140.364452][ T8582] netlink: 1 bytes leftover after parsing attributes in process `syz.2.727'. [ 140.364926][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.372563][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.583919][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 140.586600][ T9] usbtmc 8-1:16.0: can't read capabilities [ 140.790046][ T9] usb 8-1: USB disconnect, device number 12 [ 140.802321][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.806178][ T7066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.815127][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.819493][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.949489][ T8595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.952104][ T8595] IPv6: NLM_F_CREATE should be set when creating new route [ 140.954958][ T8595] IPv6: NLM_F_CREATE should be set when creating new route [ 141.143998][ T8597] loop5: detected capacity change from 0 to 7 [ 141.151865][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.265510][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.270887][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 141.284891][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.288835][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 141.293288][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.297881][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 141.302768][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 141.307342][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 141.444838][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.524050][ T8609] EXT4-fs (nbd1): unable to read superblock [ 141.561609][ T8611] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.734'. [ 141.567171][ T8612] netlink: 4276 bytes leftover after parsing attributes in process `syz.3.734'. [ 141.573915][ T8611] Invalid logical block size (1025) [ 141.652775][ T8615] EXT4-fs (nbd1): unable to read superblock [ 141.705628][ T8615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.735'. [ 141.730156][ T8615] macvlan2: entered promiscuous mode [ 141.856139][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 142.294673][ T8678] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 142.464968][ T8695] netlink: 56 bytes leftover after parsing attributes in process `syz.2.761'. [ 142.469855][ T8694] netlink: 'syz.2.761': attribute type 8 has an invalid length. [ 142.472626][ T8693] tipc: Started in network mode [ 142.474380][ T8693] tipc: Node identity bbbbbb01, cluster identity 4711 [ 142.477505][ T8693] tipc: Enabled bearer , priority 10 [ 142.523022][ T8701] sctp: [Deprecated]: syz.2.762 (pid 8701) Use of int in max_burst socket option deprecated. [ 142.523022][ T8701] Use struct sctp_assoc_value instead [ 142.880187][ T6015] net_ratelimit: 3 callbacks suppressed [ 142.880326][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.253185][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 143.253292][ T40] audit: type=1400 audit(1776759737.594:54388): avc: denied { ioctl } for pid=8727 comm="syz.4.769" path="socket:[22862]" dev="sockfs" ino=22862 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.269464][ T40] audit: type=1400 audit(1776759737.594:54387): avc: denied { write } for pid=8727 comm="syz.4.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.503021][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.528654][ T8592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.533169][ T6015] tipc: Node number set to 3149642497 [ 143.550614][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.558756][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.614631][ T8732] fuse: Bad value for 'fd' [ 143.678808][ T40] audit: type=1400 audit(1776759738.024:54389): avc: denied { ioctl } for pid=8733 comm="syz.3.771" path="socket:[22867]" dev="sockfs" ino=22867 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 143.781105][ T8747] netlink: 'syz.1.775': attribute type 2 has an invalid length. [ 143.914011][ T40] audit: type=1400 audit(1776759738.254:54390): avc: denied { bind } for pid=8763 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.929336][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.939329][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 143.944886][ T40] audit: type=1400 audit(1776759738.284:54391): avc: denied { ioctl } for pid=8767 comm="syz.3.783" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.961517][ T40] audit: type=1400 audit(1776759738.304:54392): avc: denied { ioctl } for pid=8767 comm="syz.3.783" path="socket:[24014]" dev="sockfs" ino=24014 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.003038][ T8764] veth0_macvtap (unregistering): left allmulticast mode [ 144.034220][ T40] audit: type=1400 audit(1776759738.374:54393): avc: denied { setattr } for pid=8767 comm="syz.3.783" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 144.273405][ T8783] bridge_slave_1: left allmulticast mode [ 144.275683][ T8783] bridge_slave_1: left promiscuous mode [ 144.284941][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.299264][ T8783] bridge_slave_0: left allmulticast mode [ 144.302235][ T8783] bridge_slave_0: left promiscuous mode [ 144.305269][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.340011][ T40] audit: type=1400 audit(1776759738.684:54394): avc: denied { append } for pid=8784 comm="syz.3.788" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.349323][ T40] audit: type=1400 audit(1776759738.694:54395): avc: denied { execute_no_trans } for pid=8780 comm="syz.2.786" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=26630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 144.501575][ T8790] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 144.605333][ T8805] netlink: 5 bytes leftover after parsing attributes in process `syz.2.793'. [ 144.612915][ T8805] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 144.962370][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.972190][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.792'. [ 145.053331][ T8822] netlink: 'syz.3.794': attribute type 1 has an invalid length. [ 145.308450][ T8838] syzkaller0: entered promiscuous mode [ 145.311030][ T8838] syzkaller0: entered allmulticast mode [ 145.347307][ T40] audit: type=1400 audit(1776759739.684:54396): avc: denied { write } for pid=8836 comm="syz.3.797" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 145.588578][ T8838] bridge0: port 3(team0) entered disabled state [ 145.592937][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.767588][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 145.868964][ T8872] __nla_validate_parse: 2 callbacks suppressed [ 145.868980][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.2.802'. [ 145.897457][ T9] usb 6-1: device descriptor read/64, error -71 [ 145.952644][ T8838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.969601][ T8838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.001049][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.137528][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 146.297562][ T9] usb 6-1: device descriptor read/64, error -71 [ 146.412834][ T9] usb usb6-port1: attempt power cycle [ 146.561344][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.647524][ T1161] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.652945][ T1161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.657080][ T1161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.660422][ T1161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.768679][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 146.790502][ T9] usb 6-1: device descriptor read/8, error -71 [ 146.826573][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 146.851286][ T8910] netlink: 200 bytes leftover after parsing attributes in process `syz.3.810'. [ 146.866722][ T8912] serio: Serial port ttyprintk [ 147.041141][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 147.045089][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 147.047562][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 147.049350][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 147.079792][ T10] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 147.083793][ T9] usb 6-1: device descriptor read/8, error -71 [ 147.191885][ T9] usb usb6-port1: unable to enumerate USB device [ 147.248619][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 147.252972][ T10] usb 8-1: New USB device found, idVendor=0eef, idProduct=a001, bcdDevice= 0.40 [ 147.256945][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.260053][ T10] usb 8-1: Product: ੆ꛩ髓ꕧ쮨両芳ᬘ耼ଂ뉹ᔽ릴羍섰ʘ짗஬푔偤⟬끊쁁Ꞥ썣㫝㼡▢첮ꂔݜ⟡涜숵爀ꔳꐵႥ诲鯉ۅ哪螮뮩匩䭄ধ棪迤氦㉨薔箆⑍顢륶ồᬷ [ 147.268094][ T10] usb 8-1: Manufacturer: ᠱ䈆㲒㙔슮Ȕᲃ꛳썚㲀ᵒ쭺곅枩⢇࠼䖭똽窕⠱䃖⺺블⽝乪㎈佽嶇갘졄詰ڙ啱퉩흊磪햕斆싑₉ܻ忊鍣澜衰豛쟑ᛂ뢴ꮕꄗ鲙㸉襛䳥灢ⲋᐎ穒燽ꮏ麺齰禿膌荆ⶺ軃﯁ꋏ岞퇒뻳ቄ炈꣐몽潕ž珦ﭼ䣴ἅր횴鸱 [ 147.278179][ T10] usb 8-1: SerialNumber: ఉ [ 147.286474][ T8922] xt_CT: No such helper "pptp" [ 147.330361][ T8925] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 147.509633][ T10] usbhid 8-1:1.0: can't add hid device: -71 [ 147.512042][ T10] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 147.517541][ T10] usb 8-1: USB disconnect, device number 13 [ 147.739189][ T8929] syz.2.816: vmalloc error: size 3509858304, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.746363][ T8929] CPU: 2 UID: 0 PID: 8929 Comm: syz.2.816 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.746385][ T8929] Tainted: [L]=SOFTLOCKUP [ 147.746391][ T8929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.746401][ T8929] Call Trace: [ 147.746508][ T8929] [ 147.746516][ T8929] dump_stack_lvl+0x100/0x190 [ 147.749235][ T8929] warn_alloc.cold+0x95/0x1c1 [ 147.749521][ T8929] ? __pfx_warn_alloc+0x10/0x10 [ 147.750909][ T8929] ? mark_held_locks+0x40/0x70 [ 147.751308][ T8929] ? lockdep_hardirqs_on+0x78/0x100 [ 147.752148][ T8929] ? stack_depot_save_flags+0x479/0x9d0 [ 147.753210][ T8929] ? vb2_vmalloc_alloc+0x135/0x410 [ 147.754542][ T8929] __vmalloc_node_range_noprof+0x136c/0x1630 [ 147.754561][ T8929] ? v4l2_ioctl+0x1bd/0x250 [ 147.754582][ T8929] ? __x64_sys_ioctl+0x18e/0x210 [ 147.754595][ T8929] ? do_syscall_64+0x10b/0xf80 [ 147.754612][ T8929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.754628][ T8929] ? vb2_vmalloc_alloc+0x135/0x410 [ 147.754645][ T8929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.754665][ T8929] ? vb2_vmalloc_alloc+0x135/0x410 [ 147.754677][ T8929] vmalloc_user_noprof+0x9e/0xe0 [ 147.754691][ T8929] ? vb2_vmalloc_alloc+0x135/0x410 [ 147.754704][ T8929] vb2_vmalloc_alloc+0x135/0x410 [ 147.754716][ T8929] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 147.754729][ T8929] __vb2_queue_alloc+0x8d5/0x1160 [ 147.754748][ T8929] vb2_core_create_bufs+0x5fa/0xa30 [ 147.754761][ T8929] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 147.754773][ T8929] ? rcu_is_watching+0x12/0xc0 [ 147.754792][ T8929] ? __mutex_lock+0x26d/0x1b10 [ 147.754808][ T8929] vb2_create_bufs+0x40c/0x830 [ 147.754828][ T8929] ? __pfx_vb2_create_bufs+0x10/0x10 [ 147.754845][ T8929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.754860][ T8929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 147.754875][ T8929] v4l_create_bufs+0x17d/0x270 [ 147.754891][ T8929] __video_do_ioctl+0xb2a/0xdf0 [ 147.754908][ T8929] ? __might_fault+0xc5/0x140 [ 147.754924][ T8929] ? __pfx___video_do_ioctl+0x10/0x10 [ 147.754945][ T8929] video_usercopy+0x47d/0x1700 [ 147.754961][ T8929] ? __pfx___video_do_ioctl+0x10/0x10 [ 147.754977][ T8929] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 147.755274][ T8929] ? __pfx_video_usercopy+0x10/0x10 [ 147.755308][ T8929] v4l2_ioctl+0x1bd/0x250 [ 147.755326][ T8929] ? __pfx_v4l2_ioctl+0x10/0x10 [ 147.755345][ T8929] __x64_sys_ioctl+0x18e/0x210 [ 147.755359][ T8929] do_syscall_64+0x10b/0xf80 [ 147.755374][ T8929] ? clear_bhb_loop+0x40/0x90 [ 147.755391][ T8929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.755405][ T8929] RIP: 0033:0x7f719f39c819 [ 147.755417][ T8929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.755428][ T8929] RSP: 002b:00007f71a021b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.755587][ T8929] RAX: ffffffffffffffda RBX: 00007f719f615fa0 RCX: 00007f719f39c819 [ 147.755595][ T8929] RDX: 0000200000001580 RSI: 00000000c100565c RDI: 0000000000000007 [ 147.755603][ T8929] RBP: 00007f719f432c91 R08: 0000000000000000 R09: 0000000000000000 [ 147.755610][ T8929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.755618][ T8929] R13: 00007f719f616038 R14: 00007f719f615fa0 R15: 00007ffde8f73da8 [ 147.755634][ T8929] [ 147.886862][ T8929] Mem-Info: [ 147.888200][ T8929] active_anon:10225 inactive_anon:0 isolated_anon:0 [ 147.888200][ T8929] active_file:23575 inactive_file:40716 isolated_file:0 [ 147.888200][ T8929] unevictable:1768 dirty:202 writeback:0 [ 147.888200][ T8929] slab_reclaimable:8033 slab_unreclaimable:74807 [ 147.888200][ T8929] mapped:26483 shmem:2397 pagetables:3743 [ 147.888200][ T8929] sec_pagetables:295 bounce:0 [ 147.888200][ T8929] kernel_misc_reclaimable:0 [ 147.888200][ T8929] free:444018 free_pcp:11119 free_cma:0 [ 147.906690][ T8929] Node 0 active_anon:40868kB inactive_anon:0kB active_file:94276kB inactive_file:162664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105932kB dirty:808kB writeback:0kB shmem:6052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13568kB pagetables:5800kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.923596][ T8929] Node 1 active_anon:32kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 147.936255][ T8929] Node 0 DMA free:13288kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.946653][ T8929] lowmem_reserve[]: 0 1229 1229 1229 1229 [ 147.948638][ T8929] Node 0 DMA32 free:140476kB boost:0kB min:27472kB low:34340kB high:41208kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40868kB inactive_anon:0kB active_file:94276kB inactive_file:162664kB unevictable:3536kB writepending:808kB zspages:0kB present:2080628kB managed:1258960kB mlocked:0kB bounce:0kB free_pcp:33864kB local_pcp:5784kB free_cma:0kB [ 147.960049][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 147.961506][ T8929] Node 1 Normal free:1622308kB boost:0kB min:39768kB low:49708kB high:59648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:24kB inactive_file:200kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:10764kB local_pcp:10764kB free_cma:0kB [ 147.971100][ T8929] lowmem_reserve[]: 0 0 0 0 0 [ 147.972559][ T8929] Node 0 DMA: 6*4kB (U) 6*8kB (U) 6*16kB (U) 6*32kB (U) 6*64kB (U) 6*128kB (U) 6*256kB (U) 4*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 13288kB [ 147.977568][ T8929] Node 0 DMA32: 2075*4kB (UME) 1324*8kB (UME) 821*16kB (UME) 616*32kB (UME) 405*64kB (UME) 112*128kB (UME) 45*256kB (UME) 40*512kB (UME) 12*1024kB (UM) 2*2048kB (M) 0*4096kB = 140380kB [ 147.983467][ T8929] Node 1 Normal: 221*4kB (UME) 214*8kB (UME) 228*16kB (UME) 244*32kB (UME) 233*64kB (UME) 232*128kB (UME) 214*256kB (UME) 203*512kB (UME) 194*1024kB (UME) 17*2048kB (UME) 286*4096kB (UM) = 1622308kB [ 147.989859][ T8929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.993100][ T8929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.998935][ T8929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.002028][ T8929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.004947][ T8929] 66684 total pagecache pages [ 148.006608][ T8929] 0 pages in swap cache [ 148.008228][ T8929] Free swap = 124996kB [ 148.009657][ T8929] Total swap = 124996kB [ 148.011112][ T8929] 1048443 pages RAM [ 148.012582][ T8929] 0 pages HighMem/MovableOnly [ 148.015241][ T8929] 284392 pages reserved [ 148.016834][ T8929] 0 pages cma reserved [ 148.080072][ T2144] net_ratelimit: 1 callbacks suppressed [ 148.080094][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.249235][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.824'. [ 148.254706][ T8953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=8953 comm=syz.4.824 [ 148.300485][ T8955] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 148.349398][ T8955] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 148.352965][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 148.419169][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 148.419188][ T40] audit: type=1400 audit(1776759742.764:54404): avc: denied { sqpoll } for pid=8959 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.470030][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 148.473282][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.827'. [ 148.473440][ T8964] netlink: 'syz.3.821': attribute type 3 has an invalid length. [ 148.500793][ T40] audit: type=1400 audit(1776759742.844:54405): avc: denied { setopt } for pid=8967 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.571367][ T8973] hfs: can't find a HFS filesystem on dev sr0 [ 148.636087][ T8977] netlink: 'syz.4.831': attribute type 61 has an invalid length. [ 148.894668][ T40] audit: type=1400 audit(1776759743.234:54406): avc: denied { setopt } for pid=8988 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 148.946763][ T8990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.997572][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.119878][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.124565][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.131178][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.138881][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.477548][ T8592] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 149.541094][ T9008] binder: binder_mmap: 9007 200000ffa000-200000ffd000 bad vm_flags failed -1 [ 149.627417][ T8592] usb 6-1: Using ep0 maxpacket: 8 [ 149.633830][ T8592] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.635559][ T40] audit: type=1400 audit(1776759743.974:54407): avc: denied { create } for pid=9017 comm="syz.2.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 149.639271][ T8592] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.651418][ T8592] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.656317][ T8592] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.663245][ T8592] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.667570][ T8592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.675603][ T40] audit: type=1400 audit(1776759744.014:54408): avc: denied { create } for pid=9013 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 149.741307][ T9009] trusted_key: encrypted_key: insufficient parameters specified [ 149.813302][ T40] audit: type=1400 audit(1776759744.154:54409): avc: denied { setopt } for pid=9039 comm="syz.2.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 149.884686][ T8592] usb 6-1: GET_CAPABILITIES returned 0 [ 149.887071][ T8592] usbtmc 6-1:16.0: can't read capabilities [ 150.051412][ T9044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.053870][ T9044] IPv6: NLM_F_CREATE should be set when creating new route [ 150.097166][ T8592] usb 6-1: USB disconnect, device number 14 [ 150.161787][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.220956][ T40] audit: type=1400 audit(1776759744.564:54410): avc: denied { write } for pid=9047 comm="syz.4.849" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 150.253502][ T40] audit: type=1400 audit(1776759744.594:54411): avc: denied { create } for pid=9050 comm="syz.4.850" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.725085][ T40] audit: type=1400 audit(1776759745.064:54412): avc: denied { read } for pid=9068 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.779395][ T9074] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 150.783987][ T9077] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 150.945594][ T9076] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 151.047856][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.111331][ T40] audit: type=1400 audit(1776759745.454:54413): avc: denied { mounton } for pid=9089 comm="syz.2.863" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.198558][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.610332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.678411][ T843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.695052][ T9105] fuse: Bad value for 'user_id' [ 151.696859][ T9105] fuse: Bad value for 'user_id' [ 151.851008][ T9109] __nla_validate_parse: 13 callbacks suppressed [ 151.851030][ T9109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.869'. [ 151.917051][ T9111] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 151.917051][ T9111] Please contact the netfilter-devel mailing list or update your nftables rules. [ 153.277789][ T2144] net_ratelimit: 2 callbacks suppressed [ 153.277804][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.327744][ T2144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.198146][ T5656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.314457][ T9135] netlink: 68 bytes leftover after parsing attributes in process `syz.4.874'. [ 155.315426][ T9136] openvswitch: netlink: Missing key (keys=40, expected=80) [ 155.318090][ T9133] netlink: 68 bytes leftover after parsing attributes in process `syz.4.874'. [ 155.366014][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 155.366026][ T40] audit: type=1400 audit(1776759749.704:54416): avc: denied { bind } for pid=9144 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 155.368029][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.382500][ T9147] netlink: 44 bytes leftover after parsing attributes in process `syz.3.880'. [ 155.453729][ T9157] bridge0: port 4(ipvlan3) entered blocking state [ 155.456264][ T9157] bridge0: port 4(ipvlan3) entered disabled state [ 155.458781][ T9157] ipvlan3: entered allmulticast mode [ 155.460510][ T9157] bridge0: entered allmulticast mode [ 155.463372][ T9157] ipvlan3: left allmulticast mode [ 155.470732][ T9157] bridge0: left allmulticast mode [ 155.489658][ T9161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.502304][ T40] audit: type=1400 audit(1776759749.844:54417): avc: denied { getopt } for pid=9156 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.551250][ T9172] netlink: 147640 bytes leftover after parsing attributes in process `syz.4.887'. [ 155.563291][ T9172] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 155.574115][ T40] audit: type=1400 audit(1776759749.914:54418): avc: denied { block_suspend } for pid=9175 comm="syz.3.890" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.586566][ T9172] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 155.660683][ T9187] loop5: detected capacity change from 0 to 7 [ 155.670006][ T9187] Dev loop5: unable to read RDB block 7 [ 155.672609][ T9187] loop5: AHDI p2 p3 [ 155.674501][ T9187] loop5: partition table partially beyond EOD, truncated [ 155.678551][ T9187] loop5: p2 start 1702059890 is beyond EOD, truncated [ 155.681435][ T40] audit: type=1400 audit(1776759750.024:54419): avc: denied { transfer } for pid=9180 comm="syz.2.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.716092][ T40] audit: type=1400 audit(1776759750.054:54420): avc: denied { getopt } for pid=9193 comm="syz.1.895" lport=11649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.717549][ T9194] IPVS: length: 4096 != 24 [ 155.726599][ T40] audit: type=1400 audit(1776759750.064:54421): avc: denied { ioctl } for pid=9193 comm="syz.1.895" path="ipc:[4026533156]" dev="nsfs" ino=4026533156 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 155.734579][ T9196] tipc: Trying to set illegal importance in message [ 155.746763][ T9194] netlink: 48 bytes leftover after parsing attributes in process `syz.1.895'. [ 155.750414][ T9195] netlink: 48 bytes leftover after parsing attributes in process `syz.1.895'. [ 155.855949][ T40] audit: type=1400 audit(1776759750.194:54422): avc: denied { map } for pid=9212 comm="syz.2.901" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.937710][ T9207] kvm: user requested TSC rate below hardware speed [ 155.942100][ T9207] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 156.237420][ T2144] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 156.355745][ T9233] Cannot find add_set index 0 as target [ 156.361976][ T9233] Cannot find add_set index 0 as target [ 156.397522][ T2144] usb 6-1: Using ep0 maxpacket: 16 [ 156.400521][ T6035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.408823][ T2144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 156.413926][ T2144] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.416888][ T2144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.421072][ T2144] usb 6-1: Product: syz [ 156.422425][ T2144] usb 6-1: Manufacturer: syz [ 156.423906][ T2144] usb 6-1: SerialNumber: syz [ 156.427662][ T2144] usb 6-1: config 0 descriptor?? [ 156.434635][ T2144] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 156.437735][ T2144] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 156.549502][ T40] audit: type=1400 audit(1776759750.894:54423): avc: denied { append } for pid=9237 comm="syz.4.912" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 156.827118][ T9247] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.876808][ T9242] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 157.005017][ T40] audit: type=1400 audit(1776759751.344:54424): avc: denied { map } for pid=9252 comm="syz.3.916" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 157.048609][ T2144] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 157.177813][ T9267] loop4: detected capacity change from 0 to 7 [ 157.180278][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.183031][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.185770][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.188529][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.191665][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.194552][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.197121][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.200137][ T9267] ldm_validate_partition_table(): Disk read failed. [ 157.202560][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.205193][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.208937][ T9267] Buffer I/O error on dev loop4, logical block 0, async page read [ 157.211688][ T9267] Dev loop4: unable to read RDB block 0 [ 157.213866][ T9267] loop4: unable to read partition table [ 157.216228][ T9267] loop4: partition table beyond EOD, truncated [ 157.218388][ T9267] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 157.367498][ T8592] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 157.378278][ T40] audit: type=1400 audit(1776759751.724:54425): avc: denied { connect } for pid=9270 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 157.468323][ T2144] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 157.471078][ T2144] em28xx 6-1:0.0: board has no eeprom [ 157.527620][ T2144] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 157.530918][ T2144] em28xx 6-1:0.0: dvb set to bulk mode. [ 157.537782][ T6035] em28xx 6-1:0.0: Binding DVB extension [ 157.538086][ T8592] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 157.544419][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.547520][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.550980][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.553850][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.558362][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.561993][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.564799][ T2144] usb 6-1: USB disconnect, device number 15 [ 157.564971][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.570271][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.572635][ T2144] em28xx 6-1:0.0: Disconnecting em28xx [ 157.573536][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.578840][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.581942][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.584702][ T6035] em28xx 6-1:0.0: Registering input extension [ 157.585499][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.591668][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.592757][ T2144] em28xx 6-1:0.0: Closing input extension [ 157.595141][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.595158][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.595917][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.607180][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.610809][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.614042][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.617046][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.620716][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.623615][ T8592] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.626633][ T8592] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 157.630228][ T8592] usb 8-1: config 0 interface 0 has no altsetting 0 [ 157.634903][ T8592] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 157.638507][ T8592] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 157.641453][ T8592] usb 8-1: Product: syz [ 157.642860][ T8592] usb 8-1: Manufacturer: syz [ 157.644371][ T8592] usb 8-1: SerialNumber: syz [ 157.646901][ T2144] em28xx 6-1:0.0: Freeing device [ 157.651506][ T8592] usb 8-1: config 0 descriptor?? [ 157.662466][ T8592] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 157.861360][ T9260] trusted_key: encrypted_key: master key parameter '' is invalid [ 157.925913][ T9278] random: crng reseeded on system resumption [ 157.947199][ T9275] Unrecognized hibernate image header format! [ 157.949546][ T9275] PM: hibernation: Image mismatch: architecture specific data [ 158.219053][ T9286] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 158.877833][ T9313] netlink: 68 bytes leftover after parsing attributes in process `syz.2.935'. [ 158.954903][ T9315] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 158.964637][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.936'. [ 159.332768][ T9321] blktrace: Concurrent blktraces are not allowed on sg0 [ 159.410118][ T9325] atomic_op ffff8880400e1198 conn xmit_atomic 0000000000000000 [ 159.458859][ T9328] netlink: 148 bytes leftover after parsing attributes in process `syz.1.941'. [ 159.514609][ T9330] tmpfs: Cannot change global quota limit on remount [ 159.712627][ T9326] program syz.2.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.137078][ T10] usb 8-1: USB disconnect, device number 14 [ 160.144019][ T10] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 160.158915][ T9357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=794 sclass=netlink_route_socket pid=9357 comm=syz.3.950 [ 160.203107][ T9359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19331 sclass=netlink_tcpdiag_socket pid=9359 comm=syz.2.951 [ 160.257473][ T6035] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 160.417463][ T6035] usb 6-1: Using ep0 maxpacket: 8 [ 160.420925][ T6035] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 160.423484][ T6035] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.427548][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.431769][ T6035] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.435510][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.440521][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.445227][ T6035] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.451885][ T6035] usb 6-1: config 168 interface 0 has no altsetting 0 [ 160.455694][ T6035] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 160.459067][ T6035] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.463647][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.467820][ T6035] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.472415][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.476361][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.480373][ T6035] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.485125][ T6035] usb 6-1: config 168 interface 0 has no altsetting 0 [ 160.489562][ T6035] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 160.493191][ T6035] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.497130][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.501518][ T6035] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.505879][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.510619][ T6035] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.514610][ T6035] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.521361][ T6035] usb 6-1: config 168 interface 0 has no altsetting 0 [ 160.528702][ T6035] usb 6-1: string descriptor 0 read error: -22 [ 160.531555][ T6035] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.535292][ T6035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.544422][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 160.544435][ T40] audit: type=1400 audit(1776759754.884:54428): avc: denied { accept } for pid=9371 comm="syz.3.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 160.548962][ T9372] Cannot find map_set index 3 as target [ 160.555760][ T9372] netlink: 72 bytes leftover after parsing attributes in process `syz.3.955'. [ 160.556577][ T6035] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 160.690884][ T40] audit: type=1400 audit(1776759755.034:54429): avc: denied { setopt } for pid=9373 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.059661][ T9380] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 161.089471][ T9380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.100866][ T9380] bond3: (slave veth0_to_bond): making interface the new active one [ 161.105002][ T9380] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 161.264653][ T40] audit: type=1400 audit(1776759755.604:54430): avc: denied { mount } for pid=9382 comm="syz.2.958" name="/" dev="hugetlbfs" ino=28341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 161.593078][ T40] audit: type=1400 audit(1776759755.934:54431): avc: denied { map } for pid=9391 comm="syz.3.960" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.602154][ T40] audit: type=1400 audit(1776759755.934:54432): avc: denied { execute } for pid=9391 comm="syz.3.960" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.658874][ T9396] futex_wake_op: syz.3.962 tries to shift op by -1; fix this program [ 161.664431][ T9397] futex_wake_op: syz.3.962 tries to shift op by -1; fix this program [ 161.696471][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 161.700042][ T9399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9399 comm=syz.3.963 [ 161.768757][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.964'. [ 161.809225][ T9406] team0 (unregistering): Port device team_slave_0 removed [ 161.817328][ T9406] team0 (unregistering): Port device team_slave_1 removed [ 161.941302][ T9412] trusted_key: encrypted_key: keyword 'u' not recognized [ 162.050355][ T40] audit: type=1804 audit(1776759756.394:54433): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.970" name="/newroot/228/file0" dev="tmpfs" ino=1214 res=1 errno=0 [ 162.394262][ T9435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.406983][ T9437] dvmrp1: entered allmulticast mode [ 162.409987][ T9437] dvmrp1: left allmulticast mode [ 162.509959][ T9449] bond0: (slave caif0): Error: Device type is different from other slaves [ 162.537310][ T9452] veth1_to_bond: entered promiscuous mode [ 162.597073][ T9457] netlink: 'syz.3.981': attribute type 3 has an invalid length. [ 162.976671][ T9464] netlink: 'syz.2.984': attribute type 10 has an invalid length. [ 162.989903][ T9464] veth0_macvtap: left promiscuous mode [ 163.018759][ T2144] usb 6-1: USB disconnect, device number 16 [ 163.187104][ T9486] netlink: 'syz.2.991': attribute type 8 has an invalid length. [ 163.422973][ T9504] netlink: 'syz.4.997': attribute type 64 has an invalid length. [ 163.426490][ T9504] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 163.429886][ T9504] netlink: 152 bytes leftover after parsing attributes in process `syz.4.997'. [ 163.539364][ T9519] xt_hashlimit: size too large, truncated to 1048576 [ 163.593026][ T40] audit: type=1400 audit(1776759757.934:54434): avc: denied { setattr } for pid=9499 comm="syz.3.995" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 163.595186][ T9526] tipc: Can't bind to reserved service type 0 [ 163.674035][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 163.766350][ T9536] syzkaller0: entered promiscuous mode [ 163.769238][ T9536] syzkaller0: entered allmulticast mode [ 163.772486][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1003'. [ 163.772860][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 163.813703][ T40] audit: type=1400 audit(1776759758.154:54435): avc: denied { ioctl } for pid=9540 comm="syz.2.1004" path="socket:[28557]" dev="sockfs" ino=28557 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.829676][ T9543] misc userio: No port type given on /dev/userio [ 163.896057][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 163.899596][ T9548] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 164.694142][ T9566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 164.758155][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 166.395502][ T9558] bridge0: port 3(team0) entered disabled state [ 166.402673][ T9558] bridge_slave_1: left allmulticast mode [ 166.405198][ T9558] bridge_slave_1: left promiscuous mode [ 166.408432][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.414535][ T9558] bridge_slave_0: left promiscuous mode [ 166.419899][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.604501][ T9579] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 166.618148][ T9579] bond1: entered promiscuous mode [ 166.620274][ T9579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.839475][ T9595] syzkaller0: entered promiscuous mode [ 166.841914][ T9595] syzkaller0: entered allmulticast mode [ 166.904498][ T9595] tc action pedit offset must be on 32 bit boundaries [ 166.987333][ T843] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 167.060601][ T9600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.060650][ T40] audit: type=1400 audit(1776759761.404:54436): avc: denied { getattr } for pid=9599 comm="syz.4.1023" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 167.099898][ T9603] netlink: 'syz.4.1024': attribute type 1 has an invalid length. [ 167.119435][ T9603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.169478][ T843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.173108][ T843] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.180498][ T843] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.184938][ T843] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.187921][ T843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.192108][ T843] usb 7-1: config 0 descriptor?? [ 167.198936][ T843] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.204707][ T843] dvb-usb: bulk message failed: -22 (3/0) [ 167.222907][ T843] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.229783][ T843] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.235713][ T843] usb 7-1: media controller created [ 167.255206][ T9607] IPVS: persistence engine module ip_vs_pe_s not found [ 167.259075][ T843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.260197][ T9607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1025'. [ 167.272361][ T9607] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1025'. [ 167.276480][ T9607] usb usb8: usbfs: process 9607 (syz.3.1025) did not claim interface 0 before use [ 167.337594][ T843] dvb-usb: bulk message failed: -22 (6/0) [ 167.343913][ T40] audit: type=1400 audit(1776759761.684:54437): avc: denied { accept } for pid=9611 comm="syz.3.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 167.344861][ T843] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.365184][ T843] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input13 [ 167.372560][ T843] dvb-usb: schedule remote query interval to 150 msecs. [ 167.373513][ T40] audit: type=1400 audit(1776759761.714:54438): avc: denied { ioctl } for pid=5343 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3206 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.375028][ T843] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.401869][ T9589] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1020'. [ 167.408247][ T9589] netlink: 'syz.2.1020': attribute type 1 has an invalid length. [ 167.433365][ T9589] bond4: entered promiscuous mode [ 167.435640][ T9589] bond4: entered allmulticast mode [ 167.438531][ T9589] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.488759][ T9589] erspan1: entered allmulticast mode [ 167.495031][ T9589] bond4: (slave erspan1): making interface the new active one [ 167.499784][ T9589] erspan1: entered promiscuous mode [ 167.504515][ T9620] IPVS: length: 67 != 24 [ 167.510117][ T9589] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 167.524387][ T8592] usb 7-1: USB disconnect, device number 11 [ 167.535310][ T843] dvb-usb: bulk message failed: -22 (1/0) [ 167.538358][ T843] dvb-usb: error while querying for an remote control event. [ 167.581154][ T40] audit: type=1400 audit(1776759761.924:54439): avc: denied { append } for pid=9622 comm="syz.4.1029" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 167.646177][ T8592] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 167.687608][ T9626] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1031'. [ 167.692382][ T9628] overlayfs: statfs failed on './file0' [ 168.125463][ T9650] exFAT-fs (nbd2): unable to read boot sector [ 168.129730][ T9650] exFAT-fs (nbd2): failed to read boot sector [ 168.137103][ T9650] exFAT-fs (nbd2): failed to recognize exfat type [ 168.146072][ T40] audit: type=1400 audit(1776759762.484:54440): avc: denied { read } for pid=9645 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 168.317153][ T40] audit: type=1400 audit(1776759762.654:54441): avc: denied { listen } for pid=9665 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.322094][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 168.333352][ T40] audit: type=1400 audit(1776759762.654:54442): avc: denied { accept } for pid=9665 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.340814][ T9670] bridge0: port 1(erspan0) entered blocking state [ 168.343850][ T9670] bridge0: port 1(erspan0) entered disabled state [ 168.346808][ T9670] erspan0: entered allmulticast mode [ 168.353473][ T9670] erspan0: entered promiscuous mode [ 168.375765][ T40] audit: type=1400 audit(1776759762.714:54443): avc: denied { write } for pid=9665 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.389696][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 168.403513][ T40] audit: type=1400 audit(1776759762.744:54444): avc: denied { add_name } for pid=9671 comm="syz.1.1045" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.420419][ T40] audit: type=1400 audit(1776759762.744:54445): avc: denied { create } for pid=9671 comm="syz.1.1045" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.421602][ T9670] bridge0: port 2(bond3) entered blocking state [ 168.437591][ T9670] bridge0: port 2(bond3) entered disabled state [ 168.441428][ T9670] bond3: entered allmulticast mode [ 168.446058][ T9670] bond3: entered promiscuous mode [ 168.510631][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1048'. [ 168.568905][ T9685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.572992][ T9685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.897941][ T843] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 168.903916][ T9694] netlink: 'syz.4.1052': attribute type 11 has an invalid length. [ 168.908309][ T9694] __nla_validate_parse: 1 callbacks suppressed [ 168.908327][ T9694] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1052'. [ 168.994088][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 169.077469][ T843] usb 7-1: Using ep0 maxpacket: 8 [ 169.082000][ T843] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.084546][ T843] usb 7-1: config 179 has no interface number 0 [ 169.086417][ T843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 169.089862][ T843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 169.092948][ T843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.096207][ T843] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 169.099675][ T843] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.103351][ T843] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.106045][ T843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.121588][ T9683] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.227346][ T8592] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 169.263196][ T9716] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 169.304772][ T9708] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 169.310592][ T9708] VFS: Can't find a romfs filesystem on dev nullb0. [ 169.310592][ T9708] [ 169.358126][ T843] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input14 [ 169.375918][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'. [ 169.377337][ T8592] usb 6-1: Using ep0 maxpacket: 8 [ 169.384469][ T8592] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.390248][ T8592] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.395039][ T8592] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.399770][ T8592] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.405463][ T8592] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.412526][ T8592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.647965][ T2144] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 169.690810][ T9722] 9p: Unknown access argument 01777777777777777777777: -34 [ 169.694027][ T8592] usb 6-1: GET_CAPABILITIES returned 0 [ 169.696097][ T8592] usbtmc 6-1:16.0: can't read capabilities [ 170.065798][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 170.235579][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1062'. [ 170.239400][ T9734] vivid-003: ================= START STATUS ================= [ 170.242563][ T9734] vivid-003: Radio HW Seek Mode: Bounded [ 170.246727][ T9734] vivid-003: Radio Programmable HW Seek: false [ 170.249201][ T9734] vivid-003: RDS Rx I/O Mode: Block I/O [ 170.252689][ T9734] vivid-003: Generate RBDS Instead of RDS: false [ 170.255267][ T9734] vivid-003: RDS Reception: true [ 170.256877][ T9734] vivid-003: RDS Program Type: 0 inactive [ 170.259307][ T9734] vivid-003: RDS PS Name: inactive [ 170.261098][ T9734] vivid-003: RDS Radio Text: inactive [ 170.262864][ T9734] vivid-003: RDS Traffic Announcement: false inactive [ 170.265108][ T9734] vivid-003: RDS Traffic Program: false inactive [ 170.267182][ T9734] vivid-003: RDS Music: false inactive [ 170.269113][ T9734] vivid-003: ================== END STATUS ================== [ 170.460141][ T9745] ALSA: mixer_oss: invalid OSS volume '' [ 170.460162][ T9745] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 170.460175][ T9745] ALSA: mixer_oss: invalid index 1374389 [ 170.946522][ T9769] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 171.373700][ T9772] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 171.376707][ T9772] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 171.380453][ T9772] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.1072'. [ 171.540805][ T2144] usb 7-1: USB disconnect, device number 12 [ 171.540831][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.545741][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.837123][ T9791] JFS: discard option not supported on device [ 171.847989][ T9791] Mount JFS Failure: -5 [ 171.855581][ T9789] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1077'. [ 171.948201][ T2144] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 171.950168][ T843] usb 6-1: USB disconnect, device number 17 [ 172.139483][ T2144] usb 7-1: Using ep0 maxpacket: 32 [ 172.143687][ T2144] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 172.147991][ T2144] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 172.152676][ T2144] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 172.158038][ T2144] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 172.162211][ T2144] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 172.167714][ T2144] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.175556][ T2144] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.179895][ T2144] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.185868][ T2144] usb 7-1: Product: syz [ 172.187717][ T2144] usb 7-1: Manufacturer: syz [ 172.189548][ T2144] usb 7-1: SerialNumber: syz [ 172.193813][ T2144] usb 7-1: config 0 descriptor?? [ 172.194084][ T9813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.199008][ T2144] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 172.200397][ T2144] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 172.411330][ T9824] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 172.469811][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.471942][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.474127][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.476374][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.480672][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.483026][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.485282][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.487946][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.490867][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.493109][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.495300][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.498759][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.501120][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.504131][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.506726][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.509424][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.512291][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.514524][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.516748][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.519527][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.521761][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.524021][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.526284][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.528636][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.531040][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.533627][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.536082][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.538721][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.540994][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.543457][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.545864][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.548751][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.551285][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.553495][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.555809][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.558238][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.560506][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.563117][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.567719][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.570941][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.573551][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.575183][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 172.575193][ T40] audit: type=1400 audit(1776759766.914:54455): avc: denied { read } for pid=9781 comm="syz.2.1075" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.576345][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.579454][ T40] audit: type=1400 audit(1776759766.914:54456): avc: denied { open } for pid=9781 comm="syz.2.1075" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.587098][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.589697][ T40] audit: type=1400 audit(1776759766.914:54457): avc: denied { ioctl } for pid=9781 comm="syz.2.1075" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 172.597746][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.611760][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.614108][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.616762][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.620735][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.623073][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.625317][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.627621][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.630179][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.632893][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.635354][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.637693][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.640867][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.643705][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.646266][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.649138][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.651341][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.653539][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.655954][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.658792][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.661357][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 172.664020][ T9830] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 173.096551][ T9862] vlan0: entered promiscuous mode [ 173.099221][ T9862] vlan0: entered allmulticast mode [ 173.102126][ T9862] hsr_slave_1: entered allmulticast mode [ 173.149522][ T9865] netlink: 'syz.1.1099': attribute type 11 has an invalid length. [ 173.154948][ T9865] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1099'. [ 174.216883][ T40] audit: type=1400 audit(1776759768.554:54458): avc: denied { watch } for pid=9894 comm="syz.3.1105" path="/330/file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.227620][ T40] audit: type=1400 audit(1776759768.554:54459): avc: denied { watch_sb } for pid=9894 comm="syz.3.1105" path="/330/file0" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.428914][ T40] audit: type=1400 audit(1776759768.774:54460): avc: denied { write } for pid=9903 comm="syz.3.1107" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 174.710718][ T10] usb 7-1: USB disconnect, device number 13 [ 174.723910][ T10] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 174.744071][ T9910] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 174.752319][ T9910] sctp: [Deprecated]: syz.2.1109 (pid 9910) Use of int in max_burst socket option. [ 174.752319][ T9910] Use struct sctp_assoc_value instead [ 174.873850][ T9920] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 174.883229][ T9920] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 174.896247][ T9920] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 174.900343][ T40] audit: type=1400 audit(1776759769.234:54461): avc: denied { firmware_load } for pid=9919 comm="syz.3.1110" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.930580][ T40] audit: type=1400 audit(1776759769.274:54462): avc: denied { mount } for pid=9922 comm="syz.1.1114" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 174.970858][ T9929] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 174.974391][ T9929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1115'. [ 174.978958][ T9929] batman_adv: batadv0: Adding interface: virt_wifi0 [ 174.981356][ T9929] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.991033][ T9929] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 175.131563][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 175.393418][ T40] audit: type=1400 audit(1776759769.734:54463): avc: denied { map } for pid=9955 comm="syz.2.1124" path="socket:[32312]" dev="sockfs" ino=32312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.630174][ T9978] cgroup: release_agent respecified [ 176.153975][ T40] audit: type=1400 audit(1776759770.494:54464): avc: denied { ioctl } for pid=10005 comm="syz.2.1141" path="socket:[32993]" dev="sockfs" ino=32993 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 176.171131][T10006] syzkaller0: entered promiscuous mode [ 176.174160][T10006] syzkaller0: entered allmulticast mode [ 176.406802][ T5960] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 176.585990][T10042] sch_tbf: peakrate 3 is lower than or equals to rate 7 ! [ 176.842628][T10071] geneve1: entered allmulticast mode [ 176.908786][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 176.954188][T10082] xt_hashlimit: size too large, truncated to 1048576 [ 177.023339][T10084] : entered promiscuous mode [ 177.360549][T10100] 0x000000000005-0x00000000000d : "" [ 177.378544][T10100] ftl_cs: FTL header corrupt! [ 177.418215][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 177.586547][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 177.586568][ T40] audit: type=1400 audit(1776759771.924:54470): avc: denied { setattr } for pid=10104 comm="syz.2.1174" name="" dev="pipefs" ino=31581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 177.702991][T10111] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 177.900380][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1179'. [ 177.946773][T10129] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 177.970843][T10129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.988698][T10129] bond3: (slave geneve2): making interface the new active one [ 177.993519][T10129] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 178.005084][T10129] bond3: entered promiscuous mode [ 178.008451][T10129] geneve2: entered promiscuous mode [ 178.407210][T10147] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.515242][T10152] x_tables: duplicate underflow at hook 2 [ 178.703689][ T40] audit: type=1400 audit(1776759773.044:54471): avc: denied { connect } for pid=10158 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.752941][T10167] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 178.865360][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 178.874877][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 178.991445][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1201'. [ 179.011620][T10196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1201'. [ 179.031015][T10196] can0: slcan on ttyS3. [ 179.036356][T10201] binder: 10200:10201 ioctl c0306201 200000000080 returned -14 [ 179.042814][T10201] binder: 10200:10201 ioctl 5000940a 200000000d40 returned -22 [ 179.063585][T10201] binder: 10200:10201 ioctl c0306201 2000000003c0 returned -14 [ 179.107887][T10199] EXT4-fs (nbd3): unable to read superblock [ 179.118988][T10195] can0 (unregistered): slcan off ttyS3. [ 179.170316][T10213] random: crng reseeded on system resumption [ 179.212082][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 179.271991][T10218] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 179.278343][T10218] bond5 (unregistering): Released all slaves [ 179.309296][T10219] tap0: tun_chr_ioctl cmd 1074025676 [ 179.310080][ T40] audit: type=1400 audit(1776759773.654:54472): avc: denied { ioctl } for pid=10220 comm="syz.4.1211" path="socket:[31653]" dev="sockfs" ino=31653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 179.312290][T10219] tap0: owner set to 0 [ 179.386628][T10226] program syz.4.1211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.623667][T10250] openvswitch: netlink: Invalid VLAN frame [ 179.773543][T10257] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 179.893030][ T40] audit: type=1400 audit(1776759774.234:54473): avc: denied { read write } for pid=10271 comm="syz.1.1226" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.909208][ T10] hid_parser_main: 7 callbacks suppressed [ 179.909232][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.915186][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.923519][ T40] audit: type=1400 audit(1776759774.234:54474): avc: denied { open } for pid=10271 comm="syz.1.1226" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 179.933685][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.936257][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.939075][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.942144][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.945022][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.947428][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.949906][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.952451][ T10] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 179.964057][ T10] hid-generic 0006:0004:0009.0004: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 180.027587][ T1485] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 180.044317][T10277] fido_id[10277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.077719][T10285] overlay: Unknown parameter 'uid' [ 180.078022][T10284] overlay: Unknown parameter 'uid' [ 180.080072][ T40] audit: type=1400 audit(1776759774.424:54475): avc: denied { mounton } for pid=10282 comm="syz.3.1231" path="/bus" dev="ramfs" ino=34495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 180.096485][T10281] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 180.103236][T10281] __nla_validate_parse: 2 callbacks suppressed [ 180.103256][T10281] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1229'. [ 180.188123][ T1485] usb 7-1: Invalid ep0 maxpacket: 64 [ 180.211789][T10299] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 180.220330][T10299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.239580][T10299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 180.250728][T10304] raw_sendmsg: syz.4.1235 forgot to set AF_INET. Fix it! [ 180.298710][T10312] 9p: Bad value for 'version' [ 180.301727][T10314] Mount JFS Failure: -22 [ 180.328029][ T1485] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 180.333823][T10319] binder: 10318:10319 ioctl c00c620f 200000000100 returned -22 [ 180.350720][T10310] delete_channel: no stack [ 180.507901][ T1485] usb 7-1: Invalid ep0 maxpacket: 64 [ 180.510775][ T1485] usb usb7-port1: attempt power cycle [ 180.847499][ T1485] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 180.868042][ T1485] usb 7-1: Invalid ep0 maxpacket: 64 [ 180.997520][ T1485] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 181.028229][ T1485] usb 7-1: Invalid ep0 maxpacket: 64 [ 181.033800][ T1485] usb usb7-port1: unable to enumerate USB device [ 181.176575][T10321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.179603][T10321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.185876][T10321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.330165][T10351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.447458][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 181.498469][ T40] audit: type=1400 audit(1776759775.844:54476): avc: denied { listen } for pid=10355 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.597828][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 181.602781][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.605776][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.611500][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.617123][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.622179][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.627345][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.637384][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.647327][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 181.658469][T10359] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 181.659157][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.659190][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.659256][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.659280][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.659302][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.659323][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.659345][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.659368][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 181.660484][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.660513][ T10] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.660543][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.660654][ T10] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.660675][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.660696][ T10] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.660717][ T10] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.660740][ T10] usb 6-1: config 168 interface 0 has no altsetting 0 [ 181.663607][ T10] usb 6-1: string descriptor 0 read error: -22 [ 181.739929][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.743719][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.789823][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 181.979984][ T843] usb 6-1: USB disconnect, device number 18 [ 182.115475][T10371] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1253'. [ 182.183705][T10332] adutux: No device or device unplugged -19 [ 182.190308][T10332] sit0: entered promiscuous mode [ 182.199146][T10332] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 182.202495][T10332] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1243'. [ 182.210642][ T40] audit: type=1400 audit(1776759776.554:54477): avc: denied { write } for pid=10331 comm="syz.1.1243" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 182.359493][ T2144] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 182.477534][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.508964][ T2144] usb 8-1: config 0 has no interfaces? [ 182.512607][ T2144] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.516210][ T2144] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 182.519229][ T2144] usb 8-1: Product: syz [ 182.520677][ T2144] usb 8-1: Manufacturer: syz [ 182.522316][ T2144] usb 8-1: SerialNumber: syz [ 182.528934][ T2144] usb 8-1: config 0 descriptor?? [ 182.754939][ T843] usb 8-1: USB disconnect, device number 16 [ 182.892400][T10388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'. [ 182.896511][T10388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1259'. [ 182.945845][ T40] audit: type=1400 audit(1776759777.284:54478): avc: denied { setattr } for pid=10390 comm="syz.3.1260" name="NETLINK" dev="sockfs" ino=34945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.117406][ T2144] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 183.166946][T10402] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 183.213167][ T62] Bluetooth: hci3: command 0x0419 tx timeout [ 183.213859][ T5960] Bluetooth: hci2: command 0x0401 tx timeout [ 183.272023][ T2144] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 183.278531][ T2144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.282383][ T2144] usb 6-1: Product: syz [ 183.284421][ T2144] usb 6-1: Manufacturer: syz [ 183.286571][ T2144] usb 6-1: SerialNumber: syz [ 183.298743][ T2144] usb 6-1: config 0 descriptor?? [ 183.304336][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 183.310542][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 183.317441][T10408] netlink: 'syz.2.1265': attribute type 12 has an invalid length. [ 183.510058][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1258'. [ 183.513745][T10386] netlink: 'syz.1.1258': attribute type 30 has an invalid length. [ 183.516993][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 183.531984][ T40] audit: type=1400 audit(1776759777.874:54479): avc: denied { setattr } for pid=10416 comm="syz.3.1268" name="/" dev="9p" ino=80216123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.554348][ T40] audit: type=1804 audit(1776759777.894:54480): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1258" name="/newroot/313/file1" dev="tmpfs" ino=1670 res=1 errno=0 [ 183.636464][ T40] audit: type=1400 audit(1776759777.974:54481): avc: denied { watch watch_reads } for pid=10420 comm="syz.2.1269" path="pipe:[36874]" dev="pipefs" ino=36874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 183.658270][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 183.678730][ T1485] usb 6-1: USB disconnect, device number 19 [ 183.925899][T10430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 183.928781][T10430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.933487][T10430] vhci_hcd vhci_hcd.0: Device attached [ 183.939414][T10431] vhci_hcd: unknown pdu 1 [ 183.946556][ T1161] vhci_hcd vhci_hcd.3: stop threads [ 183.949870][ T1161] vhci_hcd vhci_hcd.3: release socket [ 183.952409][ T1161] vhci_hcd vhci_hcd.3: disconnect device [ 184.436204][T10444] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 184.637636][ T1485] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 184.800960][ T1485] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.805124][ T1485] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 184.812895][ T1485] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.816775][ T1485] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.824832][ T1485] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.828775][ T1485] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.832181][ T1485] usb 6-1: Product: syz [ 184.833933][ T1485] usb 6-1: Manufacturer: syz [ 184.883847][ T1485] cdc_wdm 6-1:1.0: skipping garbage [ 184.886698][ T1485] cdc_wdm 6-1:1.0: skipping garbage [ 184.889225][ T1485] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 184.930602][T10452] sit0: entered promiscuous mode [ 184.938174][T10452] netlink: 'syz.3.1279': attribute type 1 has an invalid length. [ 185.001516][ T5960] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 185.089870][ T40] audit: type=1400 audit(1776759779.434:54482): avc: denied { mount } for pid=10439 comm="syz.1.1274" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.093134][ T24] usb 6-1: USB disconnect, device number 20 [ 185.265471][T10466] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 185.307500][ T40] audit: type=1400 audit(1776759779.644:54483): avc: denied { read } for pid=10439 comm="syz.1.1274" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.328352][ T40] audit: type=1400 audit(1776759779.644:54484): avc: denied { open } for pid=10439 comm="syz.1.1274" path="/314/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.587408][ T10] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 185.772661][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 185.780799][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 185.787535][ T10] usb 7-1: can't read configurations, error -71 [ 185.879255][T10473] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 185.902232][ T40] audit: type=1400 audit(1776759780.244:54485): avc: denied { unmount } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.936815][ T40] audit: type=1400 audit(1776759780.274:54486): avc: denied { setcheckreqprot } for pid=10476 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 186.072232][ T40] audit: type=1400 audit(1776759780.414:54487): avc: denied { read write } for pid=10480 comm="syz.1.1288" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 186.697891][T10507] __nla_validate_parse: 2 callbacks suppressed [ 186.697908][T10507] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1293'. [ 186.828879][T10481] overlayfs: statfs failed on './file0' [ 187.096964][T10527] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 187.105737][T10529] netlink: 152868 bytes leftover after parsing attributes in process `syz.3.1301'. [ 187.111380][T10529] netlink: Conntrack attr has 4 unknown bytes [ 187.121293][T10526] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 187.201768][T10534] ptrace attach of "/syz-executor exec"[5963] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 187.243731][ C3] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 187.276717][ C3] sr 2:0:0:0: [sr0] tag#18 CDB: Test Unit Ready [ 187.372302][T10552] random: crng reseeded on system resumption [ 187.618264][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 187.698334][ T1485] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 187.837570][ T1485] usb 8-1: device descriptor read/64, error -71 [ 187.894418][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1313'. [ 187.990907][T10577] netlink: 'syz.1.1315': attribute type 2 has an invalid length. [ 188.013493][T10577] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 188.198656][ T1485] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 188.347495][ T1485] usb 8-1: device descriptor read/64, error -71 [ 188.458197][ T1485] usb usb8-port1: attempt power cycle [ 188.505604][T10594] block nbd0: server does not support multiple connections per device. [ 188.524467][T10594] block nbd0: shutting down sockets [ 188.693884][T10599] wg1 speed is unknown, defaulting to 1000 [ 188.704100][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 188.704121][ T40] audit: type=1400 audit(1776759783.044:54499): avc: denied { ioctl } for pid=10598 comm="syz.4.1321" path="socket:[37953]" dev="sockfs" ino=37953 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.717805][T10600] rdma_rxe: rxe_newlink: failed to add wg1 [ 188.725808][T10599] wg1 speed is unknown, defaulting to 1000 [ 188.730052][T10599] wg1 speed is unknown, defaulting to 1000 [ 188.787755][T10602] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 188.807406][ T1485] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 188.828000][ T1485] usb 8-1: device descriptor read/8, error -71 [ 188.857501][T10599] infiniband syz2: set active [ 188.859163][ T843] wg1 speed is unknown, defaulting to 1000 [ 188.872050][T10599] infiniband syz2: added wg1 [ 188.876418][T10599] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 188.886324][T10599] infiniband syz2: Couldn't open port 1 [ 188.892534][T10599] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 188.899827][T10599] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 188.907410][T10599] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 188.956607][T10599] RDS/IB: syz2: added [ 188.958409][T10599] smc: adding ib device syz2 with port count 1 [ 188.960833][T10599] smc: ib device syz2 port 1 has no pnetid [ 188.968667][ T843] wg1 speed is unknown, defaulting to 1000 [ 188.972847][T10599] wg1 speed is unknown, defaulting to 1000 [ 189.062769][T10615] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 189.079253][ T1485] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 189.099046][ T1485] usb 8-1: device descriptor read/8, error -71 [ 189.180064][T10599] wg1 speed is unknown, defaulting to 1000 [ 189.234073][ T1485] usb usb8-port1: unable to enumerate USB device [ 189.374194][T10599] wg1 speed is unknown, defaulting to 1000 [ 189.521042][T10599] wg1 speed is unknown, defaulting to 1000 [ 189.596660][ T40] audit: type=1400 audit(1776759783.934:54500): avc: denied { getopt } for pid=10623 comm="syz.2.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.855336][ T40] audit: type=1400 audit(1776759784.194:54501): avc: denied { mounton } for pid=10633 comm="syz.4.1331" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 189.874066][ T40] audit: type=1400 audit(1776759784.214:54502): avc: denied { mount } for pid=10633 comm="syz.4.1331" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 189.927793][ T843] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 189.943887][T10641] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.948900][T10641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.977941][T10641] FAT-fs (sr0): bogus number of reserved sectors [ 189.983835][T10641] FAT-fs (sr0): Can't find a valid FAT filesystem [ 190.028578][T10647] netlink: 'syz.4.1334': attribute type 4 has an invalid length. [ 190.031666][T10647] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 190.034569][T10647] netlink: 'syz.4.1334': attribute type 3 has an invalid length. [ 190.039806][T10647] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1334'. [ 190.043534][T10647] NCSI netlink: No device for ifindex 830110067 [ 190.113651][ T843] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 190.127411][ T843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.130999][ T843] usb 7-1: Product: syz [ 190.132783][ T843] usb 7-1: Manufacturer: syz [ 190.134863][ T843] usb 7-1: SerialNumber: syz [ 190.172091][ T843] usb 7-1: config 0 descriptor?? [ 190.268273][T10659] random: crng reseeded on system resumption [ 190.270738][ T40] audit: type=1400 audit(1776759784.604:54503): avc: denied { ioctl } for pid=10658 comm="syz.4.1339" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.378368][ T843] usb 7-1: USB disconnect, device number 20 [ 190.501434][ T40] audit: type=1400 audit(1776759784.844:54504): avc: denied { create } for pid=10663 comm="syz.4.1341" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 190.517640][ T40] audit: type=1400 audit(1776759784.854:54505): avc: denied { read write } for pid=10663 comm="syz.4.1341" name="file0" dev="9p" ino=80216125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.526971][ T40] audit: type=1400 audit(1776759784.854:54506): avc: denied { open } for pid=10663 comm="syz.4.1341" path="/284/file0/file0" dev="9p" ino=80216125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.813219][T10674] tmpfs: Bad value for 'mpol' [ 190.816508][T10675] tmpfs: Bad value for 'mpol' [ 190.955219][T10692] 9p: Bad value for 'wfdno' [ 191.032781][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'. [ 191.047549][T10697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'. [ 191.075884][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1346'. [ 191.083573][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1346'. [ 191.120810][T10684] geneve3: entered promiscuous mode [ 191.122723][T10684] geneve3: entered allmulticast mode [ 191.394459][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1355'. [ 191.457763][T10717] syzkaller0: entered promiscuous mode [ 191.460190][T10717] syzkaller0: entered allmulticast mode [ 191.783099][ T40] audit: type=1400 audit(1776759786.124:54507): avc: denied { remount } for pid=10720 comm="syz.1.1358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.881826][ T40] audit: type=1400 audit(1776759786.224:54508): avc: denied { unmount } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 192.062470][T10740] nfsd: Unknown parameter 'barrier' [ 192.167491][ T6035] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 192.286779][T10759] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 192.327807][ T6035] usb 6-1: Using ep0 maxpacket: 8 [ 192.331765][ T6035] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 192.338196][ T6035] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.345459][ T6035] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.349985][ T6035] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.354776][ T6035] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.360672][ T6035] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.363671][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.571970][ T6035] usb 6-1: GET_CAPABILITIES returned 0 [ 192.576120][ T6035] usbtmc 6-1:16.0: can't read capabilities [ 192.597807][ T6035] usb 6-1: USB disconnect, device number 21 [ 192.720373][T10784] 9pnet: Found fid 0 not clunked [ 193.234626][T10824] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.332699][T10838] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.347062][T10837] cgroup: No subsys list or none specified [ 193.520293][T10849] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 193.535334][T10849] bond4: entered promiscuous mode [ 193.537621][T10849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.554244][T10849] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 193.557134][T10849] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.561564][T10849] vhci_hcd vhci_hcd.0: Device attached [ 193.748119][ T1485] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 193.797228][T10861] syzkaller0: entered promiscuous mode [ 193.799477][T10861] syzkaller0: entered allmulticast mode [ 193.811488][ T1485] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 194.323074][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 194.323092][ T40] audit: type=1400 audit(1776759788.664:54515): avc: denied { getopt } for pid=10864 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 194.612008][ T62] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 195.260225][T10880] : renamed from vlan0 [ 195.611797][ T40] audit: type=1400 audit(1776759789.954:54516): avc: denied { map } for pid=10889 comm="syz.1.1404" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.715378][T10894] dvmrp1: entered allmulticast mode [ 196.013305][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 196.279787][T10915] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1412'. [ 196.336411][T10917] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 196.348123][T10917] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 196.357959][ T2144] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 196.476173][ T40] audit: type=1400 audit(1776759790.814:54517): avc: denied { mount } for pid=10921 comm="syz.4.1414" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 196.507388][ T40] audit: type=1400 audit(1776759790.824:54518): avc: denied { search } for pid=10921 comm="syz.4.1414" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.525251][ T40] audit: type=1400 audit(1776759790.824:54519): avc: denied { search } for pid=10921 comm="syz.4.1414" name="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.527868][ T2144] usb 7-1: Invalid ep0 maxpacket: 64 [ 196.543148][ T40] audit: type=1400 audit(1776759790.834:54520): avc: denied { read open } for pid=10921 comm="syz.4.1414" path="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.552686][ T40] audit: type=1400 audit(1776759790.844:54521): avc: denied { lock } for pid=10921 comm="syz.4.1414" path="/" dev="configfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.683126][T10851] vhci_hcd: connection reset by peer [ 196.694647][ T1161] vhci_hcd vhci_hcd.3: stop threads [ 196.696592][ T2144] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 196.707499][ T1161] vhci_hcd vhci_hcd.3: release socket [ 196.715065][ T1161] vhci_hcd vhci_hcd.3: disconnect device [ 196.876865][T10933] nfs4: Unknown parameter 'cgroup' [ 196.878265][ T2144] usb 7-1: Invalid ep0 maxpacket: 64 [ 196.883012][ T2144] usb usb7-port1: attempt power cycle [ 196.914640][ T40] audit: type=1400 audit(1776759791.254:54522): avc: denied { watch } for pid=10931 comm="syz.4.1418" path="/298/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 197.319585][ T2144] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 197.371437][ T2144] usb 7-1: Invalid ep0 maxpacket: 64 [ 197.417408][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 197.524006][ T2144] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 197.551768][ T2144] usb 7-1: Invalid ep0 maxpacket: 64 [ 197.555112][ T2144] usb usb7-port1: unable to enumerate USB device [ 197.605403][ T40] audit: type=1400 audit(1776759791.944:54523): avc: denied { mounton } for pid=10950 comm="syz.4.1422" path="/syzcgroup/unified/syz4" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 197.837690][ T40] audit: type=1400 audit(1776759792.174:54524): avc: denied { append } for pid=10961 comm="syz.1.1427" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 197.927667][ T8592] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 198.079341][ T8592] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 198.083197][ T8592] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 198.091947][ T8592] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 198.095352][ T8592] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 198.099214][ T8592] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 198.105567][ T8592] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 198.109004][ T8592] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 198.112027][ T8592] usb 8-1: Product: syz [ 198.113816][ T8592] usb 8-1: Manufacturer: syz [ 198.120617][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 198.135763][ T8592] cdc_wdm 8-1:1.0: skipping garbage [ 198.138856][ T8592] cdc_wdm 8-1:1.0: skipping garbage [ 198.156260][ T8592] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 198.161162][ T8592] cdc_wdm 8-1:1.0: Unknown control protocol [ 198.330397][T10993] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 198.341987][ T5960] Bluetooth: hci2: unknown advertising packet type: 0x82 [ 198.342274][ T5960] Bluetooth: hci2: Malformed LE Event: 0x02 [ 198.361126][T10993] bond4: entered promiscuous mode [ 198.364220][T10993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.379253][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 198.383865][T10999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1437'. [ 198.479471][T11004] XFS (nbd1): SB validate failed with error -5. [ 198.535487][T11012] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.661626][T11014] binder: 11013:11014 ioctl c0306201 200000000640 returned -14 [ 198.780068][T10957] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 198.783039][T10957] overlayfs: missing 'lowerdir' [ 198.785642][T11019] openvswitch: netlink: IP tunnel dst address not specified [ 198.793605][ T6035] usb 8-1: USB disconnect, device number 21 [ 198.947406][ T1485] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 199.345348][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1445'. [ 199.350175][T11030] nfs: Unknown parameter 'nofscFu+ф5p)>RShΨV|IY8 d Wsr>_ lYϯ@' [ 199.434137][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.449655][T11037] netlink: 'syz.2.1446': attribute type 2 has an invalid length. [ 199.453190][T11037] netlink: 'syz.2.1446': attribute type 2 has an invalid length. [ 199.608133][T11045] QAT: failed to copy from user cfg_data. [ 199.619639][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 200.062591][T11051] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 200.102410][T11051] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN NOPTI [ 200.108269][T11051] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 200.112206][T11051] CPU: 3 UID: 0 PID: 11051 Comm: syz.3.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.116977][T11051] Tainted: [L]=SOFTLOCKUP [ 200.118789][T11051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.123084][T11051] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 200.127397][T11051] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 33 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 68 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 1a 49 8b 44 24 68 89 ee 48 89 df 5b 5d 41 5c ff e0 [ 200.136274][T11051] RSP: 0018:ffffc90005317180 EFLAGS: 00010202 [ 200.139204][T11051] RAX: dffffc0000000000 RBX: ffff888055cbbc40 RCX: 0000000000000080 [ 200.142934][T11051] RDX: 000000000000000d RSI: ffffffff895c5532 RDI: 0000000000000068 [ 200.146642][T11051] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 200.150183][T11051] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 200.153804][T11051] R13: ffff888038250000 R14: 0000000000000002 R15: 0000000000000018 [ 200.157501][T11051] FS: 00007f906c6726c0(0000) GS:ffff8880d65e1000(0000) knlGS:0000000000000000 [ 200.161112][T11051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.163861][T11051] CR2: 00007f906c671ff8 CR3: 0000000026936000 CR4: 0000000000352ef0 [ 200.167404][T11051] Call Trace: [ 200.168869][T11051] [ 200.170192][T11051] ? __pfx_rxe_ns_pernet_set_sk4+0x10/0x10 [ 200.172759][T11051] udp_tunnel_sock_release+0x68/0x80 [ 200.175899][T11051] rxe_sock_put+0xae/0x130 [ 200.178114][T11051] ? __pfx_rxe_dellink+0x10/0x10 [ 200.180609][T11051] rxe_net_del+0x83/0x120 [ 200.182728][T11051] rxe_dellink+0x15/0x20 [ 200.184459][T11051] nldev_dellink+0x289/0x3c0 [ 200.186443][T11051] ? __pfx_nldev_dellink+0x10/0x10 [ 200.188755][T11051] ? rcu_is_watching+0x12/0xc0 [ 200.191927][T11051] ? cap_capable+0x10b/0x440 [ 200.194788][T11051] ? bpf_lsm_capable+0x9/0x10 [ 200.197458][T11051] ? security_capable+0x80/0x260 [ 200.199887][T11051] ? ns_capable+0xd2/0xf0 [ 200.201922][T11051] ? __pfx_nldev_dellink+0x10/0x10 [ 200.204238][T11051] rdma_nl_rcv_msg+0x392/0x6f0 [ 200.206373][T11051] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 200.208749][T11051] ? __lock_acquire+0x4a5/0x2630 [ 200.211065][T11051] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 200.213836][T11051] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 200.216917][T11051] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.219414][T11051] netlink_unicast+0x585/0x850 [ 200.221545][T11051] ? __pfx_netlink_unicast+0x10/0x10 [ 200.223906][T11051] netlink_sendmsg+0x8b0/0xda0 [ 200.226016][T11051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.228479][T11051] ? __might_fault+0x30/0x140 [ 200.230824][T11051] ____sys_sendmsg+0x9e1/0xb70 [ 200.232949][T11051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.235858][T11051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.238546][T11051] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.240663][T11051] ___sys_sendmsg+0x190/0x1e0 [ 200.242328][T11051] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.244070][T11051] __sys_sendmsg+0x170/0x220 [ 200.245579][T11051] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.247287][T11051] ? __x64_sys_futex+0x34f/0x4d0 [ 200.248918][T11051] ? rcu_is_watching+0x12/0xc0 [ 200.250551][T11051] do_syscall_64+0x10b/0xf80 [ 200.252248][T11051] ? clear_bhb_loop+0x40/0x90 [ 200.254503][T11051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.256498][T11051] RIP: 0033:0x7f906b79c819 [ 200.258372][T11051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.264972][T11051] RSP: 002b:00007f906c672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.267775][T11051] RAX: ffffffffffffffda RBX: 00007f906ba16090 RCX: 00007f906b79c819 [ 200.270482][T11051] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 200.273201][T11051] RBP: 00007f906b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 200.275903][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.278453][T11051] R13: 00007f906ba16128 R14: 00007f906ba16090 R15: 00007fff64086a58 [ 200.281329][T11051] [ 200.282364][T11051] Modules linked in: [ 200.284080][T11051] ---[ end trace 0000000000000000 ]--- [ 200.285905][T11051] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 200.287052][ T40] audit: type=1400 audit(1776759794.624:54525): avc: denied { read } for pid=5340 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 200.287898][T11051] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 33 48 b8 00 00 00 00 00 fc ff df 4c 8b 63 20 49 8d 7c 24 68 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 1a 49 8b 44 24 68 89 ee 48 89 df 5b 5d 41 5c ff e0 [ 200.287913][T11051] RSP: 0018:ffffc90005317180 EFLAGS: 00010202 [ 200.297966][ T40] audit: type=1400 audit(1776759794.624:54526): avc: denied { search } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.301665][T11051] [ 200.304645][ T40] audit: type=1400 audit(1776759794.634:54527): avc: denied { search } for pid=5340 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.311203][T11051] RAX: dffffc0000000000 RBX: ffff888055cbbc40 RCX: 0000000000000080 [ 200.311218][T11051] RDX: 000000000000000d RSI: ffffffff895c5532 RDI: 0000000000000068 [ 200.311225][T11051] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 200.311231][T11051] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 200.311238][T11051] R13: ffff888038250000 R14: 0000000000000002 R15: 0000000000000018 [ 200.311245][T11051] FS: 00007f906c6726c0(0000) GS:ffff8880d65e1000(0000) knlGS:0000000000000000 [ 200.312885][ T40] audit: type=1400 audit(1776759794.634:54528): avc: denied { add_name } for pid=5340 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.321973][T11051] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.322920][ T40] audit: type=1400 audit(1776759794.634:54529): avc: denied { create } for pid=5340 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.325972][T11051] CR2: 00007f906c671ff8 CR3: 0000000026936000 CR4: 0000000000352ef0 [ 200.329285][ T40] audit: type=1400 audit(1776759794.634:54530): avc: denied { append open } for pid=5340 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.332065][T11051] Kernel panic - not syncing: Fatal exception [ 200.332918][T11051] Kernel Offset: disabled